trac spam is now being handled by the SpamFilter PluginOnly one piece of spam, but it was enough to warrant this. I did try ScallyWhack mod_security rules for trac, but it failed on the cookies rule all the time.