ACL_check_data:
   deny message = Message headers fail syntax check
        !acl    = ACL_whitelist_local
        !verify = header_syntax

   deny message = No verifiable sender address in message headers
        !acl    = ACL_whitelist_local
        !verify = header_sender

   deny message   = Fake local From ($h_from:) in message of remote origin
        !hosts    = +relay_from_hosts
        condition = ${if match {${domain:$h_from:}}{\N(?:^|\.)zeus\.co(?:m|\.uk)
\N}{1}{0}}

   deny message   = Message size $message_size > MESSAGE_SIZE_LIMIT
        condition = ${if >{$message_size}{MESSAGE_SIZE_LIMIT}{yes}{no}}

   deny message   = Malformed message, cannot scan for virus ($demime_reason)
        demime    = *
        condition = ${if >{$demime_errorlevel}{2}{1}{0}}

   deny message   = Forbidden attachment type (.$found_extension)
        demime    = bat:com:pif:prf:scr:vbs

   deny message = This message contains a virus
        demime  = *
        malware = *

   accept hosts     = 212.44.21.64/26 : 127.0.0.1
          endpass

   accept condition = ${if >{$message_size}{MAX_SPAM_SCAN_SIZE}{yes}{no}}
          endpass

  
   deny message   = Spam Threshold Exceeded $spam_score/10 (contact ADDR_HERE)
        spam      = nobody:true
        condition = ${if >{$spam_score_int}{100}{1}{0}}

   warn message = X-Spam-Level: $spam_bar
        spam    = nobody:true

   warn message = X-Spam-Flag: YES
        spam    = nobody

   warn message = X-Spam-Status: $spam_report
        spam    = nobody:true  

   warn message = X-New-Subject: *****SPAM***** $h_subject:
        spam    = nobody

   
   accept

# moo