mod_audit_auth: Ignore FAST authentication events by default FAST is more like a cookie that allows linking new connections to a previous (e.g. password) authentication. Since we assume that FAST tokens are secure (not user generated) and not shareable, it reduces a lot of noise by filtering out uninteresting authentication events.

module:depends("smacks");

module:hook("smacks-ack-delayed", function (event)
	if event.origin.type == "s2sin" or event.origin.type == "s2sout" then
		event.origin:close("connection-timeout");
		return true;
	end
end);