if there's no whitelist, the address does *not* match.  greylist
processing is gated by the gflag already.