mod_security2 rules

[mikeyman]

On another post I saw that cpaneltodd had recommended that a member use the modsec2 rules listed below. I was wondering if those rules would interfere with cpanel or any of its components? Also if the rules below are loaded, would you disable the default rules that cpanel installs and only use the 2 below? Thanks!

http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/rootkits.conf
http://www.gotroot.com/downloads/ftp/mod_security/2.0/apache2/rules.conf

 

[mikeyman]

Also what about:

jitp.conf
recons.conf
useragents.conf
proxy.conf

Will any of these or the ones above break cpanel's functionality?

 

[LinuxStandard]

cPanel should have access via the 127.0.0.1 address and should be allowed via the rule:

SecRule REMOTE_ADDR "^127.0.0.1$" nolog,allow

in the modsec2.conf file included with the ModSec.pm.tar.gz component of easyapache3.

 

[mikeyman]

Is it safe to use these rules without worry about breaking anything in cpanel?