[mod-security-users] RE: [Modsecurity]

[Sander H. - O. X. <in...@or...>]

mod...@go... wrote:
> On Mon, 2005-08-08 at 13:50 -0400, Bill Church wrote:
>> What would be nice it to have, say, IP addresses of certain
>> geographic areas to block.
> 
> I think, but I could mistaken, that there are RBLs for this
> but I'd have to double check if not we could put one
> together.  Either way, its a good idea.  If you know your
> customers, then I don't see why you couldn't do this.

There are quite a few tools for this available, though most are
paid-services. There is one hitch though: just because the connection comes
from a certain geographic area, doesn't mean the end-client is located at
that IP. (For instance, if someone is using a service for anonimity
(proxies, ssh/vpn/tunnels, tor, etc)).

A sidenote, but I think there are not too much businesses that can use this
feature (or afford to). Even if your are aiming for a very specific
geographical region, people still travel and may need to contact a
website/service from a remote location.

Kind Regards,
Sander Holthaus