
SET FOREIGN_KEY_CHECKS=0;


/* 
Priorities...
	0      - System policy priority (fallthrough)
	1-50   - System policies
	50-100 - Custom policies
*/

/* Policies */
CREATE TABLE policies (
	ID			SERIAL,

	Name			VARCHAR(255) NOT NULL,

	Priority		SMALLINT NOT NULL,

	Description		TEXT,

	Disabled		SMALLINT NOT NULL DEFAULT '0'

) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;

INSERT INTO policies (Name,Priority,Description) VALUES ('Default',0,'Default System Policy');
INSERT INTO policies (Name,Priority,Description) VALUES ('Default Outbound',10,'Default Outbound System Policy');
INSERT INTO policies (Name,Priority,Description) VALUES ('Default Inbound',10,'Default Inbound System Policy');
INSERT INTO policies (Name,Priority,Description) VALUES ('Default Internal',20,'Default Internal System Policy');
INSERT INTO policies (Name,Priority,Description) VALUES ('Test',50,'Test policy');


/* Member list for policies */
CREATE TABLE policy_members (
	ID			SERIAL,

	PolicyID		BIGINT UNSIGNED,

	/* 
		Format of key: 
		NULL = any
		a.b.c.d/e = IP address with optional /e
		@domain = domain specification, 
		%xyz = xyz group, 
		abc@domain = abc user specification

		all options support negation using !<key>
	*/
	Source			TEXT,
	Destination		TEXT,

	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	FOREIGN KEY (PolicyID) REFERENCES policies(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;


/* Default System Policy */
INSERT INTO policy_members (PolicyID,Source,Destination) VALUES
	(1,NULL,NULL);
/* Default Outbound System Policy */
INSERT INTO policy_members (PolicyID,Source,Destination) VALUES
	(2,'%internal_ips,%internal_domains','!%internal_domains');
/* Default Inbound System Policy */
INSERT INTO policy_members (PolicyID,Source,Destination) VALUES
	(3,'!%internal_ips,!%internal_domains','%internal_domains');
/* Default Internal System Policy */
INSERT INTO policy_members (PolicyID,Source,Destination) VALUES
	(4,'%internal_ips,%internal_domains','%internal_domains');
/* Test Policy */
INSERT INTO policy_members (PolicyID,Source,Destination) VALUES
	(5,'@example.net',NULL);



/* Groups usable in ACL */
CREATE TABLE policy_groups (
	ID			SERIAL,

	Name			VARCHAR(255) NOT NULL,


	Disabled		SMALLINT NOT NULL DEFAULT '0',

	Comment			VARCHAR(1024),


	UNIQUE (Name)
)  TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;

INSERT INTO policy_groups (Name) VALUES ('internal_ips');
INSERT INTO policy_groups (Name) VALUES ('internal_domains');



/* Group members */
CREATE TABLE policy_group_members (
	ID			SERIAL,

	PolicyGroupID		BIGINT UNSIGNED,

	/* Format of member: a.b.c.d/e = ip,  @domain = domain, %xyz = xyz group, abc@domain = abc user */
	Member			VARCHAR(255) NOT NULL,
	

	Disabled		SMALLINT NOT NULL DEFAULT '0',
	Comment			VARCHAR(1024),


	FOREIGN KEY (PolicyGroupID) REFERENCES policy_groups(ID)
)  TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;

INSERT INTO policy_group_members (PolicyGroupID,Member) VALUES (1,'10.0.0.0/8');
INSERT INTO policy_group_members (PolicyGroupID,Member) VALUES (2,'@example.org');
INSERT INTO policy_group_members (PolicyGroupID,Member) VALUES (2,'@example.com');



/* Message session tracking */
CREATE TABLE session_tracking (
	Instance		VARCHAR(255),
	QueueID			VARCHAR(255),

	Timestamp		BIGINT NOT NULL,

	ClientAddress		VARCHAR(64),
	ClientName		VARCHAR(255),
	ClientReverseName	VARCHAR(255),

	Protocol		VARCHAR(255),

	EncryptionProtocol	VARCHAR(255),
	EncryptionCipher	VARCHAR(255),
	EncryptionKeySize	VARCHAR(255),

	SASLMethod		VARCHAR(255),
	SASLSender		VARCHAR(255),
	SASLUsername		VARCHAR(255),

	Helo			VARCHAR(255),

	Sender			VARCHAR(255),

	Size			BIGINT UNSIGNED,

	RecipientData		TEXT,  /* Policy state information */

	UNIQUE (Instance)
)  TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;
CREATE INDEX session_tracking_idx1 ON session_tracking (QueueID,ClientAddress,Sender);
CREATE INDEX session_tracking_idx2 ON session_tracking (Timestamp);




