• The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

ModSecurity issue with Atomic rule-set and aum

Phobos_Gekko

New Pleskian
Hello! This is my first time posting here and I have not posted in any forums for several years, so please be easy on me :) I have an issue with ModSecurity on Plesk '12.0.18 Update #31' and its update manager, aum. I installed Plesk only a week and a half back and I assume with Revision #30, all was working okay, as there were no errors until logging in this morning. You may see the issue and configuration in the attachments to this thread.

I searched around for solutions on Google and after learning some new commands, discovered that there were updates awaiting download with, 'aum -ck'. An upgrade failed so I then tried, 'aum configure', which also failed. The exact error was: "Fatal error: Cannot break 1 level in src/core/AUM.php on line 59". This can also be seen in the screenshots below. I tried to do a re-installation using: "/usr/local/psa/admin/bin/autoinstaller --select-product-id plesk --select-release-current --remove-component modsecurity". I also tried using the web-interface but there were too many dependencies. Both attempts failed.

I would deeply appreciate any assistance with this matter, thank you. Sorry for the long-winded post too but as I said, I'm not used to forums.
 

Attachments

  • Screenshot 2015-01-21 05.41.16.png
    Screenshot 2015-01-21 05.41.16.png
    76.2 KB · Views: 11
  • Screenshot 2015-01-21 05.29.19.png
    Screenshot 2015-01-21 05.29.19.png
    264.2 KB · Views: 12
  • Screenshot 2015-01-21 05.35.16.png
    Screenshot 2015-01-21 05.35.16.png
    412 KB · Views: 10
What sort of output of following command:

# /usr/local/psa/bin/sw-engine-pleskrun /usr/local/psa/admin/plib/DailyMaintainance/script.php -f UpdateModSecurityRuleSet
 
IgorG, there is no output so I assume all is working well again? Plus when I logged into Plesk a few hours ago, the error had seemingly disappeared. Thank you for the assistance! :)
 
Okay, there is still an issue with this. I decided to check to see if any updates were applied and none had been, as can be seen in the attachment. I used 'aum -ck' to confirm there were updates before trying 'aum upgrade' which failed. It also continues to not be possible to reconfigure aum either.
 

Attachments

  • Screenshot 2015-01-22 08.39.25.png
    Screenshot 2015-01-22 08.39.25.png
    73.8 KB · Views: 8
Hello!, I have the same problem:

PLESK Version 12.0.18 Update #33 running on Ubuntu 12.04.5

Code:
$ /var/asl/bin/aum -c

Fatal error: Cannot break 1 level in src/core/AUM.php on line 59

I deinstalled and reinstalled ModSecurity with Plesk GUI > same problem..
The output of IgorGs command returns nothing, straight back to the shell

running "$ /var/asl/bin/aum" itself surfaces this error:
Code:
2 9901 ASLCommon::cmd_exec  ERROR: '(60) /usr/bin/curl -A "Atomic Upda
  ter Modified (4.0)" -s -f --data "member=p
  lesk_global_unpaid&license=&product=asl-4.
  0-plesk-unpaid&from_web=1&system_type=webs
  erver&act=1" https://www.atomicorp.com/pgu
  i_v/rpc4.0.php -- '
2 9998 ASLValidate::_send_request  validation error: 60
2 9999 ASLValidate::validate_asl  Bad data from request

which is also the one modsecurity_get_tortix_ruleset.py returns in the GUI..

Thanks for any hints, i'm lost, ModSequirity with OWASP is running fine

Is there, maybe, another way to get the member=plesk_global_unpaid ruleset? and to add it manually?
 
Last edited:
Stephan_Deglow, I solved one part of the issue by editing /etc/asl/configure in a text-editor and adding my authentication details for AtomiCorp manually. I now get the following errors in the attachment.
 

Attachments

  • Error.txt
    88 KB · Views: 9
Back
Top