The first issue I see is that she has no authentication.
Anyone can connect and attempt to send mail.
While relaying appears to be denied, I was able to telnet to her smtp port and send mail to local users. e.g. postmaster

she needs to modify her postfix config to require smtp authentication.
this may require additional software to be installed.

Need to see the config files. as per ^.