[Mod-security-rules] Show GEO DAT in modsec logs
Brought to you by:
victorhora,
zimmerletw
From: kinomakino <kin...@ho...> - 2014-08-12 18:37:19
|
First, thanks for everything. sorry for my English. I wonder if there is any way to use IP Geolocation in ModSec logs. That is, I wish for all my active rules, show me the country code in the logs. Thanks for everything. now if I do this: SecGeoLookupDb /home/jmolina/GeoLiteCity.dat #SecRule REMOTE_ADDR "geoLookup" "phase: 1, id: 13102, t: none, pass, log, msg: '% {GEO.COUNTRY_CODE}'" geolocation to show me ALL connections, including HTTP 200 usually does not show me. |