Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I only found this: and that is from 2008

Is there any newer apache mod that is up-to-date?

Someone has experience with it? Maybe mod_defensible?

share|improve this question

I've been in the hosting industry for years now and I've never even heard of these 2 ever being brought up in the industry by other professionals. Honestly, I would consider them "dead". Not too mention that the idea of blocking at Apache's level is not the best. You can better block IPs at the firewall and prevent them from hitting the server all together.

share|improve this answer
depending on your use case scenario, these modules can be very useful. most illicit crawlers (which scan for holes in web applications) almost never probe anything else of the server. moreover, the code required to block something using a DNSBL service is incredibly small and requires little afterthought. considering that mod_defensible is in the latest ubuntu repository, I wouldent consider them "dead". – RapidWebs Oct 7 '14 at 0:54

I've found a x86 64-bit version 0.7-6 Mandriva Linux build from February 2012, so I guess it's still being used and Luca Ercoli's original mod_spamhause code still receives some attention every now and then, albeit in two year steps it seems.

Latest distributable package that I could find is version 0.7-1 on Debian. Only looking at the date the code was last changed alone doesn't tell you plenty on how much it's still used or how well it functions, though. I've run through the code (as explained in another question you asked) and I see no reason why it would need much changing anyway, so it might simply work and there's no need to change it. If it checks with Spamhaus DNSBL fast enough, and enables you to add custom BL and WL local rules, then 'it does what it say on the box'.

Spamhaus project is alive and kicking (literally) as strong as it ever was, so I really see no reason why you wouldn't give mod_spamhause a try.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.