according to the comments on bug 2648, use catchall@mydomain.org as the identifier for catchall aliases.
This is the easiest solution because there is no change to email address validation necessary. and the aliases might be used for sender addresses which would cause trouble if the address was just @mydomain.org