Skip to main content

Inaccessible Websites

goyo
If anyone else on a CentOS system continues to encounter this issue after updating to cPanel 64.0.3 or higher, try running the following commands to see if it clears up the problem:
/scripts/clear_orphaned_virtfs_mounts --clearall ; /scripts/update_users_jail ; /scripts/restartsrv_httpd

After upgrade to 64.x.x branch (same for 64.0.3) one-one website on 2 of our servers has stopped to work, inaccessible from outside. I've tried the /tmp solution; also ran the above commands, none of them helped (tried to disable modsecurity etc. still the same problems). On both problematic servers running the quoted command throws the following "Request Missing a Host Header"...is this normal? (hostname has been replaced to w2.my.hostname):
[Thu Mar 30 18:19:42.983173 2017] [mpm_prefork:notice] [pid 10309] AH00163: Apache/2.4.25 (cPanel) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 configured -- resuming normal operations [Thu Mar 30 18:19:22.274229 2017] [mpm_prefork:notice] [pid 10309] AH00163: Apache/2.4.25 (cPanel) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 configured -- resuming normal operations [Thu Mar 30 18:19:21.185736 2017] [mpm_prefork:notice] [pid 10309] AH00163: Apache/2.4.25 (cPanel) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 configured -- resuming normal operations [Thu Mar 30 18:19:10.434827 2017] [mpm_prefork:notice] [pid 10309] AH00163: Apache/2.4.25 (cPanel) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 configured -- resuming normal operations [Thu Mar 30 18:17:36.370107 2017] [mpm_prefork:notice] [pid 10309] AH00163: Apache/2.4.25 (cPanel) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 configured -- resuming normal operations [Thu Mar 30 18:16:14.866557 2017] [:error] [pid 11416] [client 36.68.147.21] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"> [line "286"> [id "920280"> [rev "2"> [msg "Request Missing a Host Header"> [severity "WARNING"> [ver "OWASP_CRS/3.0.0"> [maturity "9"> [accuracy "9"> [tag "application-multi"> [tag "language-multi"> [tag "platform-multi"> [tag "attack-protocol"> [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"> [tag "WASCTC/WASC-21"> [tag "OWASP_TOP_10/A7"> [tag "PCI/6.5.10"> [hostname "w2.my.hostname"> [uri "/"> [unique_id "WN0vTsj-0K80DbiTvWpPDwAAACY"> [Thu Mar 30 18:15:01.529309 2017] [:error] [pid 10767] [client 127.0.0.1] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"> [line "286"> [id "920280"> [rev "2"> [msg "Request Missing a Host Header"> [severity "WARNING"> [ver "OWASP_CRS/3.0.0"> [maturity "9"> [accuracy "9"> [tag "application-multi"> [tag "language-multi"> [tag "platform-multi"> [tag "attack-protocol"> [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"> [tag "WASCTC/WASC-21"> [tag "OWASP_TOP_10/A7"> [tag "PCI/6.5.10"> [hostname "w2.my.hostname"> [uri "/whm-server-status"> [unique_id "WN0vBYt0lZE7QDPWuW5DTgAAAII"> [Thu Mar 30 18:10:01.943079 2017] [:error] [pid 10727] [client 127.0.0.1] ModSecurity: Warning. Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"> [line "286"> [id "920280"> [rev "2"> [msg "Request Missing a Host Header"> [severity "WARNING"> [ver "OWASP_CRS/3.0.0"> [maturity "9"> [accuracy "9"> [tag "application-multi"> [tag "language-multi"> [tag "platform-multi"> [tag "attack-protocol"> [tag "OWASP_CRS/PROTOCOL_VIOLATION/MISSING_HEADER_HOST"> [tag "WASCTC/WASC-21"> [tag "OWASP_TOP_10/A7"> [tag "PCI/6.5.10"> [hostname "w2.my.hostname"> [uri "/whm-server-status"> [unique_id "WN0t2UZUJ2FhJ8zfR2vv-AAAAFs"> [Thu Mar 30 18:07:20.858020 2017] [mpm_prefork:notice] [pid 10309] AH00163: Apache/2.4.25 (cPanel) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 configured -- resuming normal operations [Thu Mar 30 18:07:20.762386 2017] [:notice] [pid 10308] ModSecurity for Apache/2.9.0 (http://www.modsecurity.org/) configured.

