[Exim] Match Domain in Data ACL

I have a config to check for an attachment, and then email it to another
address:

warn    message       = X-Redirect-To: deniedbox@???
          demime        = txt

Now I would like for a certain domain to be exempted from this, what is the
best way to do this. I have tried to use domains, but that aint allowed to be
used in DATA ACL.