SpamAssassin can query SpamHaus via DNSBL lookups, but which IP it tests depends on the Received chain and rule set, so a listed early relay often goes unnoticed.