dnl
dnl использование "серых списков"
dnl
dnl NO			- не использовать "серые списки"
dnl YES			- использовать "серые списки"
dnl LEARN		- использовать "серые списки" в режиме обучения
dnl 			(аналог define(`confGREYLIST_BLOCKED', `0'))
dnl BLOCK_FIRST_ONLY	- использовать "серые списки" в режиме блокирования только первого письма
dnl 			(аналог define(`confGREYLIST_BLOCKED', `-1'))
dnl OPTIONAL		- опциональный грейлистинг
dnl define(`confGREYLIST', `NO')dnl
dnl
dnl режим обучения:
dnl define(`confGREYLIST_BLOCKED', `0')dnl
dnl время блокировки записи в "сером списке" равно нулю
dnl (принимаем все сообщения, производится лишь обучение кеша)
dnl
dnl режим обучения с блокированием лишь первой попытки отправки почты:
dnl define(`confGREYLIST_BLOCKED', `-1')dnl
dnl время блокировки записи в "сером списке" меньше нуля
dnl (первое сообщение задерживается, остальные пропускаются)
dnl
dnl время блокировки записи в "сером списке" в минутах
dnl define(`confGREYLIST_BLOCKED', `55')dnl
dnl
dnl минимальное время жизни записи в "сером списке" в минутах
dnl define(`confGREYLIST_RECORD_EXPIRE_MIN', `300')dnl
dnl
dnl время жизни записи в "сером списке" в днях
dnl define(`confGREYLIST_RECORD_EXPIRE', `36')dnl
dnl
dnl какую часть адреса хоста отправителя учитывать при работе с "серыми списками":
dnl define(`confGREYLIST_SENDER_HOST_ADDRESS_KEY', `$sender_host_address')dnl
dnl define(`confGREYLIST_SENDER_HOST_ADDRESS_KEY', `${mask:$sender_host_address/24}')dnl
dnl define(`confGREYLIST_SENDER_HOST_ADDRESS_KEY_DEFAULT', `$sender_host_address')dnl
dnl
dnl какую часть адреса отправителя учитывать при работе с "серыми списками":
dnl define(`confGREYLIST_SENDER_ADDRESS_KEY', `${lc:$sender_address}')dnl
dnl define(`confGREYLIST_SENDER_ADDRESS_KEY', `${lc:$sender_address_domain}')dnl
dnl define(`confGREYLIST_SENDER_ADDRESS_KEY_DEFAULT', `${lc:$sender_address}')dnl
dnl
dnl внесение в исключения "серых списков" записей при отсылке письма из
dnl рилеемых сетей или от аутентифицированных отправителей:
dnl NO		- не вносить исключающую запись
dnl YES		- вносить исключающую запись
dnl define(`confGREYLIST_ADDR_PRELOAD', `NO')
dnl запись вносится в исключения на confGREYLIST_ADDR_PRELOAD_TTL минут
dnl define(`confGREYLIST_ADDR_PRELOAD_TTL',`240')
dnl
dnl что считать адресом отправителя в данном случае:
dnl define(`confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY', `${lc:$local_part@$domain}')dnl
dnl данное значение должно соответствовать значению confGREYLIST_SENDER_ADDRESS_KEY
dnl т. е. если значение confGREYLIST_SENDER_ADDRESS_KEY равно `${lc:$sender_address}',
dnl то значение confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY должно быть равно
dnl `${lc:$local_part@$domain}'
dnl если же значение confGREYLIST_SENDER_ADDRESS_KEY равно `${lc:$sender_address_domain}',
dnl то значение confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY должно быть равно `${lc:$domain}'
dnl
dnl тип хранилища данных "серых списков":
dnl DBM			- использовать Berkeley DB
dnl SQLITE		- использовать SQLite
dnl MYSQL		- использовать MySQL
dnl MEMCACHED		- использовать memcached
dnl REDIS		- использовать redis
dnl define(`confGREYLIST_BACKEND', `DBM')dnl
dnl
dnl префикс записей при использовании MEMCACHED и REDIS в качестве
dnl значений переменной confGREYLIST_BACKEND:
dnl define(`confGREYLIST_RECORD_PREFIX', `greylist:')dnl
dnl
dnl пути к файлам данных "серых списков":
dnl define(`confGREYLIST_DBM_CACHE', `confSPOOLDIR/db/greylist.dbm')dnl
dnl define(`confGREYLIST_SQLITE_CACHE', `confSPOOLDIR/db/greylist.db')dnl
dnl
dnl при SQLITE в confGREYLIST_BACKEND:
dnl
dnl define(`confGREYLIST_SQLITE_SELECT_PRELOAD', `\
dnl     SELECT * FROM greylist \
dnl     WHERE sender_host_address="0.0.0.0" AND sender_address="${quote_sqlite:confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$sender_address}";')dnl
dnl define(`confGREYLIST_SQLITE_UPDATE_PRELOAD', `\
dnl     UPDATE greylist \
dnl     SET block_expires=$tod_epoch, record_expires=${eval:$tod_epoch+confGREYLIST_ADDR_PRELOAD_TTL*60}, blocked_count=0, passed_count=0, aborted_count=0, origin_type="AUTO", create_time=$tod_epoch, last_update=$tod_epoch \
dnl     WHERE sender_host_address="0.0.0.0" AND sender_address="${quote_sqlite:confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$sender_address}";')dnl
dnl define(`confGREYLIST_SQLITE_INSERT_PRELOAD', `\
dnl     INSERT INTO greylist (sender_host_address, sender_address, recipient_address, block_expires, record_expires, blocked_count, passed_count, aborted_count, origin_type, create_time, last_update) \
dnl     VALUES ("0.0.0.0", "${quote_sqlite:confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY}", "${quote_sqlite:$sender_address}", $tod_epoch, ${eval:$tod_epoch+confGREYLIST_ADDR_PRELOAD_TTL*60}, 0, 0, 0, "AUTO", $tod_epoch, $tod_epoch);')dnl
dnl
dnl define(`confGREYLIST_SQLITE_CHECK_PRELOAD', `\
dnl     SELECT * FROM greylist \
