hi, Yellow. I think you could apply some restriction on the MTA or BridgeHead server, also it depends on you Exchange network architecture.