Re: ModSec / CRS: Use of GeoIP & ASN information
Christian Folini <[email protected]> Wed, 19 Oct 2022 09:25:09 +0200
| Newsgroups | gmane.comp.apache.mod-security.user |
|---|---|
| Message-ID | <20221019072509.GA1738856@leander> |
SGV5IEpvZWwsCgpPbiBXZWQsIE9jdCAxOSwgMjAyMiBhdCAxMTo1MDo0NUFNICsxMDMwLCBKb2Vs IFdpbGxpYW1zIHdyb3RlOgo+IFRoYW5rcyBDaHJpc3RpYW4hIEkgZW5qb3llZCB0aGUgYXJ0aWNs ZS4KClRoYW5rIHlvdSB2ZXJ5IG11Y2guIE9uZSBnZXRzIHZlcnkgbGl0dGxlIGZlZWRiYWNrIGZv ciB0ZWNobmljYWwgYmxvZyBwb3N0cy4KU28gdGhpcyBpcyB2ZXJ5IG11Y2ggYXBwcmVjaWF0ZWQu Cgo+IEkgYWdyZWUgdGhhdCBBU04gaXMgdW5kZXJyYXRlZCAtIEkgZ2V0IGEgbG90IG9mIHNjYW5z IGZyb20gd2VsbC1rbm93biBhbmQKPiBnZW5lcmFsbHkgcmVwdXRhYmxlIGNsb3VkIHByb3ZpZGVy cyB3aGljaCBvcGVyYXRlIGluIG11bHRpcGxlIGNvdW50cmllcywgYW5kCj4gYmxvY2tpbmcgdGhl c2UgcHJvdmlkZXJzIHNlZW1zIGxpa2UgYSBtdWNoIHNhZmVyIHdheSB0byBhdm9pZCBmYWxzZQo+ IHBvc2l0aXZlcyB0aGFuIGRvaW5nIGl0IGJ5IGNvdW50cnkuIEhvd2V2ZXIgdGhlcmUgaXMgc3Rp bGwgYSByaXNrIHRoYXQKPiBwZW9wbGUgYXJlIHVzaW5nIHBlcnNvbmFsIFZQU2VzIHRvIHJ1biBw cm94aWVzIG9yIGhhdmUgZ29vZCByZWFzb25zIHRvIHVzZQo+IHNlcnZpY2VzIGxpa2UgVG9yLiBX aGlsZSB0aGlzIGlzIHByb2JhYmx5IG5vdCBhIHZlcnkgc2lnbmlmaWNhbnQgcHJvcG9ydGlvbgo+ IG9mIHBlb3BsZSBJ4oCZbSByZWx1Y3RhbnQgdG8gYmxvY2sgYWNjZXNzIHRvIGN1c3RvbWVyIHNp dGVzIG91dHJpZ2h0IHdpdGggbm8KPiByZWNvdXJzZSBmb3IgdGhlc2UgdXNlcnMuIE9uIHRoZSBv dGhlciBoYW5kLCBibG9ja2luZyBhY2Nlc3MgYnkgdGhlc2UgQVNOcwo+IHRvIHNwZWNpZmljIHJl c291cmNlcyBsaWtlIHRoZSBXb3JkUHJlc3Mgd3AtbG9naW4ucGhwIHBhZ2Ugd291bGQgcHJvYmFi bHkgYmUKPiBPSy4KCkkgZG8gbm90IGJsb2NrIGJ5IEFTTiBhbmQgSSBkbyBub3QgcmVjb21tZW5k IGRvaW5nIGl0LiBZZXQgSSBza2lwIHNvbWUgb2YKdGhlbSB3aGVuIGRvaW5nIGZhbHNlIHBvc2l0 aXZlIGFuYWx5c2lzLiBNZWFuaW5nLCBpdCdzIE9LIHRvIHVzZSBEaWdpdGFsT2NlYW4KYXMgeW91 ciBwZXJzb25hbCBWUE4gcHJvdmlkZXIsIGJ1dCB3aGVuIHlvdSBoaXQgYSBmYWxzZSBwb3NpdGl2 ZSBvbiBteQp3ZWJzaXRlLCBjaGFuY2VzIGFyZSBJIHdvbid0IHJlYWN0IHRvIGl0IHdpdGhvdXQg