dnl     WHERE sender_host_address="0.0.0.0" AND sender_address="${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$local_part@$domain}";')dnl
dnl define(`confGREYLIST_SQLITE_DELETE_PRELOAD', `\
dnl     DELETE FROM greylist \
dnl     WHERE sender_host_address="0.0.0.0" AND sender_address="${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$local_part@$domain}";')dnl
dnl
dnl define(`confGREYLIST_SQLITE_SELECT', `\
dnl     SELECT * FROM greylist \
dnl     WHERE sender_host_address="${quote_sqlite:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" AND sender_address="${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$local_part@$domain}";')dnl
dnl
dnl define(`confGREYLIST_SQLITE_INSERT', `\
dnl     INSERT INTO greylist (sender_host_address, sender_address, recipient_address, block_expires, record_expires, blocked_count, passed_count, aborted_count, origin_type, create_time, last_update) \
dnl     VALUES ("${quote_sqlite:confGREYLIST_SENDER_HOST_ADDRESS_KEY}", "${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}", "${quote_sqlite:$local_part@$domain}", ${eval:$tod_epoch+confGREYLIST_BLOCKED*60}, ${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60}, 1, 0, 0, "AUTO", $tod_epoch, $tod_epoch);')dnl
dnl define(`confGREYLIST_SQLITE_UPDATE_INIT', `\
dnl     UPDATE greylist \
dnl     SET block_expires=${eval:$tod_epoch+confGREYLIST_BLOCKED*60}, record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60}, blocked_count=1, passed_count=0, aborted_count=0, origin_type="AUTO", create_time=$tod_epoch, last_update=$tod_epoch \
dnl     WHERE sender_host_address="${quote_sqlite:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" AND sender_address="${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$local_part@$domain}";')dnl
dnl define(`confGREYLIST_SQLITE_UPDATE_BLOCK', `\
dnl     UPDATE greylist \
dnl     SET blocked_count=blocked_count+1, last_update=$tod_epoch \
dnl     WHERE sender_host_address="${quote_sqlite:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" AND sender_address="${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$local_part@$domain}";')dnl
dnl define(`confGREYLIST_SQLITE_UPDATE_PASS', `\
dnl     UPDATE greylist \
dnl     SET record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60}, passed_count=passed_count+1, last_update=$tod_epoch \
dnl     WHERE (sender_host_address="${quote_sqlite:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" OR sender_host_address="0.0.0.0") AND sender_address="${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$local_part@$domain}";')dnl
dnl
dnl define(`confGREYLIST_SQLITE_LEARN_INSERT', `\
dnl     INSERT INTO greylist (sender_host_address, sender_address, recipient_address, block_expires, record_expires, blocked_count, passed_count, aborted_count, origin_type, create_time, last_update) \
dnl     VALUES ("${quote_sqlite:confGREYLIST_SENDER_HOST_ADDRESS_KEY}", "${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}", "${quote_sqlite:$local_part@$domain}", $tod_epoch, ${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60}, 1, 0, 0, "AUTO", $tod_epoch, $tod_epoch);')dnl
dnl define(`confGREYLIST_SQLITE_LEARN_UPDATE_INIT', `\
dnl     UPDATE greylist \
dnl     SET block_expires=$tod_epoch, record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60}, blocked_count=1, passed_count=0, aborted_count=0, origin_type="AUTO", create_time=$tod_epoch, last_update=$tod_epoch \
dnl     WHERE sender_host_address="${quote_sqlite:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" AND sender_address="${quote_sqlite:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_sqlite:$local_part@$domain}";')dnl
dnl
dnl define(`confGREYLIST_SQLITE_DELETE_EXPIRED', `DELETE FROM greylist WHERE block_expires < strftime(\"%s\",\"now\");')dnl
dnl
dnl
dnl при MYSQL в confGREYLIST_BACKEND:
dnl
dnl define(`confGREYLIST_MYSQL_SELECT_PRELOAD', `\
dnl     SELECT * FROM greylist \
dnl     WHERE sender_host_address="0.0.0.0" AND sender_address="${quote_mysql:confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$sender_address}";')dnl
dnl define(`confGREYLIST_MYSQL_UPDATE_PRELOAD', `\
dnl     UPDATE greylist \
dnl     SET block_expires=NOW(), record_expires=ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_ADDR_PRELOAD_TTL*60)), passed_count=passed_count+1, last_update=NOW() \
dnl     WHERE sender_host_address="0.0.0.0" AND sender_address="${quote_mysql:confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$sender_address}";')dnl
dnl define(`confGREYLIST_MYSQL_INSERT_PRELOAD', `\
dnl     INSERT INTO greylist (sender_host_address, sender_address, recipient_address, block_expires, record_expires, blocked_count, passed_count, aborted_count, origin_type, create_time, last_update) \
dnl     VALUES ("0.0.0.0", "${quote_mysql:confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY}", "${quote_mysql:$sender_address}", NOW(), ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_ADDR_PRELOAD_TTL*60)), 0, 0, 0, "AUTO", NOW(), NOW());')dnl
