If you set specify a domain, say "zoho.com", as the "Allowed Domain" for outgoing mail under Mail Policy setup, it is expected that no mail should be allowed to be sent to any domain other than to "zoho.com" domain. This feature doesn't work that way. It still allows to send mail to any domain.