/* Plain and simple access control */

CREATE TABLE access_control (
	ID			SERIAL,

	PolicyID		BIGINT UNSIGNED,

	Name			VARCHAR(255) NOT NULL,

	Verdict			VARCHAR(255),
	Data			TEXT,


	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	FOREIGN KEY (PolicyID) REFERENCES policies(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;

/* INSERT INTO access_control (PolicyID,Verdict,Data) VALUES (5,'REJECT','POP,SNAPPLE,CRAK'); */




/* Main quotas table, this defines the period the quota is over and how to track it */
CREATE TABLE quotas (
	ID			SERIAL,

	PolicyID		BIGINT UNSIGNED,
	
	Name			VARCHAR(255) NOT NULL,

	/* Tracking Options */
	Track			VARCHAR(255) NOT NULL,  /* Format:   <type>:<spec>

					      SenderIP - This takes a bitmask to mask the IP with. A good default is /24 

					      Sender & Recipient - Either "user@domain" (default), "user@" or "@domain" for the entire 
					      		email addy or email addy domain respectively. 
					   */

	/* Period over which this policy is valid,  this is in seconds */
	Period			BIGINT UNSIGNED,

	Verdict			VARCHAR(255),
	Data			TEXT,
		
	Comment			VARCHAR(1024),
	
	Disabled		SMALLINT NOT NULL DEFAULT '0',

	FOREIGN KEY (PolicyID) REFERENCES policies(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;
INSERT INTO quotas (PolicyID,Name,Track,Period,Verdict) VALUES (5,'Recipient quotas','Recipient:user@domain',3600,'REJECT');
INSERT INTO quotas (PolicyID,Name,Track,Period,Verdict) VALUES (5,'Quota on all /24s','SenderIP:/24',3600,'REJECT');


/* Limits for the quota */
CREATE TABLE quotas_limits (
	ID			SERIAL,

	QuotasID		BIGINT UNSIGNED,

	Type			VARCHAR(255),  /* "MessageCount" or "MessageCumulativeSize" */
	CounterLimit		BIGINT UNSIGNED,

	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	FOREIGN KEY (QuotasID) REFERENCES quotas(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;
INSERT INTO quotas_limits (QuotasID,Type,CounterLimit) VALUES (1,'MessageCount',10);
INSERT INTO quotas_limits (QuotasID,Type,CounterLimit) VALUES (1,'MessageCumulativeSize',8000);
INSERT INTO quotas_limits (QuotasID,Type,CounterLimit) VALUES (2,'MessageCount',12);


/* This table is used for tracking the quotas */
CREATE TABLE quotas_tracking (

	QuotasLimitsID		BIGINT UNSIGNED,
	TrackKey		VARCHAR(512),

	/* Last time this record was update */
	LastUpdate		BIGINT UNSIGNED,  /* NULL means not updated yet */	

	Counter			NUMERIC(10,4),
	
	UNIQUE (QuotasLimitsID,TrackKey),
	FOREIGN KEY (QuotasLimitsID) REFERENCES quotas_limits(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;
CREATE INDEX quotas_tracking_idx1 ON quotas_tracking (LastUpdate);


/* Amavisd-new integration for Policyd */

CREATE TABLE amavis_rules (
	ID			SERIAL,

	PolicyID		BIGINT UNSIGNED,

	Name			VARCHAR(255) NOT NULL,

/*
Mode of operation (the _m columns):

	This is done with the _m column names

	0 - Inherit
	1 - Merge  (only valid for lists)
	2 - Overwrite 

*/


	/* Bypass options */
	bypass_virus_checks	SMALLINT,
	bypass_virus_checks_m	SMALLINT NOT NULL DEFAULT '0',

	bypass_banned_checks	SMALLINT,
	bypass_banned_checks_m	SMALLINT NOT NULL DEFAULT '0',

	bypass_spam_checks	SMALLINT,
	bypass_spam_checks_m	SMALLINT NOT NULL DEFAULT '0',

	bypass_header_checks	SMALLINT,
	bypass_header_checks_m	SMALLINT NOT NULL DEFAULT '0',


