Mod_security geoip rule doesn't work

doktorrr

• February 26, 2018 09:17

I want to block traffic from India and Pakistan. On my WHM I have enabled mod_security. I've followed this article:

• Download the latest
• Check the box for "Deploy and Restart Apache".
• Click "Save".

However, this doesn't work for me. In hits list I get nothing. I have VPN and I can load my website from India (VPN). Anybody have an idea what's wrong?

• 

  cPanelMichael

  • February 26, 2018 16:52

  Hello, Do you notice any particular error messages in /usr/local/apache/logs/error_log when attempting to test the rules? Check to ensure you are not encountering the issue referenced on the following thread: Thank you.

  0
• 

  doktorrr

  • February 26, 2018 16:59

  Thank you for your answer. This module you mention is disabled. Ther's no errors in /usr/local/apache/logs/error_log

  0
• 

  doktorrr

  • February 26, 2018 17:06

  I found this error: Error while opening data file /usr/share/GeoIP/GeoIP.dat Something's wrong with this file.

  0
• 

  cPanelMichael

  • February 26, 2018 18:43

  Hello, Can you confirm if you are using Mod_Ruid2 on this system? Thank you.

  0
• 

  doktorrr

  • February 26, 2018 18:57

  Mod Ruid2 is also disabled. I trying with GeoIp module.

  0
• 

  cPanelMichael

  • February 26, 2018 19:02

  Hello, Could you open a support ticket using the link in my signature so we can take a closer look? Thank you.

  0
• 

  Tearabite

  • February 27, 2018 03:23

  If this continues to be a problem you could install CSF Firewall which blocks all ports (not just port 80 http requests) and has a simple, block by country option.

  0
• 

  doktorrr

  • February 27, 2018 06:33

  Now, I have a problem with GeoIP module too. Is there any way to safely remove this module from Apache2?

  0
• 

  cPanelMichael

  • February 27, 2018 13:39

  Hi @doktorrr, Were you able to open the support ticket? If so, please post the ticket number here and we will update this thread with the outcome. Thank you.

  0

Please sign in to leave a comment.