Mod_Security Block Time and CSF

[701Hosting]

I have both mod_security and CSF installed. I'm using a CDN that triggers some mod_security rules. I'm curious does mod_security need CSF to block IPs? Because I've whitelisted all the CDNs IP in CSF but it appears they might still be blocked when a mod_security rule is triggered. I'm curious... Can mod_security block traffic without CSF to create a firewall rule?

 

[quietFinn]

... I'm curious does mod_security need CSF to block IPs?
... Can mod_security block traffic without CSF to create a firewall rule?

AFAIK, yes and no.

 

[cPRex]

ModSecurity itself is a web application firewall, so it specifically is just looking at Apache. CSF includes the LF_MODSEC tool, which can perform firewall blocks as well. So, as @quietFinn said, yes and no are the correct answers to those questions.

 

[701Hosting]

Ok. So does mod_security block traffic on it's own? Or just deny requests to certain files when accesses?

 

[cPRex]

ModSecurity can block specific Apache requests, but not actual traffic.