Search results

And finally the rules seems to be set , i can see it in GUI :

Ok i made this configuration change. At SSH modifications seems ok : But at GUI always same problem : There is another problem here ...

Hi, I moved some DNS records to Cloudflare. For website it's ok but for Plesk GUI (that i have placed on a subdomain like plesk.mydomain.com) it works only if i turn off proxy on that record in DNS settings on Cloudflare. Is there a solution, or something to do, to make Plesk work with proxy on...

Hello, As i use Cloudflare for domains i aim to autorize its IP in Fail2ban & Firewall. So i have whitelisted Cloudflare IP in fail2ban then i try to add it in Firewall with these CLI commands : /usr/local/psa/bin/modules/firewall/settings -e /usr/local/psa/bin/modules/firewall/settings -c...

If someone still deal with this problem i found this page that is very usefull to understand underlying problem : https://www.ozzu.com/questions/609716/how-to-fix-proxy-fcgierror-70007the-timeout-specified-has-expired

And finally i changed it to : <IfModule mod_setenvif.c> <IfModule mod_headers.c> <FilesMatch "\.(php.)$"> Require all denied </FilesMatch> </IfModule> </IfModule>

Ok finally i used this and it work perfect : <IfModule mod_setenvif.c> <IfModule mod_headers.c> <FilesMatch "\.(php3|php4|php5|php7|php8)$"> Require all denied </FilesMatch> </IfModule> </IfModule>

Ok but there is no way to put this rule in apache server configuration ? I have my own configuration file in /etc/apache2/conf-enabled/ and i added following lines in it but it seems to not work : <IfModule mod_rewrite.c> RewriteEngine On RewriteRule \.(php3|php4|php5|php7|php8)$ - [F,L,NC]...

Hi Peter, Thanks, yes a redirection can be a solution. Can i make this work for all vhosts in apache conf file ?

Hi, For security reasons i want to prevent PHP-FPM to execute file with extension php3|php4|php5|php7|php8 etc ... Actually these files are executed. How can i disable this please ?

One more question : what if i want to ask my rule for only one vhost ?

Ok solved. I set it in Tools & Settings > Web Application Firewall > Settings Tab. It run fine.

Hi, Is there a way to add custom modsecurity rules (with regex) in Plesk. If yes, where can i set it ? and what is the best syntax to use ? For example if i want to test with this rule : SecRule REQUEST_URI "@rx (?i)union.*?select.*?from" "id:1,phase:1,t:lowercase,deny" Regards.

Strangely the problem was gone for 7 days and it appears again just now. And like the last time when i empty NGINX cache the problem disappear ... Why it run ok for one week, then suddenly the problem occurs and it's solved by emptying NGINX cache ??

This is support answer, if it can help other users :

Hello Kaspar, Thanks for your answer. I will keep searching this way, and others ;)

Ok done and now it work. Thx.

Do you have lastest URL to open ticket ? It seems it changed recently ... I was on Plesk Support site then tried to create an account but it bring me back to Plesk 360 where i already have an account but there is no link to support.

I have checked the 2 websites (it's 2 Prestashop) and there is no redirect in htaccess ... And in the 2 cases clearing Nginx cache solved the problem. So it seems it more likely come from NGINX cache ...

Oh ok i get it ! Thanks :p