Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 4775 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Protecting Parallels Plesk Panel generates HTTP 404

Buxus
Hi,

we´re doing some tests with Astaro Web Application Security to protect Parallels Plesk Panel 10.x. 
Everything is working fine so far except one thing --- there is one URL Redirection within the Plesk System the Astaro Web Application is not able to handle ... the URL is
https://***.***.***.***:8443/plesk/client@2/domain@1/hosting/ftp-users/

If we open that URL directly without the Astaro involved it works fine but with the Astaro Web Application Security in between we get a HTTP 404 in the browser and also a 404 in the Astaro Web Application Security Live log

2011:10:18-21:03:18 hostname reverseproxy: srcip="***.***.***.***" localip="***.***.***.***" size="0" user="-" host="***.***.***.***" method="GET" statuscode="302" reason="-" extra="-" time="110409" url="/smb/web/ftp-access" server="servername" referer="domain.tld/smb/web/view" cookie="PHPSESSID=540f10990b83c1af9fd667eb7cd6bd74; psaContext=domains; locale=de-DE" set-cookie="-"
2011:10:18-21:03:18 hostname reverseproxy: srcip="***.***.***.***" localip="***.***.***.***" size="242" user="-" host="***.***.***.***" method="GET" statuscode="404" reason="-" extra="-" time="243" url="/smb/redirect/pleskin/root//plesk/client@2/domain@1/hosting/ftp-users//root//plesk/client@2/domain@1/hosting/web-users//root//plesk/client@2/domain@1/hosting/anonymous-ftp//" server="servername" referer="domain.tld/smb/web/view" cookie="PHPSESSID=540f10990b83c1af9fd667eb7cd6bd74; psaContext=domains; locale=de-DE" set-cookie="-"

This behaviour can be reproduced.
All the other sites of the Parallels Plesk work fine through the Proxy.
We have tried every configuration on the Astaro Web Application Security without success.

Astaro Firmware Version is 8.202.

Please help.

Regards

Buxus


This thread was automatically locked due to age.
Parents
  • 0
    A 404 error means that the path can't be found.  Do you have rewriting enabled in the Virtual Web Server?  Have you tried an exception rule in WAF for requests to that specific path?

    As this is reproducible, you'll want to get this problem reported to Astaro Support.  This way Astaro will be made aware of the issue and can get it added to their bug tracking system.  If you have Premium support, you can contact Astaro Support directly.  If Standard support, you'll need to go through your reseller.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Reply
  • 0
    A 404 error means that the path can't be found.  Do you have rewriting enabled in the Virtual Web Server?  Have you tried an exception rule in WAF for requests to that specific path?

    As this is reproducible, you'll want to get this problem reported to Astaro Support.  This way Astaro will be made aware of the issue and can get it added to their bug tracking system.  If you have Premium support, you can contact Astaro Support directly.  If Standard support, you'll need to go through your reseller.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Children
  • 0 in reply to Scott_Klassen
    Hi Scott,

    I´ve tried rewrite enabled but it still generates a 404. Furthermore, Rewrite enabled crashes the navigation Pane in Parallels ;(.

    I´ve tried an exception for that URL but nothing changed.
    I´m not sure if the exception was configured correctly, could you please give me a hint about the syntax?

    Thanks!

    Buxus
Unfiltered HTML