The secret to winning against spam while only needing a basic spam filter is to buy your own domain, setup a redirect/alias for *@yourdomain.com, and use multiple addresses.
When you start receiving spam on an address burn it and setup a rule to move all email it receives to spam. This has the dual benefit of letting you know who sold your email (or got compromised).
I personally use Fastmail, but this should all be possible relatively easily with your own mail server as well.
When you start receiving spam on an address burn it and setup a rule to move all email it receives to spam. This has the dual benefit of letting you know who sold your email (or got compromised).
I personally use Fastmail, but this should all be possible relatively easily with your own mail server as well.