If you see 554 5.7.1 Relay access denied , you have confirmed the problem.
Proactive measures can dramatically reduce these incidents. zimbra relay access denied
If it returns TRUE , authenticated clients must use TLS. That is fine—just ensure clients have TLS enabled. If you need to allow unencrypted authentication (not recommended for security), set it to FALSE . If you see 554 5