Domain used for spam - NDR responses

[Jeff Mills]

Hi all,
Just wondering if anyone has some magic solution for what I'm sure is a
common problem.

A spammer generates thousands of random email addresses using your
domain name and sends out a bazillion emails.
All the NDR's come back to your server destined for non-existant
mailboxes.

Now my common sense tells me that if you want to stop these you can
block all NDR's, for example by using MCP and blocking "Delivery Status
Notification (Failure)" "Undeliverable" etc.
However, that will also block legitimate NDR's.

So do you all just grin and bear these or is there a magic solution I'm
not thinking of?

Rgs,
Jeff