Well deisgned & tested mod_security rules ??
OK I know I know ... there are a 1000 threads about the same thing but most of them have so many bad modsec rules and the good ones are all over the place..Does anyone know a web site that perhaps lists all modsec rules that have been well tested, are written by people with a clue and are proofed for eg. apache 1.3.x, cpanel etc ?
I see so many bad rules all around the place (badly written, not well thought for example) that I'm afraid of just collecting them from random places and I do not have the smarts to just write my own (well not until I take my regex refresher course anyway)