Exchange 5.5, had an open relay. Applied SP, some hotfixes, closed up the relay. But now internal Mac clients cant send email. How can I configure exchange to relay internally, but not from external ...

Do you mean Anonymous access on the Authentication tab of the Access properties on the SMTP virtual server? If so, you NEED that enabled so anyone can send mail TO you, that is NOT making the system ...