Exchange spam control

Can anyone recommend a good spam controler for Exchange 2k3

Have not decided if challenge response is the best way to go or RBL’s
If so, which RBL would be best to run.
Medical office so kinda need some of those medical terms to get thru, building a whitelist would take too much time so that leaves RBL and Challenge response.