Hey guys, Based on the fantastic work done I have changed my decision. I wanted to let this list know as well. It should be noted of course that this is a community, if everyone but me is in favor of something, then this is the way it is :)
On 2/18/16, 2:53 AM, "Christian Folini" <christian.fol...@netnea.com> wrote: >Chaim, > >It seems you have been the only one who wanted to keep the >old country list active. Now Manuel and Franziska chimed >in and stated they would rather not continue with the >country list being active (or move it into paranoia) as >others have before. > >For me, geoip-blocking is a separate decision on its own. >If somebody wants to activate that, it should be a >deliberate move, independent of the paranoia setting. >It could be linked with a paranoia level and enabled >as a side effect, but local sites in Romania would stop >functioning immediately and that is not our >intention with the paranoia mode. > >Enabling paranoia and then remember to think about >activating / reconfiguring the country list in order to >activate geoip-blocking is also complicated. > >So under the line, I think keeping the rule active >but with a default empty list of countries is the >best move in our situation. > >I am going to do a separate pull request for this change. >That way it is completely independent of the paranoia >mode changes. > >Ahoj, > >Christian > > >-- >In war you will generally find that the enemy has at any time >three courses of action open to him. Of those three, he will >invariably choose the fourth. >-- Helmuth Von Moltke ________________________________ This transmission may contain information that is privileged, confidential, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is strictly prohibited. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. _______________________________________________ Owasp-modsecurity-core-rule-set mailing list Owasp-modsecurity-core-rule-set@lists.owasp.org https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
