I am far from an expert, but Clamav is a good starting point. Check out how to set it up.
I'm only getting locally generated spam, and it's marked with ***SPAM*** in the subject.
I haven't yet worried about it because it's a small problem for me at the moment.
TBH, spam is a larger subject than just one or two commands, and I still have a lot of reading (and asking of questions
)to go myself.
My VPS system:
(Ubuntu 10.04 LTS, Kernel 3.4.2-linode44, Apache 2.2.14, MySQL 5.1.63, PHP 5.3.2, ISPConfig 18.104.22.168, Webmin, PureFTP & Quota, phpMyAdmin, postfix, dovecot, clamav, spamassassin, awstats, fail2ban, Jailkit, bind9, vlogger, webalizer)