Issue Problem with modsecurity atomicorp

[Winnstorm]

Hi,

Im trying to change my modsecurity rules from Comodo to Atomicorp, but when i try to change it on Settings I receive the following error:

Failed to install the ModSecurity rule set: modsecurity_ctl failed: gpg: key 4520AFA9: "Atomicorp (Atomicorp Official Signing Key) <[email protected]>" not changed gpg: Total number processed: 1 gpg: unchanged: 1 gpg: Signature made Fri Aug 25 12:33:21 2017 ART using RSA key ID 4520AFA9 gpg: Good signature from "Atomicorp (Atomicorp Official Signing Key) <[email protected]>" gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 1818 66DF 9DAC A40E 5B42 9B08 FFBD 5D0A 4520 AFA9 TERM environment variable not set. http://apt.sw.be/redhat/el6/en/x86_64/dag/repodata/repomd.xml: [Errno 14] PYCURL ERROR 6 - "Couldn't resolve host 'apt.sw.be'" Trying other mirror. Error: Cannot retrieve repository metadata (repomd.xml) for repository: dag. Please verify its path and try again Command '/bin/bash < /tmp/tmpd9RIPh/aum' returned non-zero exit status 1 Unable to download tortix rule set

from ssh i executed the following command

# /var/asl/bin/aum -uf

Checking versions ...

AUM version is current: package asl is not installed [PASS]
df: `/etc/httpd/conf/modsecurity.d/rules/tortix/modsec': No such file or directo ry
df: no file systems processed
Updating Web Application Firewall to 201709080414: updated [PASS]

Warning: Not an array or iterable object in foreach, variable is NULL in src/com ponent/c_apache.php on line 29
Restarting Apache ...
Generating report ...

Finished
-------------------------------------------------------------------------------
Errors were encountered:

L CODE SOURCE MESSAGE
- ---- ----------------------------- ------------------------------------------
2 23 c_modsec::tortix_conf_generat Low space detected writing to tortix_waf.co nf - 0 /
2 1 c_modsec::tortix_conf_generat An error occurred attempting to open file / etc/httpd/conf/modsecurity.d/rules/tortix/modsec/tortix_waf.conf
2 48 ASLRBC Reverting all changes
2 48 ASLRBC::rollback_file Could not retrieve versions for /etc/asl/sy stem.properties
2 48 ASLRBC::rollback_file No valid previous version found for /etc/ht tpd//conf.d/00_mod_security.conf
2 48 ASLRBC::rollback_file No valid previous version found for /etc/ht tpd/conf/modsecurity.d/rules/tortix/modsec/tortix_waf.conf
2 9901 ASLCommon::cmd_exec ERROR: '(1) /usr/sbin/apachectl -t 2>&1 >/d ev/null -- [Fri Sep 08 12:35:40 2017] [warn] module unique_id_module is already loaded, skipping||httpd: Syntax error on line 227 of /etc/httpd/conf/httpd.conf: Syntax error on line 8 of /etc/httpd/conf.d/00_mod_security.conf: Could not ope n configuration file /etc/httpd/conf/modsecurity.d/rules/tortix/modsec/tortix_wa f.conf: No such file or directory'


How can i fix it to make modsecurity works again??

Thanks!!

 

[UFHH01]

Hi Winnstorm,

pls. have a look at the suggestions at:

=> #2​

 

[Winnstorm]

thanks for the answer, I followed your tips but mod_security is already installed on the server also i was using comodo suscription rules before but now im needing to change from comodo sucription rules to Atomic Basic ModSecurity but i get the error posted on my previous post.

 

[UFHH01]

Hi Winnstorm,

did you as well consider as well to DE- and RE - install the component?

 

[Winnstorm]

i tried deinstall and in the process or reinstall i get the following error on plesk add/remove components:

The Yum utility failed to install the required packages.

 

[Winnstorm]

i've connected on ssh on the server and performen a clean on the yum utilty but i receive this error:

yum clean all
Loaded plugins: priorities, protectbase
Cleaning repos: adobe-linux-i386 base dag epel extras google-mod-pagespeed mod-pagespeed plesk-php-5.4 plesk-php-5.5 plesk-php-5.6 plesk11-base
: plesk11-thirdparty plesk11-updates rpmforge updates
Cleaning up Everything
[root@~]# rpmdb --rebuilddb
[root@~]# yum update
Loaded plugins: priorities, protectbase
Setting up Update Process
adobe-linux-i386 | 2.9 kB 00:00
adobe-linux-i386/primary_db | 2.7 kB 00:00
base | 3.7 kB 00:00
base/primary_db | 4.7 MB 00:00
http://apt.sw.be/redhat/el6/en/x86_64/dag/repodata/repomd.xml: [Errno 14] PYCURL ERROR 6 - "Couldn't resolve host 'apt.sw.be'"
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository: dag. Please verify its path and try again

 

[UFHH01]

Hi Winnstorm,

your error message either indicates an unfunctional mirror, or a misconfiguration at for example "/etc/resolv.conf". Pls. see for example:

=> Plesk upgrade is not starting: Couldn't resolve host autoinstall.plesk.com

=> Cannot download Plesk packages from autoinstaller.plesk.com​

... and check as well your firewall and it's settings.