I'm using POP and do my own filtering. I don't have anything other than Thunderbird doing mail filtering.

One of the MensHealth.com spams:
Received: from i01.spamarrest.com [67.228.29.142] by mail.myisp.com with ESMTP
(SMTPD32-7.07) id AB67C690148; Sat, 28 Mar 2009 08:51:35 -0500
Received: from m2.spamarrest.com (ent03.spamarrest.com [10.13.85.30])
by i01.spamarrest.com (Postfix) with ESMTP id 9A6237680849
for <me@myisp.com>; Sat, 28 Mar 2009 08:51:09 -0500 (CDT)
X-SA-DELIVERED-TO: <me@myisp.com>
Received: from dynamic-78-8-195-23.ssp.dialog.net.pl (dynamic-78-8-195-23.ssp.dialog.net.pl [78.8.195.23])
by m2.spamarrest.com (Postfix) with SMTP id 65042B3D38B
for <me@myisp.com>; Sat, 28 Mar 2009 08:51:07 -0500 (CDT)

I'm rusty at interpreting this stuff, but it looks like it's coming from Poland and being routed through SpamArrest. Is my ISP using SpamArrest and is that the weak link?

Thanks a bunch.

Cheers,
Scott.