In a standard DA configuration, SMTP-AUTH and POP-before_SMTP are both set up, and exim won't relay.
If you're using SpamBlocker make sure that no domains on the server are listed in the /etc/virtual/whitelist_domains file, as thats the only known hole.
Jeff