Authentication Penalty with ID x-originating-ip, HAproxy

[Tobias]

The wiki states that anvil's authentication penalties are skipped when 
IP is in login_trusted_networks.
http://wiki.dovecot.org/Authentication/Penalty

Is there a way to enable the authentication penalties for specific 
advertised remote IPs, when the connecting IP is in 
"login_trusted_networks", and it advertises the originating remote IP 
via 'ID ("x-originating-ip", "<remote-ip>")'?

And with regards to HAproxy, is anvil's authentication penalties by 
default transparent with regards to the remote IP advertised in the 
proxy protocol header?

/Tobias