Olá galera, estou com problema no meu servidor de email a algum tempo, e não tenho conseguido muito sucesso, tenho serviço de postfix+dovecot+saslauth rodando no meu servidor, o problema é que se alguem usa o meu smtp para enviar emails para usuarios do meu domínio esta passando sem exigir autenticação, para outros domínios ele exige autenticação.
se alguem puder me dar uma luz.
##main.cf##
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
mail_owner = postfix
myhostname = mail.dominio.com.br
mydomain = dominio.com.br
myorigin = $mydomain
mailbox_size_limit = 51200000
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
unknown_local_recipient_reject_code = 550
mynetworks_style = subnet
mynetworks = 127.0.0.0/8
relay_domains = dominio.com.br
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mail_spool_directory = /var/spool/mail
mailbox_command = /usr/bin/procmail
smtpd_banner = $myhostname ESMTP $mail_name
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
html_directory = no
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/postfix-2.2.8/samples
message_size_limit = 10240000
readme_directory = /usr/share/doc/postfix-2.2.8/README_FILES
maps_rbl_domains = relays.ordb.org, dev.null.dk, opm.blitzed.org, sbl.spamhaus.org, dnsbl.sorbs.net
smtpd_client_restrictions = reject_maps_rbl
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, check_relay_domains, reject_unauth_destination, reject
smtpd_helo_required = yes
smtpd_sender_restrictions = reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unauth_pipelining
strict_rfc821_envelopes = yes
smtpd_helo_restrictions=reject_invalid_hostname, reject_unknown_hostname, permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_unauth_pipelining
smtpd_timeout=300
smtp_connect_timeout=0
smtp_helo_timeout=300
smtp_mail_timeout=300
smtp_rcpt_timeout=300
smtp_data_init_timeout=120
smtp_data_xfer_timeout=180
smtp_data_done_timeout=600
smtp_quit_timeout=300
smtpd_recipient_limit=100