====== message size ======

======= setting the limit for relay_from_hosts =======

specify a maximum message size for host that are relayed:

in ''acl/30_exim4-config_check_rcpt'':

<code>
  accept
    hosts = +relay_from_hosts
    control = submission/sender_retain
    control = dkim_disable_verify
+   # no size limit checking -- use a max_message_size
+   set acl_m_size = ${readfile{CONFDIR/max_message_size}{}}
</code>

this expects a file named CONFDIR/max_message_size to be present an containing a reasonable limit in bytes.

======= setting the limit for authenticated users =======

specify a maximum message size for authenticated users when relaying mail for them:

in ''acl/30_exim4-config_check_rcpt'':

<code>
 accept
    authenticated = *
    control = submission/sender_retain
    control = dkim_disable_verify
+   # no size limit checking -- use a max_message_size
+   set acl_m_size = ${readfile{CONFDIR/max_message_size}{}}
</code>

======= setting the limit for local domains =======

limit the message size on a per domain setting expects CONFDIR/message_size to exist and respects settings in CONFDIR/virtual/<DOMAIN>/message_size.

in ''acl/30_exim4-config_check_rcpt'':

<code>
  require
    verify = recipient
    # set acl_m_size to the mail size limit of the domain (to be evaluated later
    # in the data acl.
    set acl_m_size = ${if exists{CONFDIR/virtual/$domain/message_size} \
                             {${readfile{CONFDIR/virtual/$domain/message_size}{}}} \
                             {${readfile{CONFDIR/message_size}{}}}}
</code>

======= execute the limits =======

(!) acl_m_size needs to be set -- otherwise mails will be stuck in the queue!

in ''acl/40_exim4-config_check_data'' add the following:

<code>
  # check message size
  # acl_m_size gets set to the maximum message size for the domain or the
  # default setting in rcpt acl.
  deny
    message = Message size $message_size is larger than the limit of $acl_m_size bytes
    condition = ${if >{$message_size}{$acl_m_size} {yes}{no}}
</code>

you should add this block before checking for viruses and/or spam because the operation is way more inexpensive than the others...