Re: ModSec / CRS: Use of GeoIP & ASN information

Joel Williams <[email protected]> Wed, 19 Oct 2022 11:50:45 +1030
Newsgroups gmane.comp.apache.mod-security.user
Message-ID <[email protected]>
VGhhbmtzIENocmlzdGlhbiEgSSBlbmpveWVkIHRoZSBhcnRpY2xlLgoKSSBhZ3JlZSB0aGF0IEFT
TiBpcyB1bmRlcnJhdGVkIC0gSSBnZXQgYSBsb3Qgb2Ygc2NhbnMgZnJvbSB3ZWxsLWtub3duIGFu
ZCBnZW5lcmFsbHkgcmVwdXRhYmxlIGNsb3VkIHByb3ZpZGVycyB3aGljaCBvcGVyYXRlIGluIG11
bHRpcGxlIGNvdW50cmllcywgYW5kIGJsb2NraW5nIHRoZXNlIHByb3ZpZGVycyBzZWVtcyBsaWtl
IGEgbXVjaCBzYWZlciB3YXkgdG8gYXZvaWQgZmFsc2UgcG9zaXRpdmVzIHRoYW4gZG9pbmcgaXQg
YnkgY291bnRyeS4gSG93ZXZlciB0aGVyZSBpcyBzdGlsbCBhIHJpc2sgdGhhdCBwZW9wbGUgYXJl
IHVzaW5nIHBlcnNvbmFsIFZQU2VzIHRvIHJ1biBwcm94aWVzIG9yIGhhdmUgZ29vZCByZWFzb25z
IHRvIHVzZSBzZXJ2aWNlcyBsaWtlIFRvci4gV2hpbGUgdGhpcyBpcyBwcm9iYWJseSBub3QgYSB2
ZXJ5IHNpZ25pZmljYW50IHByb3BvcnRpb24gb2YgcGVvcGxlIEnigJltIHJlbHVjdGFudCB0byBi
bG9jayBhY2Nlc3MgdG8gY3VzdG9tZXIgc2l0ZXMgb3V0cmlnaHQgd2l0aCBubyByZWNvdXJzZSBm
b3IgdGhlc2UgdXNlcnMuIE9uIHRoZSBvdGhlciBoYW5kLCBibG9ja2luZyBhY2Nlc3MgYnkgdGhl
c2UgQVNOcyB0byBzcGVjaWZpYyByZXNvdXJjZXMgbGlrZSB0aGUgV29yZFByZXNzIHdwLWxvZ2lu
LnBocCBwYWdlIHdvdWxkIHByb2JhYmx5IGJlIE9LLgoKT25lIGlkZWEgSeKAmW0gdG95aW5nIHdp
dGggaXMgY3JlYXRpbmcgYW4gaW50ZXJzdGl0aWFsIHBhZ2Ugc2ltaWxhciB0byBDbG91ZGZsYXJl
4oCZcyDigJxDaGVja2luZyB5b3VyIGJyb3dzZXIuLuKAnSBwYWdlLiBGb3IgQVNOcyB3aGljaCBh
cmUgcHJvYmxlbWF0aWMgaXQgd291bGQgYmUgYSBiaXQgc2FmZXIgdG8gZm9yY2Ugc29tZW9uZSB0
byBwZXJmb3JtIGEgaENhcHRjaGEgb3Igc29tZXRoaW5nIGNoZWNrIGJlZm9yZSB0aGV5IGNhbiBn
ZXQgdGhyb3VnaCB0byB0aGUgaW50ZW5kZWQgc2l0ZSBhbmQgc2V0IGEgY29va2llLiBJIHRoaW5r
IHRoaXMgbWlnaHQgYmUgcG9zc2libGUgYnV0IGEgbGl0dGxlIGJpdCBkaWZmaWN1bHQgdG8gY3Jl
YXRlIGVudGlyZWx5IHVzaW5nIG1vZF9zZWN1cml0eSB0aG91Z2gsIHNvIEnigJltIHRoaW5raW5n
IGFib3V0IHdyaXRpbmcgYSBuZXcgKGFuZCByZWxhdGl2ZWx5IHNpbXBsZSkgQXBhY2hlIG1vZHVs
ZS4gSeKAmWQgbG92ZSB0byBoZWFyIGlmIHNvbWVvbmUgaGFzIGFscmVhZHkgZG9uZSB0aGlzIQoK
Sm9lbAoKPiBPbiAxOSBPY3QgMjAyMiwgYXQgMTI6MDQgYW0sIENocmlzdGlhbiBGb2xpbmkgPGNo
cmlzdGlhbi5mb2xpbmlAbmV0bmVhLmNvbT4gd3JvdGU6Cj4gCj4gSGkgdGhlcmUsCj4gCj4gRHVy
aW5nIHRoZSB5ZWFycywgSSBoYXZlIGZvdW5kIHRoZSB1c2Ugb2YgR2VvSVAgKCYgQVNOKSBpbmZv
