Error with Apache and WAF

argosmedia · **Posted:** Wed Jun 13, 2012 8:49 am

I noticed that apache was down (don't know why) and I tried to restart it with

Code:

/sbin/service httpd restart

The I got the error

Code:

Syntax error on line 5 of /etc/httpd/conf.d/asl_waf.conf:
Invalid command '<Proxy', perhaps misspelled or defined by a module not included in the server configuration

This is the content of that file:

Code:

# ASL asl_waf.conf Template: /var/asl/data/templates/template-asl_waf.conf

ProxyRequests Off

<Proxy *>
Order deny,allow
Allow from all
</Proxy>

#ProxyPass /foo http://foo.example.com/bar
#ProxyPassReverse /foo http://foo.example.com/bar 

I commented out the non-commented lines and tried to restart apache. Now it started just fine. I never touched that file, and don't even know what it does apart from my guess that it has something to do with a firewall. But somehow it prevents apache from working. What's wrong? What should be done about it? In ASL webgui the WAF functions are set to ON. But they have been that all the time, I didn't change anything in the config.

mikeshinn · **Posted:** Wed Jun 13, 2012 3:20 pm

Can you post your /etc/asl/waf-config file?

argosmedia · **Posted:** Wed Jun 13, 2012 5:04 pm

mikeshinn wrote:

Can you post your /etc/asl/waf-config file?

Completely empty...

mikeshinn · **Posted:** Fri Jun 15, 2012 11:17 am

Did you ever define any WAFs?

argosmedia · **Posted:** Fri Jun 15, 2012 11:25 am

Nope, I don't know anything about that. I bought ASL based on the info on the website that says "ASL is designed for beginners and experts alike. You just install ASL onto your existing system and it does all the work for you." It never said anything about "defining WAF's", as far as I remember :roll:

mikeshinn · **Posted:** Fri Jun 15, 2012 2:47 pm

Did this happen as part of a brand new install, or was this an existing ASL installation that was recently upgraded?

argosmedia · **Posted:** Fri Jun 15, 2012 5:38 pm

mikeshinn wrote:

Did this happen as part of a brand new install, or was this an existing ASL installation that was recently upgraded?

It is an existing installation, and it could very well be related to an upgrade. I think I remember upgrading it around the day the error occured. But I don't think it was right away, or else I guess I would have noticed that. Maybe the next day, is that possible?

Can I look it up in some log, when the last update was?

mikeshinn · **Posted:** Fri Jun 15, 2012 5:56 pm

Yep. Just look in /var/log/yum.log that will provide the date asl was upgraded.

argosmedia · **Posted:** Fri Jun 15, 2012 6:33 pm

This is the info for June:

Code:

Jun 13 13:36:14 Installed: psa-proftpd-1.3.4a-2.el6.art.x86_64
Jun 13 14:57:09 Updated: mysql-libs-5.5.25-7.el6.art.x86_64
Jun 13 14:57:09 Updated: 32:bind-libs-9.7.3-8.P3.el6_2.3.x86_64
Jun 13 14:57:14 Updated: mysql-5.5.25-7.el6.art.x86_64
Jun 13 14:57:15 Updated: 1:kernel-firmware-2.6.32.59-22.art.x86_64
Jun 13 14:57:16 Updated: ossec-hids-2.6-12.el6.art.x86_64
Jun 13 14:57:17 Updated: ossec-hids-server-2.6-12.el6.art.x86_64
Jun 13 14:59:12 Installed: 1:kernel-2.6.32.59-22.art.x86_64
Jun 13 14:59:37 Updated: mysql-server-5.5.25-7.el6.art.x86_64
Jun 13 14:59:38 Updated: 32:bind-9.7.3-8.P3.el6_2.3.x86_64
Jun 13 14:59:39 Updated: 32:bind-utils-9.7.3-8.P3.el6_2.3.x86_64
Jun 13 14:59:39 Updated: 1:kernel-headers-2.6.32.59-22.art.x86_64
Jun 13 14:59:40 Updated: rkhunter-1.4.0-6.el6.art.noarch

Hm... it looks like the problems began after a Plesk update...

Error with Apache and WAF

Who is online