Rev 4 | Rev 13 | Go to most recent revision | Only display areas with differences | Ignore whitespace | Details | Blame | Last modification | View Log | RSS feed
Rev 4 | Rev 6 | ||
---|---|---|---|
1 | # Options for spamassassin running in exim's local_scan (SA Exim) |
1 | # Options for spamassassin running in exim's local_scan (SA Exim) |
2 | # By Marc MERLIN <marc_soft@merlins.org> - Initial version: April 2002 |
2 | # By Marc MERLIN <marc_soft@merlins.org> - Initial version: April 2002 |
3 | # Sander Smeenk <ssmeenk@freshdot.net> - Improvements: March 2004 |
3 | # Sander Smeenk <ssmeenk@freshdot.net> - Improvements: March 2004 |
4 | # |
4 | # |
5 | # Sample file version 1.16 for SA-Exim 4.1 - 2005/01/10 |
5 | # Sample file version 1.16 for SA-Exim 4.1 - 2005/01/10 |
6 | # |
6 | # |
7 | # The parse routine is minimalistic. It expects "option: value" (exactly |
7 | # The parse routine is minimalistic. It expects "option: value" (exactly |
8 | # one space after the colon, and none before). You should put long lines |
8 | # one space after the colon, and none before). You should put long lines |
9 | # on one line. The parser isn't capable of parsing multiline values. |
9 | # on one line. The parser isn't capable of parsing multiline values. |
10 | # |
10 | # |
11 | # SA threshold values are parsed as floats and other numerical options |
11 | # SA threshold values are parsed as floats and other numerical options |
12 | # are ints. String options have to be set. To unset them, comment out the |
12 | # are ints. String options have to be set. To unset them, comment out the |
13 | # variable, don't set it to nothing. |
13 | # variable, don't set it to nothing. |
14 | # |
14 | # |
15 | # READ THIS: |
15 | # READ THIS: |
16 | # --------- |
16 | # --------- |
17 | # Watch your logs, you will get errors and your messages will get |
17 | # Watch your logs, you will get errors and your messages will get |
18 | # temporarily bounced if expansions fail. Watch your logs! |
18 | # temporarily bounced if expansions fail. Watch your logs! |
19 | # |
19 | # |
20 | # If you are afraid that spammers might use a header that is used here |
20 | # If you are afraid that spammers might use a header that is used here |
21 | # as a default, have exim set it to another value than 'Yes' and check |
21 | # as a default, have exim set it to another value than 'Yes' and check |
22 | # here for that other value. |
22 | # here for that other value. |
23 | # |
23 | # |
24 | # For every expansion, anything that doesn't expand to "" or "0" |
24 | # For every expansion, anything that doesn't expand to "" or "0" |
25 | # (without quotes) will be considered true. If you set the string to 1, |
25 | # (without quotes) will be considered true. If you set the string to 1, |
26 | # it will be true without going through exim's condition evaluator (and |
26 | # it will be true without going through exim's condition evaluator (and |
27 | # if you leave it unset, it will default to 0) |
27 | # if you leave it unset, it will default to 0) |
28 | # |
28 | # |
29 | # You should not put double quotes around expressions! |
29 | # You should not put double quotes around expressions! |
30 | # --- snip --- |
30 | # --- snip --- |
31 | 31 | ||
32 | # Enable basic verbose output by default. Watch your logs! |
32 | # Enable basic verbose output by default. Watch your logs! |
33 | SAEximDebug: 1 |
33 | SAEximDebug: 1 |
34 | 34 | ||
35 | 35 | ||
36 | # Default path is /usr/bin/spamc, but you can change it here |
36 | # Default path is /usr/bin/spamc, but you can change it here |
37 | SAspamcpath: /usr/bin/spamc |
37 | SAspamcpath: /usr/bin/spamc |
38 | 38 | ||
39 | # Which characters are retained from a Message-Id header (for safety, we |
39 | # Which characters are retained from a Message-Id header (for safety, we |
40 | # remove characters that might cause problems with shell parsing) |
40 | # remove characters that might cause problems with shell parsing) |
41 | # Change the default at your own risk (you also have to change this in |
41 | # Change the default at your own risk (you also have to change this in |
42 | # the SA greylisting patch if you use that) |
42 | # the SA greylisting patch if you use that) |
43 | #SAsafemesgidchars: !#%( )*+,-.0123456789:<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[]^_abcdefghijklmnopqrstuvwxyz{|}~ |
43 | #SAsafemesgidchars: !#%( )*+,-.0123456789:<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[]^_abcdefghijklmnopqrstuvwxyz{|}~ |
44 | 44 | ||
45 | # If SAspamcSockPath is set spamc uses socket to connect to spamd, |
45 | # If SAspamcSockPath is set spamc uses socket to connect to spamd, |
46 | # use --socketpath pathname as argument to spamd (new in SA 2.60). |
46 | # use --socketpath pathname as argument to spamd (new in SA 2.60). |
47 | # Leave it unset if you want spamc to connect(AF_INET) to spamd at |
47 | # Leave it unset if you want spamc to connect(AF_INET) to spamd at |
