Block port 25/tcp outgoing from all dialup (and dsl, whatever) ip ranges. Only whitelist exceptions on request, then blacklist them again when an abuse report comes in.
If every ISP did this, we could probably reduce spam by an order of magnitude.
And no normal user will need 25/tcp outgoing anyway.