AJUDA POSTFIX denied access relay...

Bem o meu postfix ta rodando internamente blz. Mais o problema e quando configura o outlook ou thunderbird em uma rede externa da erro de denied access relay. A ate que conseguir fazer uma gambiarra no main.cf e acrescentar o ip externo no meu mynetworks e funcionou.

Oque devo fazer? tem como eu liberar a mynetowrks para todo mundo ex:
mynetwork: *.*.*.*./*

Segue abaixo meu main.cf

queue_directory = /var/spool/postfix
daemon_directory = /usr/lib/postfix
mail_owner = postfix
mydomain = vitapan.com.br
myorigin = $mydomain
local_recipient_maps =
unknown_local_recipient_reject_code = 550
mynetworks_style = host
mynetworks = 127.0.0.0/24, 192.168.0.0/24, 192.168.1.0/24, 201.3.21.162, 201.2.51.147
relay_domains = $mydestination
alias_database = hash:/etc/aliases
header_checks = regexp:/etc/postfix/header_checks
smtpd_banner = $myhostname - Vitapan
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5

sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = maildrop
html_directory = /usr/share/doc/packages/postfix/html
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/packages/postfix/samples
readme_directory = /usr/share/doc/packages/postfix/README_FILES
inet_protocols = all
biff = no
mail_spool_directory = /var/mail
canonical_maps = hash:/etc/postfix/canonical
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_alias_domains = hash:/etc/postfix/virtual
relocated_maps = hash:/etc/postfix/relocated
transport_maps = hash:/etc/postfix/transport
sender_canonical_maps = hash:/etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
myhostname = mail.vitapan.com.br
program_directory = /usr/lib/postfix
inet_interfaces = all
masquerade_domains =
mydestination = $mydomain, $myhostname, localhost.$mydomain
defer_transports =
mynetworks_style = subnet
disable_dns_lookups = no
relayhost =
mailbox_command =
mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
strict_8bitmime = no
disable_mime_output_conversion = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_client_restrictions = permit_mynetworks, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, permit_mynetworks, reject_unauth_destination, hash:/etc/postfix/access, reject_invalid_hostname, reject_unknown_client, permit_sasl_authenticated
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_hostname, permit
strict_rfc821_envelopes = yes
smtpd_recipient_restrictions = reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, permit_mynetworks, reject_unauth_destination, reject_rbl_client cbl.abuseat.org, reject_rbl_client sbl-xbl.spamhaus.org, reject_rbl_client bl.spamcop.net, reject_rhsbl_sender dsn.rfc-ignorant.org, permit
smtp_sasl_auth_enable = no
smtpd_sasl_auth_enable = yes
smtpd_use_tls = no
smtp_use_tls = no
alias_maps = hash:/etc/aliases
mailbox_size_limit = 0
message_size_limit = 120000000
default_process_limit = 200
smtpd_recipient_limit = 100
disable_vrfy_command = yes
unknown_address_reject_code = 554
unknown_hostname_reject_code = 554
unknown_client_reject_code = 554
maps_rbl_domains = sbl.spamhaus.org, spammers.v6net.org, dun.dnsrbl.net, vox.schpider.com, whois.rfc-ignorant.org

Olá.
Configure o SMTP Autenticado. Para isto, instale esses pacotes:

sasl2-plug-plain
sasl2-plug-digestmd5
sasl2-programs
sasl2-plug-anonymous
sasl2-plug-crammd5
sasl2
sasl2-plug-login

#Editar o arquivo:
/usr/lib/sasl2/smtpd.conf

#Inserir as seguintes linhas.
pwcheck_method: saslauthd
mech_list: PLAIN LOGIN
log_level: 3

#No main.cf:
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks .....

Possa ser que tenha esquecido de algum detalhe ....

Tutorial Postfix - Introduo
receitinha de bolo de como fazer um server.
ali tem como implemetar a autenticação kra. facinho facinho...