Apache HTTPD crashed due to poorly written regular expression in latest COMODO ruleset

Answered

Robin Free

• June 05, 2025 19:54

I lost my Apache webserver on my WHM server (126.0.19) last night, due to a COMODO WAF ruleset update.

Looking through the error logs I found...

"AH00526: Syntax error on line 6035 of /etc/apache2/conf.d/modsec_vendor_configs/comodo-apache/30_Apps_OtherApps.conf"

httpd would not start.

Specifically, I checked the offending line (6034) and (together with AI) I found that the regex "!@rx ^[\d-:]+$" should have been "!@rx ^[-\d:]+$" 

So, I edited 30_Apps_OtherApps.conf and made the change, and the Apache httpd restarted correctly. No more crashing.

I hope this helps anyone with a similar problem today.  

• 

  ciao70

  • June 05, 2025 21:30

  Hello,

  https://support.cpanel.net/hc/en-us/community/posts/32600248983063

   

  https://support.cpanel.net/hc/en-us/articles/32599967086615-Apache-failed-after-update-ea-apache24-mod-security2-to-2-9-10

  1
• 

  simon may

  • June 05, 2025 23:57

  Thanks Robin that corrected the issue. 
  
  

  0

Please sign in to leave a comment.