Have you ever tried to run mod_security? You sound like you've never been in the trenches.