Comment settings not working

I’ve set up comments in my new WP blog by turning on these settings:

x “Comment author must fill out name and e-mail”

Yet someone today succeeded in leaving an anonymous comment with no name or url. Is there some other setting I need to change in order to get comments working the way I want?