I blocked SOBIG.F worm on our mail server (Postfix on FreeBSD) using header_checks feature in Postfix. This way we discard emails with specific subjects to reduce the worm effect.

mail:~# zcat /var/log/maillog.* | grep -i sobig | wc -l 1022

1022 infected emails in a couple of days, for [...]