Re: [mod-security-users] mod_maxminddb support

[Christian F. <chr...@ne...>]

Hey Marc,

This sounds very good. Thank you for your work.

Could you given an example of you we can integrate the mod_maxminddb and
the new db into  ModSecurity. Say use a 2-letter country code in a SecRule
construct? I have not tried this out yet.

Best,

Christian

On Thu, Sep 06, 2018 at 09:22:00AM +0200, Marc Stern wrote:
> As you know, the geo-localisation databases used by ModSecurity are no more
> updated.
> Maxmind, the databases provider, developed a new DB format and provides its
> own module (mod_maxminddb).
> mod_maxminddb was lacking a feature to integrate it smoothly with
> ModSecurity: settings the IP address from inside a rule. I introduced this
> feature some time ago and I'm happy to announce that this patch was merged
> in Maxmind's code and is thus officially part of the module.
> You can now set an environment variable in a rule - in (real) phase 1 - and
> mod_maxminddb will use this IP address as source.
> Note that, for most uses, mod_remote_ip is an easier solution.
> 
> *Marc Stern*
> Approach Belgium <https://www.approach.be>
> Axis Park - Rue Edouard Belin 7 - 1435 Mont-Saint-Guibert - Belgium
> Follow us: <https://www.linkedin.com/company/16513/>
> <https://twitter.com/ApproachBe>
> /*Inspiring the cyber-security community*/
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
> Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
> http://www.modsecurity.org/projects/commercial/rules/
> http://www.modsecurity.org/projects/commercial/support/