[mod-security-users] Where is the best place for the ModSecurity?

[Jason L. <hac...@ya...>]

Hello,Where is the best place for the ModSecurity to protect a WordPress website? Is it true that a WAF like ModSecurity must be installed between the web server and the Internet and not on the host itself?
Tnx.