Re: Geo location lookup multiple rules

Hi Homesh,

On Mon, May 30, 2022 at 12:17:56AM +0530, homesh joshi wrote:
> I have multiple virtual host entries in apache
> 
> in each virtual host I have rule like this
> 
> SecGeoLookupDb /etc/modsecurity/maxmind4.dat
> SecRule REMOTE_ADDR "@geoLookup" "phase:1,log,chain,id:2,drop,msg:'Geolocation Blocked'"
> SecRule GEO:COUNTRY_CODE "@pm CN PE IR"

are you sure? I mean do you have these rules with *same id*?

> My query is the line SecGeoLookupDb /etc/modsecurity/maxmind4.dat present
> in each virtual host. Is it required in each or can I define it once
> globally.

you do not need to define it in each vhost. Also you can use the
SecRule with "id:2" above only once (except if you change the
country codes per vhost, of course).




a.



_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/