Where are you authenticating the login?
You must authenticate against an SMTP server in order to send out. That is a service your domain provider can help you with, but it not free.
Think of all of the SPAM you get already, and now imagine all of the SPAM without this authentication step!!!!