Running Microsoft Exchange 2003 on a Windows 2003 Sever Need a better Spam filtering option I can control. better than what is in the I.M.F. filter

I am running Microsoft Exchange 2003 on a Windows 2003 Sever and my boss and the owner of the company are frusterated at the fact I tell them "the only Spam filtering option I can control are the two  numbers settings in the I.M.F. filter. Can anyone give me a better option. My boss and owner can tell me the email addresses of the people they want to get through but I see no way to input that into the Exchange server.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Short of purchasing Cloudmark, subscribing to Trend Micro's IMHS, etc. you have very few options for effective spam filtering in Exchange.  Adding addresses of those permitted isn't going to work as it would eliminate everyone else from sending mail to you.
Lee W, MVPTechnology and Business Process AdvisorCommented:
You can implement rules in Outlook to manage the mail.  But the spam filtering in Exchange 2003 wasn't top of the line.  IT's gotten much improved in 2007 and 2010... maybe tell your boss that if he wants more advanced features, he has to retire the 7 year old technology in favor of something more recent.  Either that, or purchase a third party solution.  I use GFI Mail Essentials for my own domains.  But you can go with hosted services as well as third-party in house ideas.
You can add the server's IP address to the Global Accept List on the Connection Filtering tab of the Global Setting's Message Delivery Properties window.  This is Exchange's only native whitelisting feature, which isn't the best.  Specifically, you will need to find out the IP address of that sending server. Generally you can inspect the email's header to find that IP address.  But if the sender's domain uses multiple IP addresses you may never successfully add them all to the Global Accept list.

It is better to implement a whitelisting feature, such as the prior postings (also look at the very inexpensive Vamsoft ORF).  If you're looking to do it for free, look at a whitelisting scripting solution I posted here a while back:

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Comm_NavAuthor Commented:
Answers were not the solution, they just offered settling for alternatives.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.