48 | # 127.0.0.1 (this is the default shown in the options below), but if |
48 | # 127.0.0.1 (this is the default shown in the options below), but if |
49 | # you set it, it will override the two TCP connect options below |
49 | # you set it, it will override the two TCP connect options below |
50 | #SAspamcSockPath: /var/run/spamd.sock |
50 | #SAspamcSockPath: /var/run/spamd.sock |
51 | 51 | ||
52 | # SAspamcHost / SAspamcPort: TCP socket where your spamd is listening |
52 | # SAspamcHost / SAspamcPort: TCP socket where your spamd is listening |
53 | # Shown below are the defaults: |
53 | # Shown below are the defaults: |
54 | SAspamcHost: 127.0.0.1 |
54 | SAspamcHost: 127.0.0.1 |
55 | SAspamcPort: 783 |
55 | SAspamcPort: 783 |
56 | 56 | ||
57 | 57 | ||
58 | # Exim configuration string to run before running SA against the message |
58 | # Exim configuration string to run before running SA against the message |
59 | # This decides whether SA gets run against the message or not. This |
59 | # This decides whether SA gets run against the message or not. This |
60 | # default will not reject messages if the message had SA headers but |
60 | # default will not reject messages if the message had SA headers but |
61 | # they weren't added by us. |
61 | # they weren't added by us. |
62 | SAEximRunCond: ${if and {{def:sender_host_address} {!eq {$sender_host_address}{127.0.0.1}} {!eq {$h_X-SA-Do-Not-Run:}{Yes}} } {1}{0}} |
62 | SAEximRunCond: ${if and {{def:sender_host_address} {!eq {$sender_host_address}{127.0.0.1}} {!eq {$sender_host_address}{::1}}}} |
- | 63 | # If you want more detailed control over when to run SA, it's recommended |
|
- | 64 | # that you set an ACL variable indicating this from the acl section of |
|
- | 65 | # your Exim configuration file. The current maintainer sets acl_m0 to |
|
- | 66 | # "noscan" if the sending host is localhost or has authenticated. |
|
- | 67 | #SAEximRunCond: ${if !eq{$acl_m0}{noscan}} |
|
- | 68 | # (This means exactly the same as ${if !eq{$acl_m0}{noscan} {true}{}}, |
|
- | 69 | # where the empty string is considered false.) |
|
- | 70 | ||
- | 71 | #---------------------------------------------------------------------- |
|
63 | # Remove or comment out the following line and set it to 1 to enable sa-exim |
72 | # Remove or comment out the following line to enable sa-exim |
64 | SAEximRunCond: 0 |
73 | SAEximRunCond: 0 |
- | 74 | #---------------------------------------------------------------------- |
|
65 | 75 | ||
66 | # If and only if SAEximRunCond was true, and we did run SA, this |
76 | # If and only if SAEximRunCond was true, and we did run SA, this |
67 | # expression decides whether we actually consider acting upon SAdevnull, |
77 | # expression decides whether we actually consider acting upon SAdevnull, |
68 | # SApermreject, and SAtempreject if you have them set. |
78 | # SApermreject, and SAtempreject if you have them set. |
69 | # |
79 | # |
70 | # Use this to tag messages that you shouldn't reject (messages sent to |
80 | # Use this to tag messages that you shouldn't reject (messages sent to |
71 | # abuse or postmaster for instance). |
81 | # abuse or postmaster for instance). |
72 | # |
82 | # |
73 | # X-SA-Do-Not-Rej should be set as a warn header if mail is sent to |
83 | # As an example, set acl_m0 to "canreject" if a recipient other than |
74 | # postmaster and abuse (in the RCPT ACL), this way you're not bouncing |
84 | # postmaster or abuse is encountered (and the sender isn't local). That |
75 | # spam abuse reports sent to you. This is a RFC guideline. |
85 | # way, spammers can't circumvent blocking by sending to postmaster and |
- | 86 | # 99 other recipients. (If acl_m0 is taken, you'll of course have to use |
|
- | 87 | # a different variable. |
|
76 | SAEximRejCond: ${if !eq {$h_X-SA-Do-Not-Rej:}{Yes} {1}{0}} |
88 | #SAEximRejCond: ${if eq{$acl_m0}{canreject}} |
77 | 89 | ||
78 | 90 | ||
79 | # How much of the body we feed to spamassassin (in bytes) |
91 | # How much of the body we feed to spamassassin (in bytes) |
80 | # Default is 250KB |
92 | # Default is 250KB |
81 | SAmaxbody: 256000 |
93 | SAmaxbody: 256000 |
82 | 94 | ||
83 | # Do you want to feed SAmaxbody's worth of the message body if it is too big? |
95 | # Do you want to feed SAmaxbody's worth of the message body if it is too big? |
84 | # Either, you skip messages that are too big and not scan them, or you can |
96 | # Either, you skip messages that are too big and not scan them, or you can |
85 | # truncate the body and feed that to SA. |
97 | # truncate the body and feed that to SA. |
86 | # Note that SA will sometimes raise the spam score if it can't parse |
98 | # Note that SA will sometimes raise the spam score if it can't parse |
87 | # the message correctly (since the end is missing, decoding will fail) |
99 | # the message correctly (since the end is missing, decoding will fail) |
88 | # Default is 0: do not scan messages that are too big |
