title: ModSecurity and GeoIP geoLookup rule not doing anything
body: <p>I'm trying to get the following rule to work but it seems to be doing nothing:</p>
  
  <pre><code># Test IP address and block by country code
  SecGeoLookupDb /usr/share/GeoIP/GeoIP.dat
  SecRule REMOTE_ADDR "@geoLookup" "chain,id:20,drop,msg:'Block China IP address'"
  SecRule GEO:COUNTRY_CODE "@streq CN HK"
  </code></pre>
  
  <p>​I have had the GeoIP database installed for a while and used it successfully for other purposes, so this isn't the problem.</p>
  
  <p>As it stands the above rule does nothing - no error, and no blocking.
  Given the huge amount of China based traffic I've been receiving the logs should be absolutely full...</p>
  
  <p>The version of Modsecurity I'm running is 2.9.2-ubuntu18.04.19091318 and the server is running Plesk.
  I'm wondering if there is anything else that I need to set up to get this working, or if there is at least any way of testing the various layers...</p>
  
  <p>Edit: I set up Modsecurity debugging and there are lots of entries showing: </p>
  
  <pre><code>No geo data for "IP_ADDRESS_HERE" (country 0).
  </code></pre>
  
  <p>Not sure why it wouldn't be finding any of these as the GeoIP.dat file is there and I can successfully run geoiplookup from the command line.</p>