What strategies do you use to combat spam coming into a catch-all address?
I've noticed that some non-existent addresses seem to get picked up and hit hard by spammers. These, I redirect to an old, unused webmail account (last time I logged in: 86,583 unread emails).
I also use spam assassin to reject obvious spam, but I still get a few a day that make it through.
I've tried moving a domain to google apps, and that seems to work pretty well.
Any other strategies I'm missing?