In our default class of service we prevent "incoming" SMTP messages from our domain but then grant exceptions for scanners and other "made up" addresses (i.e. no GW account). These messages are almost always for GW users; however, in one situation, we want to send this kind of message to some outside addresses too.

However, when the list of sendto addresses contains both inside and outside addresses, only the inside ones are successful. I get "relay denied" in my GWIA log for the outside addresses.

I guess what I'm asking is how can I permit open relay to send from a made-up and permitted inside address to Internet addresses?