Only allow trusted relays to send mail to logs alias

[hcoop/config/exim.git] / conf.d / acl / 30_exim4-config_check_rcpt

diff --git a/conf.d/acl/30_exim4-config_check_rcpt b/conf.d/acl/30_exim4-config_check_rcpt
index b2a673c..b5050d5 100644 (file)
--- a/conf.d/acl/30_exim4-config_check_rcpt
+++ b/conf.d/acl/30_exim4-config_check_rcpt
@@ -351,6 +351,15 @@ acl_check_rcpt:
   .include CHECK_RCPT_LOCAL_ACL_FILE
   .endif
 
+  # hcoop-change: 2015-03-19 clinton_admin
+  # testing if this will reject the fucktons of spam hitting logs@,
+  # most of it fscking signed with valid DKIM keys and evading
+  # spamassassin.
+  deny
+       log_message = rejecting non-hcoop host sending to logs
+       recipients = logs@*.hcoop.net
+       !hosts = +relay_from_hosts
+
 
   #############################################################################
   # This check is commented out because it is recognized that not every