Having fought the good fight at the server level for several years, I know there is no perfect solution.

You can get darn close with careful tuning, meshing different filtering techniques together, but it will never be perfect.

over at IBM's site provides a nice breakdown on the different methods being used.

The article is a bit dated, but still relevant. I picked it up on OSNews.com recently.