forbidden access on ispconfig

Discussion in 'General' started by ressel, Mar 31, 2011.

  1. ressel

    ressel Member

    Hello ISPConfig community,

    Yesterday I added a new "slave" server to ispconfig.
    So now I got my first ISPC3 server as master, and a second server to a single customer.

    But since yesterday I have several times faced that when i try load pages in ISPC3 control panel, it doesn't load. If i try press F5 to refresh i get following error.

    Forbidden

    You don't have permission to access /index.php on this server.

    Does anyone know, how I solve this problem?
     
  2. till

    till Super Moderator

    Please check apache error.log file.
     
  3. ressel

    ressel Member

    Code:
    [Thu Mar 31 10:45:17 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/monitor/show_data.php, referer: [url]https://www.isplogin.dk/index.php[/url]
    [Thu Mar 31 10:45:19 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/monitor/show_data.php, referer: [url]https://www.isplogin.dk/index.php[/url]
    [Thu Mar 31 10:45:21 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: [url]https://www.isplogin.dk/index.php[/url]
    [Thu Mar 31 10:45:28 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: [url]https://www.isplogin.dk/index.php[/url]
    [Thu Mar 31 10:45:29 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: [url]https://www.isplogin.dk/index.php[/url]
    [Thu Mar 31 10:45:31 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: [url]https://www.isplogin.dk/index.php[/url]
    [Thu Mar 31 10:45:31 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/capp.php, referer: [url]https://www.isplogin.dk/index.php[/url]
    [Thu Mar 31 10:45:32 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/index.php, referer: [url]https://www.isplogin.dk/[/url]
    [Thu Mar 31 10:45:32 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/favicon.ico
    [Thu Mar 31 10:45:33 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/index.php, referer: [url]https://www.isplogin.dk/[/url]
    [Thu Mar 31 10:45:33 2011] [error] [client 85.81.xxx.xxx] client denied by server configuration: /usr/local/ispconfig/interface/web/favicon.ico
    
     
  4. till

    till Super Moderator

    This does not seem to be a normal ispconfig installation as you seem to run ispconfig in a different vhost then the one that the installer creates on port 8080. It might be nescessary that you reconfigure your vhost that it allows apache to access the ispconfig directories.
     
  5. ressel

    ressel Member


    Could it be because I have installed: libapache2-mod-evasive ?

    Nope, none log file is created yet.
     
    Last edited: Apr 1, 2011
  6. ressel

    ressel Member

    I would like to add to that i have also tried that this problem occurred on other pages than the ISPC control panel.

    I will try find a log file and post it.

    Code:
    
    [Fri Apr 01 10:14:07 2011] [notice] caught SIGTERM, shutting down
    [Fri Apr 01 10:14:09 2011] [notice] mod_fcgid: process /var/www/hostcity.dk/web/index.php(17322) exit(shutting down), terminated by calling exit(), return code: 0
    [Fri Apr 01 10:14:09 2011] [notice] mod_fcgid: process /var/www/hostcity.dk/web/index.php(17323) exit(shutting down), terminated by calling exit(), return code: 0
    [Fri Apr 01 10:14:09 2011] [notice] mod_fcgid: process /var/www/dev.ybnet.dk/web/sandra/index.php(16911) exit(shutting down), terminated by calling exit(), return code: 0
    [Fri Apr 01 10:14:10 2011] [notice] suEXEC mechanism enabled (wrapper: /usr/lib/apache2/suexec)
    [Fri Apr 01 10:14:10 2011] [notice] Digest: generating secret for digest authentication ...
    [Fri Apr 01 10:14:10 2011] [notice] Digest: done
    [Fri Apr 01 10:14:11 2011] [notice] Apache/2.2.9 (Debian) DAV/2 PHP/5.2.6-1+lenny10 with Suhosin-Patch mod_ruby/1.2.6 Ruby/1.8.7(2008-08-11) mod_ssl/2.2.9 OpenSSL/0.9.8g configured -- resuming normal operations
    [Fri Apr 01 10:16:01 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/mail/mail_forward_list.php, referer: https://www.isplogin.dk/index.php
    [Fri Apr 01 10:16:03 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/mail/mail_forward_list.php, referer: https://www.isplogin.dk/index.php
    [Fri Apr 01 10:16:06 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/mail/mail_forward_list.php, referer: https://www.isplogin.dk/index.php
    [Fri Apr 01 10:16:07 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/mail/mail_forward_list.php, referer: https://www.isplogin.dk/index.php
    [Fri Apr 01 10:16:12 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/index.php, referer: https://www.isplogin.dk/
    [Fri Apr 01 10:16:12 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/favicon.ico
    [Fri Apr 01 10:16:15 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/index.php, referer: https://www.isplogin.dk/
    [Fri Apr 01 10:16:15 2011] [error] [client 85.81.x.x] client denied by server configuration: /usr/local/ispconfig/interface/web/favicon.ico
    
    
     
    Last edited: Apr 1, 2011
  7. ressel

    ressel Member

    Here is the error from one of the websites
    (exact same error)
    Code:
    [Thu Mar 31 12:25:34 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/favicon.ico, referer: http://dev.ybnet.dk/hs/
    [Thu Mar 31 12:25:36 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/hs/
    [Thu Mar 31 12:25:36 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/favicon.ico, referer: http://dev.ybnet.dk/hs/
    [Thu Mar 31 12:25:38 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/hs/
    [Thu Mar 31 12:25:42 2011] [error] [client 85.81.x.x] client denied by server configuration: /var/www/dev.ybnet.dk/web/hs/
    
    ERROR 403 - Forbidden!

    The following error occurred:

    You are not permitted to access the requested URL.

    Please contact the webmaster with any queries.
     
  8. ressel

    ressel Member

    I have found the problem.

    When I disable libapache2-mod-evasive i can without any problem access control panel, and the other sites, and "fast click" throug pages.

    So its the DOS prevention that stop the request when users got to many requests.

    This must also be the reason that one of my clients told me his webpage stopped working, because not all images on his page was loaded.
     

Share This Page