SecRuleEngine on
SecRequestBodyAccess On
SecResponseBodyMimeType (null) text/html text/plain text/xml
SecResponseBodyLimit  2621440
SecUploadKeepFiles off
SecAuditEngine off
SecAuditLogRelevantStatus "^(?:5|4(?!04))"
SecAuditLogType Concurrent
SecAuditLog logs/audit_log
SecAuditLogParts ABIFHZ
SecArgumentSeparator "&" 
SecCookieFormat 0
SecRequestBodyInMemoryLimit 131072
SecRequestBodyLimit 134217728
SecResponseBodyLimitAction ProcessPartial
SecConnReadStateLimit 8096
SecConnWriteStateLimit 8096
SecRequestBodyNoFilesLimit 1048576
SecRequestBodyInMemoryLimit 131072

SecAuditLogDirMode 0770
SecPcreMatchLimit 150000  
SecPcreMatchLimitRecursion 150000
SecInterceptOnError on
SecResponseBodyAccess on	


# Rule management
Include /etc/apache2/conf.d/modsec2.whitelist.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/00_asl_0_global.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/00_asl_z_antievasion.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/03_asl_dos.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/05_asl_exclude.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/09_asl_rules.conf
#Include /etc/apache2/conf.d/modsec/modsec_rules/10_asl_rules.conf
#Include /etc/apache2/conf.d/modsec/modsec_rules/10_asl_antimalware.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/11_asl_adv_rules.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/11_asl_rules.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/12_asl_brute.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/20_asl_useragents.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/30_asl_antispam.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/50_asl_rootkits.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/51_asl_rootkits.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/60_asl_recons.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/61_asl_recons_dlp.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/99_asl_a_redactor.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/99_asl_exclude.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/99_asl_jitp.conf
Include /etc/apache2/conf.d/modsec/modsec_rules/99_asl_redactor_post.conf
Include /etc/apache2/conf.d/modsec/modsec_ggs/ggs_bad_bots.conf
Include /etc/apache2/conf.d/modsec/modsec_ggs/ggs_xmlrpc_possible_attack.conf
Include /etc/apache2/conf.d/modsec/modsec_ggs/ggs_cms_attacks.conf
Include /etc/apache2/conf.d/modsec/modsec_ggs/modsec_ua.conf

SecAuditLogStorageDir /var/asl/data/audit
SecDataDir /var/cpanel/secdatadir