[mod-security-users] mod_maxminddb support
Brought to you by:
victorhora,
zimmerletw
|
From: Marc S. <mar...@ap...> - 2018-09-06 07:22:15
|
As you know, the geo-localisation databases used by ModSecurity are no more updated. Maxmind, the databases provider, developed a new DB format and provides its own module (mod_maxminddb). mod_maxminddb was lacking a feature to integrate it smoothly with ModSecurity: settings the IP address from inside a rule. I introduced this feature some time ago and I'm happy to announce that this patch was merged in Maxmind's code and is thus officially part of the module. You can now set an environment variable in a rule - in (real) phase 1 - and mod_maxminddb will use this IP address as source. Note that, for most uses, mod_remote_ip is an easier solution. *Marc Stern* Approach Belgium <https://www.approach.be> Axis Park - Rue Edouard Belin 7 - 1435 Mont-Saint-Guibert - Belgium Follow us: <https://www.linkedin.com/company/16513/> <https://twitter.com/ApproachBe> /*Inspiring the cyber-security community*/ |