About 99% of my traffic originating in certain countries is unwanted. I don't want to block it altogether. However I was wondering if there was a way to create multiple predefined rule sets. Then you would assign traffic originating from specific countries to use a specific rule set.

A rule set would define which mod_sec rules are enabled, mod_evasive settings, etc.

That way you could be a little more strict with traffic depending on it's origin.

I don't know if it would really help at all but it's just a thought.

Thats a very interesting idea. I'll have to think about the mechanics of it, but it is technically possible. Mainly (at this point) I can see the main hurdle being the human interface for this.