SPAM email - spoofed as me (v2)

and spamassassin why not reject with score of 1.8 in 5 ?? why not rejected ?

Return-Path: info@abc.com
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server.abc.com
X-Spam-Level: *
X-Spam-Status: No, score=1.8 required=5.0 tests=ALL_TRUSTED,
FREEMAIL_FORGED_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,FROM_EXCESS_BASE64,
URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.6
X-Original-To: info@abc.com
Delivered-To: “info@abc.com”@localhost.localdomain
Received: from abc.com (unknown [11.22.33.44])
by server.abc.com (Postfix) with ESMTPA id AF5F033DA8
for info@abc.com; Tue, 8 Aug 2023 20:29:01 +0000 (UTC)
MIME-Version: 1.0
To: info@abc.com
Subject: =?UTF-8?B?RW5xdWlyeSBKZWZmcmV5YXBvcnk=?=
Date: Tue, 08 Aug 2023 20:29:01 +0000
From: =?UTF-8?B?SmVmZnJleWFwb3J5?= info@abc.com

Spamassasin is set to 5 and it only score 1.8 so it won’t do anything.

SPF shall reject or flag the email but I have not been able to set it up for that.

In these cases I prefer to block those emails with postfix black lists (specially when the spam email is higher than 500 emails per week). As a matter of fact IP unknown [11.22.33.44] is blacklisted and shall be rejected right away. I combine black list with fail2ban rejection in order to not deal with those pesky ips very often. There is a long discussion about using or not using the black lists