mod_audit_auth: Ignore FAST authentication events by default FAST is more like a cookie that allows linking new connections to a previous (e.g. password) authentication. Since we assume that FAST tokens are secure (not user generated) and not shareable, it reduces a lot of noise by filtering out uninteresting authentication events.

Introduction
============

This module checks the IP address of newly registered users against a
DNS block list. If a positive match is found, it gets logged.

Configuration
=============

  Option              Type     Default
  ------------------- -------- ------------
  registration\_rbl   string   *Required*