ModSec / CRS: Use of GeoIP & ASN information

Hi there,

During the years, I have found the use of GeoIP (& ASN) information in 
#ModSecurity / @CoreRuleSet very useful. Yet very few people do 
this for GeoIP and practically nobody for ASN. 

It really helps to weed out false positives or defend in case of certain 
persistent attacks.

Since good documentation on the subject is scare, here is how to get this 
into your setup:

https://www.netnea.com/cms/2022/10/12/using-geoip-information-together-with-modsecurity/(Also covered in my 2nd webcast last week: https://www.youtube.com/watch?v=OBVwdqEFmX0)

I have also covered this in my 2nd ModSec / CRS webcast last week (plus some
additional interesting stuff):
https://www.youtube.com/watch?v=OBVwdqEFmX0

Best,

Christian


-- 
Ultimately, motivation gets us started, 
but discipline and habit are what enable us to finish.
-- Matthew Helmke


_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/