Recent discussion of this is at https://bugzilla.wikimedia.org/56525 TL;DR: we have spamassassin but configuration is tricky; if you're a tech-inclined list admin, play with your list's X-Spam-Score config and let others know on bugzilla what worked.
Nemo