SpamHaus test failed

I’ve tested it with Spamassassin 4.0.0 and this is the result:

You should check that your mail domain is configured to reject spam:

imagen

Also check the SPAM_REJECT_SCORE configured in Exim (by default it is 100 but I changed it to 80):

❯ grep 'SPAM.*SCORE' /etc/exim4/exim4.conf.template
SPAM_SCORE = 50
SPAM_REJECT_SCORE = 80

I’ve also modified some scores in conf file /etc/mail/spamassassin/sh_scores.cf:

❯ diff -u /root/apps/spamassassin-dqs/4.0.0+/sh_scores.cf /etc/mail/spamassassin/sh_scores.cf
--- /root/apps/spamassassin-dqs/4.0.0+/sh_scores.cf     2024-02-25 23:33:52.190396816 +0100
+++ /etc/mail/spamassassin/sh_scores.cf 2024-02-26 00:04:21.761163078 +0100
@@ -6,7 +6,7 @@
   score   SH_BODYURI_REVERSE_CSS       3
   score   SH_BODYURI_REVERSE_DROP      8
   score   SH_BODYURI_REVERSE_XBL       2
-  score   RCVD_IN_ZEN_LASTEXTERNAL 8
+  score   RCVD_IN_ZEN_LASTEXTERNAL 10
   score        RCVD_IN_XBL             1
   score        RCVD_IN_PBL             0.001
   score        RCVD_IN_SBL             6
@@ -32,20 +32,20 @@
   score        SH_DBL_BODY             8
   score        SH_DBL_HEADERS          8
   score        SH_DBL_HEADERS_ABUSED   0.001
-  score        SH_ZRD_HEADERS_VERY_FRESH       8
-  score        SH_ZRD_HEADERS_FRESH            6
-  score        SH_REVERSE_ZRD_VERY_FRESH       8
-  score        SH_REVERSE_ZRD_FRESH            6
+  score        SH_ZRD_HEADERS_VERY_FRESH       10
+  score        SH_ZRD_HEADERS_FRESH            8
+  score        SH_REVERSE_ZRD_VERY_FRESH       10
+  score        SH_REVERSE_ZRD_FRESH            8
   score        SH_REVERSE_DBL          8
   score        SH_REVERSE_DBL_ABUSED   0.001
 
-  score        SH_HELO_ZRD_VERY_FRESH  8
-  score        SH_HELO_ZRD_FRESH       6
-  score        SH_HELO_DBL             8
+  score        SH_HELO_ZRD_VERY_FRESH  10
+  score        SH_HELO_ZRD_FRESH       8
+  score        SH_HELO_DBL             10
   score        SH_HELO_DBL_ABUSED      0.001
   score SH_AUTHBL_AND_DBL_ABUSED       6
-  score SH_ZRD_BODY_FRESH      6
-  score SH_ZRD_BODY_VERY_FRESH 8
+  score SH_ZRD_BODY_FRESH      8
+  score SH_ZRD_BODY_VERY_FRESH 10
 
   # DQS wont block queries for open dns usage
   score URIBL_DBL_BLOCKED_OPENDNS      0

So, with above conf all smtp tests are rejected.

If you modify Exim or Spamassassin conf, remember to restart the services:

systemctl restart exim4
systemctl restart spamd
2 Likes