It's an ongoing issue, of course. I've checked into the status of various filtering methods and here's a combination I've been reasonably happy with, checking organizations that are actually still useful (unlike, for instance, rfc-ignorant):
RBLList bl.spamcop.net:dnsbl.ahbl.org:zen.spamhaus.org
SBLList rhsbl.ahbl.org:multi.surbl.org
And of course the lovely GeoIP

I know that last is frowned upon, but damn does it block a lot of spam.
Additions and comments solicited!