Author Topic: 404 on mod_security test with old errors  (Read 28233 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
404 on mod_security test with old errors
« on: May 05, 2017, 01:42:13 PM »
Having an issue with my Mod_Security. Says it's installed but I get a 404 on the test. The last 20 lines matching mod_security of the error log are from a few weeks ago. I've tried uninstalling/reinstalling a few times but still get the same thing. I also always get this:

Loaded plugins: fastestmirror, replace
Setting up Update Process
Loading mirror speeds from cached hostfile
 * base: www.gtlib.gatech.edu
 * extras: www.gtlib.gatech.edu
 * rpmforge: mirror.lstn.net
 * updates: www.gtlib.gatech.edu
Package(s) cwp-httpd available, but not installed.
No Packages marked for Update
Loaded plugins: fastestmirror, replace
Setting up Reinstall Process
Loading mirror speeds from cached hostfile
 * base: www.gtlib.gatech.edu
 * extras: www.gtlib.gatech.edu
 * rpmforge: mirror.lstn.net
 * updates: www.gtlib.gatech.edu
Package(s) cwp-httpd available, but not installed.


Mod Security configuration is: installed [test]


Offline
*
Re: 404 on mod_security test with old errors
« Reply #1 on: May 05, 2017, 04:24:38 PM »
try checking that you have the latest version

update cwp
Code: [Select]
sh /scripts/update_cwp
and then uninstall and again install modsecurity
AntiDDoS Protection (web + mail)
http://centos-webpanel.com/website-ddos-protection-proxy

Join our Development Team and get paid !
http://centos-webpanel.com/develope-modules-for-cwp


Services Monitoring & RBL Monitoring
http://centos-webpanel.com/services-monitor


Do you need Fast and FREE Support included for your CWP linux server?
http://centos-webpanel.com/noc-partner-list
Installation Instructions
http://centos-webpanel.com/installation-instructions
Get Fast Support Here
http://centos-webpanel.com/support-services

Offline
*
Re: 404 on mod_security test with old errors
« Reply #2 on: May 05, 2017, 05:12:10 PM »
I ran the command. Uninstalled a reinstalled.
CWPpro version: 0.9.8.230
Same thing is happening.

After the page loads for install it ends with an error that disappears after i reload the page.

Reloading httpd: not reloading due to configuration syntax error
[FAILED]

Everything appears to be working apart from mod_security
« Last Edit: May 05, 2017, 05:13:53 PM by Paul »

Offline
*
Re: 404 on mod_security test with old errors
« Reply #3 on: May 06, 2017, 12:25:05 AM »
try again update and then remove and install mod_sec
AntiDDoS Protection (web + mail)
http://centos-webpanel.com/website-ddos-protection-proxy

Join our Development Team and get paid !
http://centos-webpanel.com/develope-modules-for-cwp


Services Monitoring & RBL Monitoring
http://centos-webpanel.com/services-monitor


Do you need Fast and FREE Support included for your CWP linux server?
http://centos-webpanel.com/noc-partner-list
Installation Instructions
http://centos-webpanel.com/installation-instructions
Get Fast Support Here
http://centos-webpanel.com/support-services

Offline
*
Re: 404 on mod_security test with old errors
« Reply #4 on: May 06, 2017, 01:44:38 AM »
After update and reinstall same thing as described before
CWPpro version: 0.9.8.231
« Last Edit: May 06, 2017, 01:52:55 AM by Paul »

Offline
*
Re: 404 on mod_security test with old errors
« Reply #5 on: May 09, 2017, 01:32:24 PM »
I tried again with the new release and still the same.
CWPpro version: 0.9.8.233


Offline
*
Re: 404 on mod_security test with old errors
« Reply #6 on: May 09, 2017, 07:50:49 PM »
try checking in the apache logs after restart if modsecurity is loaded

Code: [Select]
tail -f /usr/local/apache/logs/*log
AntiDDoS Protection (web + mail)
http://centos-webpanel.com/website-ddos-protection-proxy

Join our Development Team and get paid !
http://centos-webpanel.com/develope-modules-for-cwp


Services Monitoring & RBL Monitoring
http://centos-webpanel.com/services-monitor


Do you need Fast and FREE Support included for your CWP linux server?
http://centos-webpanel.com/noc-partner-list
Installation Instructions
http://centos-webpanel.com/installation-instructions
Get Fast Support Here
http://centos-webpanel.com/support-services

Offline
*
Re: 404 on mod_security test with old errors
« Reply #7 on: May 09, 2017, 09:50:47 PM »
Kept getting an error on the apache restart and couldn't get it going:

Starting httpd: httpd: Syntax error on line 507 of /usr/local/apache/conf/httpd.conf: Syntax error on line 5 of /usr/local/apache/conf.d/mod_security.conf: Cannot load modules/mod_security2.so into server: /usr/local/apache/modules/mod_security2.so: undefined symbol: apr_crypto_block_cleanup
[FAILED]

I removed mod_security and the apache went back up by itself.

