Comments (7)
I noticed these hits in my error.log
2015/11/23 15:49:22 [error] 3682#0: *19192 NAXSI_FMT: ip=192.155.230.147&server=dockdogs.com&uri=/&learning=1&vers=0.54&total_processed=13&total_blocked=2&block=1&cscore0=$SQL&score0=2858&cscore1=$XSS&score1=3200&cscore2=$TRAVERSAL&score2=1672&zone0=BODY&id0=1000&var_name0=notice&zone1=BODY&id1=1001&var_name1=notice&zone2=BODY&id2=1003&var_name2=notice&zone3=BODY&id3=1008&var_name3=notice&zone4=BODY&id4=1009&var_name4=notice&zone5=BODY&id5=1010&var_name5=notice&zone6=BODY&id6=1011&var_name6=notice&zone7=BODY&id7=1013&var_name7=notice&zone8=BODY&id8=1015&var_name8=notice&zone9=BODY&id9=1016&var_name9=notice&zone10=BODY&id10=1205&var_name10=notice&zone11=BODY&id11=1302&var_name11=notice&zone12=BODY&id12=1303&var_name12=notice&zone13=BODY&id13=1000&var_name13=network_notice&zone14=BODY&id14=1001&var_name14=network_notice&zone15=BODY&id15=1003&var_name15=network_notice&zone16=BODY&id16=1008&var_name16=network_notice&zone17=BODY&id17=1009&var_name17=network_notice&zone18=BODY&id18=1010&var_name18=network_notice&zone19=BODY&id19=1011&var_name19=network_notice&zone20=BODY&id20=1013&var_name20=network_notice&zone21=BODY&id21=1015&var_name21=network_notice&zone22=BODY&id22=1016&var_name22=network_notice&zone23=BODY&id23=1205&var_name23=network_notice&zone24=BODY&id24=1302&var_name24=network_notice&zone25=BODY&id25=1303&var_name25=network_notice&zone26=BODY&id26=1205&var_name26=master_url&zone27=BODY&id27=1205&var_name27=master_cron_url&zone28=BODY&id28=1205&var_name28=site_url&zone29=BODY&id29=1002&var_name29=public_key&zone30=BODY&id30=1009&var_name30=public_key&zone31=BODY&id31=1009&var_name31=signature&zone32=BODY&id32=1205&var_name32=signature&zone33=BODY&id33=1205&var_name33=url&zone34=BODY&id34=1009&var_name34=wordpress_b6329d6a6e134d0927b23f7b685052c6&zone35=BODY&id35=1205&var_name35=wordpress_b6329d6a6e134d0927b23f7b685052c6&zone36=BODY&id36=1009&var_name36=wordpress_logged_in_b6329d6a6e134d0927b23f7b685052c6&seed_start=750, client: 192.155.230.147, server: dockdogs.com, request: "POST / HTTP/1.0", host: "dockdog
2015/11/23 15:49:22 [error] 3682#0: *19192 NAXSI_FMT: seed_end=750&zone37=BODY&id37=1205&var_name37=wordpress_logged_in_b6329d6a6e134d0927b23f7b685052c6&zone38=BODY&id38=1009&var_name38=add_site_signature&zone39=BODY&id39=1205&var_name39=add_site_signature&zone40=BODY&id40=1000&var_name40=wppage, client: 192.155.230.147, server: dockdogs.com, request: "POST / HTTP/1.0", host: "dockdogs.com", referrer: "https://managewp.com"
2015/11/23 15:49:24 [error] 3682#0: *19196 NAXSI_FMT: ip=192.155.230.147&server=dockdogs.com&uri=/&learning=1&vers=0.54&total_processed=15&total_blocked=3&block=1&cscore0=$SQL&score0=2840&cscore1=$XSS&score1=3200&cscore2=$TRAVERSAL&score2=1576&zone0=BODY&id0=1000&var_name0=notice&zone1=BODY&id1=1001&var_name1=notice&zone2=BODY&id2=1003&var_name2=notice&zone3=BODY&id3=1008&var_name3=notice&zone4=BODY&id4=1009&var_name4=notice&zone5=BODY&id5=1010&var_name5=notice&zone6=BODY&id6=1011&var_name6=notice&zone7=BODY&id7=1013&var_name7=notice&zone8=BODY&id8=1015&var_name8=notice&zone9=BODY&id9=1016&var_name9=notice&zone10=BODY&id10=1205&var_name10=notice&zone11=BODY&id11=1302&var_name11=notice&zone12=BODY&id12=1303&var_name12=notice&zone13=BODY&id13=1000&var_name13=network_notice