[Exim] URGENT: closing relaying

should the following keep users from doing the following? If not....
what am I missing?

exim.conf v3.22
==========
local_domains = mydomain.com
#local_domains_include_host = true
local_domains_include_host_literals = true

#relay_domains =
relay_domains_include_local_mx = false
headers_check_syntax

host_auth_accept_relay = localhost
host_accept_relay = localhost


script
==========
telnet mailsserver 25
helo blah
mail from:<spam@spam>
"RCPT TO:<a@???>
DATA
Subject: sub
info for you
.
QUIT