apache-mod_security.conf

   1 # Configuration file for the mod_security Apache module
   2
   3 #LoadFile LIBDIR/libxml2.so.2
   4
   5 LoadModule security2_module modules/mod_security2.so
   6
   7 <IfModule mod_security2.c>
   8         # This is the ModSecurity Core Rules Set.
   9
  10         # Basic configuration goes in here
  11         Include conf.d/modsecurity.d/modsecurity_crs_10_config.conf
  12
  13         # Protocol violation and anomalies.
  14
  15         Include conf.d/modsecurity.d/modsecurity_crs_20_protocol_violations.conf
  16         Include conf.d/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf
  17
  18         # HTTP policy rules
  19
  20         Include conf.d/modsecurity.d/modsecurity_crs_30_http_policy.conf
  21
  22         # Here comes the Bad Stuff...
  23
  24         Include conf.d/modsecurity.d/modsecurity_crs_35_bad_robots.conf
  25         Include conf.d/modsecurity.d/modsecurity_crs_40_generic_attacks.conf
  26         Include conf.d/modsecurity.d/modsecurity_crs_45_trojans.conf
  27         Include conf.d/modsecurity.d/modsecurity_crs_50_outbound.conf
  28
  29         # Search engines and other crawlers. Only useful if you want to track
  30         # Google / Yahoo et. al.
  31
  32         # Include modsecurity.d/modsecurity_crs_55_marketing.conf
  33
  34         # Put your local rules in here.
  35
  36         Include conf.d/modsecurity.d/modsecurity_localrules.conf
  37 </IfModule>