This has been a constant battle for us, but we've put in some more aggressive filtering software (thanks to uf_shane for the recommendation). We were dealing with thousands of SPAM messages a day that were filtered in addition to what was still making it through. The new software uses a ton of different methods in addition to the spam checking service we have been using and seems to be catching the bulk of it now.