Crashing the server

NickT / 2010-04-30 10:53:01   

I think my installation and database setup went well....but indexhibit seems to be crashing my server, it appears fine at my url and I can log in but as soon as I try to do anything the server stops responding....and suddenly I can't ftp, log into my server siteadmin or anything.

Not sure if this is a server issue or an indexhibit issue or both.

The server comes back after 20 minutes or so and the log shows some strange activity I don't understand.

[Fri Apr 30 00:00:20 2010] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Fri Apr 30 01:00:49 2010] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Fri Apr 30 01:01:18 2010] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Fri Apr 30 01:01:22 2010] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Fri Apr 30 01:15:48 2010] [warn] RSA server certificate CommonName (CN) `plesk' does NOT match server name!?
[Fri Apr 30 04:04:10 2010] [error] [client 125.224.207.35] ModSecurity: [file "/etc/httpd/modsecurity.d/10_asl_rules.conf"] [line "73"] [id "340361"] [rev "2"] [msg "Atomicorp.com WAF Rules: CONNECT method denied"] [data "connect"] [severity "CRITICAL"] Access denied with code 403 (phase 1). Pattern match "connect" at REQUEST_METHOD. [hostname "203.188.201.253"] [uri "/"] [unique_id "f0dgCFBSdEIAAGh@boQAAAAI"]

But I've watched enough sci-fi to know 'severity "CRITICAL"' is never a good thing.

Any ideas?

Vaska A / 2010-04-30 11:01:47   

modsecurity is a bit of a beast. i've seen this a couple times before. you might show this to your host and ask them if they can make adjustments to it (most hosts will do this).

but, there is no problem with Indexhibit here...

NickT / 2010-04-30 11:05:15   

OK thanks for the quick reply, I've sent them the log readout and told them what I'm trying to do, I'll see what they say. They run PHP safe mode is that a problem?

NickT / 2010-04-30 11:40:41   

I reinstalled and its working so far, I think I got the server host wrong when setting up the database.

Thank you....Nick

Vaska A / 2010-04-30 11:55:07   

I guess that could do it. modsecurity does some really strange things...which is what was causing crashing and these error notices.

NickT / 2010-04-30 12:34:43   

It worked for a short while and then crashed again.

My isp support have said..

"Something about what you're trying to upload is triggering a security rule and then blocking your IP for 30 minutes as an anti-hacking measure. I can exclude this particular rule from executing for you."

I'm waiting for them to do that and I'll try again. When its working I'm enjoying experimenting with what indexhibit can do....so thank you.

Vaska A / 2010-04-30 17:59:28   

Yeah, that's what they always say...and do. Call me redundant, but modsecurity is a beast. It needs to be tweaked...there seem to be a billion different ways to set it up.

This thread has been closed, thank you.