I have a client with a Small Business Server 2011, which has Exchange 2010. I have implemented the following anti-spam measures:
* Anti-Spam Content Filtering in the Hub Transport. Spam definitions updated regularly.
* Reject messages with SCL of 7 or higher
* Custom Word Content Filtering with a long list of words to block
* Using the Following IP Block List Providers: Barracuda, Mailspike, Spamhaus, Spamcop
Even with this, we have several users getting hammered with spam, over 100 a day. I wanted to see if people had some other suggestions. I would like to start out with the free and lower cost ideas first.
Michael