Pegasus Mail & Mercury

Greylisting won't help you because the spammers can just dump their mail onto your backup MX which will then happily relay it on to you from both a trusted and persistent (genuine) mailer and address.   It's unlikely that a UK ISP would neglect to provide an outgoing smarthost (SMTP/submission) server.  But yes, MercuryE is the module ...