The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Autoindex:error on server

Discussion in 'Security' started by canou83, May 21, 2017.

Tags:
  1. canou83

    canou83 Well-Known Member

    Joined:
    Jul 20, 2016
    Messages:
    62
    Likes Received:
    7
    Trophy Points:
    8
    Location:
    France
    cPanel Access Level:
    Website Owner
    Hi, I'm in PHP version 5.6.30 / Easy Apache 4.

    If I use the original .htaccess of my Opencart solution with what is given:

    Code:
    # Prevent Directory listing
    Options -Indexes
    
    # Prevent Direct Access to files
    FilesMatch (? I) ((\ .pl | \ .ini | \ .log | (? <Robots) \ .txt)) "
      Require all denied
    ## For apache 2.2 and older, replace "Require all denied" with these two lines:
    # Order deny, allow
    # Deny from all
    </ FilesMatch>
    I have this error on the server:

    Code:
    [Sun May 21 01:31:06.236174 2017] [authz_core:error] [pid 24788:tid 140015264777984] [client 51.254.41.130:27834] AH01630: client denied by server configuration: /home/xxxxxxxxxxxpublic_html/FC64E7D17AF406C0227596E34085EF2E.txt
    If I adapt the .htaccess to no longer have this error using:

    Code:
    # Prevent Directoy listing
    Options -Indexes
    
    # Prevent Direct Access to files
    <FilesMatch "(? I) ((\ .plpl | \ .ini | \ .log))">
    Require all denied
    ## For apache 2.2 and older, replace "Require all denied" with these two lines:
    # Order deny, allow
    # Deny from all
    </ FilesMatch>
    I have this error:

    Code:
    [Sat May 20 11:28:52.264121 2017] [autoindex:error] [pid 30548:tid 140015212328704] [client 46.105.196.8:37121] AH01276: Cannot serve directory /home/xxxxxxxxxx/public_html/image/catalog/PDF/: No matching DirectoryIndex (index.html,index.php,index.html.var,index.htm,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
    This is very strange because I did not have this in easyapache 3. Could you help me?

    Thanks.
     
  2. canou83

    canou83 Well-Known Member

    Joined:
    Jul 20, 2016
    Messages:
    62
    Likes Received:
    7
    Trophy Points:
    8
    Location:
    France
    cPanel Access Level:
    Website Owner
    Here are the mistakes of today:

    Code:
    [Mon May 22 01:31:06.791291 2017] [authz_core:error] [pid 4763:tid 140015222818560] [client 51.254.41.129:53290] AH01630: client denied by server configuration: /home/web160aquamag/public_html/3FA4D68A07DCF7BC1587BE9A8F885E18.txt
    [Mon May 22 01:31:06.556888 2017] [authz_core:error] [pid 4765:tid 140015212328704] [client 51.254.41.133:43060] AH01630: client denied by server configuration: /home/web160aquamag/public_html/2354C610D1BB211E753303C1422E7056.txt
    [Mon May 22 01:31:06.294054 2017] [authz_core:error] [pid 4847:tid 140015254288128] [client 51.254.41.194:20326] AH01630: client denied by server configuration: /home/web160aquamag/public_html/DDE562E3E4488575429FE8C345DF5864.txt
    [Mon May 22 01:31:05.839232 2017] [authz_core:error] [pid 4764:tid 140015285757696] [client 51.254.41.195:65096] AH01630: client denied by server configuration: /home/web160aquamag/public_html/9D36CB4D6BDD50A5D2EF5F72A11DC903.txt
    Related to Autossl?
     
  3. canou83

    canou83 Well-Known Member

    Joined:
    Jul 20, 2016
    Messages:
    62
    Likes Received:
    7
    Trophy Points:
    8
    Location:
    France
    cPanel Access Level:
    Website Owner
    That's certain it's linked to Autossl here is an excerpt from the journal of autossl, Schedules coincide:

    Code:
    Journal pour l’exécution d’AutoSSL pour tous les utilisateurs : lundi 22 mai 2017 01:31:04 GMT+0200 (cPanel (fourni par Comodo.))
    
