I run a script that moves any email to to the trash that does not come from a list of approved domains. I have toyed with the idea of setting up a catch all domain to do the same as you, but keep finding excuses not to proceed. How much time to you spend on administration for your solution?