I\'ve just set up Apache modsecurity on a server, and in principle it works well, but I am getting rather a lot of false positives.
I\'m using the OWASP ModSecur
here is what we are using from below (https://stackoverflow.com/a/34027786/1008215) for our wordpress modsec config.
SecRuleRemoveById 950109
SecRuleRemoveById 950120
SecRuleRemoveById 950901
SecRuleRemoveById 960008
SecRuleRemoveById 960015
SecRuleRemoveById 973338
SecRuleRemoveById 981242
SecRuleRemoveById 981243
SecRuleRemoveById 981245
SecRuleRemoveById 981246
SecRuleRemoveById 981248
SecRuleRemoveById 981257
SecRuleRemoveById 981319
SecRuleRemoveById 981320