100 | # Default is 0: do not scan messages that are too big |
89 | # (note that this is parsed as a condition) |
101 | # (note that this is parsed as a condition) |
90 | SATruncBodyCond: 0 |
102 | SATruncBodyCond: 0 |
91 | 103 | ||
92 | # If you want SA to report_safe you need sa-exim to rewrite the body of |
104 | # If you want SA to report_safe you need sa-exim to rewrite the body of |
93 | # the message since SA encapsulates the spam as a mime attachment. |
105 | # the message since SA encapsulates the spam as a mime attachment. |
94 | # You probably want SATruncBodyCond to be 0 or else you'll end up with a |
106 | # You probably want SATruncBodyCond to be 0 or else you'll end up with a |
95 | # partial message if it's larger than SAmaxbody and it's spam |
107 | # partial message if it's larger than SAmaxbody and it's spam |
96 | # |
108 | # |
97 | # Also note that if you enable this option, any saved message will be saved |
109 | # Also note that if you enable this option, any saved message will be saved |
98 | # after the body has been modified by SA. |
110 | # after the body has been modified by SA. |
99 | # (this is not a condition as SA's report_safe is not conditional) |
111 | # (this is not a condition as SA's report_safe is not conditional) |
100 | SARewriteBody: 0 |
112 | SARewriteBody: 0 |
101 | 113 | ||
102 | # Prepend saved messages with an fake From-header to make the file look like a |
114 | # Prepend saved messages with an fake From-header to make the file look like a |
103 | # valid mbox file |
115 | # valid mbox file |
104 | SAPrependArchiveWithFrom: 1 |
116 | SAPrependArchiveWithFrom: 1 |
105 | 117 | ||
106 | # If you are archiving messages that are rejected, how much do you want |
118 | # If you are archiving messages that are rejected, how much do you want |
107 | # to archive? Default is 20MB. |
119 | # to archive? Default is 20MB. |
108 | SAmaxarchivebody: 20971520 |
120 | SAmaxarchivebody: 20971520 |
109 | 121 | ||
110 | # On errors, if you are saving messages, you probably want the entire message |
122 | # On errors, if you are saving messages, you probably want the entire message |
111 | # Default size saved (if you are saving errors) is 1GB |
123 | # Default size saved (if you are saving errors) is 1GB |
112 | SAerrmaxarchivebody: 1073741824 |
124 | SAerrmaxarchivebody: 1073741824 |
113 | 125 | ||
114 | # You can have SA-Exim add a X-SA-Exim-Rcpt-To header, which will list all |
126 | # You can have SA-Exim add a X-SA-Exim-Rcpt-To header, which will list all |
115 | # the recipients for the Email, unless the list gets bigger than |
127 | # the recipients for the Email, unless the list gets bigger than |
116 | # SAmaxrcptlistlength bytes. |
128 | # SAmaxrcptlistlength bytes. |
117 | # The default value of 0 disables the header for privacy reasons (the header |
129 | # The default value of 0 disables the header for privacy reasons (the header |
118 | # exposes Bcced recipients) |
130 | # exposes Bcced recipients) |
119 | # Any value bigger than 8000 will be ignored because there is a limit on the |
131 | # Any value bigger than 8000 will be ignored because there is a limit on the |
120 | # size of headers that you can have and exim's string_sprintf |
132 | # size of headers that you can have and exim's string_sprintf |
121 | # Note that if you are planning to use greylisting, you should set this |
133 | # Note that if you are planning to use greylisting, you should set this |
122 | # value to 8000 since SA's greylisting code needs the recipients. |
134 | # value to 8000 since SA's greylisting code needs the recipients. |
123 | SAmaxrcptlistlength: 0 |
135 | SAmaxrcptlistlength: 0 |
124 | 136 | ||
125 | # Add X-SA-Exim-Rcpt-To and X-SA-Exim-Mail-From headers before SA scans |
137 | # Add X-SA-Exim-Rcpt-To and X-SA-Exim-Mail-From headers before SA scans |
126 | # the message. |
138 | # the message. |
127 | # If this option is enabled, SARewiteBody is true, and safe_mode is |
139 | # If this option is enabled, SARewiteBody is true, and safe_mode is |
128 | # enabled in SA, you end up with the X-SA-Exim-Rcpt-To/X-SA-Exim-Mail-From in |
140 | # enabled in SA, you end up with the X-SA-Exim-Rcpt-To/X-SA-Exim-Mail-From in |
129 | # the attatched message as well without the ability to remove them later in an |
141 | # the attatched message as well without the ability to remove them later in an |
130 | # exim transport (think privacy). |
142 | # exim transport (think privacy). |
131 | # In real life this is usually not a problem because the message is spam anyway, |
143 | # In real life this is usually not a problem because the message is spam anyway, |
132 | # and if you turn this off, you lose the option to use those headers to score |
144 | # and if you turn this off, you lose the option to use those headers to score |
133 | # the message with SA. |
145 | # the message with SA. |
134 | SAaddSAEheaderBeforeSA: 1 |
146 | SAaddSAEheaderBeforeSA: 1 |
