I think a funnel is what MS uses, so it's an established "filter" icon, in that (at the very least) MS/PC users would find it recognizable. (To me, it looks wierd, thanks to someone in user-testing who thought it was "an upside-down dummy's cap, y'know, like in Harry Potter" ...but that's pretty memorable on its own. Heh.