I also can’t recommend greylisting enough. If you haven’t already enabled it in postfix I strongly suggest doing so. It’s one of the easiest ways to reduce spam. By simply bouncing emails from new sources the first time and forcing them to retry, it cut my spam tremedously.