My typical set up — 2 email servers for all of my domains. One primary with local delivery, and another one as a backup MX. Then for all my other servers, MTA is installed but either bound only to localhost, or external access to port 25 firewalled. Emails will be sent out from these servers but they shall never receive any from emails, i.e. they are all null mailer. Just in case I mis-configured the MTA and opened them up for relaying, I firewalled all SMTP access.
Well, it has actually caused more problems than I have originally envisioned.

I have been using
This review is a follow up from my