The slowmilt milter uses two databases:
The keys for the Events
database are a combination of an IP address and a date/time, where the
date/time is in binary in Unix time_t format.
For version 1 of the database (where no version information is stored)
the data for the IP address database is an ever growing aray
of date/time entries.
The next version of the IP address database will use the zeroth
date/time as a flag to signal such things as whitelisting and aliases.
In this next version, IP address 0.0.0.0 will hold the version number.
The data for the Events database is a structure that looks like this:
The items in this datum structure (together) define a single event.
See the standard event set for a
description of what the items in this structure mean. Also see
slow.h in the source distribution to understand the ordering
of bits in
eventmap
.
Both databases together constitute the database. The database can be dumped to a file using the slowedit list command, and that text output can be later be fed back into the slowlist rebuild command to recreate the database.