I can thoroughly recommend rspamd - it feels rather more robust than spamassassin and is easier to configure eg if you just want to do Bayesian filtering etc. The analytics and logging you get through the web interface is also very good.