Relaying is usually controlled by the tcp.smtp file using the RELAYCLIENT
To only allow localhost to relay and require all other IPs to
use smtp auth you could put this one line in your tcp.smtp file
Then rebuild your tcp.smtp.cdb file using tcprules.
And how about if I got separate mail hub to do the spam/vir check and I
don't want to rely to locals from other than auth'd clients or mail hub.
Other words, I want rely either my mail hub 126.96.36.199 or auth'd users on serve