I use dspam. It seems like an abandoned project, but it still works. I looked at rspam, but I'm not a fan of the way the lists cost money as soon as you want to make money. Sure, right now, I'm only hosting personal email, but who knows what could happen in the future?