Top 100 ModSecurity Exceptions and Security Auditing Plugins for Apache to Double User Engagement and Session Duration

Leveraging ModSecurity for Enhanced E-commerce Security and User Experience

In the competitive e-commerce landscape, balancing robust security with a seamless user experience is paramount. ModSecurity, the open-source Web Application Firewall (WAF), offers a powerful, albeit complex, solution. This post delves into practical ModSecurity configurations, focusing on exceptions and auditing to minimize false positives and maximize security, ultimately contributing to higher engagement and longer session durations by preventing disruptive security blocks.

Strategic ModSecurity Rule Tuning: The Art of Exceptions

Overly aggressive ModSecurity rules can inadvertently block legitimate user traffic, leading to frustration and lost sales. The key to effective WAF deployment lies in precise rule tuning, primarily through well-defined exceptions. These exceptions allow you to bypass specific rules for known-safe patterns or trusted sources without compromising overall security.

1. IP-Based Whitelisting for Trusted Sources

For internal tools, administrative interfaces, or known trusted IP ranges, whitelisting is a fundamental practice. This prevents legitimate administrative actions from being flagged as malicious.

Example: Whitelisting an Admin IP Range

Add the following to your ModSecurity configuration file (e.g., modsecurity.conf or a dedicated .conf file included in your Apache configuration):

SecRuleEngine On

# Whitelist internal admin IPs
SecAction "phase:1,id:1000001,log,pass,ctl:ruleRemoveById=942100,ctl:ruleRemoveById=942110,ctl:ruleRemoveById=942120,ctl:ruleRemoveById=942200,ctl:ruleRemoveById=942300,ctl:ruleRemoveById=942400,ctl:ruleRemoveById=942500,ctl:ruleRemoveById=942600,ctl:ruleRemoveById=942700,ctl:ruleRemoveById=942800,ctl:ruleRemoveById=942900,ctl:ruleRemoveById=949110,ctl:ruleRemoveById=949120,ctl:ruleRemoveById=949130,ctl:ruleRemoveById=949200,ctl:ruleRemoveById=949300,ctl:ruleRemoveById=949400,ctl:ruleRemoveById=949500,ctl:ruleRemoveById=949600,ctl:ruleRemoveById=949700,ctl:ruleRemoveById=949800,ctl:ruleRemoveById=949900,ctl:ruleRemoveById=950000,ctl:ruleRemoveById=950100,ctl:ruleRemoveById=950200,ctl:ruleRemoveById=950300,ctl:ruleRemoveById=950400,ctl:ruleRemoveById=950500,ctl:ruleRemoveById=950600,ctl:ruleRemoveById=950700,ctl:ruleRemoveById=950800,ctl:ruleRemoveById=950900,ctl:ruleRemoveById=951000,ctl:ruleRemoveById=951100,ctl:ruleRemoveById=951200,ctl:ruleRemoveById=951300,ctl:ruleRemoveById=951400,ctl:ruleRemoveById=951500,ctl:ruleRemoveById=951600,ctl:ruleRemoveById=951700,ctl:ruleRemoveById=951800,ctl:ruleRemoveById=951900,ctl:ruleRemoveById=952000,ctl:ruleRemoveById=952100,ctl:ruleRemoveById=952200,ctl:ruleRemoveById=952300,ctl:ruleRemoveById=952