forbidden access on ispconfig

[ressel]

Hello ISPConfig community,

Yesterday I added a new "slave" server to ispconfig.
So now I got my first ISPC3 server as master, and a second server to a single customer.

But since yesterday I have several times faced that when i try load pages in ISPC3 control panel, it doesn't load. If i try press F5 to refresh i get following error.

Forbidden

You don't have permission to access /index.php on this server.

Does anyone know, how I solve this problem?

[till]

Please check apache error.log file.

[ressel]

[Thu Mar 31 10:45:17 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/monitor/show_data.php, referer: https://www.isplogin.dk/index.php
[Thu Mar 31 10:45:19 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/monitor/show_data.php, referer: https://www.isplogin.dk/index.php
[Thu Mar 31 10:45:21 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: https://www.isplogin.dk/index.php
[Thu Mar 31 10:45:28 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: https://www.isplogin.dk/index.php
[Thu Mar 31 10:45:29 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: https://www.isplogin.dk/index.php
[Thu Mar 31 10:45:31 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: https://www.isplogin.dk/index.php
[Thu Mar 31 10:45:31 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: https://www.isplogin.dk/index.php
[Thu Mar 31 10:45:32 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/index.php, referer: https://www.isplogin.dk/
[Thu Mar 31 10:45:32 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/favicon.ico
[Thu Mar 31 10:45:33 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/index.php, referer: https://www.isplogin.dk/
[Thu Mar 31 10:45:33 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/favicon.ico

[till]

This does not seem to be a normal ispconfig installation as you seem to run ispconfig in a different vhost then the one that the installer creates on port 8080. It might be nescessary that you reconfigure your vhost that it allows apache to access the ispconfig directories.

[ressel]

Originally Posted by till

This does not seem to be a normal ispconfig installation as you seem to run ispconfig in a different vhost then the one that the installer creates on port 8080. It might be nescessary that you reconfigure your vhost that it allows apache to access the ispconfig directories.

Could it be because I have installed: libapache2-mod-evasive ?

Nope, none log file is created yet.

[ressel]

I would like to add to that i have also tried that this problem occurred on other pages than the ISPC control panel.

I will try find a log file and post it.

[Fri Apr 01 10:14:07 2011] [notice] caught SIGTERM, shutting down
[Fri Apr 01 10:14:09 2011] [notice] mod_fcgid: process /var/www/hostcity.dk/web/index.php(17322) exit(shutting down), terminated by calling exit(), return code: 0
[Fri Apr 01 10:14:09 2011] [notice] mod_fcgid: process /var/www/hostcity.dk/web/index.php(17323) exit(shutting down), terminated by calling exit(), return code: 0
[Fri Apr 01 10:14:09 2011] [notice] mod_fcgid: process /var/www/dev.ybnet.dk/web/sandra/index.php(16911) exit(shutting down), terminated by calling exit(), return code: 0
[Fri Apr 01 10:14:10 2011] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
[Fri Apr 01 10:14:10 2011] [notice] Digest: generating secret for digest authentication ...
[Fri Apr 01 10:14:10 2011] [notice] Digest: done
[Fri Apr 01 10:14:11 2011] [notice] Apache/2.2.9 (Debian) DAV/2 PHP/5.2.6-1+lenny10 with Suhosin-Patch mod_ruby/1.2.6 Ruby/1.8.7(2008-08-11) mod_ssl/2.2.9 OpenSSL/0.9.8g configured -- resuming normal operations
[Fri Apr 01 10:16:01 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/mail/mail_forward_list.php, referer: https://www.isplogin.dk/index.php
[Fri Apr 01 10:16:03 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/mail/mail_forward_list.php, referer: https://www.isplogin.dk/index.php
[Fri Apr 01 10:16:06 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/mail/mail_forward_list.php, referer: https://www.isplogin.dk/index.php
[Fri Apr 01 10:16:07 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/mail/mail_forward_list.php, referer: https://www.isplogin.dk/index.php
[Fri Apr 01 10:16:12 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/index.php, referer: https://www.isplogin.dk/
[Fri Apr 01 10:16:12 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/favicon.ico
[Fri Apr 01 10:16:15 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/index.php, referer: https://www.isplogin.dk/
[Fri Apr 01 10:16:15 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/favicon.ico

[ressel]

Here is the error from one of the websites
(exact same error)

[Thu Mar 31 12:25:34 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/favicon.ico, referer: http://dev.ybnet.dk/hs/
[Thu Mar 31 12:25:36 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/hs/
[Thu Mar 31 12:25:36 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/favicon.ico, referer: http://dev.ybnet.dk/hs/
[Thu Mar 31 12:25:38 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/hs/
[Thu Mar 31 12:25:42 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/hs/

ERROR 403 - Forbidden!

The following error occurred:

You are not permitted to access the requested URL.

Please contact the webmaster with any queries.

[ressel]

I have found the problem.

When I disable libapache2-mod-evasive i can without any problem access control panel, and the other sites, and "fast click" throug pages.

So its the DOS prevention that stop the request when users got to many requests.

This must also be the reason that one of my clients told me his webpage stopped working, because not all images on his page was loaded.