I have no first hand experience with no spam today, but it uses the widely respected and well documented spam assassin filtering system.

And they have limited freeware, and trial versions, and seem to be pretty cheap.

I've used various ports of spam assassin under linux and windows and it's a good filter.

How many users do you need to filter for?