Put quotes around it so it doesn't think the spaces are separate arguments?
SecGeoLookupDb "C:\Program Files\ModSecurity IIS\owasp_crs\base_rules\GeoLiteCity.dat" Thanks, Barry On 29 Aug 2016, at 07:40, Gary Tam <[email protected]<mailto:[email protected]>> wrote: Dear Bill, Thanks for your reply and information. I have just downloaded the dasebase - GeoLiteCity.dat from http://dev.maxmind.com/geoip/legacy/geolite/ and updated in the config file (i.e. modsecurity_crs_61_ip_forensics.conf). But it now shows another Syntax error as below: Syntax error in config file C:\/Program Files/ModSecurity IIS/owasp_crs/experimental_rules/modsecurity_crs_61_ip_forensics.conf, line 34: SecGeoLookupDB takes one argument, database for geographical lookups module. line 34 of modsecurity_crs_61_ip_forensics.conf SecGeoLookupDb C:\Program Files\ModSecurity IIS\owasp_crs\base_rules\GeoLiteCity.dat Would you please help again? Many thanks! Best Regards, Gary Tam From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Bill Miller Sent: 29 August 2016 12:33 To: [email protected]<mailto:[email protected]> Subject: Re: [Owasp-modsecurity-core-rule-set] OWASP CRS Version 3.0 RC1 Rules 930100, 930110 You can download the database from here https://dev.maxmind.com/geoip/legacy/geolite/ On 08/28/2016 11:20 PM, Gary Tam wrote: Dear Genius, I am a beginner in Owasp-modsecurity. I have just done the modsecurity installation on my windows server (i.e. Windows 2008 with IIS 7.5). It is observed that there is a windows event log error when enabled the "experimental_rules" as below: Syntax error in config file C:\/Program Files/ModSecurity IIS/owasp_crs/experimental_rules/modsecurity_crs_61_ip_forensics.conf, line 34: Could not open geo database "/usr/local/apache/conf/modsec_current/base_rules/GeoLiteCity.dat": The system cannot find the path specified. Of coz I know it is needed to emend the file path from linux to windows syntax, but i could not find the GeoLiteCity.dat in my windows server. Would you guys help to check and advise? Many thanks! Best Regards, Gary Tam _______________________________________________ Owasp-modsecurity-core-rule-set mailing list [email protected]<mailto:[email protected]> https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set _______________________________________________ Owasp-modsecurity-core-rule-set mailing list [email protected]<mailto:[email protected]> https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
_______________________________________________ Owasp-modsecurity-core-rule-set mailing list [email protected] https://lists.owasp.org/mailman/listinfo/owasp-modsecurity-core-rule-set
