We've been getting a lot of spam lately, and currently, our anti-spam solution is a combination of the Spamhause blacklist and some content filtering. I'm wanting to invest in a real spam solution like Barracuda, but my boss isn't willing to spend any money, and thinks I've just not spent enough time leveraging Exchange's built-in spam fighting capabilities.
The only three things I know of to do from here is to add phrases to the content filter (most of what's coming in doesn't have anything to really key off of), altering the SCLs which it will quarantine or reject at (which I've already set lower than I feel comfortable with), and manually adding IPs to our blacklist (yeah, that will be SO useful). So, I'm worried I'm missing something here.
From here, what is my next step? I don't really have time to mess with a complicated free product just now (unless there is one that's pretty drop-in ready that I'm not aware of), so if there are more tools built in to Exchange that I'm just not seeing, or a great simple free product that I can use easily to help stem the tide until I can either convince my boss that it's worth it to pay for a real solution or have enough time to deploy something like ASSP, please let me know.