This question is an exact duplicate of:
How do I make Postfix to reject all mails if the client is not authenticated and to sender is @mydomain? Is the an easy way to do this?
Your main.cf should contain this line:
But make sure that the "client" is not in the network defined by