# 40_exim4-config_check_data

acl_check_data:
   # Add Message-ID if missing
   warn condition = ${if !def:h_Message-ID: {1}}
        hosts = +relay_from_hosts
        message = Message-ID: <E$message_id@$primary_hostname>
                      
   # Deny unless the address list headers are syntactically correct.
   #
   # This is disabled by default because it might reject legitimate mail.
   # If you want your system to insist on syntactically valid address
   # headers, you might want to enable the following lines.
   # deny message = Message headers fail syntax check
   #    !acl = acl_whitelist_local_deny
   #    !verify = header_syntax

   # require that there is a verifiable sender address in at least
   # one of the "Sender:", "Reply-To:", or "From:" header lines.
   # deny message = No verifiable sender address in message headers
   #    !acl = acl_whitelist_local_deny
   #    !verify = header_sender
# Reject messages that have serious MIME errors.
   # This calls the demime condition again, but it
   # will return cached results.
   deny message = Serious MIME defect detected ($demime_reason)
   demime = *
   condition = ${if >{$demime_errorlevel}{2}{1}{0}}
   .ifdef TEERGRUBE
      delay = TEERGRUBE
   .endif
   
   # Reject file extensions used by worms.
   # Note that the extension list may be incomplete.
   deny message = Unaceptable message.
   demime = exe:com:vbs:bat:pif:scr
   .ifdef TEERGRUBE
      delay = TEERGRUBE
   .endif
   
   # Reject messages containing malware.
   deny message = This message contains a virus ($malware_name) and has been rej
ected
   malware = *
   .ifdef TEERGRUBE
      delay = TEERGRUBE
   .endif

   # accept otherwise
   accept