You might try spam assassin, or other similar programs that work server-side.
While we would all dream of having spam stopped at the router,
(meaning, 0 bandwidth charge) spamassassin works quite well, combined with
things like "email security through procmail" (sorry, no url, just remember the title)
any competent systems administrator (all serious webmasters have those right? if not, contact me

can remove most spam, and at the same time de-fang any possible virus's/trojans emailed to you.
(Ie: no need to worry about the clueless secretary/support person/ect clicking a .exe in outlook)