Well, I figured out that it takes about 4 levels of spam protection to not have any spam in your inbox. I actually have resorted to sending test messages because I thought email was broke. Turns out it was working, but I don’t get much spam.
After that, all remaining ham/possible spam gets routed through some hardware devices from work that are autolearning spam protection devices. I get a report once a day that shows me all the blocked email and it does an awesome job.
As a last result, I have SpamBayes, an Outlook plugin, configured to send possible spam to one folder while spam is moved to the Junk-Email folder. I get *maybe* one or two messages every other day that show up in that folder.
Email is actually useful again. Oh, and since Exchange 2003 is in the mix, RPC over HTTPS rocks!!!!