I always have a separate machine with port 25 opened to the world to handle sending/receiving email, spam filtering, and virus checking and then forward the messages on to my Exchange box. (With the Exchange box running a Virus scanner from a different manufacturer.) Some of the programs I've used in the past are Mail Sweeper, GFI Mail Essentials, and Mail Marshal. All of these programs do good jobs and are very configurable for mail scanning.