File: //etc/cpguard/cpguard_modsec101.conf
SecRule REQUEST_METHOD "(?:POST|GET)" "phase:1,id:5583452,t:none,chain,phase:2,deny,status:406,t:none"
SecRule REQUEST_URI "@pmFromFile /etc/cpguard/bfurls.txt" "t:none,t:lowercase,chain,setvar:tx.cgbf=%{REMOTE_ADDR}##%{REQUEST_HEADERS.x-forwarded-for}##%{REQUEST_METHOD}##%{SERVER_NAME}##%{REQUEST_URI}"
SecRule REQUEST_URI "!@contains ?" "t:none,chain,t:lowercase"
SecRule &REQUEST_HEADERS_NAMES:Referer "@eq 0" "t:none,t:lowercase,chain"
SecRule TX:cgbf "@inspectFile /etc/cpguard/scripts/bforce.php" "t:none,nolog"