But you said they authenticate...
I'm not an e-mail expert, but I can see no reason why an authenticated user to the mail server is getting run through all those spam tests on the outbound direction. I would strongly consider changing your configuration if at all possible.
Do your users get spam-tested between internal mailboxes too?--
flickr | 'Cause I've been waiting, all my life just waiting
For you to shine, shine your light on me