Which of the following services should be disabled to stop attackers from using a web server as a mail relay?

Which of the following services should be disabled to stop attackers from using a web server as a
mail relay?

A.
IMAP

B.
SMTP