primary_hostname = mail.k-doverie.ru

hide mysql_servers = localhost/exim/exim/faqeximmail

domainlist local_domains = ${lookup mysql{SELECT `domain` \
 FROM `domain` WHERE \
 `domain`='${domain}' AND \
 `transport`='virtual' AND \
 `active`='1'}}

              
domainlist relay_to_domains = sysardex.net : unident.net : ink08.getmyip.com
              
hostlist   relay_from_hosts = localhost : 127.0.0.0/8 : 192.168.1.200

acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data

#av_scanner = clamd:/var/run/clamav/clamd.sock
#av_scanner = clamd:127.0.0.1 3310

#spamd_address = 127.0.0.1 783

daemon_smtp_ports = 25 : 465
tls_on_connect_ports = 465

tls_certificate = /etc/exim4/ssl/exim.crt
tls_privatekey = /etc/exim4/ssl/exim.key

qualify_domain = k-doverie.ru

exim_user = Debian-exim
exim_group = mail
never_users = root

rfc1413_query_timeout = 0s

sender_unqualified_hosts = +relay_from_hosts
recipient_unqualified_hosts = +relay_from_hosts

smtp_accept_max = 200
smtp_connect_backlog = 30
smtp_accept_max_per_host = 20
smtp_accept_queue = 150
smtp_accept_queue_per_connection = 50
message_size_limit = 20M
return_size_limit = 70k

ignore_bounce_errors_after = 45m

timeout_frozen_after = 7d

helo_accept_junk_hosts = 192.168.1.0/24
auto_thaw = 10m
smtp_banner = "$primary_hostname, ESMTP!!!"

split_spool_directory = true
helo_allow_chars = _
smtp_enforce_sync = false
smtp_max_unknown_commands = 2

log_selector = \
    +all_parents \
    +connection_reject \
    +incoming_interface \
    +lost_incoming_connection \
    +received_sender \
    +received_recipients \
    +smtp_confirmation \
    -smtp_syntax_error \
    -smtp_protocol_error \
    -queue_run
write_rejectlog = false
syslog_duplication = false
log_file_path = /var/log/exim4/%s-%D.log : syslog
syslog_timestamp = no

system_filter   = /etc/exim4/system-filter
system_filter_pipe_transport = address_pipe
system_filter_user  = Debian-exim
system_filter_group  = mail

begin acl

acl_check_rcpt:

  accept hosts = :

  deny  message  = Restricted characters in address
  domains  = !+local_domains
  local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
  delay  = 30s
  
  accept hosts  = +relay_from_hosts

  deny  message  = "HELO/EHLO require by SMTP RFC"
         condition = ${if eq{$sender_helo_name}{}{yes}{no}}
  delay  = 30s

  deny  message       = "Sender only $authenticated_id"
  authenticated = *
  condition     = ${if and{{!eq{$authenticated_id}{$sender_address}}{!eq{[email protected]}{$sender_address}}}{yes}{no}}

  accept  authenticated  = *
          control  = submission

  deny  message       = "Dynamic ip"
  condition     = ${if match{$sender_host_name} \
    {adsl|dialup|pool|peer|dhcp|ppp} \
    {yes}{no}}

  require message  = relay not permitted
  domains  = +local_domains : +relay_to_domains

  require  verify   = sender
  require verify  = recipient

  deny  message  = "We don't allow domain literals, many spam..."
  hosts  =  *:!+relay_from_hosts
  condition = ${if eq{$sender_helo_name}\
    {$sender_host_address}{true}{false}}
  delay  = 30s

  deny  condition = ${if eq{$sender_helo_name}\
        {$interface_address}{yes}{no}}
  hosts  = !127.0.0.1 : !localhost : *
  message  = "This is my IP!"
  delay  = 30s

  deny  condition = ${if match{$sender_helo_name}\
               {\N^\d+$\N}{yes}{no}}
  hosts  = !127.0.0.1:!localhost:*
  message  = "can not be only number in HELO!"
  delay  = 30s
 set acl_c0    = 10s

 delay   = $acl_c0

  deny  message  = "you in blacklist - $dnslist_domain --> \
    $dnslist_text; $dnslist_value"
  hosts  = !+relay_from_hosts
  dnslists = cbl.abuseat.org : \
    list.dsbl.org : \
    sbl-xbl.spamhaus.org
  delay  = 30s             
  
  accept domains  = +relay_to_domains
  accept domains  = +local_domains
  
  deny  message  = "2_This is not an open relay!\nYou can contact to mail administrator by phone +7(495)662-36-00"
  delay  = 30s

acl_check_data:

  warn  malware  = *
  logwrite = VIRUS from host $sender_host_name [$sender_host_address]. \
    Mail from $sender_address to $local_part@$domain.
  set acl_m2 = 1
  logwrite = "In e-mail found VIRUS - $malware_name"  

#  warn   spam = spamd:true
#  add_header  = X-Spam-Report: $spam_report
#  add_header  = X-Spam_score: $spam_score
  
  warn  spam  = spamd
#  add_header = Subject: [***SPAM***] $h_subject 
  add_header = X-Spam-Status: Yes  
  add_header = X-Spam-Report: $spam_report
  add_header = X-Spam_score_int: $spam_score_int
  add_header = X-Spam_bar: $spam_bar
  
  accept


begin routers

dnslookup:
  driver = dnslookup
  domains = ! +local_domains
  transport = remote_smtp
  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
  no_more

system_alias:
  driver = redirect
  allow_fail
  allow_defer
  data = ${lookup{$local_part}lsearch{/etc/aliases}}
  file_transport = address_file
  pipe_transport = address_pipe

dovecot_aliases:
  driver = redirect
  allow_fail
  allow_defer
  data = ${lookup mysql{SELECT `goto` FROM `alias` WHERE \
 `address`='${quote_mysql:$local_part@$domain}' OR \
 `address`='${quote_mysql:@$domain}'}}

dovecot_user:
  driver = accept
  condition = ${lookup mysql{SELECT `goto` FROM \
  `alias` WHERE \
  `address`='${quote_mysql:$local_part@$domain}' OR \
  `address`='${quote_mysql:@$domain}'}{yes}{no}}
  transport = dovecot_delivery
#  unseen


begin transports


remote_smtp:
  driver = smtp
      
address_pipe:
  driver = pipe
  return_output

address_file:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  return_path_add

address_reply:
  driver = autoreply

dovecot_delivery:
  driver = pipe
  command = /usr/local/libexec/dovecot/deliver -d $local_part@$domain
  message_prefix =
  message_suffix =
  delivery_date_add
  envelope_to_add
  return_path_add
  log_output
  user = mail
    

begin retry

*                      *           F,10h,5m; G,16h,1h,1.5; F,4d,6h




begin rewrite



begin authenticators

auth_plain:
  driver = plaintext
  public_name = PLAIN
  server_condition = ${lookup mysql{SELECT `username` FROM \
             `mailbox` WHERE `username` = \
                    '${quote_mysql:$auth1}' AND `password` = \
                 md5('${quote_mysql:$auth3}')}{yes}{no}}
  server_prompts = :
  server_set_id = $auth2

auth_login:
  driver = plaintext
  public_name = LOGIN
  server_condition = ${lookup mysql{SELECT `username` FROM \
      `mailbox` WHERE `username` = \
      '${quote_mysql:$auth1}' AND `password` = \
      md5('${quote_mysql:$auth2}')}{yes}{no}}
  server_prompts = Username:: : Password::
  server_set_id = $auth1