Author Topic: Client Agent Updates  (Read 62653 times)

Offline akabakov

  • Comodo's Hero
  • *****
  • Posts: 375
Re: Client Agent Updates
« Reply #120 on: December 01, 2016, 09:53:19 AM »
Tell me, please, what WHMS you use. Thanks.

Offline MikeFrizz

  • Newbie
  • *
  • Posts: 17
Re: Client Agent Updates
« Reply #121 on: December 01, 2016, 11:51:46 AM »
 WHMS? You meant me? Is this a abbreviation for something that deals with webmin? If so, I use 1.820. And my server runs with Ubuntu 14.04.

Offline akabakov

  • Comodo's Hero
  • *****
  • Posts: 375
Re: Client Agent Updates
« Reply #122 on: December 02, 2016, 07:57:55 AM »
We tried to reproduce this issue, but didn't manage to get one. Could you fill the ticket on https://support.comodo.com and give us ssh and web-access to your server?

Offline MikeFrizz

  • Newbie
  • *
  • Posts: 17
Re: Client Agent Updates
« Reply #123 on: December 02, 2016, 08:35:57 AM »
It's not possible to give access. Here is the message from last night:
Code: [Select]
Can't locate Comodo/CWAF/Main.pm in [at]INC (you may need to install the Comodo::CWAF::Main module) ([at]INC contains: /etc/perl /usr/local/lib/perl/5.18.2 /usr/local/share/perl/5.18.2 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.18 /usr/share/perl/5.18 /usr/local/lib/site_perl .) at /etc/cwaf/scripts/update-client.pl line 12.
BEGIN failed--compilation aborted at /etc/cwaf/scripts/update-client.pl line 12.
with regards
Michael   

Offline akabakov

  • Comodo's Hero
  • *****
  • Posts: 375
Re: Client Agent Updates
« Reply #124 on: December 02, 2016, 09:24:50 AM »
Please, show me:

Code: [Select]
# ls -la /usr/local/cwaf/modules/CPAN/lib/Comodo/CWAF

Offline MikeFrizz

  • Newbie
  • *
  • Posts: 17
Re: Client Agent Updates
« Reply #125 on: December 02, 2016, 09:38:38 AM »
Code: [Select]
drwxrwxr-x 2 root root  4096 Dez  1 14:14 .
drwxrwxr-x 3 root root  4096 Nov  2 15:14 ..
-rw-rw-r-- 1 root root 27090 Feb  8  2016 CatalogBase.pm
-rw-rw-r-- 1 root root 31871 Feb  8  2016 CatalogUpdate.pm
-rw-rw-r-- 1 root root 38735 Feb  8  2016 CatalogWeb.pm
-rw-rw-r-- 1 root root 20879 Feb  8  2016 ClientAPI.pm
-rw-rw-r-- 1 root root 11086 Nov  2 12:04 Cpanel.pm
-rw-rw-r-- 1 root root  5320 Feb 19  2016 cWatch.pm
-rw-rw-r-- 1 root root  5527 Feb  8  2016 DAdmin.pm
-rw-rw-r-- 1 root root 17501 Feb  8  2016 Excludes.pm
-rw-rw-r-- 1 root root 19069 Dez  1 14:14 Main.pm
-rw-rw-r-- 1 root root 14080 Feb 10  2016 ModSecurity.pm
-rw-rw-r-- 1 root root  4284 Feb  8  2016 Nginx.pm
-rw-rw-r-- 1 root root  4524 Feb  8  2016 Platform.pm
-rw-rw-r-- 1 root root  8088 Feb  8  2016 Plesk.pm
-rw-rw-r-- 1 root root  3984 Feb  8  2016 Standalone.pm
-rw-rw-r-- 1 root root  9342 Mär  2  2016 Webmin.pm

Offline akabakov

  • Comodo's Hero
  • *****
  • Posts: 375
Re: Client Agent Updates
« Reply #126 on: December 02, 2016, 09:57:45 AM »
Excellent!
Please, create symlink to:

Code: [Select]
ln -s /usr/local/cwaf/modules/CPAN/lib/Comodo  /usr/local/lib/perl/5.18.2/Comodo
or to any existing directory, pointed in error message.

