I've been searching for the way to do this in Exchange 2003. I have external servers that need to be able to anonymously relay alert messages through our Exchange 2003 server. I have Anonymous Authentication permitted and the IP addresses of the servers in the "Select which computer may relay through this virtual server" field. I unchecked the "Allow any computer which authenticates to relay..." box. I am still able to telnet to the Exchange server and relay mail from IP addresses that are not explicitly allowed. Why is that? To confuse matters worse, I took one of the IP addresses out of the list and the application could no longer send alerts but I could send messages thru telnet from that server.