I've set up mod_security and have done what I can to block bad bots. Now that my list is getting pretty big 100+ bots and counting I was told by my collegue that blocking specific bots was silly. I should block everyting by default and just allow the ones I want plus browsers of course.
So is he right? If so what would be the best way to set it up in mod_security?
