Hi,
I´m testing 8.200 WAF Functions becaus we want to use it with Multidomain SSL Certs.
I´ve set up an ASG WAF with 3 SSL test Domains to protect.
The WAF configuration is the same for all three Domains.
Two of them work as expected but the 3rd does not work.
It is a webmail frontend from the Zarafa Community Plattform running on a ubuntu 10.04 LTS with apache2.
When I try to load the webmail through the WAF nothing comes up in the browser but the WAF log sais:
---
2011:07:30-21:57:41 hostname reverseproxy: srcip="***.***.***.***" localip="***.***.***.***" size="14780" user="-" host="***.***.***.***" method="GET" statuscode="200" reason="-" extra="-" time="70403" url="/webaccess/" server="Server URL" referer="-" cookie="ZARAFA_WEBACCESS=k34ti28h2nag21lpsjaa5bnvq5" set-cookie="-"
2011:07:30-21:57:42 hostname reverseproxy: httpd: mod_url_hardening.c:187: mod_url_hardening_verify_uri: Assertion `uri' failed.
2011:07:30-21:57:44 hostname reverseproxy: [Sat Jul 30 21:57:44 2011] [notice] child pid 24746 exit signal Aborted (6), possible coredump in /tmp
2011:07:30-21:57:45 hostname reverseproxy: httpd: mod_url_hardening.c:187: mod_url_hardening_verify_uri: Assertion `uri' failed.
2011:07:30-21:57:47 hostname reverseproxy: [Sat Jul 30 21:57:47 2011] [notice] child pid 24804 exit signal Aborted (6), possible coredump in /tmp
2011:07:30-21:57:48 hostname reverseproxy: httpd: mod_url_hardening.c:187: mod_url_hardening_verify_uri: Assertion `uri' failed.
2011:07:30-21:57:50 hostname reverseproxy: [Sat Jul 30 21:57:50 2011] [notice] child pid 24861 exit signal Aborted (6), possible coredump in /tmp
---
I´ve tried every kind of Configuration, with a usual Cert, with Multidomain Cert, with Exceptions for everything, with all kinds of Firewall Profiles ... nothing works with that Zarafa Webpage.
Any ideas?
Kind regards
Buxus
---
PS: same result if I try to access the Zarafa Webmail Interface on HTTP through the WAF ...
PPS: on 8.103 it worked without any problems --- missing Feature on 8.103 is that we can not use Multidomain SSL Certs ... thats why we started the testing ...
