I've installed TracSpamPlugin globally and prepared every instance so that project trac admins can enable the plugin autonomously (required a database structure upgrade for spam management tables). See https://trac.edgewall.org/wiki/SpamFilter for usage instructions. --strk;