# If a user has not explicitly disabled the option, the assumption is in
# favour of filtering.
HAS_DEFAULT_OPTIONS = ${if and {\
- {eq{${lookup{$local_part}dbmnz{/var/lib/misc/$primary_hostname/default-mail-options.db}{$value}{TRUE}}}{TRUE}}\
- {exists{${extract{directory}{VDOMAINDATA}{${value}/mail-forward.db}}}}\
- {! eq {${lookup{$local_part}dbmnz{${extract{directory}{VDOMAINDATA}{${value}/mail-forward.db}}}}}{}}\
- }}
+ {eq{${lookup{$local_part}dbmnz{/var/lib/misc/$primary_hostname/default-mail-options.db}{$value}{TRUE}}}{TRUE}}\
+ {exists{${extract{directory}{VDOMAINDATA}{${value}/mail-forward.db}}}}\
+ {! eq {${lookup{$local_part}dbmnz{${extract{directory}{VDOMAINDATA}{${value}/mail-forward.db}}}}}{}}\
+ }}
<%- if @is_rtmaster -%>
# This subject rewrite is embedded in double-quoted strings. As such, some of
# the items need more escaping than usual, otherwise \N becomes simply "N" and
<%- if @is_packagesmaster -%>
warn condition = ${if eq {$acl_m_prf}{PackagesMail}}
condition = ${if eq {$sender_address}{$local_part@$domain}}
- message = X-Packages-FromTo-Same: yes
+ add_header = X-Packages-FromTo-Same: yes
<%- end -%>
deny condition = ${if !eq {$acl_m_prf}{PopconMail}}
log_message = greylisted.
condition = ${if or { \
{eq{$acl_m_grey_recip}{1}} \
- {bool_lax{HAS_DEFAULT_OPTIONS}} \
+ {bool_lax{$acl_m_defopt}} \
} \
}
!senders = :
domains = +handled_domains
condition = ${if or { \
{eq{$acl_m_grey_recip}{1}} \
- {bool_lax{HAS_DEFAULT_OPTIONS}} \
+ {bool_lax{$acl_m_defopt}} \
} \
}
set acl_m_pgr = request=smtpd_access_policy\n\
domains = +handled_domains
condition = ${if or { \
{eq{$acl_m_grey_recip}{1}} \
- {bool_lax{HAS_DEFAULT_OPTIONS}} \
+ {bool_lax{$acl_m_defopt}} \
} \
}
condition = ${if eq{${uc:${substr_0_7:$acl_m_pgr}}}{PREPEND}}
!hosts = +debianhosts : WHITELIST
deny message = host $sender_host_address is listed in $dnslist_domain ($dnslist_value); see $dnslist_text
- condition = ${if bool_lax{HAS_DEFAULT_OPTIONS}}
+ condition = ${if bool_lax{$acl_m_defopt}}
dnslists = relays.dnsbl.sorbs.net : xbl.spamhaus.org
domains = +handled_domains
!hosts = +debianhosts : WHITELIST
!hosts = +debianhosts : WHITELIST
deny message = domain $sender_address_domain is listed in $dnslist_domain ($dnslist_value); see $dnslist_text
- condition = ${if bool_lax{HAS_DEFAULT_OPTIONS}}
+ condition = ${if bool_lax{$acl_m_defopt}}
dnslists = dbl.spamhaus.org/$sender_address_domain
domains = +handled_domains
!hosts = +debianhosts : WHITELIST
condition = ${if eq {$acl_m_prf}{markup}}
set acl_m_srb = ${perl{surblspamcheck}}
condition = ${if !eq{$acl_m_srb}{false}}
- message = X-Surbl-Hit: $primary_hostname: $acl_m_srb
+ add_header = X-Surbl-Hit: $primary_hostname: $acl_m_srb
# Dump MIME parts to disk. "default" creates sequentially-named files
# in <spool_directory>/scan/<message_id>/ which should then be
condition = ${if !eq {$acl_m_prf}{PopconMail}}
message = Your mailer is not RFC 2047 compliant: message rejected
+ discard condition = ${if eq {$acl_m_prf}{blackhole}}
+ condition = ${if bool_lax{$acl_m_defopt}}
+ condition = ${if or {\
+ {match {$message_body}{Wenn Sie zukünftig keine weiteren Informationen erhalten möchten, <br />unwissentlich oder unbeabsichtigt in den Verteiler aufgenommen wurden,}} \
+ }\
+ }
+ log_message = Discarded suspicious content for $recipients
+
+ deny condition = ${if !eq {$acl_m_prf}{markup}}
+ condition = ${if bool_lax{$acl_m_defopt}}
+ condition = ${if or {\
+ {match {$message_body}{Wenn Sie zukünftig keine weiteren Informationen erhalten möchten, <br />unwissentlich oder unbeabsichtigt in den Verteiler aufgenommen wurden,}} \
+ }\
+ }
+ message = Rejected due to suspicious content
+
+ warn condition = ${if eq {$acl_m_prf}{markup}}
+ condition = ${if bool_lax{$acl_m_defopt}}
+ condition = ${if or {\
+ {match {$message_body}{Wenn Sie zukünftig keine weiteren Informationen erhalten möchten, <br />unwissentlich oder unbeabsichtigt in den Verteiler aufgenommen wurden,}} \
+ }\
+ }
+ add_header = X-debian-content-warning: yes
+
<%- if has_variable?("clamd") && @clamd -%>
discard condition = ${if eq {$acl_m_prf}{blackhole}}
malware = */defer_ok