Thanks all!
I put in WP-spamfree, and that so far seems to be working! Before that suggestion, all I had heard of was askimet, and what I had read about that one didnt’ inspire me.
Re 2.5.1, last time I upgraded was a very traumatic experience, so I’m in no hurry to do it again.