Google for procmail if you're doing this for a specific user account. Done for you.

Or, maybe spamassasin if doing this for all mail received on the machine...

-Scott