##### 000_localmacros - exim local configuration  -*-sh-*-
#
# Incorportes suggestions from:
# http://www.sput.nl/software/exim.html
#
################################

#### Local ACLS
acl_smtp_connect = acl_local_connect
acl_smtp_helo = acl_local_helo
MAIN_ACL_CHECK_MAIL = acl_local_mail_from
CHECK_RCPT_LOCAL_ACL_FILE = CONFDIR/acls/30_local-config_check-rcpt
CHECK_DATA_LOCAL_ACL_FILE = CONFDIR/acls/40_local-config_check-data

#### Enable Servies

# Freeze notification and autothaw
MAIN_FREEZE_TELL = postmaster@example.com
auto_thaw = 1d

# Increase delay notifications
delay_warning = 1h:4h:12h:48h

# Teergrube timings for failed tests (in seconds)
TG_SHORT = 10s
TG_STD = 15s
TG_LONG = 30s

# Spamassassin
SPAM_REJECT = 100
SPAM_LIMIT = 50
SPAM_IS_HAM = 30

# Virus scanner
av_scanner = clamd:/var/run/clamav/clamd.ctl

# Enable smtps and submission ports; require tls for auth
auth_advertise_hosts = ${if eq{$tls_cipher}{}{}{*}}
daemon_smtp_ports = 25 : 465 : 587
tls_on_connect_ports = 465

# Enable TLS; only on submission port
MAIN_TLS_ENABLE = true
MAIN_TLS_ADVERTISE_HOSTS = ${if eq {$interface_port}{587}{*}{}}
MAIN_TLS_CERTIFICATE = /etc/ssl/certs/mail.example.com-cert.pem
MAIN_TLS_PRIVATEKEY =  /etc/ssl/private/mail.example.com-key.pem

#### Addition Definitions

NET_ADDRESS = 192.0.2.192
MAIN_HARDCODE_PRIMARY_HOSTNAME = mail.example.com

# HMAC secret for return path verification
SECRET = your_secret_here

# Disable host lookup 
MAIN_HOST_LOOKUP = 
rfc1413_query_timeout = 0s

# Size limit on Mail
MESSAGE_SIZE_LIMIT = 20M
MESSAGE_SIZE_SPAM_MAX = 384K

#### Macro enabled checks

CHECK_MAIL_HELO_ISSUED = true


# EOF
auto_thaw = 1d