dnl
dnl использовать список рилеев, коннекты с которых будут dropped
dnl со стороны клиента это будет выглядеть как connection refused
dnl
dnl список хостов и сетей указывается в виде CIDR в файле CONFDIR/hosts-dropfrom
dnl
ifelse(SECTION, `MAIN', `dnl
hostlist host_drop_connection	= <; +ignore_defer ; +ignore_unknown ; CONFDIR/hosts-dropfrom
')
dnl
ifelse(SECTION, `ACL_CHECK_CONNECT', `dnl
	drop	hosts		= +host_drop_connection
ifdef(`confCHECK_RELAY_DROPPED_LOG_ADDITIONAL_INFO', `ifelse(confCHECK_RELAY_DROPPED_LOG_ADDITIONAL_INFO, `NO', `', `dnl
		set acl_c_log_message_details = ${sg{$acl_c_geo_data${if eq{$tls_cipher}{}{}{; TLS cipher $tls_cipher}}${if eq{$acl_c_sender_host_os}{}{}{; OS $acl_c_sender_host_os}}}{\N^; \N}{}}
		log_message	= drop connection from ${if eq{$sender_host_name}{}{}{$sender_host_name }}[$sender_host_address]${if eq{$acl_c_log_message_details}{}{}{ ($acl_c_log_message_details)}}
')')
')