If you are running Exchange 2007 it actually have a spamfilter, but it isn't enabled by default. Either enable it in your server (Hub Trasport...
Separate names with a comma.