At the end of the acl_mail block add a delay for everyone
accept
delay = 5s
Add this to the end of the acl_connect block
# Lets delay everyone for now to 8s for connecting...
accept
delay = 8s
/etc/custom_exim_system_filter file. This is global on the server for incoming email. Additionally, I have seen emails over 4 "pluses" are definitely spam the past 2 weeks since implemented this.
if $message_headers matches "X-Spam-Bar: \\\\+\\\\+\\\\+\\\\+" then headers add "Old-Subject: $h_subject:" headers remove "Subject" headers add "Subject: *Spam* $h_old-subject" headers remove "Old-Subject" endifCpanel was overwriting my changes to the default file, so copied, added this chunk then configured cpanel to use my version of the file - again, to prevent overwriting when cpanel updates.