135 | 147 | ||
136 | # How many seconds you want to allow spamc to run. Exim 4.04 and better will |
148 | # How many seconds you want to allow spamc to run. Exim 4.04 and better will |
137 | # kill us after a default of 5 minutes. This however is not great, because the |
149 | # kill us after a default of 5 minutes. This however is not great, because the |
138 | # mail gets temporarily rejected |
150 | # mail gets temporarily rejected |
139 | # You should set this and have SA Exim handle the timeout itself and accept the |
151 | # You should set this and have SA Exim handle the timeout itself and accept the |
140 | # message if spamc takes too long (instead of timing out) |
152 | # message if spamc takes too long (instead of timing out) |
141 | # A value of 0 means no timeout, and we run until exim stops us. |
153 | # A value of 0 means no timeout, and we run until exim stops us. |
142 | # I know of at least one mail server (nanog's merit.edu) that will not |
154 | # I know of at least one mail server (nanog's merit.edu) that will not |
143 | # wait a full 5mn (which causes tempreject and resends), so the default is 4mn |
155 | # wait a full 5mn (which causes tempreject and resends), so the default is 4mn |
144 | #SAtimeout: 240 |
156 | #SAtimeout: 240 |
145 | 157 | ||
146 | # Do you want to save mails that were accepted because spamc timed out? |
158 | # Do you want to save mails that were accepted because spamc timed out? |
147 | # Specify a directory to enable the feature. |
159 | # Specify a directory to enable the feature. |
148 | # SA-Exim will try to create the directory if it has the permissions to do so, |
160 | # SA-Exim will try to create the directory if it has the permissions to do so, |
149 | # check your maillog for failures (or create the directory yourself and make it |
161 | # check your maillog for failures (or create the directory yourself and make it |
150 | # writeable by exim) |
162 | # writeable by exim) |
151 | SAtimeoutsave: /var/spool/exim/SAtimeoutsave |
163 | SAtimeoutsave: /var/spool/exim/SAtimeoutsave |
152 | 164 | ||
153 | # You can optionally save or not save messages that matched the above rule |
165 | # You can optionally save or not save messages that matched the above rule |
154 | SAtimeoutSavCond: 1 |
166 | SAtimeoutSavCond: 1 |
155 | 167 | ||
156 | 168 | ||
157 | # You should really create this directory for local_scan to save messages that |
169 | # You should really create this directory for local_scan to save messages that |
158 | # created an error. If you don't want this, comment out this variable |
170 | # created an error. If you don't want this, comment out this variable |
159 | # Make sure all these directories are owned by the exim user |
171 | # Make sure all these directories are owned by the exim user |
160 | # SA-Exim will try to create the directory if it has the permissions to do |
172 | # SA-Exim will try to create the directory if it has the permissions to do |
161 | # so, check your maillog for failures (or create the directory yourself and |
173 | # so, check your maillog for failures (or create the directory yourself and |
162 | # make it writeable by exim) |
174 | # make it writeable by exim) |
163 | SAerrorsave: /var/spool/exim/SAerrorsave |
175 | SAerrorsave: /var/spool/exim/SAerrorsave |
164 | 176 | ||
165 | # You can optionally save or not save messages that matched the above rule |
177 | # You can optionally save or not save messages that matched the above rule |
166 | # You should not put double quotes around the expression |
178 | # You should not put double quotes around the expression |
167 | SAerrorSavCond: 1 |
179 | SAerrorSavCond: 1 |
168 | 180 | ||
169 | # If you set to 1, SA will temporarily reject messages that generated an error |
181 | # If you set to 1, SA will temporarily reject messages that generated an error |
170 | # while they were processed (they'll still be saved if SAerrorsave is set). |
182 | # while they were processed (they'll still be saved if SAerrorsave is set). |
171 | # Otherwise (0 = false), the messages are just accepted, which seems like a |
183 | # Otherwise (0 = false), the messages are just accepted, which seems like a |
172 | # more sensible default |
184 | # more sensible default |
173 | SAtemprejectonerror: 0 |
185 | SAtemprejectonerror: 0 |
174 | 186 | ||
175 | 187 | ||
176 | ############################################################################### |
188 | ############################################################################### |
177 | # NOTE: Spamd needs to tell sa-exim that the message SA-Exim gave spamd |
189 | # NOTE: Spamd needs to tell sa-exim that the message SA-Exim gave spamd |
178 | # is spam before sa-exim will consider the SA tresholds. |
190 | # is spam before sa-exim will consider the SA tresholds. |
179 | # In other words, you cannot reject mails on SA scores if you set that |
191 | # In other words, you cannot reject mails on SA scores if you set that |
