anchor.diff:  # ---------------------------------------------------------------
  -# Core ModSecurity Rule Set ver.2.2.6
  +# Core ModSecurity Rule Set ver.2.2.9
   # Copyright (C) 2006-2012 Trustwave All rights reserved.
   #
  -# The OWASP ModSecurity Core Rule Set is distributed under
  +# The OWASP ModSecurity Core Rule Set is distributed under 
   # Apache Software License (ASL) version 2
   # Please see the enclosed LICENCE file for full details.
   # ---------------------------------------------------------------
   
   
   #
  -# -- [[ Recommended Base Configuration ]] -------------------------------------------------
  +# -- [[ Recommended Base Configuration ]] ------------------------------------------------- 
   #
   # The configuration directives/settings in this file are used to control
   # the OWASP ModSecurity CRS. These settings do **NOT** configure the main
   # ModSecurity settings such as:
  -#
  +# 
   # - SecRuleEngine
   # - SecRequestBodyAccess
   # - SecAuditEngine
  
positive.code: # - To log *only* to the Apache error_log file use: "log,noauditlog"
  #
  # Ref: http://blog.spiderlabs.com/2010/11/advanced-topic-of-the-week-traditional-vs-anomaly-scoring-detection-modes.html
  # Ref: https://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Reference_Manual#SecDefaultAction
  #
  SecDefaultAction "phase:1,<%= @_secdefaultaction -%>"
  SecDefaultAction "phase:2,<%= @_secdefaultaction -%>"
  
negative.code: # -- [[ Collaborative Detection Mode ]] --
  # This is a "delayed blocking" mode of operation where each matching rule will inherit
  # the "pass" action and will only contribute to anomaly scores.  Transactional blocking
  # can be applied 
  #
  # -- [[ Alert Logging Control ]] --
  # You have three options -
  