Over the last few days we've been getting hit with spam emails containing viruses. Alot of them are coming to email addresses not in our directory, for example somerandomname@company.com. I've checked the box under recipient filtering to "filter recipients not in Active Directory" and set the SMTP virtual server to allow recipient filtering. The problem is these emails are still coming through. What am I doing wrong?