Common Issues Upgrading from 3.0.1.8 and below
- shawniverson
- Posts: 3649
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Common Issues Upgrading from 3.0.1.8 and below
Common Issues you may encounter when upgrading from 3.0.1.8 and below.
Browser cache may need cleared after update -- viewtopic.php?f=13&t=2271
Table upgrades may fail when tables are marked as crashed -- viewtopic.php?f=13&t=2270 and viewtopic.php?f=13&t=2274
Not enough disk space to upgrade -- viewtopic.php?f=13&t=2280
Certain password strings may appear as an attack to mod_security and result in a Forbidden message (see below for how to fix).
Browser cache may need cleared after update -- viewtopic.php?f=13&t=2271
Table upgrades may fail when tables are marked as crashed -- viewtopic.php?f=13&t=2270 and viewtopic.php?f=13&t=2274
Not enough disk space to upgrade -- viewtopic.php?f=13&t=2280
Certain password strings may appear as an attack to mod_security and result in a Forbidden message (see below for how to fix).
- shawniverson
- Posts: 3649
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: Common Issues Upgrading to 3.0.1.9
Several of these issues will be fixed in a 3.0.2.0 maintenance release, which will be coming out soon.
Update (edited): 3.0.2.0 is out now, issues resolved are removed from the above list.
Update (edited): 3.0.2.0 is out now, issues resolved are removed from the above list.
Re: Common Issues Upgrading to 3.0.1.9
Looking forward to it... having several issues since the update unfortunately.
Thanks for the great work so far.
Thanks for the great work so far.
Re: Common Issues Upgrading to 3.0.1.9
One more thing, dunno it's regarding any EFA upgrades or pushing yum updates lately on Efa appliance.
Today when I have analyzed some mail delivery (less /var/log/maillog) I have noticed a lot of errors:
"warning: database /etc/postfix/virtual.db is older than source file /etc/postfix/virtual "
Is this anything regarding EFA updates?
With best regards
Today when I have analyzed some mail delivery (less /var/log/maillog) I have noticed a lot of errors:
"warning: database /etc/postfix/virtual.db is older than source file /etc/postfix/virtual "
Is this anything regarding EFA updates?
With best regards
- shawniverson
- Posts: 3649
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: Common Issues Upgrading to 3.0.1.9
That comes up from time to time. Just run
And reload postfix.
Code: Select all
sudo postmap /etc/postfix/virtual
Re: Common Issues Upgrading from 3.0.1.8 and below
Just updated and having this issue accessing the web after logging in:
Looks like password too suspicious ![Smile :)](./images/smilies/icon/smile.gif)
Code: Select all
Forbidden
You don't have permission to access /mailscanner/checklogin.php on this server.
![Smile :)](./images/smilies/icon/smile.gif)
Code: Select all
[severity "CRITICAL"] [ver "OWASP_CRS/2.2.6"] [maturity "8"] [accuracy "8"] [tag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION"] [tag "WASCTC/WASC-19"] [tag "OWASP_TOP_10/A1"] [tag "OWASP_AppSensor/CIE1"] [tag "PCI/6.5.2"]
Last edited by Triumf on 09 Apr 2017 17:06, edited 1 time in total.
- shawniverson
- Posts: 3649
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: Common Issues Upgrading from 3.0.1.8 and below
Looks familiar with this thread: viewtopic.php?f=13&t=2283
My password contains only letters and numbers
Code: Select all
[Sun Apr 09 19:56:06 2017] [error] [client xxxxxx] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:\\\\A|[^\\\\d])0x[a-f\\\\d]{3,}[a-f\\\\d]*)+" at ARGS:mypassword. [file "/etc/httpd/modsecurity.d/activated_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "55"] [id "981260"] [rev "2"] [msg "SQL Hex Encoding Identified"] ...
- shawniverson
- Posts: 3649
- Joined: 13 Jan 2014 23:30
- Location: Indianapolis, Indiana USA
- Contact:
Re: Common Issues Upgrading from 3.0.1.8 and below
Add this to the end of /etc/httpd/conf.d/mod_security.conf in the eFa exceptions block at the end:
And restart httpd.
Code: Select all
SecRuleRemoveById 981260
Code: Select all
sudo service httpd restart
Re: Common Issues Upgrading from 3.0.1.8 and below
Thanks! Haven't noticed exception part in another thread.