Iris rejects messages from users who your social network hasn't interacted with. For now Martti has set it to no limits to the hops. But you could potentially set it manually if you encounter spam from the edges of your social network.
note1k64trfnnz403uenk9qnqag082dan0dvrx0378nuxg0wrp7mrke8qkae9n8