I setup CAPTCHA on an anony forum and for new user registration. I also turned off the new user queue and email verification. So far, so good. I've been very happy with this setup. I can see anonies signing up and trying to post and they haven't broken in. Their IPs were those that were blacklisted or Google said they had been up to no good.
