dmarc_tld_file = /var/spool/exim4/opendmarc.tlds

dkim_verify_minimal = true

log_selector = +all_parents \
    +delivery_size \
    +incoming_interface \
    +incoming_port \
    +smtp_confirmation \
    +smtp_protocol_error \
    +smtp_syntax_error \
    +queue_time \
    +deliver_time \
    +tls_cipher \
    +tls_peerdn \
    -retry_defer

acl_smtp_rcpt = acl_check_rcpt
acl_smtp_dkim = acl_check_dkim
acl_smtp_data = acl_check_data

begin acl
acl_check_rcpt:
    warn
        spf = fail:err_temp:err_perm
        message = SPF check for $sender_address_domain failed: $spf_smtp_comment

    warn
        spf = pass:none:neutral:soft_fail
	log_message = SPF check for $sender_address_domain OK: $spf_smtp_comment ($spf_result)

    warn
        set acl_m_spf_result = $spf_result

    accept

acl_check_dkim:
    warn
	log_message = DBG-DKIM--dkim_verify_status-$dkim_verify_status--dkim_cur_signer-$dkim_cur_signer--dkim_verify_reason-$dkim_verify_reason--dkim_domain-$dkim_domain--dkim_identity-$dkim_identity--

    accept

acl_check_data:
    warn
        dmarc_status = accept : quarantine : reject : none : off
        logwrite = DBG-DMARC--spf_result-$acl_m_spf_result--dkim_verify_status-$dkim_verify_status--dmarc_used_domain-$dmarc_used_domain--dmarc_status-$dmarc_status--dmarc_status_text-$dmarc_status_text--

    accept

begin routers
dnslookup:
    driver = dnslookup
    transport = remote_smtp

begin transports
remote_smtp:
    driver = smtp