It's probably easier to just look in the maillog for 5.x.x return codes:
cat /var/log/maillog |grep dsn=5
That should give you each line with a permanent failure (bad addresses/rejections). You might want to suggest to your client to get his act together and modify his script to send the email with a valid return-path header, so he can see the bounces and take care of them.
The default php mail() function doesn't really work for this. He'll have to use something like the PEAR mail package set in SMTP mode:
http://pear.php.net/package/mail/