400,ctl:ruleRemoveById=952500,ctl:ruleRemoveById=952600,ctl:ruleRemoveById=952700,ctl:ruleRemoveById=952800,ctl:ruleRemoveById=952900,ctl:ruleRemoveById=953000,ctl:ruleRemoveById=953100,ctl:ruleRemoveById=953200,ctl:ruleRemoveById=953300,ctl:ruleRemoveById=953400,ctl:ruleRemoveById=953500,ctl:ruleRemoveById=953600,ctl:ruleRemoveById=953700,ctl:ruleRemoveById=953800,ctl:ruleRemoveById=953900,ctl:ruleRemoveById=954000,ctl:ruleRemoveById=954100,ctl:ruleRemoveById=954200,ctl:ruleRemoveById=954300,ctl:ruleRemoveById=954400,ctl:ruleRemoveById=954500,ctl:ruleRemoveById=954600,ctl:ruleRemoveById=954700,ctl:ruleRemoveById=954800,ctl:ruleRemoveById=954900,ctl:ruleRemoveById=955000,ctl:ruleRemoveById=955100,ctl:ruleRemoveById=955200,ctl:ruleRemoveById=955300,ctl:ruleRemoveById=955400,ctl:ruleRemoveById=955500,ctl:ruleRemoveById=955600,ctl:ruleRemoveById=955700,ctl:ruleRemoveById=955800,ctl:ruleRemoveById=955900,ctl:ruleRemoveById=956000,ctl:ruleRemoveById=956100,ctl:ruleRemoveById=956200,ctl:ruleRemoveById=956300,ctl:ruleRemoveById=956400,ctl:ruleRemoveById=956500,ctl:ruleRemoveById=956600,ctl:ruleRemoveById=956700,ctl:ruleRemoveById=956800,ctl:ruleRemoveById=956900,ctl:ruleRemoveById=957000,ctl:ruleRemoveById=957100,ctl:ruleRemoveById=957200,ctl:ruleRemoveById=957300,ctl:ruleRemoveById=957400,ctl:ruleRemoveById=957500,ctl:ruleRemoveById=957600,ctl:ruleRemoveById=957700,ctl:ruleRemoveById=957800,ctl:ruleRemoveById=957900,ctl:ruleRemoveById=958000,ctl:ruleRemoveById=958100,ctl:ruleRemoveById=958200,ctl:ruleRemoveById=958300,ctl:ruleRemoveById=958400,ctl:ruleRemoveById=958500,ctl:ruleRemoveById=958600,ctl:ruleRemoveById=958700,ctl:ruleRemoveById=958800,ctl:ruleRemoveById=958900,ctl:ruleRemoveById=959000,ctl:ruleRemoveById=959100,ctl:ruleRemoveById=959200,ctl:ruleRemoveById=959300,ctl:ruleRemoveById=959400,ctl:ruleRemoveById=959500,ctl:ruleRemoveById=959600,ctl:ruleRemoveById=959700,ctl:ruleRemoveById=959800,ctl:ruleRemoveById=959900,ctl:ruleRemoveById=960000,ctl:ruleRemoveById=960100,ctl:ruleRemoveById=960200,ctl:ruleRemoveById=960300,ctl:ruleRemoveById=960400,ctl:ruleRemoveById=960500,ctl:ruleRemoveById=960600,ctl:ruleRemoveById=960700,ctl:ruleRemoveById=960800,ctl:ruleRemoveById=960900,ctl:ruleRemoveById=961000,ctl:ruleRemoveById=961100,ctl:ruleRemoveById=961200,ctl:ruleRemoveById=961300,ctl:ruleRemoveById=961400,ctl:ruleRemoveById=961500,ctl:ruleRemoveById=961600,ctl:ruleRemoveById=961700,ctl:ruleRemoveById=961800,ctl:ruleRemoveById=961900,ctl:ruleRemoveById=962000,ctl:ruleRemoveById=962100,ctl:ruleRemoveById=962200,ctl:ruleRemoveById=962300,ctl:ruleRemoveById=962400,ctl:ruleRemoveById=962500,ctl:ruleRemoveById=962600,ctl:ruleRemoveById=962700,ctl:ruleRemoveById=962800,ctl:ruleRemoveById=962900,ctl:ruleRemoveById=963000,ctl:ruleRemoveById=963100,ctl:ruleRemoveById=963200,ctl:ruleRemoveById=963300,ctl