I have a problem with spam,

The spammer connects im my server authenticated because i have virus machines in my network.

There is any way to block all output mail that mail from is different of my internal domains?

I have tested reject_unlisted_sender but it does not word

Anyone have idea how to fix this ?