mail transport + @domain relay recipient = open relay
When adding a mail transport for an external domain you must add the domain in relay recipients, which creates an open relay.
https://www.howtoforge.com/community/threads/use-smarthost-for-some-domains.78820/
Related #2658