if you have HT, MBX & CAS all on the same server then by default the receive connector is not configured to receive anonymous connections and therefore any mail will be rejected.
To resolve this goto Exchange Management Console > Server Configuration > Receive Connectors right click on the Default connector and select properties.
Under Authentication uncheck all apart from Transport Layer security
Under Permission Groups check the anonymous users