Hi @Felix,
You must add support for Spamhaus DQS to SpamAssassin. Here is the repo with the instructions, but I have also included just the needed steps below:
Note: replace abcdefghijklmnop0123456789 with your actual DQS Key.
cd /usr/local/src/
git clone https://github.com/spamhaus/spamassassin-dqs
cd spamassassin-dqs/4.0.0+/
sed -i -e 's/your_DQS_key/abcdefghijklmnop0123456789/g' sh.cf
cp sh.cf /etc/spamassassin/
cp sh_scores.cf /etc/spamassassin/
To check that there are no errors:
spamassassin --lint
If all is ok (no output), restart the service:
systemctl restart spamd
Just in case, I also did some changes to the sh_scores.cf file:
@@ -29,23 +29,23 @@
score URIBL_SBL_A 0.1
score URIBL_ZRD 6
- score SH_DBL_BODY 8
+ score SH_DBL_BODY 10
score SH_DBL_HEADERS 8
score SH_DBL_HEADERS_ABUSED 0.001
- score SH_ZRD_HEADERS_VERY_FRESH 8
+ score SH_ZRD_HEADERS_VERY_FRESHi 10
score SH_ZRD_HEADERS_FRESH 6
- score SH_REVERSE_ZRD_VERY_FRESH 8
+ score SH_REVERSE_ZRD_VERY_FRESH 10
score SH_REVERSE_ZRD_FRESH 6
score SH_REVERSE_DBL 8
score SH_REVERSE_DBL_ABUSED 0.001
- score SH_HELO_ZRD_VERY_FRESH 8
+ score SH_HELO_ZRD_VERY_FRESH 10
score SH_HELO_ZRD_FRESH 6
- score SH_HELO_DBL 8
+ score SH_HELO_DBL 10
score SH_HELO_DBL_ABUSED 0.001
score SH_AUTHBL_AND_DBL_ABUSED 6
- score SH_ZRD_BODY_FRESH 6
- score SH_ZRD_BODY_VERY_FRESH 8
+ score SH_ZRD_BODY_FRESH 8
+ score SH_ZRD_BODY_VERY_FRESH 10
# DQS wont block queries for open dns usage
score URIBL_DBL_BLOCKED_OPENDNS 0
And in Exim, I’ve configured SPAM_REJECT_SCORE to 80. Remember that you must have enabled the option reject spam for your mail domain.
With this conf I still have all green:
Just in case someone is wondering where we are doing these tests (you must have a DQS key provided by Spamhaus): https://blt.spamhaus.com