<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>Dear All,</DIV>
<DIV> </DIV>
<DIV>I’m looking for the rules similar to Mod Security as below:</DIV>
<DIV> </DIV>
<DIV>SecRule REMOTE_ADDR "@geoLookup"
"id:88888892,phase:1,t:none,pass,nolog"</DIV>
<DIV>SecRule GEO:COUNTRY_CODE <A href="mailto:!@streq SG">!@streq SG</A>
"id:88888893,phase:1,t:none,log,deny,msg:'Upload: Not Singapore IP
address',chain"</DIV>
<DIV>SecRule REQUEST_HEADERS:Content-Type "multipart/form-data"
t:none,t:lowercase</DIV>
<DIV> </DIV>
<DIV>That rules is filter by geoip for only Singapore IP are allow to upload any
files via the web, the rest will be denied, how can i make a Suricata rules with
my requirment?</DIV>
<DIV> </DIV>
<DIV>Please help and thank you so much</DIV>
<DIV> </DIV>
<DIV> </DIV></DIV></DIV></BODY></HTML>