You can setup a receive connector on exchange online to trust mail from specified souce IP(s) (ie your onprem mailserver) with no need for additional mailbox licenses... good for alerting/reporting/MFP's etc