I don't think regex works on it, sadly. And doing first post being moderator approved would work, however I'd want it to only be if links were included. If someone has a tech support question over the weekend and other players can help out, I don't want them stuck in a spam filter until we see it on monday.
Anyway, now I'm at least having fun with the spam -- it's whack a mole, but it's amusing.