@CroTeam
First, I want to say that no policy can block all spam, it can only minimize the amount of spam.
Does your distribution group receive needed ordering from specific external mailboxes? If so, you could add those mailboxes as mail contact. Then set your distribution group only receive email from those users:
If your distribution group doesn't receive email from specific external mailboxes. I want to confirm with you that whether the spam sent from specific mailbox/domain? If those spam from a specific mailbox/domain you could add it to the "Block lists" in Mail filtering.
If your distribution group need to receive email from random mailbox, those spam also sent from random mailbox, you may need to add those email address into Block lists one by one, in this way, it will cannot send spam to your organization again. You can also modify the setting of Anti-spam settings(such as block Empty messages, contains words in sensitive word list), to let it block more spam.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.