I have found that if you harsh blacklist from most countries you'll never communicate from you'll save a lot of spam.

I blacklisted pretty much all of africa and arabic nations and china on the IP level, ( ensure you get the bgp routed datacenters in those nations too) and not only did i get less spam, but less automated bot attacks on my webserver.

The reason people talk about the blacklist is because its just so damn effective.