	/* Anti-spam options: NULL = inherit */
	spam_tag_level		FLOAT,
	spam_tag_level_m	SMALLINT NOT NULL DEFAULT '0',

	spam_tag2_level		FLOAT,
	spam_tag2_level_m	SMALLINT NOT NULL DEFAULT '0',

	spam_tag3_level		FLOAT,
	spam_tag3_level_m	SMALLINT NOT NULL DEFAULT '0',

	spam_kill_level		FLOAT,
	spam_kill_level_m	SMALLINT NOT NULL DEFAULT '0',

	spam_dsn_cutoff_level	FLOAT,
	spam_dsn_cutoff_level_m	SMALLINT NOT NULL DEFAULT '0',

	spam_quarantine_cutoff_level	FLOAT,
	spam_quarantine_cutoff_level_m	SMALLINT NOT NULL DEFAULT '0',

	spam_modifies_subject	SMALLINT,
	spam_modifies_subject_m	SMALLINT NOT NULL DEFAULT '0',

	spam_tag_subject	VARCHAR(255),  /* _SCORE_ is the score, _REQD_ is the required score */
	spam_tag_subject_m	SMALLINT NOT NULL DEFAULT '0',
	
	spam_tag2_subject	VARCHAR(255),
	spam_tag2_subject_m	SMALLINT NOT NULL DEFAULT '0',
	
	spam_tag3_subject	VARCHAR(255),
	spam_tag3_subject_m	SMALLINT NOT NULL DEFAULT '0',


	/* General checks: NULL = inherit */
	max_message_size	BIGINT,  /* in Kbyte */
	max_message_size_m	SMALLINT NOT NULL DEFAULT '0',

	banned_files		TEXT,
	banned_files_m		SMALLINT NOT NULL DEFAULT '0',


	/* Whitelist & blacklist */
	sender_whitelist	TEXT,
	sender_whitelist_m	SMALLINT NOT NULL DEFAULT '0',

	sender_blacklist	TEXT,
	sender_blacklist_m	SMALLINT NOT NULL DEFAULT '0',


	/* Admin notifications */
	notify_admin_newvirus	VARCHAR(255),
	notify_admin_newvirus_m	SMALLINT NOT NULL DEFAULT '0',

	notify_admin_virus	VARCHAR(255),
	notify_admin_virus_m	SMALLINT NOT NULL DEFAULT '0',

	notify_admin_spam	VARCHAR(255),
	notify_admin_spam_m	SMALLINT NOT NULL DEFAULT '0',

	notify_admin_banned_file	VARCHAR(255),
	notify_admin_banned_file_m	SMALLINT NOT NULL DEFAULT '0',

	notify_admin_bad_header	VARCHAR(255),
	notify_admin_bad_header_m	SMALLINT NOT NULL DEFAULT '0',


	/* Quarantine options */
	quarantine_virus	VARCHAR(255),
	quarantine_virus_m	SMALLINT NOT NULL DEFAULT '0',

	quarantine_banned_file	VARCHAR(255),
	quarantine_banned_file_m	SMALLINT NOT NULL DEFAULT '0',

	quarantine_bad_header	VARCHAR(255),
	quarantine_bad_header_m	SMALLINT NOT NULL DEFAULT '0',
	
	quarantine_spam		VARCHAR(255),
	quarantine_spam_m	SMALLINT NOT NULL DEFAULT '0',


	/* Interception options */
	bcc_to			VARCHAR(255),
	bcc_to_m		SMALLINT NOT NULL DEFAULT '0',


	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	FOREIGN KEY (PolicyID) REFERENCES policies(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;

INSERT INTO amavis_rules
	(
		PolicyID,
		Name,
		max_message_size,max_message_size_m,
		bypass_banned_checks, bypass_banned_checks_m
	) 
	VALUES 
	(
		1,
		'Default system amavis policy',
		100000,2,
		1,2
	);


/* Helo checking */

/*
    NULL means to inherit
*/
CREATE TABLE checkhelo (
	ID			SERIAL,

	PolicyID		BIGINT UNSIGNED,

	Name			VARCHAR(255) NOT NULL,


	/* Blacklisting, we want to reject people impersonating us */
	UseBlacklist			SMALLINT,  /* Checks blacklist table */
	BlacklistPeriod			BIGINT UNSIGNED,  /* Period to keep the host blacklisted for, if not set or 0
						    the check will be live */	

	/* Random helo prevention */
	UseHRP				SMALLINT,  /* Use helo randomization prevention */
	HRPPeriod			BIGINT UNSIGNED,  /* Period/window we check for random helo's */
	HRPLimit			BIGINT UNSIGNED,  /* Our limit for the number of helo's is this */

	/* RFC compliance options */
	RejectInvalid			SMALLINT,  /* Reject invalid HELO */
	RejectIP			SMALLINT,  /* Reject if HELO is an IP */
	RejectUnresolvable		SMALLINT,  /* Reject unresolvable HELO */


