Need a few simple features added to your ratelimit command to make it
very useful.
Need a command where if the ACL is true will affect the count but not
return a result to the ACL.
and
Need a command to read a count and return a result but not affect the
count.
The idea here is that one event is counted and that a different acl does
the blocking. And example is a dictionary attack. One acl is counting
the times that a bad recipient is being triggered and after a certian
number of bad recipients another acl will return defer to any connection
for a period of time.
Another example is to combine the IP adress with the from address and
count non-spams and once a sender has send a few good emails they get
whitelisted for a time bypassing spam assassin. This reduces system load
by fast tracking good email.
If you get really inspired how about a hints database that is mySQL
driven so that the data can be shared across several servers?
Thanks in advance, and thanks for a great piece of software.