dnl dnl
dnl define(`confGREYLIST_MYSQL_CHECK_PRELOAD', `\
dnl     SELECT UNIX_TIMESTAMP(record_expires) as record_expires FROM greylist \
dnl     WHERE sender_host_address="0.0.0.0" AND sender_address="${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$local_part@$domain}";')dnl
dnl define(`confGREYLIST_MYSQL_DELETE_PRELOAD', `\
dnl     DELETE FROM greylist \
dnl     WHERE sender_host_address="0.0.0.0" AND sender_address="${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$local_part@$domain}";')dnl
dnl
dnl define(`confGREYLIST_MYSQL_SELECT', `\
dnl     SELECT UNIX_TIMESTAMP(block_expires) as block_expires, UNIX_TIMESTAMP(record_expires) as record_expires, greylist.* FROM greylist \
dnl     WHERE sender_host_address="${quote_mysql:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" AND sender_address="${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$local_part@$domain}";')dnl
dnl
dnl define(`confGREYLIST_MYSQL_INSERT', `\
dnl     INSERT INTO greylist (sender_host_address, sender_address, recipient_address, block_expires, record_expires, blocked_count, passed_count, aborted_count, origin_type, create_time, last_update) \
dnl     VALUES ("${quote_mysql:confGREYLIST_SENDER_HOST_ADDRESS_KEY}", "${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}", "${quote_mysql:$local_part@$domain}", ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_BLOCKED*60)), ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_RECORD_EXPIRE_MIN*60)), 1, 0, 0, "AUTO", NOW(), NOW());')dnl
dnl define(`confGREYLIST_MYSQL_UPDATE_INIT', `\
dnl     UPDATE greylist \
dnl     SET block_expires=ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_BLOCKED*60)), record_expires=ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_RECORD_EXPIRE_MIN*60)), blocked_count=1, passed_count=0, aborted_count=0, origin_type="AUTO", create_time=NOW(), last_update=NOW() \
dnl     WHERE sender_host_address="${quote_mysql:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" AND sender_address="${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$local_part@$domain}";')dnl
dnl define(`confGREYLIST_MYSQL_UPDATE_BLOCK', `\
dnl     UPDATE greylist \
dnl     SET blocked_count=blocked_count+1, last_update=NOW() \
dnl     WHERE sender_host_address="${quote_mysql:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" AND sender_address="${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$local_part@$domain}";')dnl
dnl define(`confGREYLIST_MYSQL_UPDATE_PASS', `\
dnl     UPDATE greylist \
dnl     SET record_expires=ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_RECORD_EXPIRE*24*60*60)), passed_count=passed_count+1, last_update=NOW() \
dnl     WHERE (sender_host_address="${quote_mysql:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" OR sender_host_address="0.0.0.0") AND sender_address="${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$local_part@$domain}";')dnl
dnl
dnl define(`confGREYLIST_MYSQL_LEARN_INSERT', `\
dnl     INSERT INTO greylist (sender_host_address, sender_address, recipient_address, block_expires, record_expires, blocked_count, passed_count, aborted_count, origin_type, create_time, last_update) \
dnl     VALUES ("${quote_mysql:confGREYLIST_SENDER_HOST_ADDRESS_KEY}", "${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}", "${quote_mysql:$local_part@$domain}", NOW(), ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_RECORD_EXPIRE_MIN*60)), 1, 0, 0, "AUTO", NOW(), NOW());')dnl
dnl define(`confGREYLIST_MYSQL_LEARN_UPDATE_INIT', `\
dnl     UPDATE greylist \
dnl     SET block_expires=NOW(), record_expires=ADDTIME(NOW(), SEC_TO_TIME(confGREYLIST_RECORD_EXPIRE_MIN*60)), blocked_count=1, passed_count=0, aborted_count=0, origin_type="AUTO", create_time=NOW(), last_update=NOW() \
dnl     WHERE sender_host_address="${quote_mysql:confGREYLIST_SENDER_HOST_ADDRESS_KEY}" AND sender_address="${quote_mysql:confGREYLIST_SENDER_ADDRESS_KEY}" AND recipient_address="${quote_mysql:$local_part@$domain}";')dnl
dnl
dnl define(`confGREYLIST_MYSQL_DELETE_EXPIRED', `DELETE FROM greylist WHERE block_expires < NOW();')dnl
dnl
dnl
dnl исключения из greylisting'а:
dnl AUTH		- исключения для аутентифицированных отправителей
dnl FROM_<>		- исключения для писем от пустого отправителя
dnl FROM_POSTMASTER	- исключения для писем от postmaster@
dnl TO_POSTMASTER	- исключения для писем для postmaster@
dnl TO_ABUSE		- исключения для писем для abuse@
dnl SPF_PASS		- исключения для писем, успешно прошедших проверку соответствия хоста отправителя SPF записи домена отправителя
dnl TLS_PASS		- исключения для писем, при отправке которых использовался STARTTLS
dnl define(`confGREYLIST_SKIP', `AUTH FROM_<> FROM_POSTMASTER TO_POSTMASTER TO_ABUSE')
dnl
dnl сообщение, возвращаемое клиенту при задержке почтового сообщения
