Question : How to stop relaying on rcpt to level

Hi, i have a Exchage 2007 with HUB Transport (NOT any Edge subscriptions), i have enabled the anti-spam and recipient filtering on the Anti-Spam tab. But i can still use telnet from the outside and rcpt to adress thats not in the organisation or in the accepted domain and dont get any error (and i can send mail to that address), all addresses that i try with in the rcpt to command get recipient ok, even addresses with domains not in the accepted domains. I can send mail to domains not in the accepted domain lists, but if i send mail to fwweroirsdjfh@ then its still say recipient okay, but the sender in the mail from got the error #5.1.1 smtp;550 5.1.1 RESOLVER.ADR.RecipNotFound; not found>

Answer : How to stop relaying on rcpt to level

Well here is some update. If i use this settings on the receive connectors under HUB-Transport
TLS
Basic (and basic  TLS)
Exchage Server Authentication
Integrated Windows Authentication
BUT NOT Externally Secured

Then i recive the 550 5.7.1 Unable to relay and 550 5.5.1 user unknown and everything is okay, BUT then i cant use external equipment like a copy machine to send mail with the Exchange server, i then need to enable the Extarnally Secured options but then the server relay and accept all mailadresses, pleas, someone help!