alwilson / evil Goto Github PK

Hi!
As far as I understand this module, it marks all packets from a host. My services are mostly benignn but some of them (e.g. my private smtpd) are set up to become hostile depending on what the peer sends (e.g. requesting login methods that I don't like).
Could you adapt your module so I can flag specific connections just before starting to send evil data? Would be nice if I could use the combination of process ID + file descriptor number to select them.
I currently don't have a use case to revoke this decision (i.e. stop marking that connection's data as evil), but if it's few effort, that feature would probably be nice to have as well.

PS: Would be even better if we can figure out a way to allow non-superuser processes to configure the evil bit for sockets they have write access to.