[Exim] SMTP Auth and ACL

hi

i´m using exim 4.34 with ldap. my problem is with the smtpauth. i want the everybody(not localhost)
who use the smtp has to authentificate . but with my configuration if somebody use my smtp and
send an email to a user which exist on the server he don´t have to authentificate.

thx

kai

-----------------
qualify_domain = host.domain.net

host_lookup = *

never_users = root
trusted_users = Debian-exim:www-data

gecos_pattern = ^([^,:]*)
gecos_name = $1

smtp_accept_queue_per_connection = 100

domainlist local_domains = @ : @[] : localhost : ${lookup ldapm {user=LDAPUSER pass=LDAPPASS \
                              ldap://LDAPSERVER/dc=domain,dc=net?domain?sub?
(&(domain=$domain)(status=enable))}{$value}}
domainlist relay_to_domains = @ : @[] : localhost : ${lookup ldapm {user=LDAPUSER pass=LDAPPASS
\
                              ldap://LDAPSERVER/dc=domain,dc=net?domain?sub?
(&(domain=$domain)(status=enable))}{$value}}
hostlist relay_from_hosts = 127.0.0.1
hostlist auth_relay_hosts = *
freeze_tell = postmaster

ignore_bounce_errors_after = 2d


acl_smtp_rcpt = acl_check_rcpt

received_header_text = "Received: \
        ${if def:sender_rcvhost {from ${sender_rcvhost}\n\t}\
        {${if def:sender_ident {from ${sender_ident} }}\
        ${if def:sender_helo_name {(helo=${sender_helo_name})\n\t}}}}\
        by ${primary_hostname} \
        ${if def:received_protocol {with ${received_protocol}}} \
        (Exim ${version_number} #${compile_number} (Debian))\n\t\
        id ${message_id}\
        ${if def:received_for {\n\tfor <$received_for>}}"

######################################################################
#                      ROUTERS CONFIGURATION                         #
#            Specifies how remote addresses are handled              #
######################################################################

acl_check_rcpt:
  accept hosts = :
  deny   local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
  accept local_parts = postmaster: root
         domains = +local_domains
  require verify = sender
  accept domains = +local_domains
         endpass
         message = unknown user
         verify = recipient
  accept domains = +relay_to_domains
         endpass
         message = unrouteable address
         verify = recipient
  accept hosts = +relay_from_hosts
  accept authenticated = *
  deny message = relay not permitted