similar to my previous suggstion but prob alittle simpler.
would be useful to have a whm section where one could add, edit, or remove custom rules.
reason being, some hosts use many different error codes which many will trigger the default mod_security regex. a service which is locked "code 423" shouldnt ban a connection attempting to connect as it may be nothing more then an expired subscription or somthing similar.
I've created custom entries to help with this by editing the /etc/csf/regex.pm file (thx chirpy).
just thought it might be alittle easier than my previous suggestion perhaps a regex input checker would be good too just in case