Re: [mod-security-users] Geo location lookup multiple rules

[Ervin H. <ai...@gm...>]

Hi Homesh,

On Mon, May 30, 2022 at 12:17:56AM +0530, homesh joshi wrote:
> I have multiple virtual host entries in apache
> 
> in each virtual host I have rule like this
> 
> SecGeoLookupDb /etc/modsecurity/maxmind4.dat
> SecRule REMOTE_ADDR "@geoLookup" "phase:1,log,chain,id:2,drop,msg:'Geolocation Blocked'"
> SecRule GEO:COUNTRY_CODE "@pm CN PE IR"

are you sure? I mean do you have these rules with *same id*?

> My query is the line SecGeoLookupDb /etc/modsecurity/maxmind4.dat present
> in each virtual host. Is it required in each or can I define it once
> globally.

you do not need to define it in each vhost. Also you can use the
SecRule with "id:2" above only once (except if you change the
country codes per vhost, of course).




a.