dnl define(`confGREYLIST_MESSAGE', `Message delayed as part of spam avoidance measure')dnl
dnl define(`confGREYLIST_MESSAGE', `System too busy. Please try again later')dnl
dnl define(`confGREYLIST_MESSAGE', `Temporary local problem - please try later')dnl
dnl define(`confGREYLIST_MESSAGE', `Greylisted')dnl
dnl
dnl домены получателей, проверяемые по "серым спискам", перечисляются в domains-greylist
dnl хосты и сети, исключаемые из проверки по "серым спискам", перечисляются в skip_greylist_relays
dnl списки отправителей, исключаемых из проверки по "серым спискам", перечисляются в файле skip_greylist_senders
dnl	список указывается в виде:
dnl	domain : addr1 : addr2 : addr3
dnl	пример:
dnl	zuper.domain.com : user : info : admin
dnl списки отправителей, исключаемых из проверки по "серым спискам", перечисляются в файле skip_greylist_recipients
dnl	список указывается в виде:
dnl	domain : addr1 : addr2 : addr3
dnl	пример:
dnl	zuper.domain.com : user : info : admin
dnl триплеты адрес_рилея/адрес_отправителя/адрес_получателя, исключаемые из проверки по "серым спискам",
dnl перечисляются в файле skip_greylist в виде:
dnl	A.B.C.D|sender@domain1.tld|recipient@domain2.tld
dnl	пример:
dnl	1.2.3.4|sender@example.org|test@local.domain
dnl в случае, если в confGREYLIST_SENDER_HOST_ADDRESS_KEY указано
dnl значение, отличное от confGREYLIST_SENDER_HOST_ADDRESS_KEY_DEFAULT
dnl или в confGREYLIST_SENDER_ADDRESS_KEY указано значение, отличное от
dnl confGREYLIST_SENDER_ADDRESS_KEY_DEFAULT (т. е. используется
dnl "облегченный" вариант "серых списков", будет выполнено два lookup'а в
dnl skip_greylist - первый по confGREYLIST_SENDER_HOST_ADDRESS_KEY_DEFAULT
dnl и confGREYLIST_SENDER_ADDRESS_KEY_DEFAULT (т. е. по умолчанию по
dnl адресу хоста отправителя и адресу отправителя), а второй - по
dnl confGREYLIST_SENDER_HOST_ADDRESS_KEY и confGREYLIST_SENDER_ADDRESS_KEY
dnl
dnl страны, сети которых будут исключены из skip_greylist_relays
dnl define(`confGREYLIST_COUNTRIES',		`ar br cl cn co hk jp kr mx ng pe ph th tw')dnl
dnl команда получения списка сетей по странам
dnl define(`confGREYLIST_COUNTRIES_SYNC',	`rsync -avz rsync://rsync.blackholes.us/zones/countries/${COUNTRY}.txt ../countries/${COUNTRY}.txt')dnl
dnl
dnl количество баллов, при которых письмо задерживается (применяется при define(`confGREYLIST', `OPTIONAL'))
dnl define(`confGREYLIST_BLOCKED_OPTIONAL', `10')dnl
dnl
dnl
dnl использование динамических "серых списков" рилеев (при GREYLIST в confCHECK_MESSAGE_ID или SUBMIT_GREYLIST_* в confSPAMASSASSIN_ACTION)
dnl NO		- не использовать динамические "серые списки" рилеев
dnl YES		- использовать динамические "серые списки" рилеев
dnl define(`confGREYLIST_RELAYS', `NO')dnl
dnl
dnl префикс записей динамических "серых списков" рилеев при использовании
dnl MEMCACHED и REDIS в качестве значений переменной confGREYLIST_BACKEND:
dnl define(`confGREYLIST_RELAYS_RECORD_PREFIX', `greylist-relay:')dnl
dnl
dnl пути к файлам динамических "серых списков" рилеев
dnl define(`confGREYLIST_DBM_RELAYS', `confSPOOLDIR/db/greylist_relays.dbm')dnl
dnl define(`confGREYLIST_SQLITE_RELAYS', `confSPOOLDIR/db/greylist.db')dnl
dnl
dnl
dnl запросы для работы с динамическими "серыми списками" рилеев в SQLite
dnl define(`confGREYLIST_SQLITE_RELAYS_SELECT', `SELECT * FROM greylist_relays WHERE sender_host_address="$sender_host_address";')dnl
dnl define(`confGREYLIST_SQLITE_RELAYS_INSERT', `\
dnl     INSERT INTO greylist_relays (sender_host_address, create_time, expire_time, reason) \
dnl     VALUES ("$sender_host_address", $tod_epoch, $acl_m_ttl, "${quote_sqlite:$acl_m_reason}");')dnl
dnl define(`confGREYLIST_SQLITE_RELAYS_UPDATE', `\
dnl     UPDATE greylist_relays \
dnl     SET create_time=$tod_epoch, expire_time=$acl_m_ttl, reason="${quote_sqlite:$acl_m_reason}" \
dnl     WHERE sender_host_address="$sender_host_address";')dnl
dnl define(`confGREYLIST_SQLITE_RELAYS_DELETE_EXPIRED', `DELETE FROM greylist_relays WHERE expire_time > 0 AND expire_time < strftime(\"%s\",\"now\");')dnl
dnl
dnl
dnl запросы для работы с динамическими "серыми списками" рилеев в MySQL
dnl define(`confGREYLIST_MYSQL_RELAYS_SELECT', `SELECT FROM_UNIXTIME(expire_time) as expire_time, greylist_relays.* FROM greylist_relays WHERE sender_host_address="$sender_host_address";')dnl
dnl define(`confGREYLIST_MYSQL_RELAYS_INSERT', `\
dnl     INSERT INTO greylist_relays (sender_host_address, create_time, expire_time, reason) \
dnl     VALUES ("$sender_host_address", NOW(), FROM_UNIXTIME($acl_m_ttl), "${quote_sqlite:$acl_m_reason}");')dnl
dnl define(`confGREYLIST_MYSQL_RELAYS_UPDATE', `\
dnl     UPDATE greylist_relays \
dnl     SET create_time=NOW(), expire_time=FROM_UNIXTIME($acl_m_ttl), reason="${quote_sqlite:$acl_m_reason}" \
dnl     WHERE sender_host_address="$sender_host_address";')dnl
dnl define(`confGREYLIST_MYSQL_RELAYS_DELETE_EXPIRED', `DELETE FROM greylist_relays WHERE expire_time > 0 AND expire_time < NOW();')dnl
dnl

