As pointed out in this nice article http://nedbatchelder.com/text/stopbots.html there are three wonderful ways to get rid of spambots without punishing the user:
- Timestamp checking
- Honeypot field
- Field-names obfuscation + token field
Nice additions and they should be all optional from config file.