mod_access_rbl2 1.1

mod_access_rbl2 is an Apache module that can control access to a site using DNSbl lookups.

Installation:

Use the options --disable-module=access --add-module=mod_access_rbl.c
to configure then build as normal.

Use:

This adds the options:

allow via [dns-server]
deny via [dns-server]

that can be used anywhere other allow and deny statements can be. The [dns-server] can be any dns server that answers queries like the MAPS RBL server. (The IP address of the client, with the quads reversed, is prepended before any dns lookup. If an address is returned, there is a match.)

Example:

order allow,deny
allow from all
deny via rbl.maps.vix.com

This will deny all requests from systems listed in the MAPS RBL. See http://mail-abuse.org/rbl/ for details on the MAPS RBL project.

Performance impact:

This module will perform a dns lookup every time a "deny via" access is tested. Perhaps future versions can have a cache of recently tested systems.

Impact when not using this new feature should be negligible.