Plesk 12.x / Linux :: After Mod Security Logrotate New Log Is Empty
Jul 6, 2014
Plesk 12 on Centos 6.5
I added the following to my /etc/logrotate.conf
/var/log/modsec_audit.log {
missingok
daily
rotate 4
compress
}
I'm not exactly sure if the above is the correct syntax, but the result was that two days later my current modsec_audit.log was Gzipped and a new modsec_audit.log was created.
The problem is that nothing was logged to this new file.
From the Plesk 12 control panel I turned off mod security and then turned it back on again and hey presto, the new logfile started to log events.
This leaves the problem of why nothing was recorded when the file was created.
View 2 Replies
ADVERTISEMENT
Aug 1, 2014
I want to create logrotate in logrotate.d for modsecurity log.
I find following code, but it don't works.
Code:
/var/log/modsec_audit.log {
rotate 7
compress
missingok
notifempty
sharedscripts
postrotate
/sbin/service httpd reload > /dev/null 2>/dev/null || true
endscript
}
View 1 Replies
View Related
Dec 6, 2014
why my maillog is empty. I have checked both locations below but result remain the same:
/usr/local/psa/var/log/maillog
/var/log/maillog
I'm running this Plesk inside OpenVZ container (using centos-7-x86_64-minimal template)
View 5 Replies
View Related
Jul 23, 2015
I installed new Plesk in new VPS with Centos 7 (Virtuozzo - former PCS)... One domain is running, but when reboot the server, maillog stopped.
Last lines of the login are:
Jul 23 13:45:08 server dovecot: service=pop3, user=xxxxxxx@xxxx.com.ar, ip=[190.X.XX.XXX]. Server shutting down. rcvd=3270, sent=23925997, top=0/0, retr=327/23659830, del=0/594, size=40888121
Jul 23 13:45:08 server dovecot: anvil: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill)
Jul 23 13:45:08 server dovecot: log: Warning: Killed with signal 15 (by pid=1 uid=0 code=kill)
Jul 23 13:45:08 server spamd[3369]: spamd: server killed by SIGTERM, shutting down
Jul 23 13:45:08 server postfix/postfix-script[4396]: stopping the Postfix mail system
Jul 23 13:45:08 server postfix/master[31144]: terminating on signal 15
Jul 23 13:45:08 server /usr/lib64/plesk-9.0/psa-pc-remote[2587]: PleskFilter: private data not NULL
Jul 23 13:45:08 server /usr/lib64/plesk-9.0/psa-pc-remote[2587]: PleskFilter: private data not NULL
Jul 23 13:45:08 server postfix/postfix-script[4404]: waiting for the Postfix mail system to terminate
Jul 23 13:45:13 server /usr/lib64/plesk-9.0/psa-pc-remote[2587]: PleskFilter: mi_stop=1
I can reproduce this problem, but cannot fix it....
View 1 Replies
View Related
Sep 28, 2014
I have restore my Plesk 12.0.18 Backup after new installed Server from Ubuntu Server 12 to Ubuntu Server 14.
The Backup is from Plesk 12.0.18 under Ubuntu Server 12!
After restore all Mailboxes are available and work they, but all Mailboxes are empty. No contents are restored.
New try to restore Mail Account only have no Result.
I have downloaded my backup file to local Computer and extract.
In file backup_mydomain_mn_1409281400.tgz are all Messages encrypt available. But Not restored.
Why????
View 7 Replies
View Related
Apr 22, 2015
In the fail2ban module of plesk is a tab for "logs".
Here you can view Fail2ban logs.
No items found.Click to expand...
View 6 Replies
View Related
Oct 20, 2014
When I log into plesk (service provider view) and click on the Domains link on the left, I get an empty page. It isn't blank like there is an error, it has some instructions at the top about creating a customer etc. It just doesn't list any of the domains that are setup on the server. There are several reseller accounts with several domains under each. I've even tried setting up a new customer and adding a domain under the new customer. Still nothing shows up.
I have several other VPS accounts running Plesk 12 with several domains under different customer accounts and the domains all show up on those.
View 3 Replies
View Related
May 26, 2015
I'm testing Plesk 12.1 and noticed after enabling ModSecurity, the modsec_audit log file is empty.
I'm running CentOS7.1 w/Plesk 12.1.23
View 2 Replies
View Related
Aug 16, 2013
Our Server doesn't show the Traffic History under "Tools & Settings -> Summary Report -> View Traffic History", but for every Domain it runs.
We Migrate this Server from a Dedicated to an OpenVZ Server - on another Server with OpenVZ its running without Problems, but this one we don't migrate.