180 | # threshold to a lower threshold than SA's required_hits value. |
192 | # threshold to a lower threshold than SA's required_hits value. |
181 | # The one exception to this rule is SAtempreject (in order to let you |
193 | # The one exception to this rule is SAtempreject (in order to let you |
182 | # temporarily reject mail when you are doing greylisting, see |
194 | # temporarily reject mail when you are doing greylisting, see |
183 | # README.greylisting in the documentation for details) |
195 | # README.greylisting in the documentation for details) |
184 | ############################################################################### |
196 | ############################################################################### |
185 | 197 | ||
186 | # SA score when you start stalling the sender by sending many continuation |
198 | # SA score when you start stalling the sender by sending many continuation |
187 | # lines for up to SAteergrubetime |
199 | # lines for up to SAteergrubetime |
188 | # This is now a string (without quotes) that gets evaluated at runtime by exim |
200 | # This is now a string (without quotes) that gets evaluated at runtime by exim |
189 | # but you can still assign a simple float value to it |
201 | # but you can still assign a simple float value to it |
190 | # Note that this is an obvious abuse of SMTP, but eh, they started it :-) |
202 | # Note that this is an obvious abuse of SMTP, but eh, they started it :-) |
191 | # Of course, this means that each incoming spam with the right score threshold |
203 | # Of course, this means that each incoming spam with the right score threshold |
192 | # will keep an exim process busy on your machine. Make sure you can afford it. |
204 | # will keep an exim process busy on your machine. Make sure you can afford it. |
193 | # Default value is 2^20, which should disable the behavior |
205 | # Default value is 2^20, which should disable the behavior |
194 | 206 | ||
195 | # Please, don't teergrube people who relay for you or your own MXes :-) |
207 | # Please, don't teergrube people who relay for you or your own MXes :-) |
196 | # This option is left behind for backward compatibility, but you can now |
208 | # This option is left behind for backward compatibility, but you can now |
197 | # get the same result by putting a condition string in SAteergrube |
209 | # get the same result by putting a condition string in SAteergrube |
198 | # The trick is to list your score if the condition succeeds, and a really |
210 | # The trick is to list your score if the condition succeeds, and a really |
199 | # high score otherwise. |
211 | # high score otherwise. |
200 | #SAteergrube: ${if and { {!eq {$sender_host_address}{127.0.0.1}} {!eq {$sender_host_address}{127.0.0.2}} } {25}{1048576}} |
212 | #SAteergrube: ${if and { {!eq {$sender_host_address}{127.0.0.1}} {!eq {$sender_host_address}{127.0.0.2}} } {25}{1048576}} |
201 | 213 | ||
202 | # SAteergrubecond is deprecated (replaced by SAteergrube) |
214 | # SAteergrubecond is deprecated (replaced by SAteergrube) |
203 | # You used to be say whether you would apply the teergrubing score with this |
215 | # You used to be say whether you would apply the teergrubing score with this |
204 | # condition, but now that scores are conditions, it is obsolete |
216 | # condition, but now that scores are conditions, it is obsolete |
205 | #SAteergrubecond: ${if and { {!eq {$sender_host_address}{127.0.0.1}} {!eq {$sender_host_address}{127.0.0.2}} } {1}{0}} |
217 | #SAteergrubecond: ${if and { {!eq {$sender_host_address}{127.0.0.1}} {!eq {$sender_host_address}{127.0.0.2}} } {1}{0}} |
206 | 218 | ||
207 | # How long do you want to stall the sender (in seconds) |
219 | # How long do you want to stall the sender (in seconds) |
208 | # If you set the value too high, you might get too many exim processes running |
220 | # If you set the value too high, you might get too many exim processes running |
209 | # and run out of process slots |
221 | # and run out of process slots |
210 | # Remember, don't come crying if playing with this "feature" causes your mail |
222 | # Remember, don't come crying if playing with this "feature" causes your mail |
211 | # server to catch fire :-) |
223 | # server to catch fire :-) |
212 | SAteergrubetime: 900 |
224 | SAteergrubetime: 900 |
213 | 225 | ||
214 | # You can optionally save or not save messages that matched the above rule |
226 | # You can optionally save or not save messages that matched the above rule |
215 | SAteergrubeSavCond: 1 |
227 | SAteergrubeSavCond: 1 |
216 | 228 | ||
217 | # Do you want to save mails that you stalled for later analysis? |
229 | # Do you want to save mails that you stalled for later analysis? |
218 | # Specify a directory to enable the feature. |
230 | # Specify a directory to enable the feature. |
219 | # SA-Exim will try to create the directory if it has the permissions to do so, |
