Flexibility of self-hosted mail is very nice.
At the moment I don't filter on the server at all, because I think anyone should be able to reach me no matter how dumb the mail setup is. Send me mail by manually typing to a TCP:25 connection from a residential or mobile IP, I don't care. No DNS checks, etc. My postfix config is very permisive, only relaying is disabled.
I filter using bogofilter on emails delivered to my public addresses.
Private randomly generated aliases don't get filtered at all (only the sender knows them, so I just disable the address if it gets abused).
It works nicely, especially the private alias part.
I have alias/mailbox table in PostgreSQL DB, but don't bother with trying to connect postfix directly to the DB. I just dump the tables to the postmap files on each change. It's infinitely more performant and reliable, which is what this has to be.
I can also dump the DB to my MUA's config, and have it rewrite all the random addresses into something readable.