let's have a simple maintenance function:
addDynBlocks(exceedQRate(20, 5), "Exceeded query rate", 3)
addDynBlocks(exceedNXDOMAINs(5, 5), "Exceeded query rate with NXDOMAIN response", 3)
The issue is that just 1st hit is being logged. If I run a test with queries in a loop, the dynBlock is being installed and is expiring but without any notice to the log.
well this was by design - otherwise you get loads of repeated notifications for the same IP address. Or is this not what you mean? The design is that per IP address you get one notification when we install the block. If the block expires and it gets reinstated, then you'd get another notification.
make sure we log if we refresh an expired dynamic rule. Closes #3323