Actually on my ISPconfig webservers I use to block each user but root from sending email both to the local MTA and to the rest of the world:...
Separate names with a comma.
