The slowmilt milter uses two databases:
The keys for the Events
database are a combination of an IP address and a date/time, where the
date/time is in binary in Unix time_t format.
For version 1 of the database (where no version information is stored)
the data for the IP address database is an ever growing aray
of date/time entries.
The next version of the IP address database will use the zeroth
date/time as a flag to signal such things as whitelisting and aliases.
In this next version, IP address 0.0.0.0 will hold the version number.
The data for the Events database is a structure that looks like this:
The items in this datum structure (together) define a single event.
See the standard event set for a
description of what the items in this structure mean. Also see
slow.h in the source distribution to understand the ordering
of bits in
Both databases together constitute the database. The database can be dumped to a file using the slowedit list command, and that text output can be later be fed back into the slowlist rebuild command to recreate the database.