You should also make sure your comment system is using rel="nofollow", and doesn't have any XSS issues. If you aren't using rel="nofollow", and the site has page rank, then it will be worth the spammer's time to manually defeat your form.