[TYPO3-UG Dutch] localconf.php probleem
eef wesselink
eef.wesselink at home.nl
Mon Nov 26 17:34:57 CET 2007
Heb in mod_security.conf de regel
Include modsecurity.d/modsecurity_crs_40_generic_attacks.conf
Uitgecommentarieerd.
Schrijft nu wel weg naar localconf
Ga toch eens goed kijken wat er nu exact met de headers mis is, maar ik heb
de indruk dat de makers van Apache de ruleset nog niet 100% uitgedokterd
hebben!
Anyway, ik kan weer verder.
Bedankt voor de hulp
Groeten,
Eef
-----Original Message-----
From: typo3-ug-dutch-bounces at lists.netfielders.de
[mailto:typo3-ug-dutch-bounces at lists.netfielders.de] On Behalf Of Jos
Schipper [Netcreators]
Sent: maandag 26 november 2007 16:50
To: typo3-ug-dutch at lists.netfielders.de
Subject: Re: [TYPO3-UG Dutch] localconf.php probleem
Misschien kun je in eerste instantie die hele mod_security uitschakelen? :)
Ik weet niet of dat een optie is?
Groeten,
Jos
eef wesselink schreef:
> Hallo Jos,
>
> Ik zou het je zo niet kunnen vertellen, maar ik ga het uitzoeken.
> Kan even duren voor ik je kan laten weten of dit de oorzaak is, aangezien
> mijn kennis op dit gebied niet bijzonder groot is...
>
> Groeten,
>
> Eef
>
> -----Original Message-----
> From: typo3-ug-dutch-bounces at lists.netfielders.de
> [mailto:typo3-ug-dutch-bounces at lists.netfielders.de] On Behalf Of Jos
> Schipper [Netcreators]
> Sent: maandag 26 november 2007 16:22
> To: typo3-ug-dutch at lists.netfielders.de
> Subject: Re: [TYPO3-UG Dutch] localconf.php probleem
>
> mod_security loopt je te pesten.
>
> En als ik op je error google
> Modsecurity: Access denied with code 400
> kom ik bij een aantal pagina's die zeggen dat het met de request headers
> te maken heeft.
>
> Weet niet of dat zo kan zijn?
>
> Groeten,
> Jos
>
> eef wesselink schreef:
>> Sorry Jos,
>>
>> bijlage werkt niet op de mailing-list?
>> Hier de tekst:
>>
>> [Mon Nov 26 14:36:48 2007] [error] [client 192.168.123.127] PHP Fatal
> error:
>> Cannot re-assign $this in
>>
>
/var/www/html/typo3/mictoss/typo3conf/ext/static_info_tables/class.tx_static
>> infotables_syslanguage.php on line 41, referer:
>> http://athlon6k2x/typo3/mictoss/typo3/alt_menu.php
>> [Mon Nov 26 14:37:06 2007] [error] [client 192.168.123.127] PHP Fatal
> error:
>> Cannot re-assign $this in
>>
>
/var/www/html/typo3/mictoss/typo3conf/ext/static_info_tables/class.tx_static
>> infotables_syslanguage.php on line 41, referer:
>> http://athlon6k2x/typo3/mictoss/typo3/alt_menu.php
>> [Mon Nov 26 14:41:53 2007] [error] [client 192.168.123.127] PHP Fatal
> error:
>> Cannot redeclare tx_fdfxyaml_usermatch() (previously declared in
>>
>
/var/www/html/typo3/mictoss/typo3conf/temp_CACHED_ps5e67_ext_localconf.php:8
>> 92) in
>>
/var/www/html/typo3/mictoss/typo3conf/temp_CACHED_ps5e67_ext_localconf.php
>> on line 947, referer:
>>
>
http://athlon6k2x/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=
>> database
>> [Mon Nov 26 14:42:40 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "I1s4E38AAAEAAEVRpBgAAAAI"]
>> [Mon Nov 26 14:42:47 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "I8dE5X8AAAEAAE2PPWAAAAAH"]
>> [Mon Nov 26 14:44:25 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "KaIdjX8AAAEAAEVxxUYAAAAJ"]
>> [Mon Nov 26 14:45:28 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 501 (phase 2). Pattern match
>>
>
"(?:(?:\\\\b(?:f(?:tp_(?:nb_)?f?(?:ge|pu)t|get(?:s?s|c)|scanf|write|open|rea
>
d)|gz(?:(?:encod|writ)e|compress|open|read)|s(?:ession_start|candir)|read(?:
>
(?:gz)?file|dir)|move_uploaded_file|(?:proc_|bz)open)|\\\\$_(?:(?:pos|ge)t|s
>> ession))\\\\b|<\\\\?(?!xml))" at
>> ARGS:TYPO3_INSTALL[FILE][5351b821005d03448e8b22a7e668771d]. [id "950013"]
>> [msg "PHP Injection Attack. Matched signature <<?>"] [severity
"CRITICAL"]
>> [hostname "athlon6k2x"] [uri
>>
>
"/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=typo3conf_edit"]
>> [unique_id "LVU9SH8AAAEAAE2OO8gAAAAG"]
>> [Mon Nov 26 14:57:17 2007] [notice] caught SIGTERM, shutting down
>> [Mon Nov 26 14:57:18 2007] [notice] suEXEC mechanism enabled (wrapper:
>> /usr/sbin/suexec)
>> [Mon Nov 26 14:57:19 2007] [notice] ModSecurity for Apache 2.1.3
> configured
>> - Apache/2.2.6 (Fedora)
>> [Mon Nov 26 14:57:19 2007] [notice] Digest: generating secret for digest
>> authentication ...
