Blocking an entire ASN is a "nuclear option." Large cloud providers (AWS AS16509) host millions of legitimate services alongside spammers.
Within Postfix, you can configure access tables to reject or permit mail based on the sender's network properties, often working in tandem with the ASN lookups provided by SpamAssassin. Key Features of Zimbra Mail Server for Enterprises zimbra asn