My service provider told me that they cannot block certain email address for my domain because they have other clients on the mail server as well.

Shall I buy it?

Then, I have to train all staff to do this blacklisting job on their webmail...

Sounds like strange. Zimbra cannot block mail addresses for different Zimbra account/domain?