From 5e24e241c48aae55fe5a81b73a832922ae700824 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Tue, 29 Nov 2016 13:40:45 +0000
Subject: [PATCH] Block spammy emails

There is a vast torrent of spam with headers of this form:

X-PHP-Originating-Script: <digits>:SendMail.class.php
X-PHP-Originating-Script: <digits>:ExtendedMail.class.php
---
 cookbooks/exim/templates/default/exim4.conf.erb | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cookbooks/exim/templates/default/exim4.conf.erb b/cookbooks/exim/templates/default/exim4.conf.erb
index 5766cd2f1..f37dad240 100644
--- a/cookbooks/exim/templates/default/exim4.conf.erb
+++ b/cookbooks/exim/templates/default/exim4.conf.erb
@@ -503,6 +503,12 @@ acl_check_data:
           message    = This message scored $spam_score SpamAssassin points.
 
 <% end -%>
+  # Deny spammy messages with headers of the form:
+  #   X-PHP-Originating-Script: <digits>:SendMail.class.php
+  #   X-PHP-Originating-Script: <digits>:ExtendedMail.class.php
+  deny    condition  = ${if match {$h_X-PHP-Originating-Script:}{^[0-9]+:(Send|Extended)Mail\\.class\\.php\$}}
+          message    = This message failed local spam checks.
+
   # Accept the message.
 
   accept
-- 
2.43.2