I would update to RC1 (but test first to make sure it works on your server) as it has additional spam measures. But some other things you can do are: - Moderate comments (setting in Admin -> Options tab) - Set up the CATPCHA system (by theme, see Lucid theme for example)