Control Web Panel

Security => Mod_Security => Topic started by: Samuel da cruz on September 02, 2019, 01:52:03 AM

Title: Error 403 Forbidden (You don't have permission to access / on this server)
Post by: Samuel da cruz on September 02, 2019, 01:52:03 AM
Hello. I get error 403 (You do not have permission to access / on this server). I performed mod security uninstall and the page is active normally, but when active mod security happens the error 403. I am new to the CWP panel. Could you help me sort it out? There are several tips here in the forum but I confess that I did not find any yet to solve the problem. Thank you very much in advance.
Title: Re: Error 403 Forbidden (You don't have permission to access / on this server)
Post by: studio4host on September 02, 2019, 11:17:08 AM
search....
http://wiki.centos-webpanel.com/mod_security-for-cwp
Title: Re: Error 403 Forbidden (You don't have permission to access / on this server)
Post by: Samuel da cruz on September 03, 2019, 05:39:28 PM
search....
http://wiki.centos-webpanel.com/mod_security-for-cwp
Thanks for the info was of great help. Now when the site is only on the Centos test page. My site does not appear even jpa being in the server. What would it be?
Title: Re: Error 403 Forbidden (You don't have permission to access / on this server)
Post by: André Bastos on January 10, 2023, 07:53:27 PM
CWP -> Mod Security -> Change to Comodo WAF
Title: Re: Error 403 Forbidden (You don't have permission to access / on this server)
Post by: overseer on January 15, 2023, 12:51:58 AM
Change to Comodo WAF
Agreed, OWASP is too aggressive of a default.
But this tutorial (http://wiki.centos-webpanel.com/mod_security-for-cwp) has relevant info and suggested changes if you do decide to use OWASP rules.
Title: Re: Error 403 Forbidden (You don't have permission to access / on this server)
Post by: weasam on August 14, 2023, 03:50:16 PM
I also have this issue when switch the web server from apache only to nginx only.
it only work apache only or Apache & nginx or Apache&nginx&varnish
tried: uninstall Mod_security, re-generate Vhost, Fix permissions from GUI.

logs.
Code: [Select]
[i][i][i]2023/08/14 18:39:45 [error] 4784#4784: *65 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"
2023/08/14 18:40:12 [error] 5206#5206: *70 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"
2023/08/14 18:40:21 [error] 5330#5330: *71 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"
2023/08/14 18:40:34 [error] 5551#5551: *73 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"
2023/08/14 18:40:42 [error] 5663#5663: *74 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"[/i][/i][/i]

From the log it says is missing file /apps/files/preview-service-worker.js. when I go to file manager , it's confirmed missing this file.
but why would it work when switchted to apache webserver. I will regenerate this issue from new Nextcloud installation