Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.
This initial development release for httpbl (D8) represents a major upgrade and re-write. It was started with a clean slate, however it maintains all the primary functionality that the module has provided since the original D5 version—namely, checking IP addresses during page requests OR comment submissions, against Project Honeypot (.org), and determining whether or not to locally blacklist, grey-list or white-list those IPs based on any found threat scores (or the absence of any scores).
Database caching, decreasing the number of DNS lookups
Honeypot link placement on ban page and optionally in footer
Whitelisting through the httpbl cache table
Blacklisted IPs banned (added to Drupal blocked_ips table)
Greylisting: grants the user access if they pass a simple test
Optional: Checking only when a comment is placed, appends a message to blocked comments for easier admin identification, and queues the unpublished comment for moderation if the lookup is positive
Basic statistics on the number of blocked visits
Optional 3 levels of logging (Error only, Positive Lookups or Verbose - for testing and gaining trust)
Greylisting threat-level threshold configurable in admin settings.
Blacklisting threat-level threshold configurable in admin settings.
Length of time cached visits are held are determined by configurable settings (not hard coded)
Default Views included (identify blocked and whitelisted IPs with links to their Honeypot profiles)
This release candidate is based on the 6.x-2.x-dev ("alternate fork") for this project, which has been production field tested for nearly three years. It's also the fork that is used on Drupal.org.
This release candidate is based on the 6.x-2.x-dev ("alternate fork") for this project, which has been production field tested for nearly two years. It's also the fork that is used on Drupal.org.
It includes bug fixes and some new features that were first introduced in the Drupal 7 version.
Development release for Drupal 7.x.
(This is stable enough to run in production environments, but use at your own risk)
Note: Thanks to API changes in Drupal 7, the conditions that made logging problematic for the D6 version of httpbl are no longer issues. This version takes advantage of those API changes and offers more (or less) logging options, and also more error messaging in the UI, in the event that real people are blocked while attempting to leave comments.
Development release for Drupal 6.x. The code is greatly cleaned up and request block efficiency should have increased greatly because of optimized hook_boot and hook_init usage. This allows the request to be blocked as early on in the bootstrap as possible. Furthermore the module can leverage the Drupal access table to deny requests to blacklisted users even earlier (just after the database is bootstrapped).
This release fixes a small issue which however broke version 2.0. If you were using version 2.0 then you might consider emptying the httpbl database table to remove any cached data.
This release adds a lot of bug fixes, PostgreSQL compatibility (thanks to jaydub), an option to check only on comments (thanks to msameer) and (finally) some basic statistics!