ifdef(`confGREYLIST_MESSAGE', `dnl
ifelse(len(X`'confGREYLIST_MESSAGE), `1', `dnl
define(`confGREYLIST_MESSAGE', `Greylisted')dnl
')', `dnl
define(`confGREYLIST_MESSAGE', `Greylisted')dnl
')

ifelse(confGREYLIST, `LEARN', `
define(`confGREYLIST_BLOCKED', `0')
')

ifelse(confGREYLIST, `BLOCK_FIRST_ONLY', `
define(`confGREYLIST_BLOCKED', `-1')
')

ifelse(SECTION, `MAIN', `dnl
dnl
domainlist greylist_domains	= lsearch;CONFDIR/domains-greylist
hostlist skip_greylist_hosts	= CONFDIR/skip_greylist_relays
dnl
ifelse(confGREYLIST, `OPTIONAL', `
hostlist greylist_hosts		= CONFDIR/access-relay-greylist
') dnl ifelse(confGREYLIST, `OPTIONAL', `')
dnl
') dnl ifelse(SECTION, `MAIN', `')

ifelse(SECTION, `ACL_CHECK_RCPT_TOP', `dnl
	# обнуляем счетчик баллов для опционального грейлистинга
	warn	set acl_m_optional_greylist	= scores=0 log_message=
') dnl ifelse(SECTION, `ACL_CHECK_RCPT_TOP', `')

ifelse(SECTION, `ACL_CHECK_RCPT_MIDDLE', `dnl
dnl
ifelse(confGREYLIST_ADDR_PRELOAD, `YES', `dnl
	warn	set acl_m_preload = no
		hosts		= +relay_from_hosts
		set acl_m_preload = yes
	warn	authenticated	= *
		set acl_m_preload = yes
	warn	set acl_m_status =
	warn	condition	= $acl_m_preload

ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {0.0.0.0|confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY|${lc:$sender_address}}\
				    {\
					block_expires=$tod_epoch \
					record_expires=${eval:$tod_epoch+confGREYLIST_ADDR_PRELOAD_TTL*60} \
					blocked_count=0 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')

ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
define(`confMEMCACHED_ENABLED', `YES')dnl
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'0.0.0.0|confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY|${lc:$sender_address}}\
				    {\
					block_expires=$tod_epoch \
					record_expires=${eval:$tod_epoch+confGREYLIST_ADDR_PRELOAD_TTL*60} \
					blocked_count=0 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_ADDR_PRELOAD_TTL*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')

ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'0.0.0.0|confGREYLIST_ADDR_PRELOAD_SENDER_ADDRESS_KEY|${lc:$sender_address}}\
				    {\
					block_expires=$tod_epoch \
					record_expires=${eval:$tod_epoch+confGREYLIST_ADDR_PRELOAD_TTL*60} \
					blocked_count=0 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')

ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_result = ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_SELECT_PRELOAD}{\
				    ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_UPDATE_PRELOAD}}\
				}{\
				    ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_INSERT_PRELOAD}}\
				}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')

ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_result = ${lookup mysql{confGREYLIST_MYSQL_SELECT_PRELOAD}{\
				    ${lookup mysql{confGREYLIST_MYSQL_UPDATE_PRELOAD}}\
				}{\
				    ${lookup mysql{confGREYLIST_MYSQL_INSERT_PRELOAD}}\
				}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')

	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

') dnl ifelse(confGREYLIST_ADDR_PRELOAD, `YES')

') dnl ifelse(SECTION, `ACL_CHECK_RCPT_MIDDLE')



ifelse(SECTION, `ACLS_ADDITIONAL', `dnl
ifelse(confGREYLIST, `OPTIONAL', `
ifdef(`confGREYLIST_DATETIME', `
FEATURE(`greylist-datetime')
') dnl ifdef(`confGREYLIST_DATETIME', `')

ifelse(confGREYLIST_RELAYS, `YES', `FEATURE(`greylist-relays')')

') dnl ifelse(confGREYLIST, `OPTIONAL', `')
') dnl ifelse(SECTION, `ACLS_ADDITIONAL', `')

ifelse(SECTION, `ACL_CHECK_RCPT', `dnl
######################################################################
# Использование "серых списков"

ifelse(confGREYLIST, `OPTIONAL', `
ifdef(`confGREYLIST_DATETIME', `
FEATURE(`greylist-datetime')
')
ifelse_strstr(confGREYLIST_RELAYS, `YES', `
FEATURE(`greylist-relays')
') dnl ifelse_strstr(confGREYLIST_RELAYS, `YES', `')
ifelse_strstr(confGREYLIST_SMTP, `NO', `', `
FEATURE(`greylist-smtp')
') dnl ifelse_strstr(confGREYLIST_SMTP, `NO', `', `')
') dnl ifelse(confGREYLIST, `OPTIONAL', `')

