whm-status-page check frequency

Nicola Urbinati

• January 21, 2019 04:07

Hi, I'm checking apache's status-page via csf and netdata, with high frequency, and I get frequent but not systematic 403 errors. I already uninstalled Munin plugin to lower the check frequency. I have Engintron in front of apache, but even going directly to apache's port (8080) shows the problem. The problem persists even when I try from shell (curl). Is there something I could check/set to solve this?

• 

  cPanelMichael

  • January 23, 2019 15:53

  Hello @Nicola Urbinati, This looks similar to the behavior reported in the following thread: Can you check and let us know the specific error message /usr/local/apache/logs/error_log when this happens? Thank you.

  0
• 

  Nicola Urbinati

  • January 23, 2019 16:04

  Hi, That log is full of: [Mon Jan 21 00:37:41.791831 2019] [:error] [pid 3350289:tid 47902317627136] [client 127.0.0.1:39748] client denied by server configuration: /var/www/html/whm-server-status

  0
• 

  cPanelMichael

  • January 23, 2019 16:08

  Hello @Nicola Urbinati, It's possible a Mod_Security rule is blocking the request. Is there a corresponding entry in /usr/local/apache/logs/modsec_audit.log ? Thank you.

  0
• 

  Nicola Urbinati

  • January 23, 2019 16:21

  Hi, I do not see any entry in modsec log, nor in WHM Modsecurity Tools.

  0
• 

  cPanelMichael

  • January 23, 2019 17:01

  Hi, I do not see any entry in modsec log, nor in WHM Modsecurity Tools.

  
  Hello, Can you open a

  0
• 

  Nicola Urbinati

  • January 23, 2019 21:22

  support ticket 11267965

  0
• 

  cPanelMichael

  • January 24, 2019 14:00

  Hello, To update, it looks like this was the result of mod_evasive rules blocking the connection request over 127.0.0.1. Enabling the "DOSWhitelist 127.0.0.1" line in /etc/apache2/conf.d/300-mod_evasive.conf solved the issue. Thank you.

  0
• 

  Nicola Urbinati

  • January 24, 2019 14:31

  Correct, thank you very much.

  0

Please sign in to leave a comment.