[exim] block from remote, allow from local

Hello,

What is the easiest way to block RCPT to root@??? but still
allow this email address to be used when submitted from localhost by
Charlie (in FreeBSD)? In other words, block from remote sites, allow from
localhost.

Thanks in advance!

--
Zbigniew Szalbot