231 | # SA-Exim will try to create the directory if it has the permissions to do so, |
220 | # check your maillog for failures (or create the directory yourself and make it |
232 | # check your maillog for failures (or create the directory yourself and make it |
221 | # writeable by exim) |
233 | # writeable by exim) |
222 | SAteergrubesave: /var/spool/exim/SAteergrube |
234 | SAteergrubesave: /var/spool/exim/SAteergrube |
223 | 235 | ||
224 | # When you stall the sender, you will probably get the mail again. |
236 | # When you stall the sender, you will probably get the mail again. |
225 | # By default, we'll only save messages by message ID so that we don't save |
237 | # By default, we'll only save messages by message ID so that we don't save |
226 | # multiple copies every time the sender tries again. |
238 | # multiple copies every time the sender tries again. |
227 | # Of course, this means someone could fake someone else's message ID to |
239 | # Of course, this means someone could fake someone else's message ID to |
228 | # overwrite the saved copy of another spam. Such is life :-) |
240 | # overwrite the saved copy of another spam. Such is life :-) |
229 | SAteergrubeoverwrite: 1 |
241 | SAteergrubeoverwrite: 1 |
230 | 242 | ||
231 | 243 | ||
232 | 244 | ||
233 | # If you reach this score, the mail is accepted and tossed (/dev/nulled). |
245 | # If you reach this score, the mail is accepted and tossed (/dev/nulled). |
234 | # The default value is 2^20 which should ensure this never happens. |
246 | # The default value is 2^20 which should ensure this never happens. |
235 | # This is now a string (without quotes) that gets evaluated at runtime by exim |
247 | # This is now a string (without quotes) that gets evaluated at runtime by exim |
236 | # but you can still assign a simple float value to it |
248 | # but you can still assign a simple float value to it |
237 | # You should be really sure that the message is spam because the sender will |
249 | # You should be really sure that the message is spam because the sender will |
238 | # get no notification |
250 | # get no notification |
239 | #SAdevnull: 20.0 |
251 | #SAdevnull: 20.0 |
240 | 252 | ||
241 | # You can optionally save or not save messages that matched the above rule |
253 | # You can optionally save or not save messages that matched the above rule |
242 | SAdevnullSavCond: 1 |
254 | SAdevnullSavCond: 1 |
243 | 255 | ||
244 | # Do you want to save mails that are tossed? |
256 | # Do you want to save mails that are tossed? |
245 | # Specify a directory to enable the feature. |
257 | # Specify a directory to enable the feature. |
246 | # This is just in case you do want to keep a copy of the alledge spams somewhere |
258 | # This is just in case you do want to keep a copy of the alledge spams somewhere |
247 | # Messages are saved by unixdate_Message-Id or just unix date if there is no |
259 | # Messages are saved by unixdate_Message-Id or just unix date if there is no |
248 | # Message-Id. |
260 | # Message-Id. |
249 | # SA-Exim will try to create the directory if it has the permissions to do so, |
261 | # SA-Exim will try to create the directory if it has the permissions to do so, |
250 | # check your maillog for failures (or create the directory yourself and make it |
262 | # check your maillog for failures (or create the directory yourself and make it |
251 | # writeable by exim) |
263 | # writeable by exim) |
252 | SAdevnullsave: /var/spool/exim/SAdevnull |
264 | SAdevnullsave: /var/spool/exim/SAdevnull |
253 | 265 | ||
254 | 266 | ||
255 | 267 | ||
256 | # SA score when you start rejecting Emails (this is better than the above as |
268 | # SA score when you start rejecting Emails (this is better than the above as |
257 | # it can notify the sender in case you reject non-spam by mistake) |
269 | # it can notify the sender in case you reject non-spam by mistake) |
258 | # This is now a string (without quotes) that gets evaluated at runtime by exim |
270 | # This is now a string (without quotes) that gets evaluated at runtime by exim |
259 | # but you can still assign a simple float value to it |
271 | # but you can still assign a simple float value to it |
260 | # Default value is 2^20, which should disable the behavior if you comment out |
272 | # Default value is 2^20, which should disable the behavior if you comment out |
261 | # the line below |
273 | # the line below |
262 | SApermreject: 12.0 |
274 | SApermreject: 12.0 |
263 | 275 | ||
264 | # You can optionally save or not save messages that matched the above rule |
276 | # You can optionally save or not save messages that matched the above rule |
265 | SApermrejectSavCond: 1 |
277 | SApermrejectSavCond: 1 |
266 | 278 | ||
267 | # Do you want to save mails that are rejected? |
279 | # Do you want to save mails that are rejected? |
268 | # Specify a directory to enable the feature. |
280 | # Specify a directory to enable the feature. |
