### acls/40_local-config_check_data -*-sh-*- ##################################### # Deny if this is a bogus notification or other deferred rejection. # NOTE: This allows sender callouts to us to work. deny message = This address does not match a valid, signed return path \ from here.\nYou are responding to a forged sender address.\n\ Please contact your ISP or system adminstrator. log_message = $acl_m11 condition = ${if def:acl_m11} !dnslists = list.dnswl.org&0.0.0.3 # -------------------------------------------------------------------- # Anti-Virus scanning # This requires an 'av_scanner' setting in the main section. # Warn and freeze if we find malware warn message = This message was detected as possible malware ($malware_name).\n\ Please contact your ISP or system adminstrator. malware = */defer_ok condition = ${lookup mysql{LOG_MAIL_MALWARE}} control = freeze # -------------------------------------------------------------------- # Accept local senders accept hosts = : +relay_from_hosts verify = header_syntax # Accept authenticated accept authenticated = * verify = header_syntax # -------------------------------------------------------------------- # Invoke SpamAssassin to obtain $spam_score and $spam_report. # Messages larger than MESSAGE_SIZE_SPAM_MAX are accepted without # spam scanning accept condition = ${if > {$message_size}{MESSAGE_SIZE_SPAM_MAX}} logwrite = acl-Data: Large message skipped spam. # Put spam header in all messages warn message = X-Spam-Status: ${if > {$spam_score_int}{SPAM_LIMIT} \ {Yes}{No}} (score $spam_score)${if def:spam_report {: $spam_report}} spam = mail:true # Accept HAM accept !condition = ${if > {$spam_score_int}{SPAM_IS_HAM}} # Defer spam at high scores (> SPAM_REJECT value) for trusted senders defer message = X-Spam-Rejected: This message scored $spam_score points. log_message = Spam score exceeded spam rejection limit: SPAM_REJECT acl = acl_local_deny_exceptions condition = ${if > {$spam_score_int}{SPAM_REJECT}} # Reject spam at high scores (> SPAM_REJECT value) deny message = X-Spam-Rejected: This message scored $spam_score points. log_message = Spam score exceeded spam rejection limit: SPAM_REJECT condition = ${if > {$spam_score_int}{SPAM_REJECT}} # Reject spam (> SPAM_LIMIT value) from required senders # Use stricter cutoff as they should know what they are doing. deny message = X-Spam-Rejected: This message scored $spam_score points. log_message = Spam score exceeded spam rejection limit: SPAM_LIMIT senders = postmaster@* : Mailer-Daemon@* condition = ${if > {$spam_score_int}{SPAM_LIMIT}} # Flag spam and probable spam warn set acl_m9 = ${if > {$spam_score_int}{SPAM_LIMIT}{**}{??}} message = Subject: ${acl_m9}SPAM${acl_m9}($spam_score) $h_Subject: # --- END EXISCAN configuration --- # EOF