YSBjYWxsLgoKTWF5YmUgSSdsbCBmb2xsb3cgdXAgd2l0aCBhIGJsb2cgcG9zdCBvbiBtZWFuIGFu b21hbHkgc2NvcmVzIHBlciBBU04gb24KdGhlIG5ldG5lYSB3ZWJzaXRlLiBJdCdzIHN0YWdnZXJp bmcgaG93IDItMyBBU05zIGFyZSByZWFsbHkgdG9wcGluZy4KCk1lYW4gaW5jb21pbmcgYW5vbWFs eSBzY29yZSBhY3Jvc3MgdGhlIGVudGlyZSBsb2c6IDAuMTMKVVMgQVNOIDUzNjY3OiBQT05ZTkVU OiBNZWFuIGFub21hbHkgc2NvcmUgb2YgMyEKCldoYXQgaXMgYWxzbyBpbnRlcmVzdGluZyAtIGJ1 dCBidW1wcyBpbnRvIHRoZSBzYW1lIFRPUiAvIFZQTiBwcm9ibGVtIC0gaXMgdG8KY2hlY2sgVXNl ci1BZ2VudHMgYWdhaW5zdCBBU05zLiBTbyB5b3UncmUgcHJldGVuZGluZyB0byBiZSBhIE1vemls bGEKKD1hbnkgQnJvd3NlciksIHlldCB5b3UgbGl2ZSBvbiBhIHNlcnZlciBBU04gLi4uCgo+IE9u ZSBpZGVhIEnigJltIHRveWluZyB3aXRoIGlzIGNyZWF0aW5nIGFuIGludGVyc3RpdGlhbCBwYWdl IHNpbWlsYXIgdG8KPiBDbG91ZGZsYXJl4oCZcyDigJxDaGVja2luZyB5b3VyIGJyb3dzZXIuLuKA nSBwYWdlLiBGb3IgQVNOcyB3aGljaCBhcmUgcHJvYmxlbWF0aWMKPiBpdCB3b3VsZCBiZSBhIGJp dCBzYWZlciB0byBmb3JjZSBzb21lb25lIHRvIHBlcmZvcm0gYSBoQ2FwdGNoYSBvciBzb21ldGhp bmcKPiBjaGVjayBiZWZvcmUgdGhleSBjYW4gZ2V0IHRocm91Z2ggdG8gdGhlIGludGVuZGVkIHNp dGUgYW5kIHNldCBhIGNvb2tpZS4gSQo+IHRoaW5rIHRoaXMgbWlnaHQgYmUgcG9zc2libGUgYnV0 IGEgbGl0dGxlIGJpdCBkaWZmaWN1bHQgdG8gY3JlYXRlIGVudGlyZWx5Cj4gdXNpbmcgbW9kX3Nl Y3VyaXR5IHRob3VnaCwgc28gSeKAmW0gdGhpbmtpbmcgYWJvdXQgd3JpdGluZyBhIG5ldyAoYW5k Cj4gcmVsYXRpdmVseSBzaW1wbGUpIEFwYWNoZSBtb2R1bGUuIEnigJlkIGxvdmUgdG8gaGVhciBp ZiBzb21lb25lIGhhcyBhbHJlYWR5Cj4gZG9uZSB0aGlzIQoKQWgsIHRoZSBzd2VldCBwcm9taXNl cyBvZiBhbnRpLWF1dG9tYXRpb24uIDopCgpJJ20gc3VyZSB0aGlzIGhhcyBiZWVuIGRvbmUsIGJ1 dCBJIGhhdmUgbm90IHNlZW4gYSBwdWJsaWMgZGVzY3JpcHRpb24gaG93CnRvIHB1bGwgaXQgb2Zm IHdpdGggb3BlbiBzb3VyY2UgdG9vbHMuIFlldCBJIGRvIG5vdCB0aGluayBpdCB3b3VsZCBiZQp2 ZXJ5IGNvbXBsaWNhdGVkIHdpdGggTW9kU2VjLgoKUHNldWRvLUNvZGU6CiogTW9kU2VjIFJ1bGU6 IGlmIHN1c3BpY2lvdXMgQVNOIGFuZCBubyBjb29raWU6IHJlZGlyZWN0IHRvIENhcHRjaGEKKiBD YXB0Y2hhIFBhZ2U6IGlmIHN1Y2Nlc3NmdWwgY2FwdGNoYTogc2V0IGNvb2tpZQoKU3VzcGljaW91 