I've just reconfigured our email server to reject (i.e. bounce back) any incoming email addressed to unknown users. I have been redirecting it to a "catch-all" address and reviewing it each day but this is too time consuming.
[See also this entry
in our sysadmin LJ, henmansite