IPAUDIT install
I have installed IPAUDIT on CentOS.
I have followed the instructions at http://www.securityfocus.com/infocus/1842/1 But when I type http://127.0.0.1/~ipaudit/ I get forbidden? Can someone lead me in the right direction? |
If you mean forbidden as in 404 check what your webserver log says about it then check your webserver config?
|
403 and 404
127.0.0.1 - - [09/Jul/2009:14:40:49 -0400] "GET /~ipaudit HTTP/1.1" 403 284 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; L$
127.0.0.1 - - [09/Jul/2009:14:40:49 -0400] "GET /favicon.ico HTTP/1.1" 404 283 "-" "Mozilla/5.0 (compatible; Konqueror/3.5$ 127.0.0.1 - - [09/Jul/2009:14:41:06 -0400] "GET / HTTP/1.1" 403 5043 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; Linux) K$ 127.0.0.1 - - [09/Jul/2009:14:41:06 -0400] "GET /icons/apache_pb.gif HTTP/1.1" 200 2326 "http://localhost/" "Mozilla/5.0 ($ 127.0.0.1 - - [09/Jul/2009:14:41:06 -0400] "GET /icons/powered_by_rh.png HTTP/1.1" 200 1213 "http://localhost/" "Mozilla/5$ 127.0.0.1 - - [09/Jul/2009:14:42:08 -0400] "GET /~ipaudit HTTP/1.1" 403 284 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; L$ 127.0.0.1 - - [09/Jul/2009:14:58:27 -0400] "GET / HTTP/1.1" 403 5043 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; Linux) K$ 127.0.0.1 - - [09/Jul/2009:14:58:28 -0400] "GET /icons/apache_pb.gif HTTP/1.1" 200 2326 "http://127.0.0.1/" "Mozilla/5.0 ($ 127.0.0.1 - - [09/Jul/2009:14:58:28 -0400] "GET /icons/powered_by_rh.png HTTP/1.1" 200 1213 "http://127.0.0.1/" "Mozilla/5$ 127.0.0.1 - - [09/Jul/2009:14:58:28 -0400] "GET /favicon.ico HTTP/1.1" 404 283 "-" "Mozilla/5.0 (compatible; Konqueror/3.5$ 127.0.0.1 - - [09/Jul/2009:14:58:36 -0400] "GET /~ipaudit HTTP/1.1" 403 284 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; L$ 127.0.0.1 - - [09/Jul/2009:14:58:51 -0400] "GET /~ipaudit HTTP/1.1" 403 284 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; L$ 127.0.0.1 - - [09/Jul/2009:14:58:51 -0400] "GET /favicon.ico HTTP/1.1" 404 283 "-" "Mozilla/5.0 (compatible; Konqueror/3.5$ 127.0.0.1 - - [09/Jul/2009:14:59:18 -0400] "GET /~ipaudit HTTP/1.1" 403 284 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; L$ 127.0.0.1 - - [09/Jul/2009:15:06:12 -0400] "GET /~ipaudit HTTP/1.1" 403 284 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; L$ 127.0.0.1 - - [09/Jul/2009:15:06:16 -0400] "GET /~ipaudit HTTP/1.1" 403 284 "-" "Mozilla/5.0 (compatible; Konqueror/3.5; L$ |
Error log
I think the config is correct but i can seem to determine why permission denied.
[Thu Jul 09 14:40:49 2009] [error] [client 127.0.0.1] (13)Permission denied: access to /~ipaudit denied [Thu Jul 09 14:40:49 2009] [error] [client 127.0.0.1] File does not exist: /var/www/html/favicon.ico [Thu Jul 09 14:41:06 2009] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /var/www/html/ [Thu Jul 09 14:42:08 2009] [error] [client 127.0.0.1] (13)Permission denied: access to /~ipaudit denied [Thu Jul 09 14:58:27 2009] [error] [client 127.0.0.1] Directory index forbidden by Options directive: /var/www/html/ [Thu Jul 09 14:58:28 2009] [error] [client 127.0.0.1] File does not exist: /var/www/html/favicon.ico [Thu Jul 09 14:58:36 2009] [error] [client 127.0.0.1] (13)Permission denied: access to /~ipaudit denied [Thu Jul 09 14:58:51 2009] [error] [client 127.0.0.1] (13)Permission denied: access to /~ipaudit denied [Thu Jul 09 14:58:51 2009] [error] [client 127.0.0.1] File does not exist: /var/www/html/favicon.ico [Thu Jul 09 14:59:18 2009] [error] [client 127.0.0.1] (13)Permission denied: access to /~ipaudit denied [Thu Jul 09 15:06:12 2009] [error] [client 127.0.0.1] (13)Permission denied: access to /~ipaudit denied [Thu Jul 09 15:06:16 2009] [error] [client 127.0.0.1] (13)Permission denied: access to /~ipaudit denied |
403 = Forbidden and 404 = "Not Found". Did you install only ipaudit or also the ipaudit-web package? If you did, is does your webserver configuration seem correct wrt file locations and any allow/deny access rules?
|
Package and .conf file
I installed ipaudit-web-1.0BETA9.tar.gz.
This is whats in my .conf <Directory /home/*/public_html> AllowOverride All Options MultiViews Indexes Includes FollowSymLinks Order allow,deny Allow from all </Directory> <Directory /home/*/public_html/cgi-bin> Options +ExecCGI -Includes -Indexes SetHandler cgi-script </Directory> SHould i be looking somewhere else in the config? Thank you for taking the time to respond. |
Conf looks OK but given your log excerpt, and if this is something like for example /etc/httpd/conf.d/ipaudit.conf, then an existing /etc/httpd/conf/httpd.conf may overrule things. Posting contents (use something like 'grep -v ^#|grep -i [a-z]' to strip out comments) of that or any other "main" webserver configuration file could help. I think.
|
Ipaudit-web.conf
Code:
LOCALRANGE=198.*.*.32/24 |
httpd.conf
Code:
ServerTokens OS |
Is this correct?
I think this is what you were asking for?
|
It is. If you could go back and edit your post to put the proper text between BB code tags I'd appreciate it. This way it's really bad to read.
Quote:
|
Will this work?
Code:
<IfModule mod_userdir.c> |
It should. If you could go back and edit your post to put the proper text between BB code tags I'd appreciate it. This way it's really bad to read.
|
Adjusted
ok I made the adjustments sorry about that.
I also tried this and restrated httpd no luck. do you think i missed something in the other config? Code:
<IfModule mod_userdir.c> |
Can't see anything. Did the error_log message change or is it the same?
|
All times are GMT -5. The time now is 11:43 PM. |