exim: Correct spam rejection threshold.

[matthijs/servers/drsnuggles.git] / etc / exim4 / conf.d / acl / 40_exim4-config_check_data

diff --git a/etc/exim4/conf.d/acl/40_exim4-config_check_data b/etc/exim4/conf.d/acl/40_exim4-config_check_data
index 0cf685a0bfff7091740c45a8ea045149296b31d5..f79e3f7bf4efd121e2369e9944a4fd0ff3202d67 100644 (file)
--- a/etc/exim4/conf.d/acl/40_exim4-config_check_data
+++ b/etc/exim4/conf.d/acl/40_exim4-config_check_data
@@ -22,5 +22,28 @@ acl_check_data:
     message = No verifiable sender address in message headers
     !verify = header_sender
 
+  # Mark messages with their spamscore and deny messages with a very high
+  # score.
+  deny
+    message = Message was classified as spam
+    # Only scan messages that are small, since spam is hardly ever big (and
+    # scanning big messages costs lots of resources
+    condition = ${if <{$message_size}{80k}}
+    # Check using spamassasin's default profile (the name "default" should just
+    # be any non-existing profile to get the default configuration). This
+    # condition will always succeed, since spam assassin is configured with a
+    # very low (even negative) threshold.
+    spam = default
+    # Add spam headers (these will be added even when the next condition fails
+    # and the message is not denied).
+    add_header = X-Spam-Score: $spam_score ($spam_bar)
+    add_header = X-Spam-Report: $spam_report
+    # Reject any messages with a spam score of more than 20 ($spam_score_int is
+    # $spam_score * 10). This is fairly high, but we don't like really
+    # rejecting messages.
+    condition = ${if >{$spam_score_int}{200}}
+
   # accept otherwise
   accept
+
+# vim: set sts=2 expandtab sw=2 ai: