Author Topic: Slow server after last update rules 2017.10.03  (Read 200 times)

Offline joaosavioli

  • Newbie
  • *
  • Posts: 7
Slow server after last update rules 2017.10.03
« on: October 04, 2017, 05:03:11 PM »
Hello,

After last update rules, two servers with comodo waf and whm are too slow. Apache slow response and high load.
Everything back normal when I disable mod_security.

Could you help me to find where is the problem?

Thank you
Joao

Offline akabakov

  • Comodo's Hero
  • *****
  • Posts: 375
Re: Slow server after last update rules 2017.10.03
« Reply #1 on: October 05, 2017, 05:54:01 AM »
Please, check modsec_audit.log and error.log.
I think there is an answer in these files and I can just exclude some rules.

Offline joaosavioli

  • Newbie
  • *
  • Posts: 7
Re: Slow server after last update rules 2017.10.03
« Reply #2 on: October 05, 2017, 09:18:30 AM »
Hello,

Thank you for reply.
I could see some errors in this file, but I don´t know what is the rule. This information isn´t in the log. Please, see bellow:

--a1f20733-H--
Message: collection_store: Failed to access DBM file "/var/cpanel/secdatadir/ip": Resource deadlock avoided
Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 172.68.26.71] ModSecurity: collection_store: Failed to access DBM file "/var/cpanel/secdatadir/ip": Resource deadlock avoided [hostname "www.websitex.com"] [uri "/index.php"] [unique_id "WdVS1x397thV9E98riWNgQAAAQs"]
Stopwatch: 1507152599566292 4380799 (- - -)
Stopwatch2: 1507152599566292 4380799; combined=1336187, p1=801, p2=4656, p3=0, p4=0, p5=665449, sr=92, sw=665281, l=0, gc=0
Producer: ModSecurity for Apache/2.9.2 (http://www.modsecurity.org/); CWAF_Apache.
Server: Apache
Engine-Mode: "ENABLED"

--a1f20733-Z--

Could you help me?

By the time, when I know what´s the rule is causing the problem, what´s the best way to disable it? I´m using comodo rules in cpanel vendors.

Thank you very much.

Best regards
Joao


Offline vadim

  • Moderator
  • Comodo's Hero
  • *****
  • Posts: 338
Re: Slow server after last update rules 2017.10.03
« Reply #4 on: October 05, 2017, 05:02:01 PM »
--
Vadim Lvovskiy
Development Manager
COMODO Group Inc.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek