Internal error AWSTATS HELP!!!

[BeNe]

Quote:Could it be something to do with modsecurity2?

Yes!
Try to disable modsecurity2 complete for a short time and test it.

Greez BeNe

[mydebians]

(09-11-2009 10:12 PM)BeNe Wrote:  

Quote:Could it be something to do with modsecurity2?

Yes!
Try to disable modsecurity2 complete for a short time and test it.

Greez BeNe

yes ! nice way !
without mod security2, awstats works

[BeNe]

Quote:without mod security2, awstats works

Thats the problem with modsecurity - there are very very much policys and it is not that easy to handle them correct at all.
Please check your Modsecurity log and try to find the deny (problem) policy.

Greez BeNe

[mydebians]

Ok thanks,

Code:

[localhost/sid#907f868][rid#929f3b0][/awstats/mydomain.com][1] Access denied with code 500 (phase 2). Pattern match "\.(?:c(?:o(?:nf(?:ig)?|m)|s(?:proj|r)?|dx|er|fg|md)|p(?:rinter|ass|db|ol|wd)|v(?​:b(?:proj|s)?|sdisco)|a(?:s(?:ax?|cx)|xd)|d(?:bf?|at|ll|os)|i(?:d[acq]|n[ci])|ba(?:[kt]|ckup)|res(?:ources|x)|s(?:h?tm|ql|ys)|l(?:icx|nk|og)|\w{0,5}~|webinfo|ht[rw]|xs[dx]| ..." at REQUEST_BASENAME. [file "/etc/modsecurity2/modsecurity_crs_30_http_policy.conf"] [line "94"] [id "960035"] [msg "URL file extension is restricted by policy"] [severity "CRITICAL"] [tag "POLICY/EXT_RESTRICTED"]

off course, if i comment the ligne 92 (/etc/modsecurity2/modsecurity_crs_30_http_policy.conf), awstats works

but it's not fine

i dont know the file extension for awstats ( cgi perhaps )

[robbo007]

Hello,
Did you work out what needs to be modified in the modesecurity config file for awstat to work?

[joximu]

think about this: awstats works locally (localhost) - it is accessed by domain/stats only via mod_proxy.

Maybe this helps people find the right settings for mod_security.

/J

[robbo007]

(09-14-2009 11:59 PM)joximu Wrote:  think about this: awstats works locally (localhost) - it is accessed by domain/stats only via mod_proxy.

Maybe this helps people find the right settings for mod_security.

/J

Many thanks for the path I'll research it. As always too secure and things break. I just downloaded the latest core rules an the defaults completely break ISPCP. I'll have to seriously play with rules to not have problems.

Would be good to have a core rules pack for ISPCP

Cheers,
Rob