Fabulous article. I keep referring to it on a monthly basis. Do you know if there’s a way to block a country, but allow only 1 ip address from that country in? There’s a customer of mine that sells courses and occasionally has one or two people that want to buy from India for example. Could this be included in the SecRule chain in the same rule ID?
Thanks again for the awesome ModSecurity post.