Hi Paul,

You will need to define in your own terms what constitutes a valid email that should create an incident and what is invalid. Is there something in the subject? the body? the sender?

Once you have that, you can modify the OOB inbound action to react to those criteria.

http://wiki.servicenow.com/?title=Inbound_Email_Actions