I've been using TMDA since early 2002. Although I have switched to Spambayes for managing my personal spam influx, I still believe TMDA is one of the most well-written open source projects I've seen. I install it for all my contract customers who require any kind of whitelisting or C/R system.