I think you will need proper Access Control rule configured FortiMail to
allow relay. By default, it will reject you if recipient is not a
protected domain address.
I think DLP rule is also a good way to check env-From and header-From,
you can choose "Sender matches regex" for env-From, and "Header matches
regex" for header-From