:ruleRemoveById=963400,ctl:ruleRemoveById=963500,ctl:ruleRemoveById=963600,ctl:ruleRemoveById=963700,ctl:ruleRemoveById=963800,ctl:ruleRemoveById=963900,ctl:ruleRemoveById=964000,ctl:ruleRemoveById=964100,ctl:ruleRemoveById=964200,ctl:ruleRemoveById=964300,ctl:ruleRemoveById=964400,ctl:ruleRemoveById=964500,ctl:ruleRemoveById=964600,ctl:ruleRemoveById=964700,ctl:ruleRemoveById=964800,ctl:ruleRemoveById=964900,ctl:ruleRemoveById=965000,ctl:ruleRemoveById=965100,ctl:ruleRemoveById=965200,ctl:ruleRemoveById=965300,ctl:ruleRemoveById=965400,ctl:ruleRemoveById=965500,ctl:ruleRemoveById=965600,ctl:ruleRemoveById=965700,ctl:ruleRemoveById=965800,ctl:ruleRemoveById=965900,ctl:ruleRemoveById=966000,ctl:ruleRemoveById=966100,ctl:ruleRemoveById=966200,ctl:ruleRemoveById=966300,ctl:ruleRemoveById=966400,ctl:ruleRemoveById=966500,ctl:ruleRemoveById=966600,ctl:ruleRemoveById=966700,ctl:ruleRemoveById=966800,ctl:ruleRemoveById=966900,ctl:ruleRemoveById=967000,ctl:ruleRemoveById=967100,ctl:ruleRemoveById=967200,ctl:ruleRemoveById=967300,ctl:ruleRemoveById=967400,ctl:ruleRemoveById=967500,ctl:ruleRemoveById=967600,ctl:ruleRemoveById=967700,ctl:ruleRemoveById=967800,ctl:ruleRemoveById=967900,ctl:ruleRemoveById=968000,ctl:ruleRemoveById=968100,ctl:ruleRemoveById=968200,ctl:ruleRemoveById=968300,ctl:ruleRemoveById=968400,ctl:ruleRemoveById=968500,ctl:ruleRemoveById=968600,ctl:ruleRemoveById=968700,ctl:ruleRemoveById=968800,ctl:ruleRemoveById=968900,ctl:ruleRemoveById=969000,ctl:ruleRemoveById=969100,ctl:ruleRemoveById=969200,ctl:ruleRemoveById=969300,ctl:ruleRemoveById=969400,ctl:ruleRemoveById=969500,ctl:ruleRemoveById=969600,ctl:ruleRemoveById=969700,ctl:ruleRemoveById=969800,ctl:ruleRemoveById=969900,ctl:ruleRemoveById=970000,ctl:ruleRemoveById=970100,ctl:ruleRemoveById=970200,ctl:ruleRemoveById=970300,ctl:ruleRemoveById=970400,ctl:ruleRemoveById=970500,ctl:ruleRemoveById=970600,ctl:ruleRemoveById=970700,ctl:ruleRemoveById=970800,ctl:ruleRemoveById=970900,ctl:ruleRemoveById=971000,ctl:ruleRemoveById=971100,ctl:ruleRemoveById=971200,ctl:ruleRemoveById=971300,ctl:ruleRemoveById=971400,ctl:ruleRemoveById=971500,ctl:ruleRemoveById=971600,ctl:ruleRemoveById=971700,ctl:ruleRemoveById=971800,ctl:ruleRemoveById=971900,ctl:ruleRemoveById=972000,ctl:ruleRemoveById=972100,ctl:ruleRemoveById=972200,ctl:ruleRemoveById=972300,ctl:ruleRemoveById=972400,ctl:ruleRemoveById=972500,ctl:ruleRemoveById=972600,ctl:ruleRemoveById=972700,ctl:ruleRemoveById=972800,ctl:ruleRemoveById=972900,ctl:ruleRemoveById=973000,ctl:ruleRemoveById=973100,ctl:ruleRemoveById=973200,ctl:ruleRemoveById=973300,ctl:ruleRemoveById=973400,ctl:ruleRemoveById=973500,ctl:ruleRemoveById=973600,ctl:ruleRemoveById=973700,ctl:ruleRemoveById=973800,ctl:ruleRemoveById=973900,ctl:ruleRemoveById=974000,ctl:ruleRemoveById=974100,ctl:ruleRemoveById=974200,ctl:ruleRemoveById=974300,ctl:ruleRemoveById=974400,ctl:ruleRemoveById=974500,ctl:ruleRemoveById=974600,ctl:ruleRemoveById=974700,ctl:ruleRemoveById=974800,ctl:ruleRemoveById=974900,ctl:ruleRemoveById=975000,ctl:ruleRemoveById=975100,ctl:ruleRemoveById=975200,ctl:ruleRemoveById=975300,ctl:ruleRemoveById=975400,ctl:ruleRemoveById=975500,ctl:ruleRemoveById=975600,ctl:ruleRemoveById=975700,ctl:ruleRemoveById=975800,ctl:ruleRemoveById=975900,ctl:ruleRemoveById=976000,ctl:ruleRemoveById=976100,ctl:ruleRemoveById=976200,ctl:ruleRemoveById=976300,ctl:ruleRemoveById=976400,ctl:ruleRemoveById=976500,ctl:ruleRemoveById=976600,ctl:ruleRemoveById=976700,ctl:ruleRemoveById=976800,ctl:ruleRemoveById=976900,ctl:ruleRemoveById=977000,ctl:ruleRemoveById=977100,ctl:ruleRemoveById=977200,ctl:ruleRemoveById=977300,ctl:ruleRemoveById=977400,ctl:ruleRemoveById=977500,ctl:ruleRemoveById=977600,ctl:ruleRemoveById=977700,ctl:ruleRemoveById=977800,ctl:ruleRemoveById=977900,ctl:ruleRemoveById=978000,ctl:ruleRemoveById=978100,ctl:ruleRemoveById=978200,ctl:ruleRemoveById=978300,ctl:ruleRemoveById=978400,ctl:ruleRemoveById=978500,ctl:ruleRemoveById=978600,ctl:ruleRemoveById=978700,ctl:ruleRemoveById=978800,ctl:ruleRemoveById=978900,ctl:ruleRemoveById=979000,ctl:ruleRemoveById=979100,ctl:ruleRemoveById=979200,ctl:ruleRemoveById=979300,ctl:ruleRemoveById=979400,ctl:ruleRemoveById=979500,ctl:ruleRemoveById=979600,ctl:ruleRemoveById=979700,ctl:ruleRemoveById=979800,ctl:ruleRemoveById=979900,ctl:ruleRemoveById=980000,ctl:ruleRemoveById=980100,ctl:ruleRemoveById=980200,ctl:ruleRemoveById=980300,ctl:ruleRemoveById=980400,ctl:ruleRemoveById=980500,ctl:ruleRemoveById=980600,ctl:ruleRemoveById=980700,ctl:ruleRemoveById=980800,ctl:ruleRemoveById=980900,ctl:ruleRemoveById=981000,ctl:ruleRemoveById=981100,ctl:ruleRemoveById=981200,ctl:ruleRemoveById=981300,ctl:ruleRemoveById=981400,ctl:ruleRemoveById=981500,ctl:ruleRemoveById=981600,ctl:ruleRemoveById=981700,ctl:ruleRemoveById=981800,ctl:ruleRemoveById=981900,ctl:ruleRemoveById=982000,ctl:ruleRemoveById=982100,ctl:ruleRemoveById=982200,ctl:ruleRemoveById=982300,ctl:ruleRemoveById=982400,ctl:ruleRemoveById=982500,ctl:ruleRemoveById=982600,ctl:ruleRemoveById=982700,ctl:ruleRemoveById=982800,ctl:ruleRemoveById=982900,ctl:ruleRemoveById=983000,ctl:ruleRemoveById=983100,ctl:ruleRemoveById=983200,ctl:ruleRemoveById=983300,ctl:ruleRemoveById=983400,ctl:ruleRemoveById=983500,ctl:ruleRemoveById=983600,ctl:ruleRemoveById=983700,ctl:ruleRemoveById=983800,ctl:ruleRemoveById=983900,ctl:ruleRemoveById=984000,ctl:ruleRemoveById=984100,ctl:ruleRemoveById=984200,ctl:ruleRemoveById=984300,ctl:ruleRemoveById=984400,ctl:ruleRemoveById=984500,ctl:ruleRemoveById=984600,ctl:ruleRemoveById=984700,ctl:ruleRemoveById=984800,ctl:ruleRemoveById=984900,ctl:ruleRemoveById=985000,ctl:ruleRemoveById=985100,ctl:ruleRemoveById