Closed
Description
Describe the bug
SecRule TX:REAL_IP "@geoLookup" chain
SecRule GEO:COUNTRY_CODE "@pm BL BQ CW MF SS SX"
is not recognized by mod_security
Logs and dumps
Output of:
- DebugLogs (level 9)
- AuditLogs
- Error logs
- If there is a crash, the core dump file.
Notice: Be carefully to not leak any confidential information.
To Reproduce
Steps to reproduce the behavior:
A curl command line that mimics the original request and reproduces the problem. Or a ModSecurity v3 test case.
[e.g: curl "modsec-full/ca/..\..\..\..\..\..\/\etc/\passwd" or issue-394.json]
Expected behavior
A clear and concise description of what you expected to happen.
Server (please complete the following information):
- ModSecurity version (and connector): Modsecurity v2.93
- WebServer: Apache 2.4.34
- OS (and distro): any (Redhat el7 in this case)
Rule Set (please complete the following information):
any with GEO:COUNTRY_CODE
Additional context
according to PR #2123