<IfModule mod_security.c>
#
# Security Rules
#
SecFilterEngine On
SecServerSignature "Apache"
SecFilterCheckUnicodeEncoding Off
SecAuditEngine RelevantOnly
SecAuditLog logs/security_log
SecFilterScanPOST On
SecFilterDefaultAction "deny,log,status:403"

SecFilterSelective THE_REQUEST "curl"
SecFilterSelective THE_REQUEST "links -dump"
SecFilterSelective THE_REQUEST "links -dump-charset"
SecFilterSelective THE_REQUEST "links -dump-width"
SecFilterSelective THE_REQUEST "links http://"
SecFilterSelective THE_REQUEST "links ftp://"
SecFilterSelective THE_REQUEST "links -source"
SecFilterSelective THE_REQUEST "mkdir"
SecFilterSelective THE_REQUEST "cd /tmp"
SecFilterSelective THE_REQUEST "cd /var/tmp"
SecFilterSelective THE_REQUEST "\.\./"
SecFilterSelective THE_REQUEST "/../../"
SecFilterSelective THE_REQUEST "/bin/ls"
SecFilterSelective THE_REQUEST "cd /tmp"
SecFilterSelective THE_REQUEST "cd /root"
SecFilterSelective THE_REQUEST "cd /backup"

SecFilter "/bin/ps"
SecFilter "/usr/bin/cc"
SecFilter "/usr/bin/gcc"
SecFilter "/usr/bin/wget"
SecFilter "/bin/echo"
SecFilter "/bin/kill"
SecFilter "/bin/chmod"
SecFilter "/usr/bin/cpp"
SecFilter "/bin/ping"
SecFilter "nc\x20"
SecFilter "nmap\x20"
SecFilter "perl\x20"
</IfModule>