We're an ISP. We handle email for lots of customer domains including those where the customer handles some of the email facilities themselves and uses our server for others.

Our servers are configured to block backscatter already but it's not possible to block 100% of some definitions of backscatter without having a comprehensive list of possible valid sender addresses which we cannot have.