Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 4774 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Protecting Parallels Plesk Panel generates HTTP 404

Buxus
Hi,

we´re doing some tests with Astaro Web Application Security to protect Parallels Plesk Panel 10.x. 
Everything is working fine so far except one thing --- there is one URL Redirection within the Plesk System the Astaro Web Application is not able to handle ... the URL is
https://***.***.***.***:8443/plesk/client@2/domain@1/hosting/ftp-users/

If we open that URL directly without the Astaro involved it works fine but with the Astaro Web Application Security in between we get a HTTP 404 in the browser and also a 404 in the Astaro Web Application Security Live log

2011:10:18-21:03:18 hostname reverseproxy: srcip="***.***.***.***" localip="***.***.***.***" size="0" user="-" host="***.***.***.***" method="GET" statuscode="302" reason="-" extra="-" time="110409" url="/smb/web/ftp-access" server="servername" referer="domain.tld/smb/web/view" cookie="PHPSESSID=540f10990b83c1af9fd667eb7cd6bd74; psaContext=domains; locale=de-DE" set-cookie="-"
2011:10:18-21:03:18 hostname reverseproxy: srcip="***.***.***.***" localip="***.***.***.***" size="242" user="-" host="***.***.***.***" method="GET" statuscode="404" reason="-" extra="-" time="243" url="/smb/redirect/pleskin/root//plesk/client@2/domain@1/hosting/ftp-users//root//plesk/client@2/domain@1/hosting/web-users//root//plesk/client@2/domain@1/hosting/anonymous-ftp//" server="servername" referer="domain.tld/smb/web/view" cookie="PHPSESSID=540f10990b83c1af9fd667eb7cd6bd74; psaContext=domains; locale=de-DE" set-cookie="-"

This behaviour can be reproduced.
All the other sites of the Parallels Plesk work fine through the Proxy.
We have tried every configuration on the Astaro Web Application Security without success.

Astaro Firmware Version is 8.202.

Please help.

Regards

Buxus


This thread was automatically locked due to age.
Parents
  • 0
    I see some strange things: statuscode="302" time="110409"

    And, in the next line, the redirected URL seems unlikely, especially with // in the middle of the URL.

    Does this work if you DNAT around the reverse proxy?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    I see some strange things: statuscode="302" time="110409"

    And, in the next line, the redirected URL seems unlikely, especially with // in the middle of the URL.

    Does this work if you DNAT around the reverse proxy?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson
    Hi Bob,

    yes if I use DNAT instead of reverse Proxy it works fine.

    These // you see only appear with the reverse proxy in between the stream.
  • 0 in reply to Buxus
    Hi Bob,

    yes if I use DNAT instead of reverse Proxy it works fine.

    These // you see only appear with the reverse proxy in between the stream.


    Buxus,

    im getting almost the same problem. did you solve yours. and you may be want to share with us. 

    im getting a Not Found
    The requested URL /smb/redirect/pleskin/root//plesk/modules/ was not found on this server.

    on the internal network plesk panel Extensions page works. but externally it doesnt. it end ups with the above error. 

    doesnt matter when i disable some features in exceptions of WAF. result end up error.

    hopefully you know how to solve this [:)]
Unfiltered HTML