Re: ModSec / CRS: Use of GeoIP & ASN information

Christian Folini <[email protected]> Thu, 20 Oct 2022 15:49:33 +0200
Newsgroups gmane.comp.apache.mod-security.user
Message-ID <20221020134933.GA4167357@leander>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