ev_tcp:
    accept condition = ${if eq {$event_name}{tcp:connect}}
	   logwrite = . [$host_address]:$host_port
    accept condition = ${if eq {$event_name}{tcp:close}}
	   logwrite = . [$sending_ip_address] -> \
			[$host_address]:$host_port
    accept logwrite =	UNEXPECTED $event_name

ev_smtp:
    warn
	   logwrite = . [$sending_ip_address] -> \
			[$host_address]:$host_port
    accept condition = ${if eq {$event_name}{smtp:connect}}
	   logwrite = . banner <$event_data>
    accept condition = ${if eq {$event_name}{smtp:ehlo}}
	   logwrite = . ehlo-resp <$event_data>
    accept logwrite =	UNEXPECTED $event_name

ev_msg_fail:
    accept condition = ${if eq {$event_name}{msg:fail:delivery}}
	   logwrite = . \
	    refused by fdqn <$host> \
	    local_part <$local_part> \
	    domain <$domain> \
	    errstr <$event_data> \

    accept logwrite = . \
	    local_part <$local_part> \
	    domain <$domain> \
	    reason <$event_data>

ev_msg_log:
    accept logwrite = . \
	    $acl_arg1 \
	    ip <$host_address> \
	    port <$host_port> \
	    fqdn <$host> \
	    local_part <$local_part> \
	    domain <$domain> \
	    $acl_arg2 \
	    router <$router_name> \
	    transport <$transport_name>

ev_msg:
    accept condition = ${if eq {fail} {${listextract{2}{$event_name}}}}
	   acl = ev_msg_fail

    accept condition = ${if eq {$event_name}{msg:complete}}
	   logwrite = . finished: $message_exim_id

    accept condition = ${if eq {$domain}{expansionfail}}
	   logwrite = $this_expansion_will_fail

    accept condition = ${if eq {$event_name}{msg:delivery}}
	   acl = ev_msg_log delivery "confirmation <$event_data>"

    accept condition = ${if eq {$event_name}{msg:defer}}
	   acl = ev_msg_log "message deferral" \
			"errno <$event_defer_errno> errstr <$event_data>"

    accept condition = ${if eq {$event_name}{msg:host:defer}}
	   acl = ev_msg_log "host deferral" \
			"errno <$event_defer_errno> errstr <$event_data>"

    accept condition = ${if eq {$event_name}{msg:rcpt:defer}}
	   set acl_m_ev_lkup =	${eval:$event_defer_errno & 0xff}
	   set acl_m_ev_lkup =	${if = {$acl_m_ev_lkup}{65} {A} \
				{ ${if = {$acl_m_ev_lkup}{77} {MX} \
				  {$acl_m_ev_lkup}}}}
	   set acl_m_ev_code =  4${eval:$event_defer_errno >>8}
	   acl = ev_msg_log "rcpt deferral" \
			"err <$event_defer_errno>:<$acl_m_ev_lkup:$acl_m_ev_code> \
			errstr <$event_data>"

    accept condition = ${if eq {$event_name}{msg:rcpt:host:defer}}
    accept logwrite =	UNEXPECTED $event_name

ev_auth:
    accept condition = ${if eq {$event_name}{auth:fail}}
	   logwrite = . \
		      "auth fail" \
		      event_data <$event_data> \
		      sender_host_authenticated <$sender_host_authenticated> \
		      authenticated_fail_id <$authenticated_fail_id>

    accept logwrite =	UNEXPECTED $event_name

logger:
    warn   logwrite = event $event_name
	   set acl_m1 = ${listextract{1}{$event_name}}
    accept condition =	${if inlist{$acl_m1}{tcp:smtp:msg:auth}}
	   acl =	ev_$acl_m1
    accept logwrite =	UNEXPECTED $event_name