Do something really smart and get mail content filtering software. MIMEsweeper is the best yet, then there are a few others. They do content filtering, scanning, SPAM rejecting, bulk mail monitoring, etc. They're definitely worth the investment once you get it set up. Exchange can't do this by itself.