I know this was discussed in a previous post, however, is this true? "Alternative HestiaCP Method If using a newer version of HestiaCP, you can use the built-in command to add the DQS key without manually editing templates, as the system automatically prevents key leakage: v-add-sys-mail-dnsbl yo…

[image] durglewankelshteim: is this true? Yes, it is. [image] durglewankelshteim: as the system automatically prevents key leakage That’s true if your installation is relatively new, you should check your current exim conf: grep spamhaus /etc/exim4/exim4.conf.template If above comma…

[image] sahsanu: v-delete-sys-mail-dnsbl zen.spamhaus.org ok that checks out, however, it still receives the dbl-dqs-ehlo and so forth so it seems incomplete. Spamhaus has always scared me so I am inclined just to remove it altogether as it is obvious they do not care enough to provide a dece…

[image] durglewankelshteim: dbl-dqs-ehlo To block those tests you must also add rules to spamassassin. [image] Configure Spamhaus DBL and ZRD Mail Hi @Felix , You must add support for Spamhaus DQS to SpamAssassin. Here is the repo with the instructions ,…

Oh, I see, for anyone doing this interested I had to check the reject spam in the edit mail domain THEN do v-add-mail-domain-antivirus user domain from the command line to have this work.

[image] sahsanu: That’s true if your installation is relatively new, you should check your current exim conf: grep spamhaus /etc/exim4/exim4.conf.template I’ve created this PR to fix existing Exim installations: Fix the “Rejected because” D…

It was working for a day, then stopped: [image] I tried even reinstalling and to no avail.

Did you follow again the steps in my post? I’ve also modified in exim4.conf.template SPAM_REJECT_SCORE = 100 to SPAM_REJECT_SCORE = 80 But to know what’s the score Spamassassin is adding to the mail, check the mail that passed and look the headers (there you should see the Spamassassin report)

Yes I did. Next I will set it up again on a fresh instance.

Tested it on a new install and it is good: [image] Is there a way to “clean”/reinstall exim4 and spamassassin from the hestiacp repos?

Went back to the other instance, completely removed spamassassin, reinstalled, reconfigured it, same thing: [image] If this makes sense to anyone and there is anything to check please advise. Thanks.

Spamhaus DQS key integration

sahsanu September 3, 2026, 8:53pm 4

To block those tests you must also add rules to spamassassin.