Hi

I have a IIS server configured with SMTP in a public ip address. SMTP i have
configured with "openrelay" which is vulnerable for the security threats.
Please tell me how to close the SMTP open relay in this server without
specifying a IP address or address ranges.
Becouse there are some web developers need to have a access to this server
and test the application to send mails through this SMTP relay.

Pls advice.

What about authentication?
HOW TO: Set SMTP Security Options in Windows Server 2003
http://support.microsoft.com/?id=324285

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/


"Santa" <Santa [at] discussions.microsoft.com> wrote in message
news:0F193728-ADDE-4D83-9C39-54D482D8E395 [at] microsoft.com...
> Hi
>
> I have a IIS server configured with SMTP in a public ip address. SMTP i
> have
> configured with "openrelay" which is vulnerable for the security threats.
> Please tell me how to close the SMTP open relay in this server without
> specifying a IP address or address ranges.
> Becouse there are some web developers need to have a access to this server
> and test the application to send mails through this SMTP relay.
>
> Pls advice.

In addition to SMTP AUthentication mentioned by Bernard, you could have the
web developers host their applications on your web server. That way you only
need to allow relay to 127.0.0.1

Cheers
Ken


"Santa" <Santa [at] discussions.microsoft.com> wrote in message
news:0F193728-ADDE-4D83-9C39-54D482D8E395 [at] microsoft.com...
> Hi
>
> I have a IIS server configured with SMTP in a public ip address. SMTP i
> have
> configured with "openrelay" which is vulnerable for the security threats.
> Please tell me how to close the SMTP open relay in this server without
> specifying a IP address or address ranges.
> Becouse there are some web developers need to have a access to this server
> and test the application to send mails through this SMTP relay.
>
> Pls advice.