ModSecurity Geolocation Database Setup

[leonep]

Hi,
i want to add Geolocation db in modsecurity config...

looking to the description:

"ModSecurity relies on the free geolocation databases (GeoLite City and GeoLite Country) that can be obtained from MaxMind http://www.maxmind.com. Currently ModSecurity only supports the legacy GeoIP format. Maxmind's newer GeoIP2 format is not yet currently supported. "

so it appears ModSecurity accepts only GeoIp v1 format

in the maxmind i found only Geoip2 database...

any suggestions please??thanks a lot

 

[keat63]

I'm almost certain that I used MaxMinds GeoIP database in the past, so I checked my MODSEC config, and I found the entry to be empty.
Maybe I stopped using it for a reason.

Retirement of GeoIP Legacy Downloadable Databases in May 2022

GeoIP Legacy Databases

Develop applications using industry-leading IP intelligence and risk scoring.

dev.maxmind.com

 

[SamuelM]

Hello @leonep

It appears that MaxMind has continued support for the GeoIP legacy services, but only for existing users:

https://dev.maxmind.com/geoip/legacy/web-services/

Unfortunately it seems that access to the legacy database is not available for new MaxMind users, and as such this feature of ModSecurity can't be used. That's the determination I've come to after reviewing MaxMind's documentation as well as ModSecurity's. But if anyone else has come across this issue and has anything to add, I welcome the input!