I ran the command tail -f /usr/local/apache/logs/*log
 and the whole webpanel interface locked up. Right now I'm unable to get into any web panel URLs. I have a few domains there that seem to be working ok. I'm going to wait a bit to see what happens.

Offline
*
Re: 404 on mod_security test with old errors
« Reply #8 on: May 09, 2017, 10:50:46 PM »
Still unable to access web panel.
With command line i am able to run service cwpsrv restart with OKs
Also run service iptables stop with OKs
Web access to web panel hangs and finally loads 504 Gateway Time-out.

Offline
*
Re: 404 on mod_security test with old errors
« Reply #9 on: May 09, 2017, 11:11:02 PM »
Starting httpd: httpd: Syntax error on line 507 of /usr/local/apache/conf/httpd.conf: Syntax error on line 5 of /usr/local/apache/conf.d/mod_security.conf: Cannot load modules/mod_security2.so into server: /usr/local/apache/modules/mod_security2.so: undefined symbol: apr_crypto_block_cleanup
[FAILED]

Reinstall apache/suphp and then again try to install mod_sec
Code: [Select]
yum reinstall cwp-httpd cwp-suphp
Still unable to access web panel.
With command line i am able to run service cwpsrv restart with OKs
Also run service iptables stop with OKs
Web access to web panel hangs and finally loads 504 Gateway Time-out.

For cwp restart try this command
Code: [Select]
sh /scripts/restart_cwpsrv
AntiDDoS Protection (web + mail)
http://centos-webpanel.com/website-ddos-protection-proxy

Join our Development Team and get paid !
http://centos-webpanel.com/develope-modules-for-cwp


Services Monitoring & RBL Monitoring
http://centos-webpanel.com/services-monitor


Do you need Fast and FREE Support included for your CWP linux server?
http://centos-webpanel.com/noc-partner-list
Installation Instructions
http://centos-webpanel.com/installation-instructions
Get Fast Support Here
http://centos-webpanel.com/support-services

Offline
*
Re: 404 on mod_security test with old errors
« Reply #10 on: May 09, 2017, 11:37:20 PM »
I did a reboot of the VPS before I read your reply.
I ran the command "yum reinstall cwp-httpd cwp-suphp" that told me "available but not installed Error nothing to do"
I ran the command "sh /scripts/restart_cwpsrv" all with OKs

Now getting this trying to access panel:

Warning: [obfuscated](): (HY000/2002): No such file or directory in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0

Warning: [obfuscated](): (HY000/2002): No such file or directory in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0


Trying to start mysql server, please wait!
Try to restart CentOS Web Panel with command: sh /scripts/restart_cwpsrv

**Check your MySQL root password in: /usr/local/cwpsrv/htdocs/resources/admin/include/db_conn.php and /root/.my.cnf


Warning: [obfuscated]() expects exactly 1 parameter, 0 given in /usr/local/cwpsrv/htdocs/admin/admin/index.php on line 0
Could not connect:

Offline
*
Re: 404 on mod_security test with old errors
« Reply #11 on: May 10, 2017, 12:39:21 PM »
Today I woke up to the web panel working. :) No changes on my end since yesterday.
Right now I have mod_security uninstalled.
CWPpro version: 0.9.8.233

Offline
*
Re: 404 on mod_security test with old errors
« Reply #12 on: May 10, 2017, 01:08:15 PM »
Checked out the error log.
Apart from client access errors to nonexistent wordpress urls there is this or similar that repeats in the error log:

[Sun May 07 17:06:15.034712 2017] [mpm_event:notice] [pid 20557:tid 140027027576640] AH00491: caught SIGTERM, shutting down
[Sun May 07 17:06:16.024503 2017] [ssl:warn] [pid 29539:tid 139780304582464] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Sun May 07 17:06:16.026328 2017] [mpm_event:notice] [pid 29539:tid 139780304582464] AH00489: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Sun May 07 17:06:16.026374 2017] [core:notice] [pid 29539:tid 139780304582464] AH00094: Command line: '/usr/local/apache/bin/httpd'
[Sun May 07 17:06:32.043102 2017] [mpm_event:notice] [pid 29539:tid 139780304582464] AH00494: SIGHUP received.  Attempting to restart
[Sun May 07 17:06:32.059456 2017] [ssl:warn] [pid 29539:tid 139780304582464] AH01873: Init: Session Cache is not configured [hint: SSLSessionCache]
[Sun May 07 17:06:32.061031 2017] [mpm_event:notice] [pid 29539:tid 139780304582464] AH00489: Apache/2.4.25 (Unix) OpenSSL/1.0.1e-fips configured -- resuming normal operations

Offline
*
Re: 404 on mod_security test with old errors
« Reply #13 on: May 11, 2017, 12:04:19 PM »
ame issue with the latest release:
CWPpro version: 0.9.8.234

Still the same error at the end of install:
Mod Security Successfully Installed
Reloading httpd: not reloading due to configuration syntax error
[FAILED]

Also still 404 on the test instead of 403

Offline
*
Re: 404 on mod_security test with old errors
« Reply #14 on: May 11, 2017, 12:11:56 PM »
What's the configuration error?