<IfModule mod_security2.c>

        # Defines the path to the geographical database file.
        #
        SecGeoLookupDb /usr/share/GeoIP/GeoIP.dat
        #SecGeoLookupDb /usr/share/GeoIP/GeoLiteCity.dat

        # Skip RBL lookup for localhost.
	#
        SecRule REMOTE_ADDR "^127\.0\.0\.1$" "phase:2,pass,nolog,t:none,skip:2"

        # GeoLookup - skip RBL lookup for HR address.
        #
        SecRule REMOTE_ADDR "@geoLookup" "phase:2,chain,pass,nolog,t:none,skip:1"
        SecRule GEO:COUNTRY_CODE "^HR$" "t:none"

        # RBL lookup using xbl.dnsbl-sh.carnet.hr.
        #
        SecRule REMOTE_ADDR "@rbl xbl.dnsbl-sh.carnet.hr" "phase:2,log,deny,status:500,t:none,msg:'RBL: xbl.dnsbl-sh.carnet.hr',severity:'1'"

</IfModule>