Somebody have time to write a maillog script? The script would take the two key anvil params as command line params, the connection limit and the unit_time, and then scan a maillog for:
/smtpd.* connect from/ .... and report on the IPs that would have been anvilled. By playing with the params for a day or two of maillogs, an admin could see what values would work best for him (don't ask me what best is!!) Len
