It should be a legal requirement for your ISP to protect every surfer, provide spam filtering that actually works and a defence against phishing that is more than a warning letter reminding you that emails asking for passwords should be deleted, but its not...