Messages

1

E-Mail / WordPress nail

« on: April 12, 2025, 02:35:32 PM »

Hi,
since few days i stopped receiving messages from wordpress about new site...
BR
Ventyp

2

Installation / Re: Hidden processes...

« on: March 29, 2025, 05:43:39 PM »

What exactly are the steps you follow?

H,

sorry the first picture is not related to the topic...
Only this one is relevant:
https://prnt.sc/xxeOnFoYtp42

I select "Enable protection":

https://prnt.sc/b5Y0eozhI5b_

but there is no change the screen looks like this again:

https://prnt.sc/xxeOnFoYtp42

Thanks in advance!

BR
Venty

3

Problems on other RedHat linux servers / Re: error_log: binary file matches

« on: March 26, 2025, 04:23:37 PM »

Hi,

please look:

https://prnt.sc/Z5LM1RrRDemt

Thanks in advance!

BR
Venty

4

Problems on other RedHat linux servers / error_log: binary file matches

« on: March 25, 2025, 04:41:18 PM »

Hi,

I am using AL 9..., I get the following error message:
grep: /usr/local/cwpsrv/logs/error_log: binary file matches

What should I do?

Thanks in advance!

BR
Venty

5

Suggestions / Re: :):):) Comodo WAF rules update required :):):)

« on: March 19, 2025, 02:00:04 PM »

Hi,

in this article :

https://starburst.help/control-web-panel-cwp/modsecurity/owasp-crs-ruleset-update-to-4-12-0-running-cwp-and-apache-on-almalinux-8-9/

here ( step 8 ), please look maybe there is an error: https://prnt.sc/CrpsjlKky6R2

After the correction I made and when trying to test the mod security, the test does not work???

BR
Venty

6

Suggestions / Re: :):):) Comodo WAF rules update required :):):)

« on: March 18, 2025, 02:06:51 PM »

What is your country? https://dl.starburst.help/ works here with Xfinity (Comcast) in the USA.

Hi,

Bulgaria, please come ...

BR
Venty

I'll take a look, IP's from BG like attacking the servers.

Try now, if you are still blocked, then Cloudflare has either the individual IP range or AS blocked.

Thank you very much!

7

Suggestions / Re: :):):) Comodo WAF rules update required :):):)

« on: March 18, 2025, 01:25:54 PM »

What is your country? https://dl.starburst.help/ works here with Xfinity (Comcast) in the USA.

Hi,

Bulgaria, please come ...

BR
Venty

8

Problems on other RedHat linux servers / Re: daily "Anacron" messages?

« on: March 18, 2025, 01:24:40 PM »

Again, those are Notices -- not errors. If you prefer not to notice them, you can do as I suggested earlier in the thread and change your warning level so they aren't brought front & center to your attention on a regular basis.

Hi,

I'm very sorry, I did what you gave me as recommendations, but the notices continue to appear ...

On the other hand, please advise me on which "official" bases it is expected that there will be a daily, etc. archive available ...

BR
Venty

9

Suggestions / Re: :):):) Comodo WAF rules update required :):):)

« on: March 18, 2025, 07:16:51 AM »

Just created a ModSecurity folder. There will be some more tutorials coming soon.

If it doesn't redirect you, the new URL is:
https://starburst.help/control-web-panel-cwp/modsecurity/owasp-crs-ruleset-update-to-4-12-0-running-cwp-and-apache-on-almalinux-8-9/

Yes, Step 8 creates the global_disabled_rules.conf file.

What is put in here depends on personal needs/wants to allow thru.

Step 9 is depending on how mod_security.conf was setup.

Either way, it should be changed to

Code: [Select]

Include "/usr/local/apache/modsecurity-owasp-latest/owasp.conf"If you are following that KB to the letter.

This KB moved it to to sub-root directory, so it is easily modified for the next OWASP CRS update (e.g. 4.13.0), you just have to change a couple numbers, instead of creating a whole new owasp.conf file every time you update.

Hi,

thank you very much for the answer...

https://dl.starburst.help/ does not work...

BR
Venty

10

Suggestions / Re: :):):) Comodo WAF rules update required :):):)

« on: March 17, 2025, 04:29:43 PM »

Updated both KB articles.

We updated some paths on the downloads server.

https://dl.starburst.help/

Hi,

thank you very much for the answer...

