I used to accept *@mydomain, until spammers started sending spam to completely random addresses. Suddenly I received hundreds of copies of every spam mail, addressed to random combinations of characters @mydomain.