forum.lissyara.su

Код: Выделить всё

acl_check_data:
  # Если есть необходимость - тут проверки на спам
    warn message = X-Spam-Score: $spam_score ($spam_bar)
   hosts = !+relay_from_hosts
   spam = nobody:true

#    warn message = X-Spam-Report: $spam_report
#  hosts = !+relay_from_hosts
#  spam = nobody:true

    warn message = Subject: ***SPAM*** $h_Subject:
   hosts = !+relay_from_hosts
   spam = nobody

    deny message = Sorry, this message looks like spam. Score $spam_score \
     Please contact spammaster@lit.botik.ru
     hosts = !+relay_from_hosts: *
     spam = nobody:true
     condition = ${if >={$spam_score_int}{70} {1}{0}}
  # Пропускаем остальное
  accept

Код: Выделить всё

acl_check_content:

  # Include Vexim specific rcpt ACLs
  .include /usr/local/etc/exim/vexim-acl-check-content.conf

  # finally accept all the rest
  accept

Код: Выделить всё

  deny  senders         = :
        hosts           = ! +relay_from_hosts
        !acl            = spf_from_acl
        message         = Your sender is not permitted (read spf.pobox.com)

  # First unpack MIME containers and reject serious errors.
  deny  message         = This message contains a MIME error ($demime_reason)
        demime          = *
        condition       = ${if >{$demime_errorlevel}{2}{1}{0}}

  # Reject typically wormish file extensions. There is almost no
  # sense in sending such files by email.
  deny  message         = This message contains an unwanted file extension ($found_extension)
        demime          = scr:vbs:bat:lnk:pif:bz2

  deny  message = Possible CMD file attack ($found_extension)
        demime = cmd

  deny  message = Possible COM file attack ($found_extension)
        demime = com

  deny  message = Possible Microsoft JScript attack ($found_extension)
        demime = js

  deny  message = Possible Windows registry attack ($found_extension)
        demime = reg

  deny  message = Possible compiled Help file-base virus ($found_extension)
        demime = chm

  deny  message = Possible SpeedDial attack ($found_extension)
        demime = cnf

  deny  message = Possible Micrsoft HTML archive attack ($found_extension)
        demime = hta

  deny  message = Possible Microsoft Internet Settings attack ($found_extension)
        demime = ins

  deny  message = Possible Windows Explorer Command attack ($found_extension)
        demime = scf

  deny  message = Possible Microsoft Windows Script attack ($found_extension)
        demime = sct

  deny  message = Possible Microsoft VBScript attack ($found_extension)
        demime = vbs:vbe

  deny  message = Possible Microsoft Script Host attack ($found_extension)
        demime = wsc:wsf:wsh

  deny  message = Possible Exchange Shortcut attack ($found_extension)
        demime = xnk

  deny  message = Possible Microsoft Access Shortcut attack ($found_extension)
        demime = mad:maf:mag:mam:maq:mar:mas:mat:mav:maw

  # Reject virus infested messages.
  warn  message         = This message contains malware ($malware_name)
        malware         = *
        log_message     = This message contains malware ($malware_name)

  # Reject messages containing "viagra" in all kinds of whitespace/case combinations
  # WARNING: this is an example !
  # deny  message = This message matches a blacklisted regular expression ($regex_match_string)
  #      regex = [Vv] *[Ii] *[Aa] *[Gg] *[Rr] *[Aa]

  # Always add X-Spam-Score and X-Spam-Report headers, using SA system-wide settings
  # (user "nobody"), no matter if over threshold or not.
  warn  message         = X-Spam-Score: $spam_score ($spam_bar)
        spam            = nobody:true
  warn  message         = X-Spam-Report: $spam_report
        spam            = nobody:true
  accept hosts          = 127.0.0.1:+relay_from_hosts
  accept authenticated  = *

Код: Выделить всё

# Always add X-Spam-Score and X-Spam-Report headers, using SA system-wide settings
  # (user "nobody"), no matter if over threshold or not.
  warn  message         = X-Spam-Score: $spam_score ($spam_bar)
        spam            = nobody:true
  warn  message         = X-Spam-Report: $spam_report
        spam            = nobody:true

Код: Выделить всё

  hosts = !+relay_from_hosts

Код: Выделить всё

# Составляем список хостов с которых разрешён неавторизованый
# релей. Обычно в нём находятся локальные сети, и локалхост...
# ЛокалХост в двух видах был внесён сознательно - пару раз
# сталкивался с кривым файлом /etc/hosts - результатом было
# непонимание `localhost` но пониманием 127.0.0.1/8
hostlist   relay_from_hosts = localhost:127.0.0.1/8:диапазон локальных ип

Код: Выделить всё

 warn  message         = X-Spam-Score: $spam_score ($spam_bar)
        hosts           = ! +relay_from_hosts
        spam            = nobody:true
  warn  message         = X-Spam-Report: $spam_report
        spam            = nobody:true
        hosts           = ! +relay_from_hosts
  accept hosts          = 127.0.0.1:+relay_from_hosts
  accept authenticated  = *

Код: Выделить всё

hostlist   relay_from_hosts = localhost : 192.168.2.0/24

Код: Выделить всё

mail# /usr/local/etc/rc.d/exim restart

Код: Выделить всё

mail# tail -f /var/log/maillog
Jul 10 15:29:55 mail spamd[69032]: spamd: connection from localhost [127.0.0.1] at port 62937
Jul 10 15:29:55 mail spamd[69032]: spamd: setuid to nobody succeeded
Jul 10 15:29:55 mail spamd[69032]: spamd: checking message <618051719.20080710175531@altyninvest.ru> for nobody:65534
Jul 10 15:29:58 mail spamd[69032]: spamd: clean message (-100.3/6.0) for nobody:65534 in 2.1 seconds, 801 bytes.
Jul 10 15:29:58 mail spamd[69032]: spamd: result: . -100 - ALL_TRUSTED,AWL,USER_IN_WHITELIST scantime=2.1,size=801,user=nobody,uid=65534,required_score=6.0,rhost=localhost,raddr=127.0.0.1,rport=62937,mid=<618051719.20080710175531@XXXX.ru>,autolearn=ham
Jul 10 15:29:58 mail spamd[69031]: prefork: child states: II

Код: Выделить всё

2008-07-10 15:29:58 1KGuLT-000HyC-Vr <= it@XXXX.ru H=user13.XXXX.ru [192.168.2.70] P=esmtp S=716 id=618051719.20080710175531@XXXX.ru T="2"
2008-07-10 15:29:58 1KGuLT-000HyC-Vr => /usr/local/mail/XXXX.ru/mailadmin/Maildir <mailadmin@XXXX.ru> R=virtual_domains T=virtual_delivery
2008-07-10 15:29:58 1KGuLT-000HyC-Vr Completed

Код: Выделить всё

!hosts           = +relay_from_hosts