PF has a fairly reliable operating system detection built in:
pass quick proto tcp from any os "Windows" to $ext_if \ port smtp set queue smallpipe
A similar trick helped someone with a Microsoft-borne worm problem some years back (see ALTQ - Handling Unwanted Traffic and http://use.perl.org/~merlyn/journal/17094).