SecRuleEngine On
SecAuditEngine On
SecAuditLogType Serial
SecAuditLog logs/audit.log
SecAuditLogParts ABCFHZ
SecDebugLog logs/debug.log
SecDebugLogLevel 5
SecDefaultAction phase:2,log,auditlog,deny,status:403
SecRule REQUEST_URI "/etc/passwd"