I did this already at work. The smart relay host needed to be changed,
but I had no access to the Novell Groupwise server. So I just introduced
a NAT iptables rule to our Linux NAT/Firewall to redirect all port 25
connections to a specific relay host. Almost the same idea as
transparent web proxys (with squid for example).
No idea how they handle smtp-auth to other servers...
asmtp might be a problem. Overall this might be a better solution as
just blocking port 25 if you do not want to upset many customers. Many
of us would not have noticed it if Coditel did it this way.
A problem might be zombie PCs. Those would continue to spam unhindered :-(
Greetings, Patrick Kaell