>> [Mon Nov 26 14:57:19 2007] [notice] Digest: done
>> PHP Warning: PHP Startup: magickwand: Unable to initialize
module\nModule
>> compiled with module API=20050922, debug=0, thread-safety=0\nPHP
> compiled
>> with module API=20060613, debug=0, thread-safety=0\nThese options need to
>> match\n in Unknown on line 0
>> [Mon Nov 26 14:57:20 2007] [notice] mod_python: Creating 4 session
mutexes
>> based on 256 max processes and 0 max threads.
>> [Mon Nov 26 14:57:20 2007] [notice] mod_python: using mutex_directory
/tmp
>
>> [Mon Nov 26 14:57:20 2007] [notice] Apache/2.2.6 (Unix) DAV/2
>> mod_auth_kerb/5.3 mod_ssl/2.2.6 OpenSSL/0.9.8b Apache/2.2.0 (Fedora)
>> PHP/5.2.4 mod_python/3.3.1 Python/2.5 mod_perl/2.0.3 Perl/v5.8.8
> configured
>> -- resuming normal operations
>> [Mon Nov 26 14:58:37 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "XFwoH38AAAEAAG3ClqQAAAAC"]
>> [Mon Nov 26 14:59:38 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "YAIHn38AAAEAAG3DltoAAAAD"]
>> [Mon Nov 26 15:11:42 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "iypNzX8AAAEAAG3ClqcAAAAC"]
>> [Mon Nov 26 15:12:51 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "j0j79X8AAAEAAG3Dlt0AAAAD"]
>> [Mon Nov 26 15:25:10 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "u10IIH8AAAEAAG3Gl at QAAAAG"]
>> [Mon Nov 26 15:30:02 2007] [error] [client 192.168.123.127] ModSecurity:
>> Access denied with code 400 (phase 2). Pattern match
>> "(?:\\\\bhttp\\\\/(?:0\\\\.9|1\\\\.[01])|<(?:html|meta)\\\\b)" at
>> ARGS:TYPO3_INSTALL[extConfig][FE][pageNotFound_handling_statheader]. [id
>> "950911"] [msg "HTTP Response Splitting Attack. Matched signature
>> <http/1.0>"] [severity "ALERT"] [hostname "athlon6k2x"] [uri
>> "/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=extConfig"]
>> [unique_id "zMF5Y38AAAEAAG3FlkwAAAAF"]
>> [Mon Nov 26 15:39:30 2007] [error] [client 192.168.123.127] PHP Fatal
> error:
>> Cannot redeclare tx_fdfxyaml_usermatch() (previously declared in
>>
>
/var/www/html/typo3/mictoss/typo3conf/temp_CACHED_ps5e67_ext_localconf.php:8
>> 92) in
>>
/var/www/html/typo3/mictoss/typo3conf/temp_CACHED_ps5e67_ext_localconf.php
>> on line 947, referer:
>>
>
http://athlon6k2x/typo3/mictoss/typo3/install/index.php?TYPO3_INSTALL[type]=
>> database
>>
>>
>>
>> -----Original Message-----
>> From: typo3-ug-dutch-bounces at lists.netfielders.de
>> [mailto:typo3-ug-dutch-bounces at lists.netfielders.de] On Behalf Of eef
>> wesselink
>> Sent: maandag 26 november 2007 16:09
>> To: 'TYPO3 Usergroup Dutch'
>> Subject: Re: [TYPO3-UG Dutch] localconf.php probleem
>>
>> Hallo Jos,
>>
>> Bijgesloten m'n error-log, fijn dat je er naar wilt kijken!
>>
>> Groeten,
>>
>> Eef
>>
>> -----Original Message-----
>> From: typo3-ug-dutch-bounces at lists.netfielders.de
>> [mailto:typo3-ug-dutch-bounces at lists.netfielders.de] On Behalf Of Jos
>> Schipper [Netcreators]
>> Sent: maandag 26 november 2007 15:49
>> To: typo3-ug-dutch at lists.netfielders.de
>> Subject: Re: [TYPO3-UG Dutch] localconf.php probleem
>>
>> Hoi Eef,
>>
>> Misschien
>>
>> tail -f /je-error-log
>> Als de server het niet snapt zal de error hierin worden weggeschreven.
>>
>> Groeten,
>> Jos
>>
>> eef wesselink schreef:
>>> Hallo,
>>>
>>>
>>>
>>> Ik heb een probleem waarmee ik al een dag of wat worstel:
>>>
>>>
>>>
>>> In mijn install-tool kan ik diverse zaken wegschrijven naar
localconf.php
>>> (zoals het uiteraard hoort)
>>>
>>> Echter vanuit het scherm 5: All Configuration krijg ik de mededeling
> "Your
>>> browser sent a request that this server could not understand" terug.
>>>
>>>
>>>
>>> Iemand enig idee waarom en hoe te verhelpen?
>>>
>>>
>>>
>>> Groeten,
>>>
>>>
>>>
>>> Eef Wesselink
>>>
>>
>
>
--
Met vriendelijke groet,
Jos Schipper
TYPO3 Consultant
e: jos at netcreators.com
t: 026-442 4238
i: www.netcreators.com
Interesse in werken bij Netcreators?
http://www.netcreators.com/bedrijf/vacatures/
_______________________________________________
TYPO3-UG-dutch mailing list
TYPO3-UG-dutch at lists.netfielders.de
http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-ug-dutch
More information about the TYPO3-UG-dutch
mailing list