     01:31:04 This system has AutoSSL set to use “cPanel (powered by Comodo)”.
     01:31:04 Checking websites for “xxxxxxxxxx” …
     01:31:04 The website “xxxxxxx”, owned by “xxxxxxx”, has a valid SSL certificate, but additional SSL coverage may be possible for the domains “mail.1xxxxx”, “www.mail.xxxxxx”, “webmail.xxxxxx”, “webdisk.100x100france.fr”, and “cpanel.xxxxxxx”. The system will attempt to replace this certificate with one that includes these additional domains.
     01:31:05 WARN The domain “mail.xxxxx” failed domain control validation: The content “<html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="Content-Type" content="text/” of the <abbr title="Domain Control Validation">DCV</abbr> file, as accessed at “<a href="http://mail.xxxxxxxx/fr/">http://mail.example.fr/fr/</a>” and redirected from “<a href="http://mail.xxxxxx/034AD7557E8350FBA9650C4393954DD8.txt">http://mail.xxxxxxx/034AD7557E8350FBA9650C4393954DD8.txt</a>”, did not match the expected value. The domain “mail.example.fr” resolved to an IP address “xxxxxx” that does not exist on this server.
     01:31:05 WARN The domain “www.mail.xxxxxx” failed domain control validation: You do not have a document root for the domain “www.mail.example.fr”.
     01:31:05 WARN The domain “webmail.xxxxxx” failed domain control validation: “webmail.xxxxx” does not resolve to any IPv4 addresses on the internet.
     01:31:05 WARN The domain “webdisk.xxxxx” failed domain control validation: “webdisk.xxxxxxxxx” does not resolve to any IPv4 addresses on the internet.
     01:31:05 WARN The domain “cpanel.xxxxxxx” failed domain control validation: “cpanel.xxxxxx” does not resolve to any IPv4 addresses on the internet.
     
    #3 canou83, May 22, 2017
    Last edited by a moderator: May 23, 2017
  4. canou83

    canou83 Well-Known Member

    Joined:
    Jul 20, 2016
    Messages:
    62
    Likes Received:
    7
    Trophy Points:
    8
    Location:
    France
    cPanel Access Level:
    Website Owner
    Hello. Every day at the same time I have errors that appear on the server

    Code:
    [Mon May 22 01:31:06.791291 2017] [authz_core:error] [pid 4763:tid 140015222818560] [client 51.254.41.129:53290] AH01630: client denied by server configuration: /home/web160aquamag/public_html/3FA4D68A07DCF7BC1587BE9A8F885E18.txt
    [Mon May 22 01:31:06.556888 2017] [authz_core:error] [pid 4765:tid 140015212328704] [client 51.254.41.133:43060] AH01630: client denied by server configuration: /home/web160aquamag/public_html/2354C610D1BB211E753303C1422E7056.txt
    [Mon May 22 01:31:06.294054 2017] [authz_core:error] [pid 4847:tid 140015254288128] [client 51.254.41.194:20326] AH01630: client denied by server configuration: /home/web160aquamag/public_html/DDE562E3E4488575429FE8C345DF5864.txt
    [Mon May 22 01:31:05.839232 2017] [authz_core:error] [pid 4764:tid 140015285757696] [client 51.254.41.195:65096] AH01630: client denied by server configuration: /home/web160aquamag/public_html/9D36CB4D6BDD50A5D2EF5F72A11DC903.txt
    Related to Autossl?

    This corresponds to the autossl log
    Code:
    
    Journal pour l’exécution d’AutoSSL pour tous les utilisateurs : lundi 22 mai 2017 01:31:04 GMT+0200 (cPanel (fourni par Comodo.)) 01:31:04 This system has AutoSSL set to use “cPanel (powered by Comodo)”. 01:31:04 Checking websites for “xxxxxxxxxx” … 01:31:04 The website “xxxxxxx”, owned by “xxxxxxx”, has a valid SSL certificate, but additional SSL coverage may be possible for the domains “mail.1xxxxx”, “www.mail.xxxxxx”, “webmail.xxxxxx”, “webdisk.100x100france.fr”, and “cpanel.xxxxxxx”. The system will attempt to replace this certificate with one that includes these additional domains. 01:31:05 WARN The domain “mail.xxxxx” failed domain control validation: The content “<html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta http-equiv="Content-Type" content="text/” of the <abbr title="Domain Control Validation">DCV</abbr> file, as accessed at “<a href="http://mail.xxxxxxxx/fr/">http://mail.example.fr/fr/</a>” and redirected from “<a href="http://mail.xxxxxx/034AD7557E8350FBA9650C4393954DD8.txt">http://mail.xxxxxxx/034AD7557E8350FBA9650C4393954DD8.txt</a>”, did not match the expected value. The domain “mail.example.fr” resolved to an IP address “xxxxxx” that does not exist on this server. 01:31:05 WARN The domain “www.mail.xxxxxx” failed domain control validation: You do not have a document root for the domain “www.mail.example.fr”. 01:31:05 WARN The domain “webmail.xxxxxx” failed domain control validation: “webmail.xxxxx” does not resolve to any IPv4 addresses on the internet. 01:31:05 WARN The domain “webdisk.xxxxx” failed domain control validation: “webdisk.xxxxxxxxx” does not resolve to any IPv4 addresses on the internet. 01:31:05 WARN The domain “cpanel.xxxxxxx” failed domain control validation: “cpanel.xxxxxx” does not resolve to any IPv4 addresses on the internet.
    
    This corresponds to the autossl log. Thanks.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,287
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    The AutoSSL validation process requires access to TXT files. Is the rule you used in the past to address this issue no longer helpful? It's located on the following post:

    Directory index forbidden by Options directive

    Thank you.
     
Loading...

Share This Page