View 3 Replies
View Related
Dec 11, 2014
I'm just wondering how I can start logging activity in Fail2Ban. I've got the following line in the "logs" tab in "IP Address Banning" in the Plesk UI:
/var/log/fail2ban.log
However when I check this it states "The file is empty".
I'm assuming there will be a setting somewhere that tells fail2ban to log to that file but I'm not sure where/what it is?
I know for sure that I've had IP's banned but they just don't appear to be logged.
View 7 Replies
View Related
Dec 4, 2013
Is there any way to auto-delete all the messages in a specific mailbox on a specify domain on a daily basis? Using Postfix.
View 4 Replies
View Related
Oct 8, 2014
I have Parallels Plesk 12.0.18 with CentOS 6.5 (Final)
WAF is On, with Atomic Basic ModSecurity rule set.
I was wondering if my sites were protected and I went to the Atomic wiki.
When I run a test from a non-whitelisted system following these instructions (STEP 10) [URL].... I always receive 404 error with all of my sites.
I also tested with:
[URL]...
Results: The sites load normally. (the call not even appears in the logs)
I've unistalled and reinstalled mod_security several times with the same results.
Is there any "official" way to check if WAF is protecting Plesk 12?
I asked same question in Atomic forum and they said:
you'd need to ask parallels about this, we made the ruleset available to them, but they implemented it using their own design. They might not be using 403 error codes like we do.
View 13 Replies
View Related
Jun 26, 2014
After upgrading to Plesk 12 the FTP connection has become very slow. Mode Security, Fail2Ban and Plesk Firewall have been enabled, the security is set to force sFTP and maximum security and in /etc/proftpd.d/ a conf file has been added to set the passive ports that have been opened in the Plesk Firewall (60000 to 62000)
Turning off the Mod Security does not solve the slow connection.
What can we do to detect the cause of the problem?
View 3 Replies
View Related
Mar 4, 2014
I have tried this on Plesk 11.5 and Plesk 12.0.10 Preview running on Ubuntu 12.04.4 LTS...
Locate the file
/etc/sw-cp-server/conf.d/plesk.confClick to expand...
View 3 Replies
View Related
Jul 12, 2014
How can I do to send email without the security warning?
I want the clients sending mails no longer have a security warning.
I tried with SSL port 465
I tried with port 587 TLS> Mail settings for the entire server> Enable Send Message
View 1 Replies
View Related
Aug 24, 2014
I thought this problem was fixed in Plesk 11.5 but I'm still getting the following backup warnings in Plesk 12..."For security reason backup is performed on behalf of subscription system user...."
My phpbb forum creates cache files which have apache ownership and Plesk backup manager gives warnings that it cannot backup the files due to ownership errors.
I have searched for days for a solution without success. If I change the permissions to owner instead of apache the forums don't function correctly.
Is this a Plesk bug that is still evident in Plesk 12?
View 10 Replies
View Related
Aug 2, 2012
I just installed P11 and the AppVault is empty - how do I tell it to download all the apps from the aps catalog like I can do in linux? Is there a command line alternative for it as well?
for example in linux you would do
/usr/local/psa/bin/aps_catalog --install-applications-bundle 3Click to expand...
View 1 Replies
View Related
Apr 4, 2008
I run a web hosting company and one of my servers is a LAMP server running CentOs 5. A user of mine has a Joomla installation running to manage his website and he has run into the following problem that I am puzzled by.
When Joomla adds a component or module to itself, or when a user uses the Joomla upload functionality, Joomla will add the new files under the user name "apache". This makes sense as it is the apache service running PHP that is actually creating the files.
However, when he FTP's into the account to modify these files, he doesn't have the appropriate permissions to do so as he doesn't have a root level login, just permissions on his home directory which is the site. Any help would be much appreciated.
Also, does anyone know how to change the owner/group of a directory and all of its sub directories in Linux without changing the actual permissions? I.e. some of the files in the folder have different permissions (0644 as apposed to 0755) than its parent but if I do a top down user/group change on the folder it will change everything in that folder to 0755.
View 10 Replies
View Related
Mar 4, 2015
I have problem with my windows plesk when i login show me a page to fill administrator detail but when i complete it this error appear .
Error: Unable to update administrator information:
Some fields are empty or contain an improper value. ('login' = '')
View 11 Replies
View Related
Mar 23, 2015
Plesk, for an unknown reason to me, creates an "empty binding" on one specific website every time I make a "hosting change" on that very website (subscription in Plesk terms). What I mean by a "hosting change" is things like enabling/disabling SSL, adding/removing aliases and anything similar that might require Plesk to re-arrange the bindings for that website.
