There's no need to be rude sir.
You have strange conceptions of rudeness.
Also, please do not top-post.
I'm just trying to become more familiar with the Postfix system as an
alternative to Qmail which I've had more real world experience dealing
with,
Yeah. Qmail breaks so many standards it's not even funny.
You have my problem reversed. I'm troubleshooting what seems to be
mail being sent FROM our own domains TO anywhere
You end your restrictions with PERMIT.
Hence, you need to explicitly REJECT mail that's from unauthenticated
users, or postfix will eventually reach the end of the ruleset and
simply permit the mail.
It is not unimportant to be aware of the fact that permit_* restrictions
yield either an OK or a DUNNO response, and reject_* restrictions yield
either a DUNNO or a REJECT response.
There is no restriction that yields either an OK or a REJECT - so
checking for authenticated users does not either PERMIT or REJECT on its
own.
J.