By popular demand: ReverseDOS now provides a way to allow specified directories to be ignored. This means that instead of only being able to trust specific IPs as non-spammer addresses, you can now tell ReverseDOS to skip scanning when requests or posts are directed against specified directories.

So your /blog/admin/ directory (for example) can now be 'trusted' as safe by ReverseDOS. (Of course, your site likely requires people to login to be able to access that directory - so using 'trusted' directories can now make posting new content to your site easier - no worries about burning yourself on the default rule that blocks anything with greater than urls in the body of the post.)

Here's what's been added to the configuration instructions to help explain how the functionality can be leveraged, as well as a describe a few things about how the directory can't be spoofed: 

ReverseDOS 2.9 also introduces the ability to 'trust' entire directories on your site. Logically you'll want these to be directories that require authentication - such as /admin/ or /posts/ directories and the likes. To trust a directory, just specify another anti-pattern in the <trustedAddresses> node using the <directory> element as follows:

<trustedAddresses>
<directory pattern="/blog/admin/" />
</trustedAddresses>		  

While isRegex is a viable option for trusted directories (the default is false), you'll probably find that you get better results by just specifying the desired directory as a simple string/pattern match - making sure to be as specific as possible.

A note on how trusted directories are located: As the name indicates, only directories can be trusted at this point. So if you set up a trusted directory with the pattern "admin" the following would be true:
- /blog/admin/doSomething.aspx?somevalue=viagra :: trusted (despite viagra in the url)
- /admin/ :: trusted (obviously)
- /publicArea/photos/index.aspx?sneakySpammer=admin :: not trusted - even though admin is in the url, it's NOT a directory - and therefore can't be spoofed.
- /somepage/admin.aspx :: trusted - woops. (Nobody's perfect - and if you want to make sure that your pattern only matches a directory, just use "/admin/" etc.)

So, download and use it now. If you're upgrading from 2.8, you'll just need to drop in the new assemblies - otherwise, just follow the simple installation instructions and you'll be up and running within just a few minutes.