Skip to content

ModSecurity V2 - missing Geo Countries #2124

Closed
@emphazer

Description

@emphazer

Describe the bug

SecRule TX:REAL_IP "@geoLookup" chain
                SecRule GEO:COUNTRY_CODE "@pm BL BQ CW MF SS SX"

is not recognized by mod_security

Logs and dumps

Output of:

  1. DebugLogs (level 9)
  2. AuditLogs
  3. Error logs
  4. If there is a crash, the core dump file.

Notice: Be carefully to not leak any confidential information.

To Reproduce

Steps to reproduce the behavior:

A curl command line that mimics the original request and reproduces the problem. Or a ModSecurity v3 test case.

[e.g: curl "modsec-full/ca/..\..\..\..\..\..\/\etc/\passwd" or issue-394.json]

Expected behavior

A clear and concise description of what you expected to happen.

Server (please complete the following information):

  • ModSecurity version (and connector): Modsecurity v2.93
  • WebServer: Apache 2.4.34
  • OS (and distro): any (Redhat el7 in this case)

Rule Set (please complete the following information):
any with GEO:COUNTRY_CODE

Additional context

according to PR #2123

Metadata

Metadata

Assignees

Labels

2.xRelated to ModSecurity version 2.x

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions