Enable mail relaying from a specific IP or range of IPs.
1. Exchange Management Console -> Server Configuration -> Hub Transport
2. New Receive Connector
* Set remote network to the IP or range you want to allow relay from (default is any IP so watch out here)
* “Externally Secured” authentication
* “Exchange Servers” permission group
* All other options disabled