	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	FOREIGN KEY (PolicyID) REFERENCES policies(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;



/* Blacklisted HELO's */
CREATE TABLE checkhelo_blacklist (
	ID			SERIAL,

	Helo			VARCHAR(255) NOT NULL,

	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	UNIQUE (Helo)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;

INSERT INTO checkhelo_blacklist (Helo,Comment) VALUES
	('127.0.0.1','Blacklist hosts claiming to be 127.0.0.1');

INSERT INTO checkhelo_blacklist (Helo,Comment) VALUES
	('[127.0.0.1]','Blacklist hosts claiming to be [127.0.0.1]');

INSERT INTO checkhelo_blacklist (Helo,Comment) VALUES
	('localhost','Blacklist hosts claiming to be localhost');

INSERT INTO checkhelo_blacklist (Helo,Comment) VALUES
	('localhost.localdomain','Blacklist hosts claiming to be localhost.localdomain');



/* Whitelisted CIDR's */
CREATE TABLE checkhelo_whitelist (
	ID			SERIAL,

	Source			VARCHAR(512) NOT NULL,  /* Valid format is:    SenderIP:a.b.c.d[/e]  */

	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	UNIQUE (Source)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;



/* Helo tracking table */
CREATE TABLE checkhelo_tracking (
	Address			VARCHAR(64) NOT NULL,
	Helo			VARCHAR(255) NOT NULL,
	LastUpdate		BIGINT UNSIGNED NOT NULL,

	UNIQUE (Address,Helo)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;
CREATE INDEX checkhelo_tracking_idx1 ON checkhelo_tracking (LastUpdate);



/* SPF checking */

/*
    NULL means to inherit
*/
CREATE TABLE checkspf (
	ID			SERIAL,

	PolicyID		BIGINT UNSIGNED,

	Name			VARCHAR(255) NOT NULL,

	/* Do we want to use SPF?  1 or 0 */
	UseSPF				SMALLINT,
	/* Reject when SPF fails */
	RejectFailedSPF			SMALLINT,
	/* Add SPF header */
	AddSPFHeader			SMALLINT,

	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	FOREIGN KEY (PolicyID) REFERENCES policies(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;




/* Greylisting */

/*
    NULL means to inherit
*/
CREATE TABLE greylisting (
	ID			SERIAL,

	PolicyID		BIGINT UNSIGNED,

	Name			VARCHAR(255) NOT NULL,


	/* General greylisting settings */
	UseGreylisting			SMALLINT,  /* Actually use greylisting */
	GreylistPeriod			BIGINT UNSIGNED,  /* Period in seconds to greylist for */

	/* Record tracking */
	Track				VARCHAR(255) NOT NULL,  /* Format:   <type>:<spec>
							SenderIP - This takes a bitmask to mask the IP with, A good default is /24
						*/

	/* Bypass greylisting: sender+recipient level */
	GreylistAuthValidity		BIGINT UNSIGNED,  /* Period for which last authenticated greylist entry is valid for.
						    This effectively bypasses greylisting for the second email a sender
						    sends a recipient. */
	GreylistUnAuthValidity		BIGINT UNSIGNED,  /* Same as above but for unauthenticated entries */


	/* Auto-whitelisting: sending server level */
	UseAutoWhitelist		SMALLINT,  /* Use auto-whitelisting */
	AutoWhitelistPeriod		BIGINT UNSIGNED,  /* Period to look back to find authenticated triplets */
	AutoWhitelistCount		BIGINT UNSIGNED,  /* Count of authenticated triplets after which we auto-whitelist */
	AutoWhitelistPercentage		BIGINT UNSIGNED,  /* Percentage of at least Count triplets that must be authenticated
							   before auto-whitelisting. This changes the behaviour or Count */

	/* Auto-blacklisting: sending server level */
	UseAutoBlacklist		SMALLINT,  /* Use auto-blacklisting */
	AutoBlacklistPeriod		BIGINT UNSIGNED,  /* Period to look back to find unauthenticated triplets */
	AutoBlacklistCount		BIGINT UNSIGNED,  /* Count of authenticated triplets after which we auto-whitelist */
	AutoBlacklistPercentage		BIGINT UNSIGNED,  /* Percentage of at least Count triplets that must be authenticated
							   before auto-whitelisting. This changes the behaviour or Count */

	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	FOREIGN KEY (PolicyID) REFERENCES policies(ID)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;


