Wrong SpamAssassin score on outgoing emails

[manoaratefy]

Good morning,

It seems that I have issue with SpamAssassin. I found some people sending spams/phishing emails using my server. I checked and they are compromised websites. I'll fix these websites/suspend until owner fix it, but I wish to automatically filter these emails with anti-spam solutions.

I've enabled SpamAssassin on outgoing emails but it only gives -0.2 score on these spams emails (On header, I see X-OutGoing-Spam-Status: No, score=-0.2).
When I export the email (exim -C /etc/exim_outgoing.conf -Mvc xxxxxx-xxxxxx-xx > email-spam.eml) and scan it manually with SpamAssassin (/usr/local/cpanel/3rdparty/bin/spamassassin --lint -D < email-spam.eml), SpamAssassin gives correct score (9.203).

Is there something wrong with my configuration?

 

[cPRex]

Hey there! I'm not totally sure about the scoring issue - it may be best to submit a ticket so out team can do some additional testing with that.

For additional mail security I would recommend having the "Restrict outgoing SMTP to root, exim, and mailman (FKA SMTP Tweak)" option enabled to help keep automated scripts from sending messages.