LoadModule security2_module modules/mod_security2.so
<IfModule !mod_unique_id.c>
    LoadModule unique_id_module modules/mod_unique_id.so
</IfModule>
<IfModule mod_security2.c>
    Include modsecurity-crs/modsecurity_crs_10_setup.conf
    Include modsecurity-crs/base_rules/*.conf
    # Turn On and Off security module:
    SecRuleEngine On

    #disabling to allow cactimonitoring to access
    <LocationMatch "^/server-status(.*)">
    SecRuleEngine Off
    </LocationMatch>
    <LocationMatch "^/server-info(.*)">
    SecRuleEngine Off
    </LocationMatch>
	
    SecRequestBodyAccess On
    SecResponseBodyAccess Off
    SecDataDir /tmp
	
    # To disable some false positive rules by their IDs:
    #SecRuleRemoveById <id> <id> ...
    SecRuleRemoveById 973332 973344 973347 981246 981242 981240 960915 973333 973304 973300 958030 973338 981173 970901 981231 981257 981245 950120 950901 981243 960015 960024 973335 950109 981205 973306 981172 960008 960009 960017 958011 973308 959072 981248
    SecRuleRemoveById 981255 973316   


    SecRule REMOTE_ADDR "^216\.164\.196\.247$" phase:1,id:95,nolog,allow
    SecRule REMOTE_ADDR "^64\.121\.81\.218$" phase:1,id:96,nolog,allow
    SecRule REMOTE_ADDR "^64\.121\.197\.65$" phase:1,id:97,nolog,allow
    SecRule REMOTE_ADDR "^146\.186\.36\.211$" phase:1,id:98,nolog,allow	
    SecRule REMOTE_ADDR "^64\.121\.221\.31$" phase:1,id:99,nolog,allow
    SecRule REMOTE_ADDR "^64\.121\.221\.202$" phase:1,id:100,nolog,allow
    SecRule REMOTE_ADDR "^64\.121\.44\.104$" phase:1,id:101,nolog,allow
    SecRule REMOTE_ADDR "^72\.78\.230\.7$" phase:1,id:102,nolog,allow
    SecRule REMOTE_ADDR "^96\.227\.100\.219$" phase:1,id:103,nolog,allow
# SUPPORT TEAM: Please do not whitelst IPs unless you are the only one in support at the time and things are busy. The correct solution is to whitelist individual rules unless the client uses a static IP and in that case whitelisting the IP is probably a better solution.


<LocationMatch "\/wp-admin\/">
    SecRuleRemoveById 950911 981256 958006 958049 973322 973348 973316 981248 973302 973334 981319
    SecRuleRemoveById 950001 973301 973305 973337 959073 981244 973336 958005 958051 973309 973331
    SecRuleRemoveById 958404 973303 960032 959073 981318 973301 958291 960335 981317
</LocationMatch>


</IfModule>
