Is mod_security worth it?

Hello,

I've installed mod_security but had to turn most of the secfilters off because when they are on simple things like forums dont even work without getting 500's.

I'm just wondering, is mod_security really worth having as overhead on apache if most of the secfilters arent on? Does mod_security still filter bad requests even without having secfilter tags for specific things?

Thanks,
Dan

 

 

 

 

Top