Resolved Geo blocking for subscriptions / domains ?

[shopuser]

Server operating system version

20.04

Plesk version and microupdate number

18.0.52

I have installed geo blocking and work in the web-app firewall, but for all subscriptions the same rule :

SecGeoLookupDB /usr/share/GeoIP/GeoLiteCountry.dat

SecRule REMOTE_ADDR "@geoLookup" "phase:1,chain,id:99999932392,drop,log,msg:'Blocking %{geo.country_code}'"

SecRule GEO:COUNTRY_CODE "@pm RU KP BR UA CN BR IN PK"

how i can add special rules for subscriptions ?

 

[Peter Debik]

Geoblocking is done on the network level. It does not know about subscriptions or users. For that reason it is not possible to have separate firewall rules for different subscriptions. The workaround would be to run different servers or cloud instances for different sets of firewall configurations.

 

[shopuser]

But I still thought that it was possible to block or unlock certain ip`s ( Apache & nginx settings in the domain ) regardless of the server-wide settings

 

[Peter Debik]

Yes, but geoblocking needs to block very large sets of IP address ranges. For that a list of single IPs would considerably slow down the server. Instead, ipset is used on the operating system level, which is very fast.

 

[shopuser]

ok thanks

 

[danami]

@shopuser Just a note that our Juggernaut Firewall extension fully supports Geoblocking at the domain level.

 

[shopuser]

@shopuser Just a note that our Juggernaut Firewall extension fully supports Geoblocking at the domain level.

installed the app, and in the account shows:

The Valid Domain, IP and Directory will be detected & saved the next time the license is accessed.

and in plesk : Der Lizenzschlüssel ist ungültig. (The license key is invalid )

 

[danami]

and in plesk : Der Lizenzschlüssel ist ungültig. (The license key is invalid )

@shopuser Just open a support ticket though our client area if you have any problems.

 

[shopuser]

ok now is the licence valid, but i dont deinstall fail2ban sorry!