/* Whitelisted */
CREATE TABLE greylisting_whitelist (
	ID			SERIAL,

	Source			VARCHAR(255) NOT NULL,  /* Either CIDR  a.b.c.d, a.b.c.d/x, or reversed   host*-*.whatever.com */

	Comment			VARCHAR(1024),

	Disabled		SMALLINT NOT NULL DEFAULT '0',

	UNIQUE (Source)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;



/* Auto-whitelistings */
CREATE TABLE greylisting_autowhitelist (
	ID			SERIAL,

	TrackKey		VARCHAR(512) NOT NULL,

	Added			BIGINT UNSIGNED NOT NULL,
	LastSeen		BIGINT UNSIGNED NOT NULL,

	Comment			VARCHAR(1024),

	UNIQUE (TrackKey)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;



/* Auto-blacklistings */
CREATE TABLE greylisting_autoblacklist (
	ID			SERIAL,

	TrackKey		VARCHAR(512) NOT NULL,

	Added			BIGINT UNSIGNED NOT NULL,

	Comment			VARCHAR(1024),

	UNIQUE (TrackKey)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;



/* Greylist triplet tracking table */
CREATE TABLE greylisting_tracking (

	TrackKey		VARCHAR(512) NOT NULL, /* The address really, masked with whatever */
	Sender			VARCHAR(255) NOT NULL,
	Recipient		VARCHAR(255) NOT NULL,

	FirstSeen		BIGINT UNSIGNED NOT NULL,
	LastUpdate		BIGINT UNSIGNED NOT NULL,

	Tries			BIGINT UNSIGNED NOT NULL,  /* Authentication tries */
	Count			BIGINT UNSIGNED NOT NULL,  /* Authenticated count */

	UNIQUE(TrackKey,Sender,Recipient)
) TYPE=InnoDB CHARACTER SET latin1 COLLATE latin1_bin;
CREATE INDEX greylisting_tracking_idx1 ON greylisting_tracking (LastUpdate,Count);



INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:127.0.0.0/8','Local loopback address',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:192.168.0.0/16','Private range',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:10.0.0.0/8','Private range',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:172.16.0.0/12','Private range',0);

INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:12.5.136.141','Southwest Airlines (unique sender, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:12.5.136.142','Southwest Airlines (unique sender, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:12.5.136.143','Southwest Airlines (unique sender, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:12.5.136.144','Southwest Airlines (unique sender, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:63.169.44.143','Southwest Airlines (unique sender, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:63.169.44.144','Southwest Airlines (unique sender, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:12.107.209.244','kernel.org mailing lists (high traffic, unique sender per mail)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:64.124.204.39','moveon.org (unique sender per attempt)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:64.125.132.254','collab.net (unique sender per attempt)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:66.135.209.0/24','Ebay (for time critical alerts)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:66.218.66.0/24','Yahoo Groups servers (common pool, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:66.218.67.0/24','Yahoo Groups servers (common pool, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:66.218.69.0/24','Yahoo Groups servers (common pool, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:66.94.237.0/24','Yahoo Groups servers (common pool, no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:204.107.120.10','Ameritrade (no retry)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:207.115.63.0/24','Prodigy (broken software that retries continually with no delay)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:205.206.231.0/24','SecurityFocus.com (unique sender per attempt)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:209.132.176.174','Sourceware.org mailing lists (high traffic, unique sender per mail)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:211.29.132.0/24','optusnet.com.au (wierd retry pattern and more than 48hrs)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:213.136.52.31','Mysql.com (unique sender)',0);
INSERT INTO greylisting_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:217.158.50.178','AXKit mailing list (unique sender per attempt)',0);


INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:127.0.0.0/8','Local loopback address',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:192.168.0.0/16','Private range',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:10.0.0.0/8','Private range',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:172.16.0.0/12','Private range',0);

INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:196.207.32.0/24','Vodacom South Africa mailservers behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:24.71.223.10','SHAW.CA - Residential 1, behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:64.59.128.220','SHAW.CA - Business 1, behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:64.59.134.9','SHAW.CA - Residential 2, behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:196.2.16.0/24','Mweb South Africa, behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:196.211.173.234','Internet Solutions South Africa, mailserves behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:196.25.30.66','saoutsourcing.com - Servers behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:207.46.51.80','Bigfish.com - Servers behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:216.32.180.0/22','Bigfish.com - Servers behind single IP',0);
INSERT INTO checkhelo_whitelist (Source,Comment,Disabled) VALUES ('SenderIP:213.199.154.10','Bigfish.com - Servers behind single IP',0);