cm1hdGlvbiBpbiAKPiAjTW9kU2VjdXJpdHkgLyBAQ29yZVJ1bGVTZXQgdmVyeSB1c2VmdWwuIFll
dCB2ZXJ5IGZldyBwZW9wbGUgZG8gCj4gdGhpcyBmb3IgR2VvSVAgYW5kIHByYWN0aWNhbGx5IG5v
Ym9keSBmb3IgQVNOLiAKPiAKPiBJdCByZWFsbHkgaGVscHMgdG8gd2VlZCBvdXQgZmFsc2UgcG9z
aXRpdmVzIG9yIGRlZmVuZCBpbiBjYXNlIG9mIGNlcnRhaW4gCj4gcGVyc2lzdGVudCBhdHRhY2tz
Lgo+IAo+IFNpbmNlIGdvb2QgZG9jdW1lbnRhdGlvbiBvbiB0aGUgc3ViamVjdCBpcyBzY2FyZSwg
aGVyZSBpcyBob3cgdG8gZ2V0IHRoaXMgCj4gaW50byB5b3VyIHNldHVwOgo+IAo+IGh0dHBzOi8v
d3d3Lm5ldG5lYS5jb20vY21zLzIwMjIvMTAvMTIvdXNpbmctZ2VvaXAtaW5mb3JtYXRpb24tdG9n
ZXRoZXItd2l0aC1tb2RzZWN1cml0eS8oQWxzbyBjb3ZlcmVkIGluIG15IDJuZCB3ZWJjYXN0IGxh
c3Qgd2VlazogaHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj1PQlZ3ZHFFRm1YMCkKPiAK
PiBJIGhhdmUgYWxzbyBjb3ZlcmVkIHRoaXMgaW4gbXkgMm5kIE1vZFNlYyAvIENSUyB3ZWJjYXN0
IGxhc3Qgd2VlayAocGx1cyBzb21lCj4gYWRkaXRpb25hbCBpbnRlcmVzdGluZyBzdHVmZik6Cj4g
aHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj1PQlZ3ZHFFRm1YMAo+IAo+IEJlc3QsCj4g
Cj4gQ2hyaXN0aWFuCj4gCj4gCj4gLS0gCj4gVWx0aW1hdGVseSwgbW90aXZhdGlvbiBnZXRzIHVz
IHN0YXJ0ZWQsIAo+IGJ1dCBkaXNjaXBsaW5lIGFuZCBoYWJpdCBhcmUgd2hhdCBlbmFibGUgdXMg
dG8gZmluaXNoLgo+IC0tIE1hdHRoZXcgSGVsbWtlCj4gCj4gCj4gX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX18KPiBtb2Qtc2VjdXJpdHktdXNlcnMgbWFpbGlu
ZyBsaXN0Cj4gbW9kLXNlY3VyaXR5LXVzZXJzQGxpc3RzLnNvdXJjZWZvcmdlLm5ldAo+IGh0dHBz
Oi8vbGlzdHMuc291cmNlZm9yZ2UubmV0L2xpc3RzL2xpc3RpbmZvL21vZC1zZWN1cml0eS11c2Vy
cwo+IENvbW1lcmNpYWwgTW9kU2VjdXJpdHkgUnVsZXMgYW5kIFN1cHBvcnQgZnJvbSBUcnVzdHdh
dmUncyBTcGlkZXJMYWJzOgo+IGh0dHA6Ly93d3cubW9kc2VjdXJpdHkub3JnL3Byb2plY3RzL2Nv
bW1lcmNpYWwvcnVsZXMvCj4gaHR0cDovL3d3dy5tb2RzZWN1cml0eS5vcmcvcHJvamVjdHMvY29t
bWVyY2lhbC9zdXBwb3J0LwoKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fXwptb2Qtc2VjdXJpdHktdXNlcnMgbWFpbGluZyBsaXN0Cm1vZC1zZWN1cml0eS11
c2Vyc0BsaXN0cy5zb3VyY2Vmb3JnZS5uZXQKaHR0cHM6Ly9saXN0cy5zb3VyY2Vmb3JnZS5uZXQv
bGlzdHMvbGlzdGluZm8vbW9kLXNlY3VyaXR5LXVzZXJzCkNvbW1lcmNpYWwgTW9kU2VjdXJpdHkg
UnVsZXMgYW5kIFN1cHBvcnQgZnJvbSBUcnVzdHdhdmUncyBTcGlkZXJMYWJzOgpodHRwOi8vd3d3
Lm1vZHNlY3VyaXR5Lm9yZy9wcm9qZWN0cy9jb21tZXJjaWFsL3J1bGVzLwpodHRwOi8vd3d3Lm1v
ZHNlY3VyaXR5Lm9yZy9wcm9qZWN0cy9jb21tZXJjaWFsL3N1cHBvcnQvCg==