/etc/apache2/conf.d/ Current File: //etc/apache2/conf.d/modsec2.liquidweb.conf
# This customer has ServerSecure + and has had us install the ASL rules for them.
# If in doubt consult with security team
# the proper whitelist to use is /etc/apache2/conf.d/modsec2/whitelist.conf
# If a customer/dev needs their remote IP whitelisted, use /etc/asl/whitelist with 1 IP per line

SecRuleEngine On
SecRequestBodyAccess On
SecDataDir /tmp
SecUploadDir /tmp
SecTmpDir /tmp
SecUploadKeepFiles RelevantOnly
SecPcreMatchLimit 150000
SecPcreMatchLimitRecursion 150000

SecRule FILES_TMPNAMES "@inspectFile /etc/cxs/cxscgi.sh" "log,auditlog,deny,severity:2,id:'1010101'"

Include "/etc/apache2/conf.d/modsec2/custom.conf"
Include "/etc/apache2/conf.d/modsec2/lw_virtual_patches.conf"
Include "/etc/apache2/conf.d/modsec2/00_asl_whitelist.conf"
Include "/etc/apache2/conf.d/modsec2/05_asl_exclude.conf"
Include "/etc/apache2/conf.d/modsec2/10_asl_antimalware.conf"
Include "/etc/apache2/conf.d/modsec2/10_asl_rules.conf"
Include "/etc/apache2/conf.d/modsec2/11_asl_data_loss.conf"
Include "/etc/apache2/conf.d/modsec2/20_asl_useragents.conf"
Include "/etc/apache2/conf.d/modsec2/30_asl_antispam.conf"
Include "/etc/apache2/conf.d/modsec2/30_asl_antispam_referrer.conf"
Include "/etc/apache2/conf.d/modsec2/40_asl_apache2-rules.conf"
Include "/etc/apache2/conf.d/modsec2/50_asl_rootkits.conf"
Include "/etc/apache2/conf.d/modsec2/60_asl_recons.conf"
Include "/etc/apache2/conf.d/modsec2/99_asl_exclude.conf"
Include "/etc/apache2/conf.d/modsec2/99_asl_jitp.conf"
Include "/etc/apache2/conf.d/modsec2/99_asl_redactor.conf"
Include "/etc/apache2/conf.d/modsec2/whitelist.conf"