What I posted should work on 3, by adding another line to your globals section:

host_auth_accept_relay = *

It works for my personal domains, anway...