Offline MikeFrizz

  • Newbie
  • *
  • Posts: 17
Re: Client Agent Updates
« Reply #127 on: December 02, 2016, 11:09:04 AM »
Excellent. This fixed ma problem.
If I want to use the webmin plugin, I have to run the install Script again. Am I right?
with regards
Michael

Offline akabakov

  • Comodo's Hero
  • *****
  • Posts: 375
Re: Client Agent Updates
« Reply #128 on: December 02, 2016, 11:21:43 AM »
please, run:
Code: [Select]
# /usr/local/cwaf/scripts/update-client.pl -v
If versions differ, run:
Code: [Select]
# /usr/local/cwaf/scripts/update-client.pl
Also you should see Comodo WAF in WebMin.

Offline MikeFrizz

  • Newbie
  • *
  • Posts: 17
Re: Client Agent Updates
« Reply #129 on: December 02, 2016, 12:12:29 PM »
Hi,
I did it. errorless. But without the webmin module installation.
Thx

Offline Hedloff

  • Comodo Loves me
  • ****
  • Posts: 156
Re: Client Agent Updates
« Reply #130 on: December 04, 2016, 05:46:21 PM »
Any ETA on a working CWAF for EA4?

I got it working partly on one server now. It's stopping attack at least!

Here is my /usr/local/apache/conf/modsec2.conf content:
#LoadFile /opt/xml2/lib/libxml2.so
LoadFile /usr/lib64/libxml2.so
# LoadFile /opt/lua/lib/liblua.so

<IfModule !mod_security2.c>
  LoadModule security2_module  modules/mod_security2.so
</IfModule>

<IfModule mod_security2.c>
  <IfModule mod_ruid2.c>
    SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
    SecAuditLogType Concurrent
  </IfModule>
  <IfModule itk.c>
    SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
    SecAuditLogType Concurrent
  </IfModule>

# SecServerSignature "Protected by COMODO WAF"

  SecRuleEngine On
  SecAuditEngine RelevantOnly
  SecAuditLog /usr/local/apache/logs/modsec_audit.log
  SecDebugLog /usr/local/apache/logs/modsec_debug.log
  SecAuditLogType Serial
  SecDebugLogLevel 0
  SecRequestBodyAccess On
  SecDataDir /tmp
  SecTmpDir /tmp
  SecPcreMatchLimit 250000
  SecPcreMatchLimitRecursion 250000
  Include "/var/cpanel/cwaf/etc/cwaf.conf"
</IfModule>

But if I try to make changes in the plugin under "Security Engine" (turn off server signature) I get error as shown in cwaf.png.

So there are still som issues somewhere.
« Last Edit: December 04, 2016, 06:26:06 PM by Hedloff »

Offline akabakov

  • Comodo's Hero
  • *****
  • Posts: 375
Re: Client Agent Updates
« Reply #131 on: December 05, 2016, 06:17:27 AM »
Please, check if there are some errors:

Code: [Select]
# apachectl -t

Offline Hedloff

  • Comodo Loves me
  • ****
  • Posts: 156
Re: Client Agent Updates
« Reply #132 on: December 05, 2016, 07:06:19 AM »
AH00548: NameVirtualHost has no effect and will be removed in the next release /etc/apache2/conf/httpd.conf:173647
Syntax OK

Offline akabakov

  • Comodo's Hero
  • *****
  • Posts: 375
Re: Client Agent Updates
« Reply #133 on: December 20, 2016, 07:34:09 AM »
Client Agent 2.19 has been released:

Features:
  • cPanel EA4 and CWAF-plugin compatibility;
Bug fixes:
  • LiteSpeed domain exclude;
  • WebMin js fix.

Notes:
  • If EA4 is already installed new CWAF installation will be correct.
  • In CWAF update zzzz_cwaf_security2.conf will be placed in  /etc/apache2/conf.d/ It may lead to rules duplication, so  /etc/apache2/conf.d/ should be checked before web-server restart.
  • If you want to update  EasyApache to v4 and already have CWAF installed, please run following command:
Code: [Select]
# /var/cpanel/cwaf/scripts/update-client.pl -f



Offline Hedloff

  • Comodo Loves me
  • ****
  • Posts: 156
Re: Client Agent Updates
« Reply #134 on: December 20, 2016, 08:35:44 AM »
Currently testing this new version now on the servers.
On Apache server with EA4 I cannot get "Set Server Signature:" disabled in gui.
So I had to manually comment it out of the file zzzz_cwaf_security2.conf!

Installed on a new LSWS and upgraded an old LSWS. See configuration. Why are those not the same? Both servers are running EA4.
But both servers seems to be working....for now...
« Last Edit: December 20, 2016, 08:47:41 AM by Hedloff »

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek