mod_security.so, suhosin.so, both, either, which, how?

[IT_Architect]

The suhosin patch is a no-brainer. However, looking at the mod_security.so and suhosin.so, there is a tremendous amount of duplication. The suhosin rules are straightforward. With mod_security 2.5 it seems as though there are only two companies on the web the understand the rules at all, and sell subscriptions. Does anybody know of a set of rules for mod_security that are designed to work along side of suhosin?

Thanks!