Would never have thought of that Jelv but it does seem to be a good idea. I suppose that what you are doing is filtering and weeding out the legit aliases. It would take a little while, as you say, but would have the desired effect eventually.
It's a warning to us to set up the aliases as soon as they are created, although it can be a bit troublesome at the outset it is well worth the effort.
When I received the spam a few weeks ago, it made me realise how much I would get in the normal course of events if I didn't have catchall switched off. I use a domain name which was someone else's before me so it might originate from that ownership.
