quick order of operations

host connects
look up host in list
looks at now, last seen time
at least interval seconds? ok, if not reject
helo statement
look up host entry, compare time seen
reject or allow based on interval
mail from statement
look up address entry, compare times seen
fail or allow based on interval

everything else passes with entry added or updated
all throttle actions (fail, reject) logged