Comments

4 comments

Date Votes
  • cPanelMichael
    Hello @goyo, I've moved this post to it's own thread, as it looks to be unrelated to the PHP session bug referenced on the previous thread. Could you let us know of any output to /usr/local/cpanel/logs/error_log when attempting to access your websites? Do you notice any specific error messages in the browser when attempting to open the websites? Thank you.
    0
  • goyo
    Dear @cPanelMichael , On both servers; both sites are similar: [LIST]
  • Calling the domain from the browser it gives Error 524 - A timeout occurred thrum Cloudflare, and Cloudflare disabled just keeps loading than eventually times out
  • Executing from ssh command line with "php" prints the page without a problem
  • /usr/local/cpanel/logs/error_log related lines:
    [2017-03-31 00:05:05 +0200] warn [autossl_check] XID yeffvn: expected "F5UTQ0CShrMfUghWaJJ71sXoRFD3teaPn6E5GPOgIPixdmZdTJB8fkScLILxK8Sp" from "http://csajokamotoron.com/rolunk/1-weber-aniko-nana/03837B0EC6D03DDEBA062438691128E5.txt" redirected from "http://nanaweber.com/03837B0EC6D03DDEBA062438691128E5.txt", received " This website is temporarily unavailable, please try again later. " [2017-03-31 00:05:05 +0200] warn [autossl_check] XID se8zz9: expected "_EAm5FodZYJzOKdPpXMCqBoiSG9ByhRb8Y6qDDs0_rGWBDxC1leMLcVTjRcLaVDM" from "http://csajokamotoron.com/rolunk/1-weber-aniko-nana/BBD0874A21F9894B10710D61C31EC010.txt" redirected from "http://nanaweber.com/BBD0874A21F9894B10710D61C31EC010.txt", received " This website is temporarily unavailable, please try again later. " [2017-03-31 00:05:07 +0200] warn [autossl_check] XID eda45n: expected "bQXeU6C2T9jFKZNbGstR1JIn4ydg1Q1jTTWJmEBvVjxETvVtlI27jjzf91WQ8uw_" from "http://csajokamotoron.com/rolunk/1-weber-aniko-nana/CA9D1AA84DAD24709EFB313049483F8C.txt" redirected from "http://www.nanaweber.com/CA9D1AA84DAD24709EFB313049483F8C.txt", received " This website is temporarily unavailable, please try again later. " [2017-03-31 00:05:07 +0200] warn [autossl_check] XID cynthg: expected "qYNx5lmdHxgwGAznWPvxYXst7g7VGIWfJ_tHeEGDByI2stAjoHenYUpAf_czU2Rj" from "http://csajokamotoron.com/rolunk/1-weber-aniko-nana/AF0EAD7C04DF283DA25F394972E70F89.txt" redirected from "http://www.nanaweber.com/AF0EAD7C04DF283DA25F394972E70F89.txt", received " This website is temporarily unavailable, please try again later. "
    Another thing browsing the error_log after the latest WHM 64.0 (build 4) upgrade...is this normal?:
    [2017-03-31 04:40:27 +0200] warn [whostmgr10] Failed to fetch cPStore products list: Cpanel::Exception::cPStoreError/(XID kx3pfg) The cPanel Store returned an error (X::ItemNotFound) in response to the request "GET products/cpanel/4?vers ion=11.64.0": No Products Found at /usr/local/cpanel/Cpanel/Exception/CORE.pm line 330. Cpanel::Exception::create("cPStoreError", HASH(0x24cd1b0)) called at /usr/local/cpanel/Cpanel/cPStore.pm line 246 Cpanel::cPStore::__ANON__(Cpanel::Exception::HTTP::Server=HASH(0x268a170)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/Try/Tiny.pm line 122 Try::Tiny::try(CODE(0x1e5bd80), Try::Tiny::Catch=REF(0x1db9848)) called at /usr/local/cpanel/Cpanel/cPStore.pm line 254 Cpanel::cPStore::_request(Cpanel::cPStore=HASH(0x1eb38f0), "get", "products/cpanel/4?version=11.64.0") called at /usr/local/cpanel/Cpanel/cPStore.pm line 202 Cpanel::cPStore::get(Cpanel::cPStore=HASH(0x1eb38f0), "products/cpanel/4?version=11.64.0") called at /usr/local/cpanel/Cpanel/Market/Provider/cPStore/ProductsCache.pm line 69 Cpanel::Market::Provider::cPStore::ProductsCache::_fetch_from_cpstore() called at /usr/local/cpanel/Cpanel/Market/Provider/cPStore/ProductsCache.pm line 81 Cpanel::Market::Provider::cPStore::ProductsCache::__ANON__() called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/Try/Tiny.pm line 101 eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/Try/Tiny.pm