######################################################################
# определяем необходимость использования "серых списков"
	warn	set acl_m0	= no_skip
	warn	! domains	= +greylist_domains : +local_domains
		set acl_m0	= skip
ifelse(confGREYLIST, `OPTIONAL', `dnl
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip optional greylist for non greylisted domain\n
') dnl ifelse(confGREYLIST, `OPTIONAL', `')
ifelse_strstr(confGREYLIST_SKIP, `AUTH', `dnl
	warn	authenticated	= *
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for authenticated sender\n
')dnl ifelse_strstr(confGREYLIST_SKIP, `AUTH', `')
	warn	hosts		= +skip_greylist_hosts : +relay_from_hosts
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for +skip_greylist_hosts or +relay_from_hosts\n
	warn	condition	= ${lookup{$sender_host_name}wildlsearch{CONFDIR/skip_greylist_relays}{yes}{no}}
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for relay from skip_greylist_relays\n
ifelse_strstr(confGREYLIST_SKIP, `TO_POSTMASTER', `dnl
	warn	condition	= ${if eq{$local_part}{postmaster}{yes}{no}}
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for postmaster address\n
')dnl ifelse_strstr(confGREYLIST_SKIP, `TO_POSTMASTER', `')
ifelse_strstr(confGREYLIST_SKIP, `TO_ABUSE', `dnl
	warn	condition	= ${if eq{$local_part}{abuse}{yes}{no}}
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for abuse address\n
')dnl ifelse_strstr(confGREYLIST_SKIP, `TO_ABUSE', `')
ifelse_strstr(confGREYLIST_SKIP, `<>', `dnl
	warn	condition	= ${if eq{$sender_address_local_part}{}{yes}{no}}
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for empty sender address\n
')dnl ifelse_strstr(confGREYLIST_SKIP, `<>', `')
ifelse_strstr(confGREYLIST_SKIP, `FROM_POSTMASTER', `dnl
	warn	condition	= ${if eq{$sender_address_local_part}{postmaster}{yes}{no}}
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for postmaster sender address local part\n
')dnl ifelse_strstr(confGREYLIST_SKIP, `FROM_POSTMASTER', `')
define(`_confGREYLIST_SKIP_CHECK_ADDITIONAL_', `NO')dnl
ifelse(confGREYLIST_SENDER_HOST_ADDRESS_KEY,confGREYLIST_SENDER_HOST_ADDRESS_KEY_DEFAULT,`',`define(`_confGREYLIST_SKIP_CHECK_ADDITIONAL_', `YES')')dnl
ifelse(confGREYLIST_SENDER_ADDRESS_KEY,confGREYLIST_SENDER_ADDRESS_KEY_DEFAULT,`',`define(`_confGREYLIST_SKIP_CHECK_ADDITIONAL_', `YES')')dnl
	warn	condition	= ${lookup{confGREYLIST_SENDER_HOST_ADDRESS_KEY_DEFAULT|confGREYLIST_SENDER_ADDRESS_KEY_DEFAULT|$local_part@$domain}\
				    lsearch{CONFDIR/skip_greylist}{yes}{ifelse(_confGREYLIST_SKIP_CHECK_ADDITIONAL_,`NO',`no',`\
					${lookup{confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|$local_part@$domain}\
					    lsearch{CONFDIR/skip_greylist}{yes}{no}\
					}\
				    ')}\
				}
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist by triplet of sender host address, sender address and recipient address\n
	warn	recipients	= @@wildlsearch;CONFDIR/skip_greylist_recipients
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist by recipient address\n
	warn	senders		= @@wildlsearch;CONFDIR/skip_greylist_senders
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist sender address\n
ifelse_strstr(confGREYLIST_SKIP, `SPF_PASS', `
ifdef(`confSPF2', `ifelse(confSPF2, `NO', `', `
	warn	acl		= acl_spf_pass
		condition	= ${if eq{$acl_m_spf_result}{pass}{yes}{no}}
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for spf passed address\n
')')dnl ifdef(`confSPF2', `ifelse(confSPF2, `NO', `dnl', `')')
')dnl ifelse_strstr(confGREYLIST_SKIP, `SPF_PASS', `')
ifelse_strstr(confGREYLIST_SKIP, `TLS_PASS', `dnl
	warn	encrypted	= *
		set acl_m0	= skip
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist for encrypted message\n
')dnl ifelse_strstr(confGREYLIST_SKIP, `TLS_PASS', `')

ifelse(confGREYLIST, `OPTIONAL', `
	warn	condition	= ${if eq{$acl_m0}{no_skip}{yes}{no}}
		hosts		= +greylist_hosts
		set acl_m_optional_greylist = scores=${eval:${extract{scores}{$acl_m_optional_greylist}}+confGREYLIST_BLOCKED_OPTIONAL} \
                                log_message="${extract{log_message}{$acl_m_optional_greylist}} relay $sender_host_address greylisted;"
		set acl_m_spam_action = ${acl_m_spam_action}\t\
				greylist scores=confGREYLIST_BLOCKED_OPTIONAL\t\
				relay $sender_host_address in +greylist_hosts\n
	warn	condition	= ${if eq{$acl_m0}{no_skip}{yes}{no}}
		set acl_m0	= ${if <{${extract{scores}{$acl_m_optional_greylist}}}{confGREYLIST_BLOCKED_OPTIONAL}{skip}{no_skip}}
') dnl ifelse(confGREYLIST, `OPTIONAL', `')

