Prevent the user 'nobody' from sending out mail to remote addresses in 'Tweak Setting'. - I'm not sure if it would do any good to enable it if suexec is enabled.
suexec allows cgi scripts to run with the user's id. It will also make it easier to track which user has sent out an email. If suexec is not enabled, all cgi scripts will run as nobody.