Craig, Uncheck the 'Allow all Computers which successfully authenticate to relay'. Have your users connect to the network through a VPN giving them an internal IP address. Then give permissions to your internal IPscope(s) to relay off of that box. Chris _____ From: Craig_Weil [mailto:craig_weil@xxxxxxxxxxx] Sent: Friday, September 24, 2004 3:02 PM To: [ExchangeList] Subject: [exchangelist] Relay Nightmare http://www.MSExchange.org/ Running Exchange 2000, default settings for the smtp virtual server... (Anonymous Access - so we can receive outside email, Basic Authentication, Integrated Windows Authentication all checked, Relay restrictions set to "Only the list below" which is empty and "Allow all computers which successfully authenticate to relay..." checked so that employees can send mail while connected to another ISP, Outbound Security options set as default - Anonymous Access checked) My server is STILL relaying mail. I can look in any number of queues and it's like a clearing house for spam. Any ideas? Much appreciation! Craig ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: Chris.Wall@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx