Content Filtering - Sophos Pure Message (you may well get this free for your lea)

Monitors the smtp service and yoinks out anything it doesnt like.

To stop kids having internet mail

only give them a .local smtp address - they wont be able to send / recieve emails to the the internet. Give staff proper ones and they will.

To stop student sending to staff - use the Delivery Restriction dialogue in ADU&C