I try to access and download the file from the new download path, but again it doesn't work, it returns This site can't be reached / dl.starburst.help took too long to respond. Could it be that there is protection or limited access from a certain country...?

Please clarify - in the article about the rules 4.12.0:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/owasp-crs-ruleset-update-to-4-12-0-running-cwp-and-apache-on-almalinux-8-9/

1. In step 8, I create the file global_disabled_rules.conf and then change its content or itself with it with what I download as recommended.conf?

2. The lobal_disabled_rules.conf file remains in the /usr/local/apache/modsecurity-owasp-latest/coreruleset-4.12.0/ directory

3. In step 9, as far as I understand, there are two options for the code:
3.1 Include “/usr/local/apache/modsecurity-owasp-latest/coreruleset-4.12.0/owasp.conf” - which owasp.conf remains in the coreruleset-4.12.0 directory??

3.2 Include "/usr/local/apache/modsecurity-owasp-latest/owasp.conf" - which owasp.conf is moved to the modsecurity-owasp-latest directory??

3.1 or 3.2 is better?

4. You say:
"Notice we moved the owasp.conf to the root of the OWASP Rulesets, so any future updates you can just update the version number in the Include path." - update the version number in the Include path = version number in the Include path in the three lines of the owasp.conf file ??

5. If option 3.2 is chosen, where we move the owasp.conf file to the modsecurity-owasp-latest directory - other files from the coreruleset-4.12.0 directory are not moved, right?

Thanks in advance!

BR
Venty

11

Other / Re: Nginx Varnish Apache php-fpm 403 Forbidden

« on: March 17, 2025, 02:44:26 PM »

For me, this is usually solved with a simple "WebServer Rebuild" which you can found under each domain WebServer configuration.

Hi,

but for me it's like this:

https://prnt.sc/ag3vdF6hfnd7

is that the problem? I use AL 9...

Thanks in advance!

12

Suggestions / Re: :):):) Comodo WAF rules update required :):):)

« on: March 17, 2025, 09:34:59 AM »

Hi,

I sincerely thank Starburst for the good article..

https://kb.starburstservices.com/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/update-to-owasp-crs-ruleset-running-cwp-and-apache-on-almalinux-8-9/


but I saw that there is a new one:

https://starburst.help/control-web-panel-cwp/control-web-panel-cwp-admin-tutorials/owasp-crs-ruleset-update-to-4-12-0-running-cwp-and-apache-on-almalinux-8-9/

Given that I have completed the first one verbatim, do I now have to complete everything from the second one?

And also - the link provided does not work, please help:

https://prnt.sc/itInIPhlID4o

Thanks in advance!

BR
Venty

13

Other / Re: Nginx Varnish Apache php-fpm 403 Forbidden

« on: March 17, 2025, 09:12:04 AM »

Hi
I have tested this on Alma Linux 8 and 9. Same problem on both OS.
After fresh install of CWP, PHP7.4 and FPM or PHP8.3 and FPM
i goto SelectWebServer option under WebServer Settings menu and select Nginx & Varnish & Apache.
I install varnish directly from ssh and start the process successfully.
I add New user and domain.
After that i generate SSL successfully.
Then i goto WebServerDomain Conf and enable Varnish on the domain.

As soon as i enable it, and try to browse the domain, i get NGINX 403 Forbidden.
As soon as i disable Varnish by deleting the config from WebServerDomain Conf , website starts working again.
Could anyone please guide me how to fix this? I am using CWP Pro.

Hi,

+ 1 for NGINX 403 Forbidden...

BR
Venty

14

Other / Re: Nginx Varnish Apache php-fpm 403 Forbidden

« on: March 17, 2025, 09:09:05 AM »

On Alma Linux 8 it installs automatically.
On Alma Linux 9 I need to install it manually.
Forgot to mention this.
Doesn't matter if it's installed auto or manually, I still get the same problem.

Hi,

1. How to install Varnish on Alma Linux 9 and SVP?
2. How to enable for SelectWebServer / WebServer Settings menu and select Nginx & Varnish & Apache mode?

Thanks in advance!

BR
Venty

15

Problems on other RedHat linux servers / Re: no Varnish...

« on: March 15, 2025, 02:01:20 AM »

PHP 8.1.---no  Varnish too?¿???