I think my server is being used as a relay, but I am not sure how, I did the normal checks:
mail from:
[email protected]
rcpt to:
[email protected]
553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
but when I look at the qmail queue, it is sourcing from foreign...