The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

mod_security completely messed up beyond repair

Discussion in 'EasyApache' started by The German, Nov 23, 2016.

Tags:
  1. The German

    The German Registered

    Joined:
    Nov 23, 2016
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    USA
    cPanel Access Level:
    Website Owner
    Suddenly (I assume due to to cpanel automatic update), the complete mod_security configuration is gone and almost all related files are missing.

    1. When trying to save the configuration (Home »Security Center »ModSecurity™ Configuration »Configure Global Directives)
      I get the message here:
      Error: The system could not save your ModSecurity™ settings because of the following error: The system could not save some of the settings.

    2. The vendor management is corrupted as well (Home »Security Center »ModSecurity™ Vendors »Manage Vendors)
      It shows OWASP "This vendor is not installed", when clicking on the "install" button, the only thing that happens is an error message:

      Error: The system experienced the following error when it attempted to install the “OWASP ModSecurity Core Rule Set” vendor: API failure: The system could not validate the new Apache configuration because httpd exited with a nonzero value. Apache produced the following error: httpd: Syntax error on line 219 of /etc/apache2/conf/httpd.conf: Syntax error on line 32mo of /etc/apache2/conf.d/modsec2.conf: Could not open configuration file /etc/apache2/conf.d/modsec/modsec2.user.conf: No such file or directory

      Line 219 in httpd.conf:
      Include "/etc/apache2/conf.d/*.conf"

      Line 32 in modec2.conf:
      Include /etc/apache2/conf.d/modsec/modsec2.cpanel.conf

    3. File /etc/apache2/conf.d/modsec/modsec2.user.conf exists but has a zero byte size
    This is beyond frustrating - everything was working (including cxs!) and now EVERYTHING has been erased and Cpanel is unable to even fix the problem. What a mess...

    Any thoughts?
     
    #1 The German, Nov 23, 2016
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,618
    Likes Received:
    296
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Please feel free to open a ticket directly to cPanel Technical Support about this for fastest resolution.
     
    #2 Infopro, Nov 23, 2016
  3. Nathaniel Evans

    Nathaniel Evans Registered

    Joined:
    Jan 10, 2017
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    76
    Location:
    nj
    cPanel Access Level:
    Root Administrator
    Hi. I have the same problem. I recently upgraded to Easy Apache 4 and now I get this--
    Error:The system experienced the following error when it attempted to install the “OWASP ModSecurity Core Rule Set” vendor: API failure: The system could not validate the new Apache configuration because httpd exited with a nonzero value. Apache produced the following error: httpd: Syntax error on line 223 of /etc/apache2/conf/httpd.conf: Syntax error on line 32 of /etc/apache2/conf.d/modsec2.conf: Syntax error on line 28 of /etc/apache2/conf.d/modsec/modsec2.cpanel.conf: Could not open configuration file /etc/apache2/conf.d/modsec_vendor_configs/configserver/00_configserver.conf: No such file or directory

    Please help. What am I doing wrong?
     
    #3 Nathaniel Evans, Jan 10, 2017
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,287
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @Nathaniel Evans,

    To update, it looks like this issue was addressed via a support ticket with the following commands:

    Code:
    # mkdir /etc/apache2/conf.d/modsec_vendor_configs/configserver
# touch /etc/apache2/conf.d/modsec_vendor_configs/configserver/00_configserver.conf
    Thank you.
     
    #4 cPanelMichael, Jan 20, 2017
(You must log in or sign up to post here.)
Loading...
Similar Threads - mod_security completely messed
  1. Sametto Chan

    What is different mod_security and mod_security2?

    Sametto Chan, Aug 8, 2017, in forum: EasyApache
    Replies:
    3
    Views:
    76
    Sametto Chan
    Aug 8, 2017
  2. Jasleen

    Mod_Security with CRS

    Jasleen, May 30, 2017, in forum: Security
    Replies:
    9
    Views:
    201
    fuzzylogic
    May 31, 2017
  3. Nirjonadda

    Mod_Security Vendors

    Nirjonadda, Apr 16, 2017, in forum: Security
    Replies:
    3
    Views:
    257
    Nirjonadda
    Apr 17, 2017
  4. stevenvsi

    Unable to disable mod_security per domain in user interface

    stevenvsi, Apr 11, 2017, in forum: Security
    Replies:
    9
    Views:
    384
    cPanelMichael
    Apr 11, 2017
  5. caisc

    Mod_Security rule to mitigate constant GET and POST request attack

    caisc, Feb 25, 2017, in forum: Security
    Replies:
    6
    Views:
    351
    quizknows
    Mar 7, 2017

Share This Page