If one avoids the resource-intensive "content-scanning" approach and go with "rejecting", the MX machine doesn't need to be more than a P500 for 90% of orgs.Unfortunately lots of ISPs aren't willing to put in the extra hardware required to have the horsepower to do it.
Len