server denying itself..

Submitted by unsalkorkmaz on Wed, 06/27/2012 - 10:08

I got tons of this error:

[Mon Jun 25 06:04:57 2012] [error] [client 85.25.243.215] client denied by server configuration: /home/gapvitrin/public_html/wp-cron.php

85.25.243.215 is my server's ip. is this wrong configuration? why server is denying itself?

Thanks for help

Status: 
Active

Comments

Submitted by andreychek on Wed, 06/27/2012 - 10:17

Howdy -- was that WordPress install setup by the Virtualmin Pro install script? Or was that performed manually?

Submitted by unsalkorkmaz on Wed, 06/27/2012 - 10:38

Its virtualmin GPL. I installed it manually. I dont remember but probably i used

cd /home/gapvitrin/public_html && wget http://wordpress.org/latest.zip && unzip latest.zip && chown -hR gapvitrin: /home/gapvitrin/public_html/*

Submitted by andreychek on Wed, 06/27/2012 - 11:33

You may want to try calling the script from your browser to see if you get similar results.

You could also check to see if there's a .htaccess file that's causing the configuration errors you're getting.

WordPress should definitely work with a default Virtualmin install though, that's one of the more popular web apps that folks run.

However, the support area here is for folks using Virtualmin Pro -- since you're using Virtualmin GPL, we'd suggest posting your questions in the forums.

We monitor those, along with lots of wonderful folks from the community... thanks!

Submitted by unsalkorkmaz on Wed, 06/27/2012 - 12:20

RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]

# uploaded files
RewriteRule ^files/(.+) wp-includes/ms-files.php?file=$1 [L]

# or if request is for image, css, or js file
RewriteCond $1 \.(gif¦jpg¦png¦ico¦css¦js)$ [NC,OR]

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]
RewriteRule . index.php [L]


# Protect the htaccess file
<Files .htaccess>
Order Allow,Deny
Deny from all
</Files>

# Protect wp-config.php
<Files wp-config.php>
Order Allow,Deny
Deny from all
</Files>

# Protect db-config.php
<Files db-config.php>
Order Allow,Deny
Deny from all
</Files>


FileETag none

Header set Cache-Control "max-age=31536000, public"

ExpiresActive On
ExpiresDefault A31536000
ExpiresByType text/html M3600

AddOutputFilterByType DEFLATE text/css text/javascript application/x-javascript text/html text/plain text/xml image/x-icon

this is my .htaccess file. I tried to call wp-cron.php from browser but i didnt get any error in Apache Error Log and got log in access log successfully.

Maybe

<Files wp-config.php>
Order Allow,Deny
Deny from all
</Files>

This code is affecting but if its problem, whats proper way for preventing those accesses? shouldnt it need to ignore server itself?

I will open forum topic next time. Can we resume from this node for this ticket only possible?

Submitted by andreychek on Wed, 06/27/2012 - 15:26

Well, we're not experts in performing a manual WordPress installation, and it's difficult to know exactly why you're seeing that.

It shouldn't be related to the wp-config.php block you mentioned though, as the trouble you're having is with accessing wp-cron.php.

As a temporary measure, you could always try renaming your .htaccess file to .htaccess_orig, to see if that error goes away.

If it does, you may need to do some troubleshooting within your .htaccess file to determine which line is causing the problem.

Also, looking at one of the WordPress installs I have here, the .htaccess file looks like this:

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

Again, working with WordPress installation and configuration isn't our area of expertise... but you could always try the above block in place of what you have now to see if it does the trick for you.

Submitted by unsalkorkmaz on Wed, 06/27/2012 - 15:28

Ok thank you.

Last 1 question. Maybe i found a solution with adding "Allow from localhost":

<Files .htaccess>
Order Allow,Deny
Deny from all
Allow from localhost
</Files>

is this code insecure?

Submitted by andreychek on Wed, 06/27/2012 - 15:34

"Files .htaccess" refers to attempts to access your .htaccess file.

What you wrote above isn't insecure, though what's being denied isn't "localhost", it's your server IP address.