Geo location lookup multiple rules

homesh joshi <[email protected]> Mon, 30 May 2022 00:17:56 +0530

Newsgroups	gmane.comp.apache.mod-security.user
Message-ID	<CAAjxK7skO1XDx700mJhnbdUdDT-ohHGmQ=-Wc_vZQW2KftS55A@mail.gmail.com>

Hi All,

I have multiple virtual host entries in apache

in each virtual host I have rule like this

SecGeoLookupDb /etc/modsecurity/maxmind4.dat
SecRule REMOTE_ADDR "@geoLookup"
"phase:1,log,chain,id:2,drop,msg:'Geolocation Blocked'"
SecRule GEO:COUNTRY_CODE "@pm CN PE IR"

My query is the line SecGeoLookupDb /etc/modsecurity/maxmind4.dat present
in each virtual host. Is it required in each or can I define it once
globally. will it cause apache to load the file multiple times in memory or
it will load only once.

Please suggest.

Thanks,
Homesh

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/