Search results

  1. D

    [Resolved]lsws + mod_geoip + modsec = fail

    Using regular pattern match also doesn't bring an expected action. It seems lsws does not recognize any value inside @streq or !@streq and just pass it. And GeoIP setup showing correct variables through phpinfo() : _SERVER["GEOIP_COUNTRY_CODE"] CA _SERVER["GEOIP_COUNTRY_NAME"] Canada...
  2. D

    [Resolved]lsws + mod_geoip + modsec = fail

    Thanks for the latest build of 4.2.7. I perform /usr/local/lsws/admin/misc/lsup.sh -f -v 4.2.7 And continue tryng various combination methods of GEO:COUNTRY_CODE and ENV:GEOIP_COUNTRY_CODE as before. And also add and remove <IfModule LiteSpeed></IfModule>. But unfortunately it still...
  3. D

    [Resolved]lsws + mod_geoip + modsec = fail

    Thank you, George. Using SecRule ENV:GEOIP_COUNTRY_CODE makes httpd.conf keep fine even with or without <IfModule LiteSpeed>.....</IfModule> But I am so sorry, it's still bypass all of incoming http connection.
  4. D

    [Resolved]lsws + mod_geoip + modsec = fail

    That bring successfuly httpd.conf save without error. But it still cannot drop connection from any other location than UK. Above method generating error after save httpd.conf and cannot drop connection other than UK location
  5. D

    [Resolved]lsws + mod_geoip + modsec = fail

    Hi George so many thanks for adding this to lsws 5.0 to-do list. By the way I did try your suggestion and found error result after save httpd.conf : Failed to generate a syntactically correct Apache configuration. Bad configuration file located at...
  6. D

    [Resolved]lsws + mod_geoip + modsec = fail

    Thank you NiteWave for your kind suggestion. But it will be very hard to ask thousands of wordpress/joomla/drupal owner to modify into their .htaccess of each website that they have. So it will be more effective doing that -login page blocking- from server side by mod security. And I will...
  7. D

    [Resolved]lsws + mod_geoip + modsec = fail

    Hi poirot, Yes geoip with lsws is just work fine with lsphp5. But this time I need to use lsws + mod_geoip with mod security in purpose to automatically drop all of brute-force-bot POST and GET access from bad countries to /wp-login.php, /administrator/index.php, etc. Because those...
  8. D

    [Resolved]lsws + mod_geoip + modsec = fail

    I have try mod_geoip and combined with mod security as below : -------------------------------------------------------------------------------------- >> http://dev.maxmind.com/geoip/legacy/mod_geoip2/ >> http://www.modsecurity.org/projects/modsecurity/apache/feature_geo_ip_lookups.html...
  9. D

    404

    I am so sorry, but your page showing 404 on almost everywhere. Including index page of litespeedtech.com it self. Please fix them, thank you.
  10. D

    [Resolved] modsecurity bug - can't block traffic when HTTP request header is missing

    Wonderful support, George. It is now works as the old 4.2.6. And I hope it also still work for c0ldshadow. Thank you very much!
  11. D

    [Resolved] modsecurity bug - can't block traffic when HTTP request header is missing

    Hi George, I'll try your 4.2.6 again and bring my update here soon Thanks!
  12. D

    [Resolved] modsecurity bug - can't block traffic when HTTP request header is missing

    According to this page : https://www.atomicorp.com/wiki/index.php/WAF_392301 I thought the latest lsws 4.2.6 is suddenly "cannot read" Content-Type?
  13. D

    [Resolved] modsecurity bug - can't block traffic when HTTP request header is missing

    I can set SecDebugLogLevel to 9 But pardon me that I cannot switch to the newest 4.2.6 right now because all sites inside the servers are currently on their busy hour. And also, many times of 403 will block visitors from firewall. So I will try to switch to 4.2.6 latter. I am now on 4.2.5 *sigh
  14. D

    [Resolved] modsecurity bug - can't block traffic when HTTP request header is missing

    Hi c0ldshadow, The log which I found on apache/logs/error_log was this : [ID: 392301] [Msg: Atomicorp.com WAF Rules: Request Containing Content, but Missing Content-Type header]2014-01-03 01:49:04.545 [NOTICE] [xxx.xxx.xxx.xxx:51084-0#APVH_162.213.211.40:443_xxxxxxxx.com] Content len: 0...
  15. D

    [Resolved] modsecurity bug - can't block traffic when HTTP request header is missing

    How to revert to older 4.2.6? This update bring 403 everywhere anywhere on my servers (using Atomic Ruleset). [client 202.67.39.21] mod_security: Access denied with code 403, [Rule: 'REQUEST_HEADERS:Content-Length' '!^0$'] [ID "392301"] [Msg "Atomicorp.com WAF Rules: Request Containing Content...
  16. D

    [solved] plugin cpanel from 11.36 error 500 during install

    you are welcome, NiteWave
  17. D

    [solved] plugin cpanel from 11.36 error 500 during install

    And this could be notification for next lsws WHM plugin : >>> http://cpanel.net/prepare-your-perl-scripts-for-11-36/
  18. D

    [solved] plugin cpanel from 11.36 error 500 during install

    seems like you don't have /usr/bin/perl at all? perhaps you could try just one from both above answers: 1. edit /usr/local/cpanel/whostmgr/docroot/cgi/addon_lsws.cgi to point to Cpanel perl replace : #!/usr/bin/perl with : #!/usr/local/cpanel/3rdparty/bin/perl Or..... 2...
  19. D

    [solved] plugin cpanel from 11.36 error 500 during install

    some of my servers got the same error 500, but some are fine. to fix that perl error just reinstall all perl modules via the command line by running this command : /scripts/perlinstaller Task::Cpanel::Core i already did that and now feel very happy :)
  20. D

    I need to execute my cron job with lsphp52

    write cronjob from Cpanel >> Advanced Tools >> Cron Jobs will put cron command to /var/spool/cron/username -------------------- http://www.google.com/search?q=where+is+cpanel+cron+file -------------------- php52 is symlinked from /path-to-lsws/fcgi-bin/lsphp-5.2.17 to /usr/bin/php52 I have try...
Top