Hello Familly,
I have configure waf for one of my customer. Nothing It's work However when I configure DNAT on the web server all things are good.
The web server running on port 443, 9091 and 9092.
Here It's the log :
[Sat Jun 01 11:57:39.364059 2019] [proxy_http:error] [pid 22331:tid 140698019915 520] (70014)End of file found: [client 160.154.137.218:59375] AH01102: error rea ding status line from remote server 10.121.71.34:9092, referer: bksdirect.boacapitalsecurities.com/
[Sat Jun 1 11:57:39.186862 2019] timestamp="1559390259" srcip="160.154.137.218" localip="196.47.174.123" user="-" host="160.154.137.218" method="GET" statuscod e="200" reason="-" extra="-" exceptions="-" duration="177339" url="/assets/msic/ nts_yo201811.js" server="bksdirect.boacapitalsecurities.com" referer="https://bk sdirect.boacapitalsecurities.com/" cookie="-" set-cookie="-" recvbytes="406" sen tbytes="31" protocol="HTTP/1.1" ctype="text/x-js" uagent="Mozilla/5.0 (Windows N T 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" querystring="" websocket_scheme="-" websocket_protocol="-" websoc ket_key="-" websocket_version="-" ruleid="11"
[Sat Jun 1 11:57:39.447685 2019] timestamp="1559390259" srcip="160.154.137.218" localip="196.47.174.123" user="-" host="160.154.137.218" method="GET" statuscod e="200" reason="-" extra="-" exceptions="-" duration="105839" url="/assets/msic/ nts_yo201811.js" server="bksdirect.boacapitalsecurities.com" referer="https://bk sdirect.boacapitalsecurities.com/" cookie="-" set-cookie="-" recvbytes="406" sen tbytes="2335" protocol="HTTP/1.1" ctype="application/x-javascript" uagent="Mozil la/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro me/74.0.3729.169 Safari/537.36" querystring="" websocket_scheme="-" websocket_pr otocol="-" websocket_key="-" websocket_version="-" ruleid="11"
[Sat Jun 01 11:57:39.863161 2019] [proxy_http:error] [pid 22331:tid 140698036700 928] (70014)End of file found: [client 160.154.137.218:59373] AH01102: error rea ding status line from remote server 10.121.71.34:9091, referer: https://bksdirec t.boacapitalsecurities.com/
[Sat Jun 1 11:57:39.686698 2019] timestamp="1559390259" srcip="160.154.137.218" localip="196.47.174.123" user="-" host="160.154.137.218" method="GET" statuscod e="200" reason="-" extra="-" exceptions="-" duration="176597" url="/assets/msic/ nts_yo201810.js" server="bksdirect.boacapitalsecurities.com" referer="https://bk sdirect.boacapitalsecurities.com/" cookie="-" set-cookie="-" recvbytes="406" sen tbytes="31" protocol="HTTP/1.1" ctype="text/x-js" uagent="Mozilla/5.0 (Windows N T 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" querystring="" websocket_scheme="-" websocket_protocol="-" websoc ket_key="-" websocket_version="-" ruleid="11"
[Sat Jun 01 11:57:40.292203 2019] [proxy_http:error] [pid 22331:tid 140698003130 112] (70014)End of file found: [client 160.154.137.218:59376] AH01102: error rea ding status line from remote server 10.121.71.34:9092, referer: https://bksdirec t.boacapitalsecurities.com/
[Sat Jun 01 11:57:40.292227 2019] [proxy:error] [pid 22331:tid 140698003130112] [client 160.154.137.218:59376] AH00898: Error reading from remote server returne d by /assets/msic/nts_yo201810.js, referer: bksdirect.boacapitalsecuriti es.com/
[Sat Jun 1 11:57:40.118851 2019] timestamp="1559390260" srcip="160.154.137.218" localip="196.47.174.123" user="-" host="160.154.137.218" method="GET" statuscod e="502" reason="-" extra="-" exceptions="-" duration="173665" url="/assets/msic/ nts_yo201810.js" server="bksdirect.boacapitalsecurities.com" referer="https://bk sdirect.boacapitalsecurities.com/" cookie="-" set-cookie="-" recvbytes="973" sen tbytes="818" protocol="HTTP/1.1" ctype="text/html" uagent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" querystring="" websocket_scheme="-" websocket_protocol="-" webso cket_key="-" websocket_version="-" ruleid="11"
[Sat Jun 01 11:58:20.609025 2019] [url_hardening:error] [pid 22331:tid 140697994 737408] [client 81.163.203.255:57228] Hostname in HTTP request (196.47.174.123) does not match the server name (f5869cfd63a4fbbd4a57e8fe9d43a487_redirect_ssl)
[Sat Jun 1 11:58:20.608950 2019] timestamp="1559390300" srcip="81.163.203.255" localip="196.47.174.123" user="-" host="81.163.203.255" method="GET" statuscode= "403" reason="-" extra="-" exceptions="-" duration="135" url="/" server="196.47. 174.123:80" referer="-" cookie="-" set-cookie="-" recvbytes="185" sentbytes="354 " protocol="HTTP/1.1" ctype="text/html" uagent="Mozilla/5.0 (Windows NT 6.1; WOW 64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" q uerystring="" websocket_scheme="-" websocket_protocol="-" websocket_key="-" webs ocket_version="-" ruleid="11"
Please help me ? I have already reopen support case ticket.
This thread was automatically locked due to age.
