We use SpamAssassin on our server which is <em>alright</em>, but I also use the Junk filter inside of Thunderbird to catch the rest. I get around 200 - 250 spam messages a day, and about 15 hit my actual inbox. It's not perfect, but I don't want to risk losing legitimate e-mails.