How do I stop Exim being an open relay?

By adjusting the acl_smtp_rcpt ACL.

See What should I put in my acl_smtp_rcpt? for details and examples.