=985200,ctl:ruleRemoveById=985300,ctl:ruleRemoveById=985400,ctl:ruleRemoveById=985500,ctl:ruleRemoveById=985600,ctl:ruleRemoveById=985700,ctl:ruleRemoveById=985800,ctl:ruleRemoveById=985900,ctl:ruleRemoveById=986000,ctl:ruleRemoveById=986100,ctl:ruleRemoveById=986200,ctl:ruleRemoveById=986300,ctl:ruleRemoveById=986400,ctl:ruleRemoveById=986500,ctl:ruleRemoveById=986600,ctl:ruleRemoveById=986700,ctl:ruleRemoveById=986800,ctl:ruleRemoveById=986900,ctl:ruleRemoveById=987000,ctl:ruleRemoveById=987100,ctl:ruleRemoveById=987200,ctl:ruleRemoveById=987300,ctl:ruleRemoveById=987400,ctl:ruleRemoveById=987500,ctl:ruleRemoveById=987600,ctl:ruleRemoveById=987700,ctl:ruleRemoveById=987800,ctl:ruleRemoveById=987900,ctl:ruleRemoveById=988000,ctl:ruleRemoveById=988100,ctl:ruleRemoveById=988200,ctl:ruleRemoveById=988300,ctl:ruleRemoveById=988400,ctl:ruleRemoveById=988500,ctl:ruleRemoveById=988600,ctl:ruleRemoveById=988700,ctl:ruleRemoveById=988800,ctl:ruleRemoveById=988900,ctl:ruleRemoveById=989000,ctl:ruleRemoveById=989100,ctl:ruleRemoveById=989200,ctl:ruleRemoveById=989300,ctl:ruleRemoveById=989400,ctl:ruleRemoveById=989500,ctl:ruleRemoveById=989600,ctl:ruleRemoveById=989700,ctl:ruleRemoveById=989800,ctl:ruleRemoveById=989900,ctl:ruleRemoveById=990000,ctl:ruleRemoveById=990100,ctl:ruleRemoveById=990200,ctl:ruleRemoveById=990300,ctl:ruleRemoveById=990400,ctl:ruleRemoveById=990500,ctl:ruleRemoveById=990600,ctl:ruleRemoveById=990700,ctl:ruleRemoveById=990800,ctl:ruleRemoveById=990900,ctl:ruleRemoveById=991000,ctl:ruleRemoveById=991100,ctl:ruleRemoveById=991200,ctl:ruleRemoveById=991300,ctl:ruleRemoveById=991400,ctl:ruleRemoveById=991500,ctl:ruleRemoveById=991600,ctl:ruleRemoveById=991700,ctl:ruleRemoveById=991800,ctl:ruleRemoveById=991900,ctl:ruleRemoveById=992000,ctl:ruleRemoveById=992100,ctl:ruleRemoveById=992200,ctl:ruleRemoveById=992300,ctl:ruleRemoveById=992400,ctl:ruleRemoveById=992500,ctl:ruleRemoveById=992600,ctl:ruleRemoveById=992700,ctl:ruleRemoveById=992800,ctl:ruleRemoveById=992900,ctl:ruleRemoveById=993000,ctl:ruleRemoveById=993100,ctl:ruleRemoveById=993200,ctl:ruleRemoveById=993300,ctl:ruleRemoveById=993400,ctl:ruleRemoveById=993500,ctl:ruleRemoveById=993600,ctl:ruleRemoveById=993700,ctl:ruleRemoveById=993800,ctl:ruleRemoveById=993900,ctl:ruleRemoveById=994000,ctl:ruleRemoveById=994100,ctl:ruleRemoveById=994200,ctl:ruleRemoveById=994300,ctl:ruleRemoveById=994400,ctl:ruleRemoveById=994500,ctl:ruleRemoveById=994600,ctl:ruleRemoveById=994700,ctl:ruleRemoveById=994800,ctl:ruleRemoveById=994900,ctl:ruleRemoveById=995000,ctl:ruleRemoveById=995100,ctl:ruleRemoveById=995200,ctl:ruleRemoveById=995300,ctl:ruleRemoveById=995400,ctl:ruleRemoveById=995500,ctl:ruleRemoveById=995600,ctl:ruleRemoveById=995700,ctl:ruleRemoveById=995800,ctl:ruleRemoveById=995900,ctl:ruleRemoveById=996000,ctl:ruleRemoveById=996100,