Spam filter incoming mail not enough

[rokkotnik]

Hi all.

Been using hestia over a year now and seems perfect! I was wondering how to increase spam filter on incoming mail as we get quite much spam in inbox.

We have already increased spamassassin a bit:

required_hits 5
report_safe 0
rewrite_header Subject ***SPAM***
required_score 2.9
use_bayes 1
bayes_auto_learn 1

As we are also using spamhaus blacklist check, we have the custom DNS resolvers for that DNS, as they block public DNS resolvers:

zone "zen.spamhaus.org" {
    type forward;
    forward only;
    forwarders { SECRET_IP; };  
};

What else we could do to prevent more spam?

Thanks!

[sahsanu]

Hi @rokkotnik

@rokkotnik

We have already increased spamassassin a bit:

f you have lowered the required score for a message to be flagged as spam, you must also update the SPAM_SCORE variable in /etc/exim4/exim4.conf.template. Note that the score must be multiplied by ten. So, if you’re using 2.9, the variable should look like this:

SPAM_SCORE = 29

Remember to restart exim4:

systemctl restart exim4

@rokkotnik

What else we could do to prevent more spam?

I recommend adding an IPSet blacklist and creating a firewall rule to drop all traffic from the IPs in that IPSet for all ports.

Hestia includes a script located at /usr/local/hestia/install/common/firewall/ipset/blacklist.sh, which gathers malicious IPs from several blocklists. You can use this script to populate the IPSet.