--- crs-setup.conf.example 2018-10-26 14:05:01.258754000 +0900 +++ crs-setup.conf 2018-10-26 16:40:14.631386000 +0900 @@ -563,6 +563,7 @@ # Uncomment this rule to use this feature: # #SecGeoLookupDB util/geo-location/GeoIP.dat +SecGeoLookupDB /usr/local/share/GeoIP/GeoIP.dat # @@ -611,15 +612,15 @@ # # Uncomment this rule to use this feature: # -#SecAction \ -# "id:900700,\ -# phase:1,\ -# nolog,\ -# pass,\ -# t:none,\ -# setvar:'tx.dos_burst_time_slice=60',\ -# setvar:'tx.dos_counter_threshold=100',\ -# setvar:'tx.dos_block_timeout=600'" +SecAction \ + "id:900700,\ + phase:1,\ + nolog,\ + pass,\ + t:none,\ + setvar:'tx.dos_burst_time_slice=60',\ + setvar:'tx.dos_counter_threshold=100',\ + setvar:'tx.dos_block_timeout=600'" # @@ -631,13 +632,13 @@ # # Uncomment this rule to use this feature: # -#SecAction \ -# "id:900950,\ -# phase:1,\ -# nolog,\ -# pass,\ -# t:none,\ -# setvar:tx.crs_validate_utf8_encoding=1" +SecAction \ + "id:900950,\ + phase:1,\ + nolog,\ + pass,\ + t:none,\ + setvar:tx.crs_validate_utf8_encoding=1" # @@ -670,24 +671,24 @@ # # Uncomment this rule to use this feature: # -#SecAction \ -# "id:900960,\ -# phase:1,\ -# nolog,\ -# pass,\ -# t:none,\ -# setvar:tx.do_reput_block=1" +SecAction \ + "id:900960,\ + phase:1,\ + nolog,\ + pass,\ + t:none,\ + setvar:tx.do_reput_block=1" # # Uncomment this rule to change the blocking time: # Default: 300 (5 minutes) # -#SecAction \ -# "id:900970,\ -# phase:1,\ -# nolog,\ -# pass,\ -# t:none,\ -# setvar:tx.reput_block_duration=300" +SecAction \ + "id:900970,\ + phase:1,\ + nolog,\ + pass,\ + t:none,\ + setvar:tx.reput_block_duration=300" #