Hi Brian,
This setting can be found when configuring the alias. Log in as the Domain Admin and go to Settings > Domain Settings > Aliases > New. The last setting you'll see in the modal window is "Internal only". This is what you'll want to check in order to reject emails from addresses not matching the alias' domain name.
Please let me know if this helps you out so we can mark the status of this thread accordingly.
Thank you!