Re: libapache2-mod-security2 error message

From	Vincent Deffontaines <vincent@gryzor.com>
Newsgroups	linux.debian.security
Subject	Re: libapache2-mod-security2 error message
Date	2017-01-23 18:10 +0100
Message-ID	<t2QhZ-Jd-47@gated-at.bofh.it> (permalink)
References	<t2Cyl-sO-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

Le 2017-01-23 03:26, Tea Wrex a écrit :
> I'm getting this error message and I don't know what to do to remedy
> it.
> Note: It was working fine the other day and I have not modified
> anything since it was working
> 
> This is from the Apache error log.
> 
> [Sun Jan 22 17:46:49.561357 2017] [mpm_prefork:notice] [pid 27576]
> AH00169: caught SIGTERM, shutting down
> 
> [Sun Jan 22 17:46:51.001201 2017] [:notice] [pid 27640] ModSecurity
> for Apache/2.8.0 (http://www.modsecurity.org/) configured.
> 
> [Sun Jan 22 17:46:51.001315 2017] [:notice] [pid 27640] ModSecurity:
> APR compiled version="1.5.1"; loaded version="1.5.1"
> 
> [Sun Jan 22 17:46:51.001321 2017] [:notice] [pid 27640] ModSecurity:
> PCRE compiled version="8.35 "; loaded version="8.35 2014-04-04"
> 
> [Sun Jan 22 17:46:51.001330 2017] [:notice] [pid 27640] ModSecurity:
> LUA compiled version="Lua 5.1"
> 
> [Sun Jan 22 17:46:51.001333 2017] [:notice] [pid 27640] ModSecurity:
> LIBXML compiled version="2.9.1"
> 
> [Sun Jan 22 17:46:51.001389 2017] [:notice] [pid 27640] ModSecurity:
> StatusEngine call: "2.8.0,Apache,1.5.1/1.5.1,8.35/8.35 2014-04-04,Lua
> 5
> .1,2.9.1,04"
> 
> [SUN JAN 22 17:46:51.179137 2017] [:NOTICE] [PID 27640] MODSECURITY:
> STATUSENGINE CALL FAILED. QUERY:
> GIXDQLRQFRAXAYLDNBSSYMJOGUXDCLZR.FY2S4
> MJMHAXDGNJPHAXDGNJAGIYDCNBN.GA2C2MBUFRGHKYJAGUXDCLBSFY4S4MJM.GA2A.1485136010.status.modsecurity.org
> [1]
> [Sun Jan 22 17:46:52.005083 2017] [mpm_prefork:notice] [pid 27641]
> AH00163: Apache/2.4.10 (Debian) OpenSSL/1.0.1t configured -- resuming
> nor
> mal operations
> 
> [Sun Jan 22 17:46:52.005129 2017] [core:notice] [pid 27641] AH00094:
> Command line: '/usr/sbin/apache2'
> 
> 
> THIS IS THE LOG ENTRIES FROM WHEN IT WAS WORKING FINE:
> 
> [Sat Jan 21 02:38:42.900275 2017] [mpm_prefork:notice] [pid 31795]
> AH00169: caught SIGTERM, shutting down
> 
> [Sat Jan 21 02:42:22.000351 2017] [:notice] [pid 18967] ModSecurity
> for Apache/2.8.0 (http://www.modsecurity.org/) configured.
> 
> [Sat Jan 21 02:42:22.000483 2017] [:notice] [pid 18967] ModSecurity:
> APR compiled version="1.5.1"; loaded version="1.5.1"
> 
> [Sat Jan 21 02:42:22.000490 2017] [:notice] [pid 18967] ModSecurity:
> PCRE compiled version="8.35 "; loaded version="8.35 2014-04-04"
> 
> [Sat Jan 21 02:42:22.000500 2017] [:notice] [pid 18967] ModSecurity:
> LUA compiled version="Lua 5.1"
> 
> [Sat Jan 21 02:42:22.000502 2017] [:notice] [pid 18967] ModSecurity:
> LIBXML compiled version="2.9.1"
> 
> [Sat Jan 21 02:42:22.000549 2017] [:notice] [pid 18967] ModSecurity:
> StatusEngine call: "2.8.0,Apache,1.5.1/1.5.1,8.35/8.35 2014-04-04,Lua
> 5
> .1,2.9.1,04"
> 
> [Sat Jan 21 02:42:23.303215 2017] [:notice] [pid 18967] ModSecurity:
> StatusEngine call successfully sent. For more information visit:
> http:/
> /status.modsecurity.org/ [2]
> 
> 
> [Sat Jan 21 02:42:24.003412 2017] [mpm_prefork:notice] [pid 18969]
> AH00163: Apache/2.4.10 (Debian) OpenSSL/1.0.1t configured -- resuming
> nor
> mal operations
> 
> [Sat Jan 21 02:42:24.004524 2017] [core:notice] [pid 18969] AH00094:
> Command line: '/usr/sbin/apache2'
> 
> 
> 
> Links:
> ------
> [1]
> http://MJMHAXDGNJPHAXDGNJAGIYDCNBN.GA2C2MBUFRGHKYJAGUXDCLBSFY4S4MJM.GA2A.1485136010.status.modsecurity.org
> [2] http://status.modsecurity.org/


Hi,

Have you tried setting
SecStatusEngine off ?
It seems your apache2 fails at notifying status.modsecurity.org online, 
as it is starting.
See 
https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual#SecStatusEngine 
for more details.

Vincent


-- 
What is it you need, that makes your heart beat ?
Do you really know, cause it doesn't show.
New Order - Round & round

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

libapache2-mod-security2 error message Tea Wrex <wrextea@gmail.com> - 2017-01-23 03:30 +0100
  Re: libapache2-mod-security2 error message Vincent Deffontaines <vincent@gryzor.com> - 2017-01-23 18:10 +0100

csiph-web