Search found 4 matches

by atomicbox
Fri Jun 12, 2015 4:16 am
Forum: Atomic Protector (formerly ASL)
Topic: GeoIP2 support
Replies: 1
Views: 3618

GeoIP2 support

Does ASL support GeoIP2 commercial version?
by atomicbox
Tue Mar 03, 2015 9:25 am
Forum: Atomicorp Modsecurity Rules Support
Topic: Allow geoblock instead of block
Replies: 3
Views: 10887

Re: Allow geoblock instead of block

Yes, Instead of "Block these and allow the rest"... It would be "Allow these and block the rest"... In pratical terms it would be the same, the difference would be in performance since you would be loading for example 5.000 IP sets instead of 250.000 depending on how many countri...
by atomicbox
Thu Feb 26, 2015 10:57 am
Forum: Atomicorp Modsecurity Rules Support
Topic: Allow geoblock instead of block
Replies: 3
Views: 10887

Allow geoblock instead of block

If we want to allow only 1 or 2 countries in firewall we have to explicitly block all of the rest.

This creates a table with around 250.000 blocked IP networks.

Is there any chance in ASL to reverse this and only add which GEO IPs are allowed and block all the rest?
by atomicbox
Thu Feb 26, 2015 10:53 am
Forum: Atomicorp Modsecurity Rules Support
Topic: Add domain A records to firewall rule
Replies: 1
Views: 8885

Add domain A records to firewall rule

How could we add all related A records of a domain to firewall rules? Something like allow outbound on: Name: db.us.big.clamav.net 200.236.31.1/32, 155.98.64.87/32, 194.8.197.22/32, 69.12.162.28/32, etc... We can add the IPs once but if they change over time there's no way to automatically update th...