I had a few requests for information on stopping dictionary attacks so I published it on my site:
http://www.anguillaguide.com/article/articleview/3420
The script is working very well and has reduced the amount of spam reaching the server (not the user) enormously. It would have been rejected anyway but the constant attempts waste resources so automatically banning the hosts is very effective.