Cant update rules to version: 1.232

Free Modsecurity rules - Comodo Web Application Fi
1

i can’t update rules in cpanel waf plugin

after the updater is finished

I still have

Current rules version 1.231 Rules 1.232 is available Restore rules
CWAF plugin version 2.24.5 (Latest version)
Web Platform Apache
Apache version
Mod_security compatible no
Mod_security loaded no
Mod_security conf
Found websites no

in log i have

23/09/20 20:48:50 updater[3312469] debug is ON, level = 10 23/09/20 20:48:50 updater[3312469] create pid file 23/09/20 20:48:50 updater[3312469] try to get data from CWAF server 23/09/20 20:48:50 updater[3312469] lwp_params: timeout=60 sec, save_to_file flag: 0 23/09/20 20:48:50 updater[3312469] normalize content 23/09/20 20:48:50 updater[3312469] parse JSON from CWAF server 23/09/20 20:48:50 updater[3312469] got answer from CWAF (OK) 23/09/20 20:48:50 updater[3312469] save response 23/09/20 20:48:50 updater[3312469] lwp_params: timeout=60 sec, save_to_file flag: 1 23/09/20 20:48:50 updater[3312469] file has been downloaded successfully: cwaf_rules-1.232.tgz 23/09/20 20:48:50 updater[3312469] /var/cpanel/cwaf/tmp/rules.tgz original md5sum - a569e686ce3d0bc0c92fbc4972c22b3d 23/09/20 20:48:50 updater[3312469] /var/cpanel/cwaf/tmp/rules.tgz local md5sum - a569e686ce3d0bc0c92fbc4972c22b3d 23/09/20 20:48:50 updater[3312469] file successfully saved (/var/cpanel/cwaf/tmp/rules.tgz) 23/09/20 20:48:50 updater[3312469] make backup for previous rules version 23/09/20 20:48:50 updater[3312469] prepare to remove directory /var/cpanel/cwaf/tmp/rules/workdir2 23/09/20 20:48:50 updater[3312469] remove directory /var/cpanel/cwaf/tmp/rules/workdir2 23/09/20 20:48:50 updater[3312469] set work directory (/var/cpanel/cwaf/tmp/rules/workdir2) 23/09/20 20:48:50 updater[3312469] extract rules 23/09/20 20:48:51 updater[3312469] link userdata to rules 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_wl_agents, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_wl_agents 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_wl_methods, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_wl_methods 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_bl_extensions, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_bl_extensions 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_bl_headers, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_bl_headers 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_wl_IPs, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_wl_IPs 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_bl_referers, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_bl_referers 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_bl_domains, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_bl_domains 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_wl_content_type, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_wl_content_type 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_wl_extensions, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_wl_extensions 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_bl_URLs, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_bl_URLs 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_bl_IPs, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_bl_IPs 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_login_pages, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_login_pages 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_bl_cookies, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_bl_cookies 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_wl_domains, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_wl_domains 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_wl_URLs, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_wl_URLs 23/09/20 20:48:51 updater[3312469] symlink /var/cpanel/cwaf/etc/userdata/userdata_bl_agents, /var/cpanel/cwaf/tmp/rules/workdir2/rules/userdata_bl_agents 23/09/20 20:48:51 updater[3312469] scheme is not changed, no transformation required 23/09/20 20:48:51 updater[3312469] updating user exclude lists with new excludes from rules 23/09/20 20:48:51 updater[3312469] Excludes: nothing to update 23/09/20 20:48:51 updater[3312469] webserver restart failed (try 1) 23/09/20 20:48:51 updater[3312469] update failed, restoring previous rules version 23/09/20 20:48:51 updater[3312469] set work directory (/var/cpanel/cwaf/tmp/rules/workdir1) 23/09/20 20:48:51 updater[3312469] webserver restart failed (try 2) 23/09/20 20:48:51 updater[3312469] webserver restart failed (try 3) 23/09/20 20:48:51 updater[3312469] update successful 23/09/20 20:48:51 updater[3312469] update process finished!
2

Hello,
it is possible you have to update the file

/etc/cwaf/main.conf

there should be string

modsec_family=3

the issue occurs when you load modsecurity 2 rules set to the modsecurity 3

3

Hi,
for now available only standalone version of the CWAF plugin, without control panels.

4

Any idea on when the CWAF plugin will work for cpanel? we get an error that says “PERL module Crypt::SSLeay is NOT found” when we try to install even though prechecks say we have it installed. When we try to go to the plugin it gives us a 500 error in cpanel version 86.

If we want to use the agent only and make sure we don’t lose anything, should we remove the cpanel addon?

5

You have to remove cpanel plugin and install it in standalone mode.