269 | # SA-Exim will try to create the directory if it has the permissions to do so, |
281 | # SA-Exim will try to create the directory if it has the permissions to do so, |
270 | # check your maillog for failures (or create the directory yourself and make it |
282 | # check your maillog for failures (or create the directory yourself and make it |
271 | # writeable by exim) |
283 | # writeable by exim) |
272 | SApermrejectsave: /var/spool/exim/SApermreject |
284 | SApermrejectsave: /var/spool/exim/SApermreject |
273 | 285 | ||
274 | 286 | ||
275 | 287 | ||
276 | # SA score when you start returning a temporary reject. |
288 | # SA score when you start returning a temporary reject. |
277 | # There are few reasons to use this, except if you're reading your tempreject |
289 | # There are few reasons to use this, except if you're reading your tempreject |
278 | # save folder (see below) and ajusting scores on the fly, or if you are using |
290 | # save folder (see below) and ajusting scores on the fly, or if you are using |
279 | # greylisting |
291 | # greylisting |
280 | # This is now a string (without quotes) that gets evaluated at runtime by exim |
292 | # This is now a string (without quotes) that gets evaluated at runtime by exim |
281 | # but you can still assign a simple float value to it |
293 | # but you can still assign a simple float value to it |
282 | # Default value is 2^20, which should disable the behavior |
294 | # Default value is 2^20, which should disable the behavior |
283 | #SAtempreject: 9.0 |
295 | #SAtempreject: 9.0 |
284 | 296 | ||
285 | # You can optionally save or not save messages that matched the above rule |
297 | # You can optionally save or not save messages that matched the above rule |
286 | SAtemprejectSavCond: 1 |
298 | SAtemprejectSavCond: 1 |
287 | 299 | ||
288 | # Do you want to save mails that are temporarily rejected? |
300 | # Do you want to save mails that are temporarily rejected? |
289 | # Specify a directory to enable the feature. |
301 | # Specify a directory to enable the feature. |
290 | # You could use this to analyse what SA is bouncing and adding an allow rule |
302 | # You could use this to analyse what SA is bouncing and adding an allow rule |
291 | # to accept the mail next time it is sent back to you |
303 | # to accept the mail next time it is sent back to you |
292 | # SA-Exim will try to create the directory if it has the permissions to do so, |
304 | # SA-Exim will try to create the directory if it has the permissions to do so, |
293 | # check your maillog for failures (or create the directory yourself and make it |
305 | # check your maillog for failures (or create the directory yourself and make it |
294 | # writeable by exim) |
306 | # writeable by exim) |
295 | SAtemprejectsave: /var/spool/exim/SAtempreject |
307 | SAtemprejectsave: /var/spool/exim/SAtempreject |
296 | 308 | ||
297 | # When you send back a temp reject code, you will get the mail again. |
309 | # When you send back a temp reject code, you will get the mail again. |
298 | # By default, we'll only save messages by message ID so that we don't save |
310 | # By default, we'll only save messages by message ID so that we don't save |
299 | # multiple copies every time the sender tries again. |
311 | # multiple copies every time the sender tries again. |
300 | # Of course, this means someone could fake someone else's message ID to |
312 | # Of course, this means someone could fake someone else's message ID to |
301 | # overwrite the saved copy of another spam. Such is life :-) |
313 | # overwrite the saved copy of another spam. Such is life :-) |
302 | SAtemprejectoverwrite: 1 |
314 | SAtemprejectoverwrite: 1 |
303 | 315 | ||
304 | # See README.greylisting in the documentation for the following options |
316 | # See README.greylisting in the documentation for the following options |
305 | # This is the string that SpamAssassin adds if the message is whitelisted |
317 | # This is the string that SpamAssassin adds if the message is whitelisted |
306 | # We use this to optionally increase the score needed for a tempreject |
318 | # We use this to optionally increase the score needed for a tempreject |
307 | # (in order to let a message through when it would otherwise have been |
319 | # (in order to let a message through when it would otherwise have been |
308 | # temprejected) |
320 | # temprejected) |
309 | # Default value is "GREYLIST_ISWHITE" (as used in the patch provided by SA-Exim) |
321 | # Default value is "GREYLIST_ISWHITE" (as used in the patch provided by SA-Exim) |
310 | SAgreylistiswhitestr: GREYLIST_ISWHITE |
322 | SAgreylistiswhitestr: GREYLIST_ISWHITE |
311 | 323 | ||
312 | # By how much do we temporarly raise tempreject to allow a mail in when it |
324 | # By how much do we temporarly raise tempreject to allow a mail in when it |
313 | # would otherwise have been temp rejected (because SA flagged it was whitelisted |
