Yes...they will access a mail server, probably MS Exchange 5.5 or 2000. The mail server should always be behind the firewall and is not publicly accessible. The mail server would only be used by the user accounts in the domain and our application. The email from our application needs to be sent via a dummy mail account (an account that is specificially created for our application, not a real user). So...if I understand you correctly....we could use that user name and password to authenticate...as the WestWind libs now provide support for authenticated email. The reason we were thinking of IP restrictions...is that would provide a way to turn on relaying of email without opening up the server to the world of spam.


>They need to access a mail server of some sort. The best method probably is not using IP restrictions then and instead using username/password authentication.
>If you server is behind a firewall then ip restrictions are probably pointless anyway. If it is publicly accessible then username/password is the most common form of protection.