I wrote a piece for Advogato on how to filter out Outlook worms (Love Letter, Melissa, etc.), real-time, on a MTA level. It’s a pretty crude system, but I think that it could really be quite effective. If you’re at all technically-inclined, please consider reading this and letting me know what you think.