Exch 2k3 - Authentication for incoming SMTP connections is default set to anonymous..what does this do?

Posted on 2006-05-30
Last Modified: 2010-03-06
And should I set it to basic or something more secure than just anonymous?  or will I have problems with recieving email if I do this?  

SMTP is for sending and receiving email or just sending?  We are using IMAP and SMTP.  Does the IMAP receive?  Kinda confusing.  Thanks Experts.
Question by:Sp0cky
    LVL 32

    Accepted Solution

    SMTP is for both sending and receiving, and you will have problems receiving if you remove the anonymous setting.

    IMAP is the protocol used by clients (i.e. your users) to access their mail from your server.

    Author Comment

    Ok.  Thank you!

    p.s. That has nothing to do with loggin onto the server or domain itself right?  I mean, is it or could it be considered a security hole of some sort?
    LVL 32

    Expert Comment

    No, it has nothing to do with logging in on the server, it is strictly for incoming email. In effect, you are saying that any email server in the world can connect to your server to send you email. I am assuming this is what you want (most people would).

    Re. security, you want to make sure your server is not an open relay. See:

    I believe Exch 2003 is relay secure by default, but you can test your server by going to:

    Also, you may find the following helpful for reducing spam:

    Also, for Security, anytime you have a server that faces the internet, such as an Exchange server, there is some small risk that it could be hacked and abused. What you should do about it depends on how sensitive is the network you are trying to protect (e.g. a bank) and how much money and effort you want to put into it. At the minimum, I would suggest that you (a) Do regular backups, both Exchange database and System State (b) Apply all security updates from MS promptly (c) Download and run MBSA from and see what other updates you might need (d) use a Firewall to block unnecessary ports and (e) Use long (> 10 chars) passwords for the Admin account(s).

    You can also browse web forums such as this one to see others are recommending.

    Good luck (don't forget those nightly backups)

    Author Comment

    Ok!  Thanks much r-k!!

    Featured Post

    Promote certifications in your email signature

    Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

    Join & Write a Comment

    Suggested Solutions

    "Migrate" an SMTP relay receive connector to a new server using info from an old server.
    Easy CSR creation in Exchange 2007,2010 and 2013
    In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
    In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now