ispCP - Board - Support
Internal error AWSTATS HELP!!! - Printable Version

+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Support Area (/forum-30.html)
+--- Forum: Usage (/forum-34.html)
+--- Thread: Internal error AWSTATS HELP!!! (/thread-6869.html)

Pages: 1 2

RE: Internal error AWSTATS HELP!!! - BeNe - 09-11-2009 10:12 PM

Quote:Could it be something to do with modsecurity2?
Yes!
Try to disable modsecurity2 complete for a short time and test it.

Greez BeNe

RE: Internal error AWSTATS HELP!!! - mydebians - 09-11-2009 10:29 PM

(09-11-2009 10:12 PM)BeNe Wrote:  
Quote:Could it be something to do with modsecurity2?
Yes!
Try to disable modsecurity2 complete for a short time and test it.

Greez BeNe

yes ! nice way !
without mod security2, awstats works Shy

RE: Internal error AWSTATS HELP!!! - BeNe - 09-11-2009 10:47 PM

Quote:without mod security2, awstats works
Thats the problem with modsecurity - there are very very much policys and it is not that easy to handle them correct at all.
Please check your Modsecurity log and try to find the deny (problem) policy.

Greez BeNe

RE: Internal error AWSTATS HELP!!! - mydebians - 09-11-2009 11:54 PM

Ok thanks,

Code:
[localhost/sid#907f868][rid#929f3b0][/awstats/mydomain.com][1] Access denied with code 500 (phase 2). Pattern match "\.(?:c(?:o(?:nf(?:ig)?|m)|s(?:proj|r)?|dx|er|fg|md)|p(?:rinter|ass|db|ol|wd)|v(?​:b(?:proj|s)?|sdisco)|a(?:s(?:ax?|cx)|xd)|d(?:bf?|at|ll|os)|i(?:d[acq]|n[ci])|ba(?:[kt]|ckup)|res(?:ources|x)|s(?:h?tm|ql|ys)|l(?:icx|nk|og)|\w{0,5}~|webinfo|ht[rw]|xs[dx]| ..." at REQUEST_BASENAME. [file "/etc/modsecurity2/modsecurity_crs_30_http_policy.conf"] [line "94"] [id "960035"] [msg "URL file extension is restricted by policy"] [severity "CRITICAL"] [tag "POLICY/EXT_RESTRICTED"]
off course, if i comment the ligne 92 (/etc/modsecurity2/modsecurity_crs_30_http_policy.conf), awstats works

but it's not fine Sad

i dont know the file extension for awstats ( cgi perhaps )

RE: Internal error AWSTATS HELP!!! - robbo007 - 09-14-2009 11:18 PM

Hello,
Did you work out what needs to be modified in the modesecurity config file for awstat to work?

RE: Internal error AWSTATS HELP!!! - joximu - 09-14-2009 11:59 PM

think about this: awstats works locally (localhost) - it is accessed by domain/stats only via mod_proxy.

Maybe this helps people find the right settings for mod_security.

/J

RE: Internal error AWSTATS HELP!!! - robbo007 - 09-15-2009 05:32 AM

(09-14-2009 11:59 PM)joximu Wrote:  think about this: awstats works locally (localhost) - it is accessed by domain/stats only via mod_proxy.

Maybe this helps people find the right settings for mod_security.

/J

Many thanks for the path Wink I'll research it. As always too secure and things break. I just downloaded the latest core rules an the defaults completely break ISPCP. I'll have to seriously play with rules to not have problems.

Would be good to have a core rules pack for ISPCP Big Grin

Cheers,
Rob