you could configure it in MTA services or some other related Filters at least, just block those outgoing mail which suffix is not your-firm.com. also, it depends how would your Exchange server find out the mail route, is it leveraging DNS or MTA?