okay, i found a caveat. External Alias setup doesn't work if the alias name is the same as an internal account name. I still want people to logon to use the system, but they want their mail somewhere else.
I will test aspangilinan's approach by setting the filter in Roundcube.