cyBBU05zIGluIHNlcGFyYXRlIGZpbGUgKC0+IEBwbUZyb21GaWxlKS4KCkkgZ3Vlc3MgdGhhdCdz IGFsbC4KCk5vdyB0aGF0IEkgdGhpbmsgYWJvdXQgaXQsIGl0IHNvdW5kcyBhcyBpZiBpdCB3b3Vs ZCBtYWtlIGZvciBhIGxvdmVseSBibG9nIApwb3N0LgoKVGhpcyBwcmVzZW50YXRpb24gaGVyZSBh cyBtb3JlIGlkZWFzIHRoYXQgY291bGQgYmUgaGFydmVzdGVkIGFuZCBpbXBsZW1lbnRlZAppbiBN b2RTZWN1cml0eTogaHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g/dj1YS2t5dk8yclEtRQoo RG9uJ3QgbGV0IHRoZSB0aXRsZSBmb29sIHlvdSwgYSBsb3Qgb2YgaXQgaXMgYWJvdXQgYW50aS1h dXRvbWF0aW9uLiBBbmQKaXQncyBhIGdyZWF0IHRhbGsgYnR3KQpBbGwgdG9nZXRoZXIgdGhpcyBj b3VsZCBtYWtlIGFuIGludGVyZXN0aW5nIGFudGktYXV0b21hdGlvbiBDUlMgcGx1Z2luLgoKQmVz dCEKCkNocmlzdGlhbgoKCgoKCgoKCgo+IAo+IEpvZWwKPiAKPiA+IE9uIDE5IE9jdCAyMDIyLCBh dCAxMjowNCBhbSwgQ2hyaXN0aWFuIEZvbGluaQo+ID4gPGNocmlzdGlhbi5mb2xpbmlAbmV0bmVh LmNvbT4gd3JvdGU6Cj4gPiAKPiA+IEhpIHRoZXJlLAo+ID4gCj4gPiBEdXJpbmcgdGhlIHllYXJz LCBJIGhhdmUgZm91bmQgdGhlIHVzZSBvZiBHZW9JUCAoJiBBU04pIGluZm9ybWF0aW9uIGluCj4g PiAjTW9kU2VjdXJpdHkgLyBAQ29yZVJ1bGVTZXQgdmVyeSB1c2VmdWwuIFlldCB2ZXJ5IGZldyBw ZW9wbGUgZG8gdGhpcyBmb3IKPiA+IEdlb0lQIGFuZCBwcmFjdGljYWxseSBub2JvZHkgZm9yIEFT Ti4gCj4gPiAKPiA+IEl0IHJlYWxseSBoZWxwcyB0byB3ZWVkIG91dCBmYWxzZSBwb3NpdGl2ZXMg b3IgZGVmZW5kIGluIGNhc2Ugb2YgY2VydGFpbgo+ID4gcGVyc2lzdGVudCBhdHRhY2tzLgo+ID4g Cj4gPiBTaW5jZSBnb29kIGRvY3VtZW50YXRpb24gb24gdGhlIHN1YmplY3QgaXMgc2NhcmUsIGhl cmUgaXMgaG93IHRvIGdldCB0aGlzCj4gPiBpbnRvIHlvdXIgc2V0dXA6Cj4gPiAKPiA+IGh0dHBz Oi8vd3d3Lm5ldG5lYS5jb20vY21zLzIwMjIvMTAvMTIvdXNpbmctZ2VvaXAtaW5mb3JtYXRpb24t dG9nZXRoZXItd2l0aC1tb2RzZWN1cml0eS8oQWxzbwo+ID4gY292ZXJlZCBpbiBteSAybmQgd2Vi Y2FzdCBsYXN0IHdlZWs6Cj4gPiBodHRwczovL3d3dy55b3V0dWJlLmNvbS93YXRjaD92PU9CVndk cUVGbVgwKQo+ID4gCj4gPiBJIGhhdmUgYWxzbyBjb3ZlcmVkIHRoaXMgaW4gbXkgMm5kIE1vZFNl YyAvIENSUyB3ZWJjYXN0IGxhc3Qgd2VlayAocGx1cwo+ID4gc29tZSBhZGRpdGlvbmFsIGludGVy