Current time: 12-26-2024, 02:55 AM Hello There, Guest! (LoginRegister)


Post Reply 
Internal error AWSTATS HELP!!!
Author Message
BeNe Offline
Moderator
*****
Moderators

Posts: 5,899
Joined: Jan 2007
Reputation: 68
Post: #11
RE: Internal error AWSTATS HELP!!!
Quote:Could it be something to do with modsecurity2?
Yes!
Try to disable modsecurity2 complete for a short time and test it.

Greez BeNe
09-11-2009 10:12 PM
Visit this user's website Find all posts by this user Quote this message in a reply
mydebians Offline
Junior Member
*

Posts: 27
Joined: Apr 2007
Reputation: 0
Post: #12
RE: Internal error AWSTATS HELP!!!
(09-11-2009 10:12 PM)BeNe Wrote:  
Quote:Could it be something to do with modsecurity2?
Yes!
Try to disable modsecurity2 complete for a short time and test it.

Greez BeNe

yes ! nice way !
without mod security2, awstats works Shy
09-11-2009 10:29 PM
Find all posts by this user Quote this message in a reply
BeNe Offline
Moderator
*****
Moderators

Posts: 5,899
Joined: Jan 2007
Reputation: 68
Post: #13
RE: Internal error AWSTATS HELP!!!
Quote:without mod security2, awstats works
Thats the problem with modsecurity - there are very very much policys and it is not that easy to handle them correct at all.
Please check your Modsecurity log and try to find the deny (problem) policy.

Greez BeNe
09-11-2009 10:47 PM
Visit this user's website Find all posts by this user Quote this message in a reply
mydebians Offline
Junior Member
*

Posts: 27
Joined: Apr 2007
Reputation: 0
Post: #14
RE: Internal error AWSTATS HELP!!!
Ok thanks,

Code:
[localhost/sid#907f868][rid#929f3b0][/awstats/mydomain.com][1] Access denied with code 500 (phase 2). Pattern match "\.(?:c(?:o(?:nf(?:ig)?|m)|s(?:proj|r)?|dx|er|fg|md)|p(?:rinter|ass|db|ol|wd)|v(?​:b(?:proj|s)?|sdisco)|a(?:s(?:ax?|cx)|xd)|d(?:bf?|at|ll|os)|i(?:d[acq]|n[ci])|ba(?:[kt]|ckup)|res(?:ources|x)|s(?:h?tm|ql|ys)|l(?:icx|nk|og)|\w{0,5}~|webinfo|ht[rw]|xs[dx]| ..." at REQUEST_BASENAME. [file "/etc/modsecurity2/modsecurity_crs_30_http_policy.conf"] [line "94"] [id "960035"] [msg "URL file extension is restricted by policy"] [severity "CRITICAL"] [tag "POLICY/EXT_RESTRICTED"]
off course, if i comment the ligne 92 (/etc/modsecurity2/modsecurity_crs_30_http_policy.conf), awstats works

but it's not fine Sad

i dont know the file extension for awstats ( cgi perhaps )
(This post was last modified: 09-11-2009 11:54 PM by mydebians.)
09-11-2009 11:54 PM
Find all posts by this user Quote this message in a reply
robbo007 Offline
Junior Member
*

Posts: 136
Joined: Apr 2009
Reputation: 0
Post: #15
RE: Internal error AWSTATS HELP!!!
Hello,
Did you work out what needs to be modified in the modesecurity config file for awstat to work?
09-14-2009 11:18 PM
Find all posts by this user Quote this message in a reply
joximu Offline
helper
*****
Moderators

Posts: 7,024
Joined: Jan 2007
Reputation: 92
Post: #16
RE: Internal error AWSTATS HELP!!!
think about this: awstats works locally (localhost) - it is accessed by domain/stats only via mod_proxy.

Maybe this helps people find the right settings for mod_security.

/J
09-14-2009 11:59 PM
Visit this user's website Find all posts by this user Quote this message in a reply
robbo007 Offline
Junior Member
*

Posts: 136
Joined: Apr 2009
Reputation: 0
Post: #17
RE: Internal error AWSTATS HELP!!!
(09-14-2009 11:59 PM)joximu Wrote:  think about this: awstats works locally (localhost) - it is accessed by domain/stats only via mod_proxy.

Maybe this helps people find the right settings for mod_security.

/J

Many thanks for the path Wink I'll research it. As always too secure and things break. I just downloaded the latest core rules an the defaults completely break ISPCP. I'll have to seriously play with rules to not have problems.

Would be good to have a core rules pack for ISPCP Big Grin

Cheers,
Rob
09-15-2009 05:32 AM
Find all posts by this user Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 6 Guest(s)