Hi All

Simple prob I bet, I have exchange 2000 installed on a
2000 server, with ISA etc (sbs server I think)

Internal users send/receive emails fine.
External (remote users) also send/receive emails fine. Via
outlook using SMTP

The problem is external users, they can send emails even
if they dont enter a password, which means anyone can send
through my server! if I create a new account on my pc at
home called TEST@domain.com, and enter my exchange IP
address, I can send through my server to my hotmail
account!

AHHH this isn't good!! (open relay I think its called)

I know you can specify certain machines only to access my
SMTP protocol, but, the remote users IP addresses change
as they use dial up.

I want to make it so a password has to be entered (or
stored) on the users machine in order for them to send an
email through my exchange server.

Whats the best solution! thanks a million

Lee

Re: Authenitcation from remote sites smtp by Merv

Merv
Tue Jan 27 19:10:49 CST 2004

Lee:

You may want to take a look at..

HOW TO: Prevent Unsolicited Commercial E-Mail in Exchange 2000 Server
http://support.microsoft.com/?kbid=319356

--
Merv Porter [SBS MVP]
===================================

"Lee" <anonymous@discussions.microsoft.com> wrote in message
news:4ec801c3e520$3728c9c0$a301280a@phx.gbl...
> Hi All
>
> Simple prob I bet, I have exchange 2000 installed on a
> 2000 server, with ISA etc (sbs server I think)
>
> Internal users send/receive emails fine.
> External (remote users) also send/receive emails fine. Via
> outlook using SMTP
>
> The problem is external users, they can send emails even
> if they dont enter a password, which means anyone can send
> through my server! if I create a new account on my pc at
> home called TEST@domain.com, and enter my exchange IP
> address, I can send through my server to my hotmail
> account!
>
> AHHH this isn't good!! (open relay I think its called)
>
> I know you can specify certain machines only to access my
> SMTP protocol, but, the remote users IP addresses change
> as they use dial up.
>
> I want to make it so a password has to be entered (or
> stored) on the users machine in order for them to send an
> email through my exchange server.
>
> Whats the best solution! thanks a million
>
> Lee
>