Outbound SMTP
Use WildDuck MTA (which under the hood is ZoneMTA with the ZoneMTA-WildDuck plugin).
This gives you an outbound SMTP server that uses WildDuck accounts for authentication. The plugin authenticates user credentials and also rewrites headers if needed (if the header From: address does not match user address or aliases then it is rewritten).