I suggest two major features for discussion:

1. Cisco-like rule filtering with options
- to move rules up and down or completely turn off some filtering rule.
- to create versatile filters, like apply several rules, see if the email is coming from somebody, yes - allow, if not, apply 2 more rules down the list, check somebody else and so on.

2. Cisco-like log viewing with possibility to filter current view with regard to certain filters. i.e. when I type somebody@gmail.com, log will start showing all transactions coming from this email, including filtering steps done and the outcome. Or I want to monitor RCPT TO, IP, country whatever.

These features together could greatly improve security management and debugging. What do you think of them?