How to whitelist Country for ModSecurity Rule?

goodmuyis2

New member
Joined
Sep 3, 2021
Messages
1
I managed WordPress Site but the editor and contributor do get a lot of false-positive flags by ModSecurity which affected their publishing experience. so I intend to just whitelist the country where they are publishing from.
My problem is that I am not that good with ModSecurity rule configuration so am not sure if what I have prepared is correct.
Secondly, How do I get the legacy version of GeoLiteCity.dat
Below is what I have put together

# Allow NG Country SecGeoLookupDb /usr/local/geo/data/GeoLiteCity.dat SecRule REMOTE_ADDR "@geoLookup" "chain,phase:2,id:1100234,allow,msg:'Custom WAF Rules: Allow NG Country'" SecRule GEO:COUNTRY_CODE "@streq NG"
 
Back
Top