You can not force authentication on port SMTP (25) if you want to receive messages from "strangers" (other SMTP hosts worldwide).
You should require authentication on SMTPS (465) and MSA (587) ports.
You may reject connection from DUL (dynamically allocated) IP addresses for unauthenticated connections and addresses listed by other DNSBL lists. Use FEATURE(enhdnsbl,...) with some DNSBL listing DUL ranges and FEATURE(delay_checks,...).
BTW You have missed s Modifier for SMTPS.
DAEMON_OPTIONS(`Name=SMTPS,Port=465,Modifiers=sa')