Quote Originally Posted by Gollo
Just block port 25 from the internet (unless you plan on sending mail from outside of your home network). Also isn't there an option in most email clients to request authentication before using the smtp server? (I'm just guessing at some of this stuff as I have just setup my first 2k3 server. I'm much more comfortable with linux).
If you run a public server (need to accept email from outside your network) you need anon access. But, the way smtp is designed you can forward to internal domains and drop mail not intended for domains you don't run.