Though not verbose on my part; Damn, you're hot!

My hosting service provides the anythinginfrontofthe@mydomain.com addresses, but I quickly changed that feature because the spam bots simply need to find the active domain and then a script can write infinite addresses at that domain. So, my suggestion is to set the * value to bounce and only allow valid emails to get through.