Author Topic: Broken update?  (Read 1383 times)

Offline TDmitry

  • Head CWAF Rule Writing Team
  • Comodo's Hero
  • *****
  • Posts: 370
Re: Broken update?
« Reply #15 on: October 06, 2017, 06:39:32 AM »
Summary solution
***************


For everyone who updated to 1.140 you need:

1. Update to the latest version (1.141 at this moment)
2. Disable 217310, 217311 and 217312 rules using plugin or Command Line Utility (https://help.comodo.com/topic-212-1-514-8310-.html)
Code: [Select]
# ./cwaf-cli.pl -xa 2173103. Restart web server

this will solve problems with CPU extra load issue and flooding in the error_log issue.

Offline amsscott

  • Newbie
  • *
  • Posts: 7
Re: Broken update?
« Reply #16 on: October 06, 2017, 11:51:17 AM »
So you released an update but left the offending rules in?

What's the point of the update then?

Offline TDmitry

  • Head CWAF Rule Writing Team
  • Comodo's Hero
  • *****
  • Posts: 370
Re: Broken update?
« Reply #17 on: October 06, 2017, 12:02:14 PM »
So you released an update but left the offending rules in?

What's the point of the update then?
That release included rules which should be disabled by default and should be enabled only in special emergency case, but those rules were enabled and I recommend to disable them now.

Offline jdarow32

  • Newbie
  • *
  • Posts: 1
Re: Broken update?
« Reply #18 on: October 06, 2017, 03:32:47 PM »

1. Update to the latest version (1.141 at this moment)
2. Disable 217310, 217311 and 217312 rules using plugin or Command Line Utility (https://help.comodo.com/topic-212-1-514-8310-.html)
Code: [Select]
# ./cwaf-cli.pl -xa 217310
3. Restart web server

Did all this and we are rotating the ip.pag every few minutes, but the file is still growing large and http is slowing to a hault.

Offline TDmitry

  • Head CWAF Rule Writing Team
  • Comodo's Hero
  • *****
  • Posts: 370
Re: Broken update?
« Reply #19 on: October 06, 2017, 04:16:51 PM »
1.142 available

Offline sirvulcan

  • Newbie
  • *
  • Posts: 1
Re: Broken update?
« Reply #20 on: October 07, 2017, 03:13:50 AM »
1.142 available

Do we still need to disable those three rules with this update?

Offline TDmitry

  • Head CWAF Rule Writing Team
  • Comodo's Hero
  • *****
  • Posts: 370
Re: Broken update?
« Reply #21 on: October 07, 2017, 03:26:05 AM »
Do we still need to disable those three rules with this update?
No, they are not available in 1.142.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek