Note to dhw about spam: (Introduction)
There are a couple of spam prevention measures which can be used through the forum, one of which uses an akimet api key from http://akismet.com. This seems to have good press for Wordpress forums, I'll chat to DHW and see what we can come up with.