EDIT: "I'm not sure you understand how IP blocking works and why it would be impossible to block domain names the same way."

If you mean that on the same server the e-mail IP and server hostname will be the same for all the domains, then yes I understand.

But filtering can be changed to achieve domain level validation, not IP. It is done already on our servers.