Savannah W-ITS

I previously posted about using the mod_geoip Apache module to control web access via .htaccess files or server configuration adjustments (i.e. editing httpd.conf.)   Here we are adding the mod_security Apache module into the mix.
Wait!  if we can control access via mod_geoip why do we need mod_security?
The simple answer is….  you don’t need it – but [...]

This is a brief/simple example of using PHP with the mod_geoip Apache module – GeoIP environment variables will vary depending upon the data set used (see requirements**.)  Once you have the module working and can extract the variables you can develop tools to manage access to your PHP sites, customize the display of web page [...]

The GOOD news – using the GeoIP module (mod_geoip.c.) can be quite simple.  The module provides much more than simply a relatively easy means to manage web server access – it opens up some opportunities for data mining.
The BAD news – when limiting access make sure that this is what you really want/need to do [...]

Well, it happened to Google (and a number of other companies in late 2009, early 2010) – hackers reached deep? into the information trove. So, who cares?  This goes on constantly, yes?
We have been lulled by our penchant for convenience – it has to be ‘easy’ or we are reluctant to ‘go there’; this happens [...]

Hmm, imagine this – The C-HACK! of 2009
Update (2/7/2010) – it will be interesting to see ‘the facts’ for this event – A post by Bruce Schneier (1/23/2010) on the CNN web provides some additional thoughts, i.e. Are we doing this to ourselves? (Do our national policies increase the chances that these types of events [...]

GEO Blocking network access – blocking specific IP blocks (GEO-blocking – do you really need those connections from Asia?)
CAVEAT: The flow of packets through your system is fairly complex – I am limiting this discussion and I encourage you to RTM as well as the tutorial referenced in below…
There are a number of approaches to [...]