Hi. I believe postfix will trust hosts on the same network/subnet as itself. auth is only required if the requesting IP is outside of that network.
See /opt/zimbra/postfix/conf/main.cf, and look for "trust", as it describes the behavior that you are seeing.
roland |