Postfix out of the box should not permit what you describe so I think you broke something. Things to check in main.cf: mydestination, mynetworks, relay_domains, and smtpd_relay_restrictions. Not sure off-hand what the sendmail equivalents are. -- Rich P.