Don't get me wrong when I say this, but spam will come, whether we like it or not. Spammers will always find a way: posting a good answer before spamming, to editing after an approved first post, to even circumventing IP blocks.
Spammers are new users having reputation 1.
I've seen instances of spam that have come from users who have gotten the association bonus. (At least on the site where I moderate, Open Source.
The format of spam is the same...
Ummm... Not really. Spam has taken many forms: not all spam has to take that form: and once spammers learn that this "form" is blocked, they'll find ways to get around it. It's a short-term solution, let's discourage that.
Spammers use tags that have low traffic (for example, batch-file), making the spam survive a longer time.
This doesn't really bug me. Less people see it, and if they do, they can still flag as spam, or anything. Remember, that every new post will go through a queue: whether it's in the First Posts, or the Low Quality Posts, it will be seen by at least a few people. (If something sneaks through that, then it's an issue with the reviewers, which we don't need to argue about right now.
Add a minimum reputation restriction (something like 5/10 which could be very easy to get for a legit user) to add external links and optionally allowing only some selected white-listed sites...
Who will maintain such a white-list? What if a user tries genuinely linking to a news article, or to a site for documentation? People will get pretty mad if we can't let them ask a question.
In response to comments, and other answers:
New users are already faced with many restrictions, including one that limits the number of links they can place in a post. I don't see why we need another. We also don't need to add extra steps to "approve" various parts in a post. How will we know whether or not to add these steps to a queue?
The system works well: 6 spam flags and a post is out. The spam blocking system learns to be wary of that content and address.