First thing: find the patch for the URIBL rules and get that enabled. It will probably catch 90% of the spam making it through.
Thanks for the suggestions. Actually, I was mistaken; the server that prompted this request had 2.61 installed. I upgraded him to 2.64, and tracked down the SpamCopURI plugin. But, he's already using every conceivable RBL at the SMTP level, so it may not help a lot.