ctl:ruleRemoveById=996200,ctl:ruleRemoveById=996300,ctl:ruleRemoveById=996400,ctl:ruleRemoveById=996500,ctl:ruleRemoveById=996600,ctl:ruleRemoveById=996700,ctl:ruleRemoveById=996800,ctl:ruleRemoveById=996900,ctl:ruleRemoveById=997000,ctl:ruleRemoveById=997100,ctl:ruleRemoveById=997200,ctl:ruleRemoveById=997300,ctl:ruleRemoveById=997400,ctl:ruleRemoveById=997500,ctl:ruleRemoveById=997600,ctl:ruleRemoveById=997700,ctl:ruleRemoveById=997800,ctl:ruleRemoveById=997900,ctl:ruleRemoveById=998000,ctl:ruleRemoveById=998100,ctl:ruleRemoveById=998200,ctl:ruleRemoveById=998300,ctl:ruleRemoveById=998400,ctl:ruleRemoveById=998500,ctl:ruleRemoveById=998600,ctl:ruleRemoveById=998700,ctl:ruleRemoveById=998800,ctl:ruleRemoveById=998900,ctl:ruleRemoveById=999000,ctl:ruleRemoveById=999100,ctl:ruleRemoveById=999200,ctl:ruleRemoveById=999300,ctl:ruleRemoveById=999400,ctl:ruleRemoveById=999500,ctl:ruleRemoveById=999600,ctl:ruleRemoveById=999700,ctl:ruleRemoveById=999800,ctl:ruleRemoveById=999900,ctl:ruleRemoveById=1000000,ctl:ruleRemoveById=1000100,ctl:ruleRemoveById=1000200,ctl:ruleRemoveById=1000300,ctl:ruleRemoveById=1000400,ctl:ruleRemoveById=1000500,ctl:ruleRemoveById=1000600,ctl:ruleRemoveById=1000700,ctl:ruleRemoveById=1000800,ctl:ruleRemoveById=1000900,ctl:ruleRemoveById=1001000,ctl:ruleRemoveById=1001100,ctl:ruleRemoveById=1001200,ctl:ruleRemoveById=1001300,ctl:ruleRemoveById=1001400,ctl:ruleRemoveById=1001500,ctl:ruleRemoveById=1001600,ctl:ruleRemoveById=1001700,ctl:ruleRemoveById=1001800,ctl:ruleRemoveById=1001900,ctl:ruleRemoveById=1002000,ctl:ruleRemoveById=1002100,ctl:ruleRemoveById=1002200,ctl:ruleRemoveById=1002300,ctl:ruleRemoveById=1002400,ctl:ruleRemoveById=1002500,ctl:ruleRemoveById=1002600,ctl:ruleRemoveById=1002700,ctl:ruleRemoveById=1002800,ctl:ruleRemoveById=1002900,ctl:ruleRemoveById=1003000,ctl:ruleRemoveById=1003100,ctl:ruleRemoveById=1003200,ctl:ruleRemoveById=1003300,ctl:ruleRemoveById=1003400,ctl:ruleRemoveById=1003500,ctl:ruleRemoveById=1003600,ctl:ruleRemoveById=1003700,ctl:ruleRemoveById=1003800,ctl:ruleRemoveById=1003900,ctl:ruleRemoveById=1004000,ctl:ruleRemoveById=1004100,ctl:ruleRemoveById=1004200,ctl:ruleRemoveById=1004300,ctl:ruleRemoveById=1004400,ctl:ruleRemoveById=1004500,ctl:ruleRemoveById=1004600,ctl:ruleRemoveById=1004700,ctl:ruleRemoveById=1004800,ctl:ruleRemoveById=1004900,ctl:ruleRemoveById=1005000,ctl:ruleRemoveById=1005100,ctl:ruleRemoveById=1005200,ctl:ruleRemoveById=1005300,ctl:ruleRemoveById=1005400,ctl:ruleRemoveById=1005500,ctl:ruleRemoveById=1005600,ctl:ruleRemoveById=1005700,ctl:ruleRemoveById=1005800,ctl:ruleRemoveById=1005900,ctl:ruleRemoveById=1006000,ctl:ruleRemoveById=1006100,ctl:ruleRemoveById=1006200,ctl:ruleRemoveById=1006300,ctl:ruleRemoveById=1006400,ctl:ruleRemoveById=1006500,ctl:ruleRemoveById=1006600,ctl:ruleRemoveById=1006700,ctl:ruleRemoveById