325 | # would otherwise have been temp rejected (because SA flagged it was whitelisted |
314 | # by the greylisting code provided as a patch to SA in the SA-Exim distro) |
326 | # by the greylisting code provided as a patch to SA in the SA-Exim distro) |
315 | # Note that greylisting will not work in until you patch SA with the greylist |
327 | # Note that greylisting will not work in until you patch SA with the greylist |
316 | # function |
328 | # function |
317 | # Note that you most likely want |
329 | # Note that you most likely want |
318 | # SAtempreject + SAgreylistraisetempreject <= SApermreject |
330 | # SAtempreject + SAgreylistraisetempreject <= SApermreject |
319 | # Default value is 3.0 but you'd probably to lower the tempreject score and |
331 | # Default value is 3.0 but you'd probably to lower the tempreject score and |
320 | # increase this one (see README.greylisting) |
332 | # increase this one (see README.greylisting) |
321 | SAgreylistraisetempreject: 3.0 |
333 | SAgreylistraisetempreject: 3.0 |
322 | 334 | ||
323 | 335 | ||
324 | # Do you want to save mails that are flagged as spam by SA, but not rejected by |
336 | # Do you want to save mails that are flagged as spam by SA, but not rejected by |
325 | # any of the above thresholds? Specify a directory to enable the feature. |
337 | # any of the above thresholds? Specify a directory to enable the feature. |
326 | # That's one way to track mails thare are going through even though they were |
338 | # That's one way to track mails thare are going through even though they were |
327 | # flagged by SA (note that you could also save them in exim's system_filter, |
339 | # flagged by SA (note that you could also save them in exim's system_filter, |
328 | # although copies saved here happen before exim makes modification to the |
340 | # although copies saved here happen before exim makes modification to the |
329 | # message like rewriting) |
341 | # message like rewriting) |
330 | # SA-Exim will try to create the directory if it has the permissions to do so, |
342 | # SA-Exim will try to create the directory if it has the permissions to do so, |
331 | # check your maillog for failures (or create the directory yourself and make it |
343 | # check your maillog for failures (or create the directory yourself and make it |
332 | # writeable by exim) |
344 | # writeable by exim) |
333 | SAspamacceptsave: /var/spool/exim/SAspamaccept |
345 | SAspamacceptsave: /var/spool/exim/SAspamaccept |
334 | 346 | ||
335 | # You can control which messages you want saved if you only want a subset |
347 | # You can control which messages you want saved if you only want a subset |
336 | SAspamacceptSavCond: 0 |
348 | SAspamacceptSavCond: 0 |
337 | 349 | ||
338 | 350 | ||
339 | # Do you want to save mails that are not flagged as spam by SA |
351 | # Do you want to save mails that are not flagged as spam by SA |
340 | # Specify a directory to enable the feature. |
352 | # Specify a directory to enable the feature. |
341 | # This is only here for completeness, if you want to save all messages not |
353 | # This is only here for completeness, if you want to save all messages not |
342 | # flagged as spam by SA (you could also do this in system_filter) |
354 | # flagged as spam by SA (you could also do this in system_filter) |
343 | # SA-Exim will try to create the directory if it has the permissions to do so, |
355 | # SA-Exim will try to create the directory if it has the permissions to do so, |
344 | # check your maillog for failures (or create the directory yourself and make it |
356 | # check your maillog for failures (or create the directory yourself and make it |
345 | # writeable by exim) |
357 | # writeable by exim) |
346 | SAnotspamsave: /var/spool/exim/SAnotspam |
358 | SAnotspamsave: /var/spool/exim/SAnotspam |
347 | 359 | ||
348 | # You can control which messages you want saved if you only want a subset |
360 | # You can control which messages you want saved if you only want a subset |
349 | SAnotspamSavCond: 0 |
361 | SAnotspamSavCond: 0 |
350 | 362 | ||
351 | # All the following strings can take one '%s' which will be replaced by |
363 | # All the following strings can take one '%s' which will be replaced by |
352 | # spamstatus: "SA score, trigger score" |
364 | # spamstatus: "SA score, trigger score" |
353 | SAmsgteergrubewait: Wait for more output |
365 | SAmsgteergrubewait: Wait for more output |
354 | SAmsgteergruberej: Please try again later |
366 | SAmsgteergruberej: Please try again later |
355 | SAmsgpermrej: Rejected |
367 | SAmsgpermrej: Rejected |
356 | SAmsgtemprej: Please try again later |
368 | SAmsgtemprej: Please try again later |
357 | # This string is a static string, do not include "%s" |
369 | # This string is a static string, do not include "%s" |
358 | SAmsgerror: Temporary local error while processing message, please contact postmaster. |
370 | SAmsgerror: Temporary local error while processing message, please contact postmaster. |