Topics

1

CentOS 6 Problems / yum update after get mod security issue cant start apache

« on: May 11, 2017, 03:32:36 PM »

hi
my system:
Apache version: Apache/2.4.25
PHP version: 5.4.45 [PHP Switcher]
MySQL version: 5.5.48
FTP version: 1.0.36

CWP version: 0.9.8.234

i've update yum update after that i get this errors.

i have rebuilt apache, uninstall and also install modsecurity.

Code: [Select]

Stopping httpd: [FAILED]
Starting httpd: [Thu May 11 15:23:04.763278 2017] [so:warn] [pid 13726:tid 140386344380160] AH01574: module rpaf_module is already loaded, skipping
[Thu May 11 15:23:04.763486 2017] [so:warn] [pid 13726:tid 140386344380160] AH01574: module suphp_module is already loaded, skipping
[Thu May 11 15:23:04.803593 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 2 will probably never match because it overlaps an earlier Alias.
[Thu May 11 15:23:04.803627 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 3 will probably never match because it overlaps an earlier Alias.
[Thu May 11 15:23:04.803639 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 4 will probably never match because it overlaps an earlier Alias.
AH00526: Syntax error on line 97 of /usr/local/apache/modsecurity-owasp-old/modsecurity_crs_10_config.conf:
ModSecurity: Found another rule with the same id
[FAILED]
file /usr/local/apache/conf.d/mod_security.conf

Code: [Select]

LoadFile /usr/lib64/libxml2.so
LoadFile /usr/lib64/liblua-5.1.so

<IfModule !mod_security2.c>
  LoadModule security2_module  modules/mod_security2.so
</IfModule>

<IfModule mod_security2.c>
  <IfModule mod_ruid2.c>
    SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
    SecAuditLogType Concurrent
  </IfModule>
  <IfModule itk.c>
    SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
    SecAuditLogType Concurrent
  </IfModule>

  SecServerSignature "CentOS WebPanel: Protected by Mod Security"

  SecRuleEngine On
  SecAuditEngine RelevantOnly
  SecAuditLog /usr/local/apache/logs/modsec_audit.log
  SecDebugLog /usr/local/apache/logs/modsec_debug.log
  SecAuditLogType Serial
  SecDebugLogLevel 0
  SecRequestBodyAccess On
  SecDataDir /tmp
  SecTmpDir /tmp
  SecUploadDir /tmp
  SecCollectionTimeout 600
  SecPcreMatchLimit 1250000
  SecPcreMatchLimitRecursion 1250000
  Include "/usr/local/apache/modsecurity-owasp-old/owasp.conf"
</IfModule>
>>>>

if i remove below the line in /usr/local/apache/conf.d/mod_security.conf

Code: [Select]

Include "/usr/local/apache/modsecurity-owasp-old/owasp.conf"


mod security error gone and apache restart well but there is warnings stay with it.

Code: [Select]

[so:warn] [pid 13726:tid 140386344380160] AH01574: module rpaf_module is already loaded, skipping
[Thu May 11 15:23:04.763486 2017] [so:warn] [pid 13726:tid 140386344380160] AH01574: module suphp_module is already loaded, skipping
[Thu May 11 15:23:04.803593 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 2 will probably never match because it overlaps an earlier Alias.
[Thu May 11 15:23:04.803627 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 3 will probably never match because it overlaps an earlier Alias.
[Thu May 11 15:23:04.803639 2017] [alias:warn] [pid 13726:tid 140386344380160] AH00671: The Alias directive in /usr/local/apache/conf.d/domain-redirects.conf at line 4 will probably never match because it overlaps an earlier Alias.
Any help will be appreciated.

thanks.

2

CentOS 6 Problems / Simple File Manager upload error

« on: May 09, 2017, 09:16:24 AM »

hello iam using latest cwp centos 6.9 final

simple file manager's upload function is not working in cwp admin panel. it gives an error at the end of file uploaded.

Fatal error: Uncaught Error: Call to undefined function [obfuscated]() in /usr/local/cwpsrv/htdocs/resources/admin/modules/file_manager.php:0 Stack trace: #0 /usr/local/cwpsrv/htdocs/resources/admin/modules/file_manager.php(0): [obfuscated]('/home/yol/...') #1 /usr/local/cwpsrv/htdocs/resources/admin/modules/file_manager.php(0): [obfuscated]('wordpress-4.7.4...', '/home/yol/') #2 /usr/local/cwpsrv/htdocs/admin/admin/index.php(0): unknown() #3 {main} thrown in /usr/local/cwpsrv/htdocs/resources/admin/modules/file_manager.php on line 0

3

CentOS 6 Problems / minor bugs after upgrade

« on: May 08, 2017, 08:05:22 AM »

Hi,
mail queue area listing function works good but when you click on queue mail VIEW button, Queue reason hangs as below. cannot opened.
page:

Code: [Select]

admin/index.php?module=mail_queue&act=view&id=F14AC65C56
Error:hanging with below

Code: [Select]

Queue reason:
Loading, please wait...

another issue php info section:
when you click on this page. php info comes with error and cannot shown as usual looking. error code below.

related page:

Code: [Select]

admin/index.php?module=php_info
Error:

Warning: [obfuscated](http://MYIP/phpinfo.php): failed to open stream: HTTP request failed! HTTP/1.1 500 Internal Server Error in /usr/local/cwpsrv/htdocs/resources/admin/modules/php_info.php on line 0

Another issue on client panel.
when you click roundcube mail button it redirects with empty page.
url as below:

Code: [Select]

any-domainname.com:2095

thanks for reading

4

CentOS 6 Problems / upgrade after apache error & fix

« on: April 28, 2017, 03:43:12 PM »

my system

Code: [Select]

CentOS release 6.9 (Final)
Apache version: Apache/2.4.25
PHP version: 5.4.45 [PHP Switcher]
MySQL version: 5.5.48
FTP version: 1.0.36
hello i've just upgrade.
get this error after upgrade from restarting apache.

Code: [Select]

Starting httpd: AH00526: Syntax error on line 11 of /usr/local/apache/conf.d/mod_security.conf
Invalid ServerName "*" use ServerAlias to set multiple server names.

LoadFile /usr/lib64/libxml2.so
LoadFile /usr/lib64/liblua-5.1.so
LoadModule security2_module modules/mod_security2.so

<IfModule mod_security2.c>
   SecPcreMatchLimit 1000000
   SecPcreMatchLimitRecursion 1000000
   SecDataDir logs/tmp
</IfModule>

ServerName *

AddDefaultCharset UTF-8
<IfModule mod_security2.c>
   Include /usr/local/apache/modsecurity-crs/modsecurity_crs_10_config.conf
   Include /usr/local/apache/modsecurity-crs/base_rules/*.conf
   SecRuleEngine On
   SecRequestBodyAccess On
   SecResponseBodyAccess On
   SecResponseBodyLimit 546870912
   SecRequestBodyInMemoryLimit 546870912
   Include /usr/local/apache/conf/mod_sec_disabled_rules.conf
</IfModule>

i've removed line that ServerName * from mod_securty.conf file.
apache restart good. its working.
But i am not sure good idea removing that line.

any suggestion would be appriciated. thanks.

ps:
if someone share own mod_securty.conf file maybe i can evalauate it.

thanks..