I half-assed this once and just made postfix check spamhaus and spamcop. Very little spam gets through.

I'm thinking about turning on greylisting as well, but right now its not needed.