Banning IPs is useless--they will simply use one of another thousand IPs they have control of to send spam. It's as ineffective as banning emails, although we do ban entire TLDs. (We do not waste time banning individual email addresses.)
Set correctly, little if any spam will get through.