######################################################################
# если использовать "серые списки" необходимо,
# ищем запись о рилее/отправителе/получателе в кеше "серых списков"
ifelse(confGREYLIST_ADDR_PRELOAD, `YES', `dnl

	warn	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m0	= ${lookup{0.0.0.0|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}dbm{confGREYLIST_DBM_CACHE}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m0	= ${acl{acl_memcached_get}{confGREYLIST_RECORD_PREFIX`'0.0.0.0|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m0	= ${acl{acl_redis_get}{confGREYLIST_RECORD_PREFIX`'0.0.0.0|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m0	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_CHECK_PRELOAD}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
		set acl_m0	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_DELETE_PRELOAD}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m0	= ${lookup mysql{confGREYLIST_MYSQL_CHECK_PRELOAD}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
		set acl_m0	= ${lookup mysql{confGREYLIST_MYSQL_DELETE_PRELOAD}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
		set acl_m0	=

	warn	condition	= ${if eq{$acl_m0}{}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m0	= ${lookup{confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}dbm{confGREYLIST_DBM_CACHE}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m0	= ${acl{acl_memcached_get}{confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m0	= ${acl{acl_redis_get}{confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m0	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_SELECT}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m0	= ${lookup mysql{confGREYLIST_MYSQL_SELECT}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')

', `dnl ifelse(confGREYLIST_ADDR_PRELOAD, `YES', `')

	warn	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m0	= ${lookup{confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}dbm{confGREYLIST_DBM_CACHE}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m0	= ${acl{acl_memcached_get}{confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m0	= ${acl{acl_redis_get}{confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m0	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_SELECT}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m0	= ${lookup mysql{confGREYLIST_MYSQL_SELECT}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')

')dnl ifelse(confGREYLIST_ADDR_PRELOAD, `YES', `')


ifdef(`confGREYLIST_BLOCKED', `ifelse(eval(confGREYLIST_BLOCKED > 0), `1', `dnl
######################################################################
# время блокировки записи в "серых списках" больше нуля

	# если запись в "серых списках" не найдена, создаем ее
	warn	set acl_m_status =
	defer	condition	= ${if eq{$acl_m0}{}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch+confGREYLIST_BLOCKED*60} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch+confGREYLIST_BLOCKED*60} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_RECORD_EXPIRE_MIN*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch+confGREYLIST_BLOCKED*60} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_INSERT}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_INSERT}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
		message		= confGREYLIST_MESSAGE
ifelse(confGREYLIST, `OPTIONAL', `
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain; reason:${extract{log_message}{$acl_m_optional_greylist}}
',`
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain
')
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

	# если запись в "сером списке" найдена, но истек record_expires
	warn	set acl_m_status =
	defer	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch+confGREYLIST_BLOCKED*60} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch+confGREYLIST_BLOCKED*60} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_RECORD_EXPIRE_MIN*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch+confGREYLIST_BLOCKED*60} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_UPDATE_INIT}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_UPDATE_INIT}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
		message		= confGREYLIST_MESSAGE
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

	# если запись в "сером списке" найдена, но не истек block_expires
	warn	set acl_m_status =
	defer	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if >{${extract{block_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${extract{record_expires}{$acl_m0}} \
					blocked_count=${eval:${extract{blocked_count}{$acl_m0}}+1} \
					passed_count=${extract{passed_count}{$acl_m0}} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${extract{record_expires}{$acl_m0}} \
					blocked_count=${eval:${extract{blocked_count}{$acl_m0}}+1} \
					passed_count=${extract{passed_count}{$acl_m0}} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				    {${eval:${extract{record_expires}{$acl_m0}}-$tod_epoch}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${extract{record_expires}{$acl_m0}} \
					blocked_count=${eval:${extract{blocked_count}{$acl_m0}}+1} \
					passed_count=${extract{passed_count}{$acl_m0}} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_UPDATE_BLOCK}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_UPDATE_BLOCK}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
		message		= confGREYLIST_MESSAGE
ifelse(confGREYLIST, `OPTIONAL', `
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain; reason:${extract{log_message}{$acl_m_optional_greylist}}
',`
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain
') dnl ifelse(confGREYLIST, `OPTIONAL', `')
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

	# если запись в "сером списке" найдена, block_expires истек, а record_expires не истек
	warn	set acl_m_status =
	warn	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{block_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
		condition	= ${if >{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_RECORD_EXPIRE*24*60*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_UPDATE_PASS}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_UPDATE_PASS}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
		set acl_m_spam_action	= ${acl_m_spam_action}\t\
				skip greylist: blocking time has expired but record TTL does not\n
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

')') dnl ifdef(`confGREYLIST_BLOCKED', `ifelse(eval(confGREYLIST_BLOCKED > 0), `1', `')')



ifdef(`confGREYLIST_BLOCKED', `ifelse(eval(confGREYLIST_BLOCKED == 0), `1', `dnl
######################################################################
# время блокировки записи в "серых списках" равно нулю
# (принимаем все сообщения, производится лишь обучение кеша)

	# если запись в кеше "серых списков" не найдена, создаем ее
	warn	set acl_m_status =
	warn	condition	= ${if eq{$acl_m0}{}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					    block_expires=${eval:$tod_epoch} \
					    record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					    blocked_count=1 \
					    passed_count=0 \
					    aborted_count=0 \
					    origin_type=AUTO \
					    create_time=$tod_epoch \
					    last_update=$tod_epoch\
					}\
				    {${eval:confGREYLIST_RECORD_EXPIRE_MIN*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					    block_expires=${eval:$tod_epoch} \
					    record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					    blocked_count=1 \
					    passed_count=0 \
					    aborted_count=0 \
					    origin_type=AUTO \
					    create_time=$tod_epoch \
					    last_update=$tod_epoch\
					}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_LEARN_INSERT}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_LEARN_INSERT}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

