I use a subdomain and forward *@subdomain.domain.com -- if you put a catchall on the root you will get spam.