The issue exists only on one of the many websites I am hosting/configuring via Plesk, the others don't have any similar issues.The result of the issue is the given website being stopped by IIS since the "empty binding" is already in use by the "Default Web Site".If I go ahead and delete the empty binding from the given website, I can start the website up again.The Plesk version I am having is 12.0.18 Update #38, which I assume is the latest one.
View 4 Replies
View Related
Sep 26, 2013
I'm setting up a server that has both Plesk 11.5 and SmarterMail 11.6 on it. I'm trying to get Plesk set to use the SmarterMail, and it sees it fine in the Server Components, but when I try to set it as the default and put in the password information it comes back and says: Error: Some fields are empty or contain an improper value.
I thought maybe it didn't like some of the characters I had in the password, and tried simplifying that but it didn't work. So I'm wondering if it is just because Plesk 11.5 won't work with SmarterMail 11.6 yet?
View 3 Replies
View Related
Mar 7, 2015
Problem after upgrading to 12
Error: Unable to update administrator information:Some fields are empty or contain an improper value.
('login' = '')
View 4 Replies
View Related
Jun 22, 2009
This is our logrotate definition for Apache's logs folder:
Code:
/var/log/httpd/*log {
rotate 5
missingok
notifempty
size=100M
sharedscripts
postrotate
/bin/kill -HUP `cat /var/run/httpd.pid 2>/dev/null` 2> /dev/null || true
endscript
}
Yet, while it does truncate logs in five, we seem to have fairly different sizes: 182M, 168M, 968M (!)... It seems to be ignoring "size=100M",
View 2 Replies
View Related
Oct 25, 2009
is it possible to disable log rotate? I can't seem to find the cron under my weeklys or dailys nor monthlys unless it's named "mad-db" but is there a way to make it say yearly? or just disable it all together? I say this because the script I use has a function already to clear the logs and when log rotate runs it kills all processes going by the script
View 8 Replies
View Related
Jul 21, 2008
In /etc/logrotate.conf
I have the following:
Quote:
daily
rotate 7
create
compress
include /etc/logrotate.d
/var/log/wtmp {
monthly
create 0664 root utmp
rotate 4
}
How can I keep my logs until the 18th of every month?
Would:
monthly
rotate 18
View 6 Replies
View Related
Jun 19, 2007
I recently purchased a new dedicated server, since I have had this server (8 days) I have being receiving the following email:
Quote:
/etc/cron.daily/logrotate:
error: error accessing /var/log/httpd: No such file or directory
error: httpd:1 glob failed for /var/log/httpd/*log
View 9 Replies
View Related
Jun 30, 2008
i have a little issue with the domlogs folder.
I should empty this files but i don't know if it is possible to do without reboot Apache.
a) how can i setup logrotate to rotate domlogs?
And if it is possible:
b) how can i setup logrotate to rotate domlogs without restart apache?
I have already setup whm-> tweak settings to delete old domain's access logs after stats run and the whm is setup to generate statistics every 20 hours.
But every day the site is slowly because the domlogs are too big.
View 6 Replies
View Related
Aug 4, 2008
how to rename access logs according to Week Number?
I notice that 1&1 do this, producing a file like "access.log.31.gz".
I'd like the access log to be in this format: access_log_[domain-name]_[Week-Number].gz, or if domain-name is not possible: access_log_[Week-Number].gz
Here's my current logrotate script for access_log:
Code:
/home/default/muro.co.uk/user/logfiles/access_log {
missingok
rotate 8
weekly
postrotate
/bin/kill -USR1 `cat /var/run/httpd.pid`
endscript
}
View 4 Replies
View Related
Nov 1, 2009
i need information about this option 'Check /etc/cron.daily/logrotate for /tmp noexec workaround', there are in the server check, of the csf test, someone can explain to me about this function? should do it?
the actually state is 'warning'.
View 12 Replies
View Related
Nov 19, 2013
Everyday after Backup Panel (Tasks from Backup Manager), I receive next error:
<?xml version="1.0" encoding="utf-8"?>
<execution-result status="error">
<object name="domain.ru" type="domain">
<message severity="error" id="416a91ad-e5e7-480b-b6b4-a60157b8eaae" code="InformationalException">
<description>Could not find password for account id '2648'. Return empty password</description>
</message>
</object>
</execution-result>
Resolve -> only reconfigure domain. How can I automatic fix this problem?
View 5 Replies
View Related