line 92 Try::Tiny::try(CODE(0x1db9980), Try::Tiny::Catch=REF(0x22b5448)) called at /usr/local/cpanel/Cpanel/Market/Provider/cPStore/ProductsCache.pm line 99 Cpanel::Market::Provider::cPStore::ProductsCache::_LOAD_FRESH("Cpanel::Market::Provider::cPStore::ProductsCache") called at /usr/local/cpanel/Cpanel/CacheFile.pm line 224 Cpanel::CacheFile::load("Cpanel::Market::Provider::cPStore::ProductsCache") called at /usr/local/cpanel/Cpanel/Market/Provider/cPStore/ProductsCache.pm line 142 Cpanel::Market::Provider::cPStore::ProductsCache::load_with_short_name("Cpanel::Market::Provider::cPStore::ProductsCache") called at /usr/local/cpanel/Cpanel/Market/Provider/cPStore/ProductsCache.pm line 107 Cpanel::Market::Provider::cPStore::ProductsCache::load("Cpanel::Market::Provider::cPStore::ProductsCache") called at /usr/local/cpanel/Cpanel/Market/Provider/cPStore.pm line 114 Cpanel::Market::Provider::cPStore::_get_products_list_for_validation() called at /usr/local/cpanel/Cpanel/Market/Provider/cPStore.pm line 101 Cpanel::Market::Provider::cPStore::get_products_list() called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Driver/SSLStatus/META.pm line 110 Cpanel::Config::ConfigObj::Driver::SSLStatus::META::__ANON__() called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/Try/Tiny.pm line 101 eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/Try/Tiny.pm line 92 Try::Tiny::try(CODE(0x1dc1098), Try::Tiny::Catch=REF(0x1c9a1e8)) called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Driver/SSLStatus/META.pm line 115 Cpanel::Config::ConfigObj::Driver::SSLStatus::META::can_be_enabled() called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Driver/SSLStatus/META.pm line 124 Cpanel::Config::ConfigObj::Driver::SSLStatus::META::showcase() called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Interface/Meta.pm line 101 eval {...} called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Interface/Meta.pm line 99 Cpanel::Config::ConfigObj::Interface::Meta::load_driver_meta_content(Cpanel::Config::ConfigObj::Interface::Meta=HASH(0x1da7340), Cpanel::Config::ConfigObj::Driver::SSLStatus=HASH(0x1d6c2a8)) called at /usr/local/cpanel/Cpanel/Con fig/ConfigObj/Interface/Meta.pm line 51 Cpanel::Config::ConfigObj::Interface::Meta::set_meta_content_from_driver(Cpanel::Config::ConfigObj::Interface::Meta=HASH(0x1da7340), Cpanel::Config::ConfigObj::Driver::SSLStatus=HASH(0x1d6c2a8)) called at /usr/local/cpanel/Cpanel /Config/ConfigObj/Interface/Config/v1.pm line 164 Cpanel::Config::ConfigObj::Interface::Config::v1::meta(Cpanel::Config::ConfigObj::Driver::SSLStatus=HASH(0x1d6c2a8)) called at /usr/local/cpanel/Cpanel/FeatureShowcase.pm line 377 Cpanel::FeatureShowcase::_filter_is_showcased(Cpanel::Config::ConfigObj::Filter::FilterList=HASH(0x1c63c60), undef) called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Filter.pm line 92 eval {...} called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Filter.pm line 94 Cpanel::Config::ConfigObj::Filter::filter(Cpanel::Config::ConfigObj::Filter=HASH(0x1d3d778), "is_showcased", undef, Cpanel::Config::ConfigObj::Filter::FilterList=HASH(0x1c63c60)) called at /usr/local/cpanel/Cpanel/FeatureShowcase .pm line 358 Cpanel::FeatureShowcase::_default_filter_list(Cpanel::FeatureShowcase=HASH(0x17bd8a0)) called at /usr/local/cpanel/Cpanel/FeatureShowcase.pm line 101 Cpanel::FeatureShowcase::refine_driver_list_to_showcased(Cpanel::FeatureShowcase=HASH(0x17bd8a0)) called at /usr/local/cpanel/Cpanel/FeatureShowcase.pm line 92 Cpanel::FeatureShowcase::new("Cpanel::FeatureShowcase", HASH(0x181fe48)) called at whostmgr/bin/whostmgr10.pl line 286 main::redirect_to_display_showcased_features("scripts3/feature_showcase") called at whostmgr/bin/whostmgr10.pl line 228 at /usr/local/cpanel/Cpanel/Debug.pm line 30. Cpanel::Debug::log_warn("Failed to fetch