Control Web Panel

Security => Mod_Security => Topic started by: Yun on April 20, 2017, 09:02:35 PM

Title: Found another rule with the same id
Post by: Yun on April 20, 2017, 09:02:35 PM
I have faced strange problem after CWP6 upgrade.
After Mod Security install Apache does not start. I tried Apache Rebuilt, however not fixed. :(

When I have installed Comodo WAF getting error like this:
AH00526: Syntax error on line 22 of /usr/local/apache/modsecurity-cwaf/rules/00_Init_Initialization.conf:
ModSecurity: Found another rule with the same id

When I have installed AWASP latest getting error like this:
AH00526: Syntax error on line 772 of /usr/local/apache/modsecurity-owasp-latest/crs-setup.conf:
ModSecurity: Found another rule with the same id
Title: Re: Found another rule with the same id
Post by: Yun on April 21, 2017, 10:18:51 PM
For this problem, I do some search, i can not a solution..

For example Plesk solve the problem with an update.
https://support.plesk.com/hc/en-us/articles/213388129-ModSecurity-Found-another-rule-with-the-same-id

Any solution for CWP?
Title: Re: Found another rule with the same id
Post by: Administrator on April 23, 2017, 07:44:42 AM
try to uninstall and then install again modsecurity
Title: Re: Found another rule with the same id
Post by: jgysenbergs on May 05, 2017, 08:24:15 AM
I tried several times to uninstall and subsequent install again but that does not work. Also, warning that mod_sec is not installed, does not appear. Do we have an unambiguous solution?
Title: Re: Found another rule with the same id
Post by: Administrator on May 05, 2017, 08:48:03 AM
try uninstalling mod security and then remove all current rules/folder and files you have in your /usr/local/apache/ folder
Title: Re: Found another rule with the same id
Post by: jgysenbergs on May 05, 2017, 11:15:09 AM
I rm'ed dirs modsecurity-crs and modsecurity-cwaf and file modules/mod_security2.so

At first, this seemed to work but when restarting httpd it fails again:

Stopping httpd: [  OK  ]
Starting httpd: AH00526: Syntax error on line 14 of /usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf:
ModSecurity: Found another rule with the same id
[FAILED]
Title: Re: Found another rule with the same id
Post by: sasquire on May 05, 2017, 12:36:33 PM
Had to do a reboot after some updates to my server today, and got exactly the same error, same location.

AH00526: Syntax error on line 14 of /usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf:
ModSecurity: Found another rule with the same id
[FAILED]

Apache will only run if I remove Mod security. Reinstalling mod security fixes the problem until the next time I restart Apache, and same error returns.
Title: Re: Found another rule with the same id
Post by: Administrator on May 05, 2017, 04:25:47 PM
issue found and fixed it was related to comodo waf update

update cwp to latest version
sh /scripts/update_cwp
Title: Re: Found another rule with the same id
Post by: jgysenbergs on May 05, 2017, 06:03:55 PM
Worked for me. Thank you. - JG
Title: Re: Found another rule with the same id
Post by: sasquire on May 06, 2017, 04:59:52 AM
Same. All working well again :D
Much appreciated.
Title: Re: Found another rule with the same id
Post by: edur on May 19, 2017, 01:30:39 PM
issue found and fixed it was related to comodo waf update

update cwp to latest version
sh /scripts/update_cwp

I have the same problem and I the newest version:   0.9.8.238
 
:-\


Title: Re: Found another rule with the same id
Post by: beer73 on October 08, 2017, 11:34:35 AM
In my case, maybe due to some update (I dont know) I had duplicated these last 3 lines in my httpd.conf file which caused me the error "FOUND ANOTHER RULE WITH THE SAME ID":

Code: [Select]
Include /usr/local/apache/conf/sharedip.conf
Include /usr/local/apache/conf.d/*.conf
ExtendedStatus On

Include /usr/local/apache/conf/sharedip.conf
Include /usr/local/apache/conf.d/*.conf
ExtendedStatus On

Removing duplicate lines everything works correctly.