dnl
# список хостов и сетей, соединение с которых будет сразу прервано
# со стороны клиента это будет выглядеть как
# 550 Administrative prohibition
dnl
dnl список хостов и сетей указывается в виде CIDR в файле CONFDIR/hosts-dropfrom
dnl
ifelse(SECTION, `MAIN', `dnl
hostlist host_drop_connection = <; +ignore_defer ; +ignore_unknown ; CONFDIR/hosts-dropfrom
ifdef(`confCHECK_RELAY_DROPPED_EXCLUDE', `ifelse(confCHECK_RELAY_DROPPED_EXCLUDE, `NO', `', `dnl
hostlist host_drop_connection_exclude = <; +ignore_defer ; +ignore_unknown ; CONFDIR/hosts-dropfrom-exclude
')') dnl
') dnl
dnl
ifelse(SECTION, `ACL_CHECK_CONNECT', `dnl
	drop	\
ifdef(`confCHECK_RELAY_DROPPED_EXCLUDE', `ifelse(confCHECK_RELAY_DROPPED_EXCLUDE, `NO', `', `dnl
		hosts		= !+host_drop_connection_exclude
')') dnl
		hosts		= +host_drop_connection
ifdef(`confCHECK_RELAY_DROPPED_LOG_ADDITIONAL_INFO', `ifelse(confCHECK_RELAY_DROPPED_LOG_ADDITIONAL_INFO, `NO', `', `dnl
		set acl_c_log_message_details = ${sg{$acl_c_geo_data${if eq{$tls_cipher}{}{}{; TLS cipher $tls_cipher}}${if eq{$acl_c_sender_host_os}{}{}{; OS $acl_c_sender_host_os}}}{\N^; \N}{}}
		log_message	= drop connection from ${if eq{$sender_host_name}{}{}{$sender_host_name }}[$sender_host_address]${if eq{$acl_c_log_message_details}{}{}{ ($acl_c_log_message_details)}}
')')
')