ZXN0aW5nIHN0dWZmKToKPiA+IGh0dHBzOi8vd3d3LnlvdXR1YmUuY29tL3dhdGNoP3Y9T0JWd2Rx RUZtWDAKPiA+IAo+ID4gQmVzdCwKPiA+IAo+ID4gQ2hyaXN0aWFuCj4gPiAKPiA+IAo+ID4gLS0g VWx0aW1hdGVseSwgbW90aXZhdGlvbiBnZXRzIHVzIHN0YXJ0ZWQsIGJ1dCBkaXNjaXBsaW5lIGFu ZCBoYWJpdCBhcmUKPiA+IHdoYXQgZW5hYmxlIHVzIHRvIGZpbmlzaC4gIC0tIE1hdHRoZXcgSGVs bWtlCj4gPiAKPiA+IAo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18gbW9kLXNlY3VyaXR5LXVzZXJzIG1haWxpbmcKPiA+IGxpc3QgbW9kLXNlY3VyaXR5 LXVzZXJzQGxpc3RzLnNvdXJjZWZvcmdlLm5ldAo+ID4gaHR0cHM6Ly9saXN0cy5zb3VyY2Vmb3Jn ZS5uZXQvbGlzdHMvbGlzdGluZm8vbW9kLXNlY3VyaXR5LXVzZXJzIENvbW1lcmNpYWwKPiA+IE1v ZFNlY3VyaXR5IFJ1bGVzIGFuZCBTdXBwb3J0IGZyb20gVHJ1c3R3YXZlJ3MgU3BpZGVyTGFiczoK PiA+IGh0dHA6Ly93d3cubW9kc2VjdXJpdHkub3JnL3Byb2plY3RzL2NvbW1lcmNpYWwvcnVsZXMv Cj4gPiBodHRwOi8vd3d3Lm1vZHNlY3VyaXR5Lm9yZy9wcm9qZWN0cy9jb21tZXJjaWFsL3N1cHBv cnQvCj4gCj4gCj4gCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18gbW9kLXNlY3VyaXR5LXVzZXJzIG1haWxpbmcKPiBsaXN0IG1vZC1zZWN1cml0eS11c2Vy c0BsaXN0cy5zb3VyY2Vmb3JnZS5uZXQKPiBodHRwczovL2xpc3RzLnNvdXJjZWZvcmdlLm5ldC9s aXN0cy9saXN0aW5mby9tb2Qtc2VjdXJpdHktdXNlcnMgQ29tbWVyY2lhbAo+IE1vZFNlY3VyaXR5 IFJ1bGVzIGFuZCBTdXBwb3J0IGZyb20gVHJ1c3R3YXZlJ3MgU3BpZGVyTGFiczoKPiBodHRwOi8v d3d3Lm1vZHNlY3VyaXR5Lm9yZy9wcm9qZWN0cy9jb21tZXJjaWFsL3J1bGVzLwo+IGh0dHA6Ly93 d3cubW9kc2VjdXJpdHkub3JnL3Byb2plY3RzL2NvbW1lcmNpYWwvc3VwcG9ydC8KCgpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwptb2Qtc2VjdXJpdHktdXNl cnMgbWFpbGluZyBsaXN0Cm1vZC1zZWN1cml0eS11c2Vyc0BsaXN0cy5zb3VyY2Vmb3JnZS5uZXQK aHR0cHM6Ly9saXN0cy5zb3VyY2Vmb3JnZS5uZXQvbGlzdHMvbGlzdGluZm8vbW9kLXNlY3VyaXR5 LXVzZXJzCkNvbW1lcmNpYWwgTW9kU2VjdXJpdHkgUnVsZXMgYW5kIFN1cHBvcnQgZnJvbSBUcnVz dHdhdmUncyBTcGlkZXJMYWJzOgpodHRwOi8vd3d3Lm1vZHNlY3VyaXR5Lm9yZy9wcm9qZWN0cy9j b21tZXJjaWFsL3J1bGVzLwpodHRwOi8vd3d3Lm1vZHNlY3VyaXR5Lm9yZy9wcm9qZWN0cy9jb21t ZXJjaWFsL3N1cHBvcnQvCg==