Have you restricted websocket access? That nginx hack thing you did maybe?
Signing events uses the relay. So a policy could also affect it.
I switched to the generic ditto nginx config per the install. So no more rate limiting.
And it's still happening? We do rate limit out of the box now, so you don't need any extra hacks.