# Configuration file for the mod_security Apache module #LoadFile LIBDIR/libxml2.so.2 LoadModule security2_module modules/mod_security2.so # This is the ModSecurity Core Rules Set. # Basic configuration goes in here Include conf.d/modsecurity.d/modsecurity_crs_10_config.conf # Protocol violation and anomalies. Include conf.d/modsecurity.d/modsecurity_crs_20_protocol_violations.conf Include conf.d/modsecurity.d/modsecurity_crs_21_protocol_anomalies.conf # HTTP policy rules Include conf.d/modsecurity.d/modsecurity_crs_30_http_policy.conf # Here comes the Bad Stuff... Include conf.d/modsecurity.d/modsecurity_crs_35_bad_robots.conf Include conf.d/modsecurity.d/modsecurity_crs_40_generic_attacks.conf Include conf.d/modsecurity.d/modsecurity_crs_45_trojans.conf Include conf.d/modsecurity.d/modsecurity_crs_50_outbound.conf # Search engines and other crawlers. Only useful if you want to track # Google / Yahoo et. al. # Include modsecurity.d/modsecurity_crs_55_marketing.conf # Put your local rules in here. Include conf.d/modsecurity.d/modsecurity_localrules.conf