Hmm - generally allowing autorules to forward out of the organisation can be a risk, as this allows mail loops to grow out of hand very quickly. That's why most people don't enable this functionaility.
If you allow OOFs to the Internet (most peole tend to these days) then you could use an OOF rule (not the OOF itself) to do the autoreply, with slightly less risk.