&zone14=BODY&id14=1001&var_name14=network_notice&zone15=BODY&id15=1003&var_name15=network_notice&zone16=BODY&id16=1008&var_name16=network_notice&zone17=BODY&id17=1009&var_name17=network_notice&zone18=BODY&id18=1010&var_name18=network_notice&zone19=BODY&id19=1011&var_name19=network_notice&zone20=BODY&id20=1013&var_name20=network_notice&zone21=BODY&id21=1015&var_name21=network_notice&zone22=BODY&id22=1016&var_name22=network_notice&zone23=BODY&id23=1205&var_name23=network_notice&zone24=BODY&id24=1302&var_name24=network_notice&zone25=BODY&id25=1303&var_name25=network_notice&zone26=BODY&id26=1205&var_name26=master_url&zone27=BODY&id27=1205&var_name27=master_cron_url&zone28=BODY&id28=1000&var_name28=0&zone29=BODY&id29=1000&var_name29=1, client: 192.155.230.147, server: dockdogs.com, request: "POST / HTTP/1.0", host: "dockdogs.com", referrer: "https://managewp.com"
from autom8n.
@AnoopAlias This is a pretty major issue for me so I hope you can SSH in and help me get this resolved once you get to your desk! Thanks!
from autom8n.
@brianjking learning=1 in the NAXSI_FMT: log entry tells that NAXSI is just logging this up and doing no blocking etc. You should use the default proxy (not caching ) as caching proxies can cause issues without a sufficient cache_purge logic . By default nginx will not cache dynamic pages (pages with cookies etc) but some plugins etc may remove cookies etc and trick nginx into caching .
If you need high performance and the app is wordpress. use PHP backend and use the High performance wordpress template. https://support.sysally.net/projects/ndeploy/wiki/High_Performance_Wordpress_setup
This does caching in fastcgi( rather than proxy) and has the cache_purge logic because of the nginx-helper plugin loaded in wordpress
from autom8n.
@AnoopAlias I switched to httpd + wordpress firewall, however, it's still showing the same details for the proxy configuration.
I can't seem to get the reset option to appear...
from autom8n.
@brianjking please pass on the servername/main ip and the domain having issue at [email protected] .
from autom8n.
@AnoopAlias Sent. I'm on Skype if you would like to chat as well.
from autom8n.
ndeploy_watcher service was not running causing the config generation to fail.
from autom8n.
Related Issues (20)
- custom nginx error_log for nemesida HOT 1
- Add autofix maxscale mysql on master cron
- Add default my.cnf.local on initial playbook run
- show maxscale/mariadb cluster status in WHM UI
- Extend proxy_to_master feature with a failover upstream setup
- nwaf whitelisting is accepting only one domain as parameter
- Basic spam filtering in postfix on slave nodes
- Cleanup WHM UI
- fix update_nginx_status_allow.py script on NAT-ed environment
- update maxscale to new version on playbook
- fix nwaf disable
- remove upgrade in server.j2
- Feature Request - Development Mode via App Integration HOT 1
- nginx stopped in slave for ssl error
- ansible dont support /etc/crontab for cron entry
- mariabackup gtid position script error
- Centos8 change rpm dependency to ansible-core instead of ansible HOT 1
- Remove nginx modules that no longer compile HOT 1
- move named stop step in playbook to end
- fix compatibility issue with centos7/centos8 in playbook run
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from autom8n.