I have read the various posts and KB article on preventing relaying. If I follow the recommendations relaying is prevented, however, I run some cgi programs which send mail. The site visitor's email address is used as the "from" field in the CGI program. SO, the mail wont go out since the Exchange server prevents relaying. The CGI program uses BLAT which forwards the mail out throught the Exchange SMTP. The only way I can get the mail to go out is by setting routing restrictions to "hosts and clients connecting to these internal resources" and then indicating the Exchange server's IP address. This setting seems to allow people to relay through the server though. What am I doing wrong? Is it possible to allow CGI programs to send mail without opening the Exchange server up to relaying by 3rd parties?