You're supposed to be able to "relay" messages from an outside connection to the SME account; that isn't a sign of any kind of problem. What is a problem is if you can send messages from an outside connection, through the SME box, to an address not on the SME box.
Oh, and the courier-imap packages don't have anything to do with SMTP, so they wouldn't affect that.