cPStore products list: Cpanel::Exception::cPS"...) called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Driver/SSLStatus/META.pm line 114 Cpanel::Config::ConfigObj::Driver::SSLStatus::META::__ANON__(Cpanel::Exception::cPStoreError=HASH(0x27b0288)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/Try/Tiny.pm line 122 Try::Tiny::try(CODE(0x1dc1098), Try::Tiny::Catch=REF(0x1c9a1e8)) called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Driver/SSLStatus/META.pm line 115 Cpanel::Config::ConfigObj::Driver::SSLStatus::META::can_be_enabled() called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Driver/SSLStatus/META.pm line 124 Cpanel::Config::ConfigObj::Driver::SSLStatus::META::showcase() called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Interface/Meta.pm line 101 eval {...} called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Interface/Meta.pm line 99 Cpanel::Config::ConfigObj::Interface::Meta::load_driver_meta_content(Cpanel::Config::ConfigObj::Interface::Meta=HASH(0x1da7340), Cpanel::Config::ConfigObj::Driver::SSLStatus=HASH(0x1d6c2a8)) called at /usr/local/cpanel/Cpanel/Con fig/ConfigObj/Interface/Meta.pm line 51 Cpanel::Config::ConfigObj::Interface::Meta::set_meta_content_from_driver(Cpanel::Config::ConfigObj::Interface::Meta=HASH(0x1da7340), Cpanel::Config::ConfigObj::Driver::SSLStatus=HASH(0x1d6c2a8)) called at /usr/local/cpanel/Cpanel /Config/ConfigObj/Interface/Config/v1.pm line 164 Cpanel::Config::ConfigObj::Interface::Config::v1::meta(Cpanel::Config::ConfigObj::Driver::SSLStatus=HASH(0x1d6c2a8)) called at /usr/local/cpanel/Cpanel/FeatureShowcase.pm line 377 Cpanel::FeatureShowcase::_filter_is_showcased(Cpanel::Config::ConfigObj::Filter::FilterList=HASH(0x1c63c60), undef) called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Filter.pm line 92 eval {...} called at /usr/local/cpanel/Cpanel/Config/ConfigObj/Filter.pm line 94 Cpanel::Config::ConfigObj::Filter::filter(Cpanel::Config::ConfigObj::Filter=HASH(0x1d3d778), "is_showcased", undef, Cpanel::Config::ConfigObj::Filter::FilterList=HASH(0x1c63c60)) called at /usr/local/cpanel/Cpanel/FeatureShowcase .pm line 358 Cpanel::FeatureShowcase::_default_filter_list(Cpanel::FeatureShowcase=HASH(0x17bd8a0)) called at /usr/local/cpanel/Cpanel/FeatureShowcase.pm line 101 Cpanel::FeatureShowcase::refine_driver_list_to_showcased(Cpanel::FeatureShowcase=HASH(0x17bd8a0)) called at /usr/local/cpanel/Cpanel/FeatureShowcase.pm line 92 Cpanel::FeatureShowcase::new("Cpanel::FeatureShowcase", HASH(0x181fe48)) called at whostmgr/bin/whostmgr10.pl line 286 main::redirect_to_display_showcased_features("scripts3/feature_showcase") called at whostmgr/bin/whostmgr10.pl line 228 [2017-03-31 04:43:14 +0200] info [tailwatchd] Updated chkservd cpanellogd driver from /usr/local/cpanel/src/chkservd/chkserv.d. [2017-03-31 04:43:14 +0200] info [tailwatchd] Updated chkservd apache_php_fpm driver from /usr/local/cpanel/src/chkservd/chkserv.d. ==> cpsrvd 11.64.0.4 started
    Thanks in advance...both sites are worked well for years before the 64.x update. Their code hasn't change recently.
    • 0
  • goyo
    I've disabled the AutoSSL feature on both sites on both servers and they are functioning well now. These sites didn't had their own SSL certificates and both of them on a dedicated IP. They ran well before the 64.x update. Is there anything in the 64 update that might change the behavior of AutoSSL? Or maybe it's related to new OWASP Modsecurity rules? I think this thread can be closed as solved.
    0
  • cPanelMichael
    Hello, Could you open a support ticket using the link in my signature so we can take a closer look at why the AutoSSL feature is preventing your websites from loading? You can post the ticket number here so we can update this thread with the outcome. Thank you.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post