Rate limit login page

[roedie]

Hi,

I want to apply some rate limiting, or even deny acces to our login page 
when more than X requests are done withing 10 seconds.

I think I need to create acl's based on the method used (POST), the url 
used, and the http response code 303. But, I'm not really sure how to do 
this.

I can get the post and the url, but what can I use to get the response 
code?

Greets,

Sander