firstname.lastname@example.org is my preference
Yeah, I know that spammers could pick this up, but...
So what? I'm not going to annoy a bunch of people with legitimate reasons to contact me in order to make it harder for spammers to get my address.
Even if the spammers wouldn't figure out my address from other sources, that would be rude.
At this point I've been living this philosophy so long that one more reference on the web won't do any incremental damage.
You do use SpamAssassin , don't you?