X-Git-Url: https://git.stderr.nl/gitweb?a=blobdiff_plain;f=etc%2Fexim4%2Fconf.d%2Facl%2F40_exim4-config_check_data;h=9933c39e05f9addb6909cee712c3c6709933312a;hb=37ffa905548fd0a926cf3fb420546f89b30080fc;hp=b9765c565d47ec2cdd178984c911eec97be32bb1;hpb=7ce0eac3b78826088192e1d0c933c78aa6a804f3;p=matthijs%2Fservers%2Fdrsnuggles.git

diff --git a/etc/exim4/conf.d/acl/40_exim4-config_check_data b/etc/exim4/conf.d/acl/40_exim4-config_check_data
index b9765c5..9933c39 100644
--- a/etc/exim4/conf.d/acl/40_exim4-config_check_data
+++ b/etc/exim4/conf.d/acl/40_exim4-config_check_data
@@ -22,6 +22,26 @@ acl_check_data:
     message = No verifiable sender address in message headers
     !verify = header_sender
 
+  # Mark messages with their spamscore and deny messages with a very high
+  # score.
+  deny
+    message = Message was classified as spam
+    # Only scan messages that are small, since spam is hardly ever big (and
+    # scanning big messages costs lots of resources
+    condition = ${if <{$message_size}{80k}}
+    # Check using spamassasin's default profile (the name "default" should just
+    # be any non-existing profile to get the default configuration). This
+    # condition will always succeed, since spam assassin is configured with a
+    # very low (even negative) threshold.
+    spam = default
+    # Add spam headers (these will be added even when the next condition fails
+    # and the message is not denied).
+    add_header = X-Spam-Score: $spam_score ($spam_bar)
+    add_header = X-Spam-Report: $spam_report
+    # Reject any messages with a spam score of more than 20. This is fairly
+    # high, but we don't like really rejecting messages.
+    condition = ${if >{$spam_score_int}{20}}
+
   # accept otherwise
   accept