We are still actively working on the spam issue.
Need to selfhost mail? Need a fileserver? Well, here's some advice.
Use a DMZ, nigger.
Use Fail2Ban and perhaps a redundant computer in the DMZ. Also never use passwords, only keyfiles.