	# если запись в "сером списке" найдена, но истек record_expires
	warn	set acl_m_status =
	warn	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_RECORD_EXPIRE_MIN*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_LEARN_UPDATE_INIT}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_LEARN_UPDATE_INIT}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

	# если запись в "сером списке" найдена и не истек record_expires
	warn	set acl_m_status =
	warn	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
ifelse(confGREYLIST_BACKEND, `DBM', `dnl
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `dnl
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_RECORD_EXPIRE*24*60*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `dnl
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_UPDATE_PASS}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_UPDATE_PASS}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

')') dnl ifdef(`confGREYLIST_BLOCKED', `ifelse(eval(confGREYLIST_BLOCKED == 0), `1', `')')



ifdef(`confGREYLIST_BLOCKED', `ifelse(eval(confGREYLIST_BLOCKED < 0), `1', `dnl
# время блокировки записи в "серых списках" меньше нуля
# (первое сообщение задерживается, остальные пропускаются)

	# если запись в "серых списках" не найдена, создаем ее
	warn	set acl_m_status =
	defer	condition	= ${if eq{$acl_m0}{}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_RECORD_EXPIRE_MIN*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_LEARN_INSERT}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_LEARN_INSERT}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQLITE')
		message		= confGREYLIST_MESSAGE
ifelse(confGREYLIST, `OPTIONAL', `
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain; reason:${extract{log_message}{$acl_m_optional_greylist}}
',`
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain
') dnl ifelse(confGREYLIST, `OPTIONAL', `')
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

	# если запись в "сером списке" найдена, но истек record_expires
	warn	set acl_m_status =
	defer	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
		condition	= ${if <{${extract{record_expires}{$acl_m0}}}{$tod_epoch}{yes}{no}}
ifelse(confGREYLIST_BACKEND, `DBM', `
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_RECORD_EXPIRE_MIN*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${eval:$tod_epoch} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE_MIN*60} \
					blocked_count=1 \
					passed_count=0 \
					aborted_count=0 \
					origin_type=AUTO \
					create_time=$tod_epoch \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
		condition	= ${if eq{$acl_m_status}{}{yes}{no}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_LEARN_UPDATE_INIT}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_LEARN_UPDATE_INIT}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
		message		= confGREYLIST_MESSAGE
ifelse(confGREYLIST, `OPTIONAL', `
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain; reason:${extract{log_message}{$acl_m_optional_greylist}}
',`
		log_message	= message blocked by greylist: $sender_host_address; $sender_address; $local_part@$domain
') dnl ifelse(confGREYLIST, `OPTIONAL', `')
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

	# если запись в "серых списках" найдена и record_expires не истек
	warn	set acl_m_status =
	warn	condition	= ${if eq{$acl_m0}{skip}{no}{yes}}
		condition	= ${if eq{$acl_m0}{}{no}{yes}}
ifelse(confGREYLIST_BACKEND, `DBM', `
		set acl_m_status = ${perl{dbm_save}{confGREYLIST_DBM_CACHE}\
				    {confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{}{}{Could not store GREYLIST record to confGREYLIST_DBM_CACHE: $acl_m_status}}
') dnl ifelse(confGREYLIST_BACKEND, `DBM')
ifelse(confGREYLIST_BACKEND, `MEMCACHED', `
		set acl_m_status = ${acl{acl_memcached_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				    {${eval:confGREYLIST_RECORD_EXPIRE*24*60*60}}\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to memcahed}}
') dnl ifelse(confGREYLIST_BACKEND, `MEMCACHED')
ifelse(confGREYLIST_BACKEND, `REDIS', `
		set acl_m_status = ${acl{acl_redis_set}\
				    {confGREYLIST_RECORD_PREFIX`'confGREYLIST_SENDER_HOST_ADDRESS_KEY|confGREYLIST_SENDER_ADDRESS_KEY|${lc:$local_part@$domain}}\
				    {\
					block_expires=${extract{block_expires}{$acl_m0}} \
					record_expires=${eval:$tod_epoch+confGREYLIST_RECORD_EXPIRE*24*60*60} \
					blocked_count=${extract{blocked_count}{$acl_m0}} \
					passed_count=${eval:${extract{passed_count}{$acl_m0}}+1} \
					aborted_count=${extract{aborted_count}{$acl_m0}} \
					origin_type=${extract{origin_type}{$acl_m0}} \
					create_time=${extract{create_time}{$acl_m0}} \
					last_update=$tod_epoch\
				    }\
				}
		set acl_m_status = ${if eq{$acl_m_status}{ok}{}{Could not store GREYLIST record to redis}}
') dnl ifelse(confGREYLIST_BACKEND, `REDIS')
ifelse(confGREYLIST_BACKEND, `SQLITE', `dnl
		set acl_m_res	= ${lookup sqlite{confGREYLIST_SQLITE_CACHE confGREYLIST_SQLITE_UPDATE_PASS}}
') dnl ifelse(confGREYLIST_BACKEND, `SQLITE')
ifelse(confGREYLIST_BACKEND, `MYSQL', `dnl
		set acl_m_res	= ${lookup mysql{confGREYLIST_MYSQL_UPDATE_PASS}}
') dnl ifelse(confGREYLIST_BACKEND, `MYSQL')
	warn	condition	= ${if eq{$acl_m_status}{}{no}{yes}}
		log_message	= $acl_m_status
		set acl_m0	= skip

')') dnl ifdef(`confGREYLIST_BLOCKED', `ifelse(eval(confGREYLIST_BLOCKED > 0), `1', `')')



')dnl ifelse(SECTION, `ACL_CHECK_RCPT', `')