Plesk 12 and ASL

Customer support forums for Atomic Protector (formerly Atomic Secured Linux). There is no such thing as a bad question here as long as it pertains to using Atomic Protector. Newbies feel free to get help getting started or asking questions that may be obvious. Regular users are asked to be gentle. :-)
kram
Forum Regular
Forum Regular
Posts: 243
Joined: Sat Dec 11, 2004 2:33 pm
Location: South Africa

Plesk 12 and ASL

Unread post by kram »

Hello,

I am considering having a go at Plesk 12 and was wondering if Plesk and ASL play nice together?
I ran the Plesk updater today to see what it had to say and this is what I got.
Parallels Panel pre-upgrade check...
ERROR: You have already installed mod_security package which is not from Panel distribution.
You should deinstall package mod_security before component 'modsecurity' installation, otherwise your apache web-server will be broken.
Any thoughts or suggestions?
Mark Brindley
2Large Networks - Web solutions that work
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Re: Plesk 12 and ASL

Unread post by scott »

Stick with our packages, I'll reach out to them about that error. They know we've got the lead on this one.

Also make sure you do not use the internal plesk mod_security interface under the server settings. It will cause a conflict due to them not being able to support the load order we recommend (yet). They know about the vulnerability they're causing with their implementation, they just cant fix it at this time.
User avatar
rockbrook
Forum User
Forum User
Posts: 5
Joined: Sat May 17, 2014 9:12 am
Location: North Carolina

Re: Plesk 12 and ASL

Unread post by rockbrook »

Looking to upgrade Plesk 11.5.30 to 12.0.18. I already have ASL 4.0.4-15 installed.

The Plesk auto-upgrade gives this warning:

Parallels Panel pre-upgrade check...
WARNING: You have already installed mod_security package which is not from Panel distribution.
You should deinstall package mod_security before component 'modsecurity' installation, otherwise your apache web-server will be broken. Check KB article for details http://kb.parallels.com/122324

How do you recommend I proceed? Is it safe to upgrade Plesk with ASL installed, or should I disable some part of ASL first.

Thanks
User avatar
hostingg
Forum User
Forum User
Posts: 63
Joined: Mon Mar 18, 2013 6:26 pm
Location: Earth

Re: Plesk 12 and ASL

Unread post by hostingg »

Definitely dont use Parallels modsecurity packages. I'm not sure why they did this, but when we upgraded to 12 it replaced modsecurity on our system with a broken version. We reported this to Plesk several weeks ago, but they dont seem to in a hurry to fix it. Stick with Atomicorps modsecurity packages, they always work.
If everything was easy, then the world wouldn't need engineers.
User avatar
rockbrook
Forum User
Forum User
Posts: 5
Joined: Sat May 17, 2014 9:12 am
Location: North Carolina

Re: Plesk 12 and ASL

Unread post by rockbrook »

Thanks for the response. I see that the ASL modsecurity is preferable, but I'm unclear about how best to do the upgrade of Plesk. Do you think I should first uninstall the ASL WAF, and if so how do I do that?
User avatar
rockbrook
Forum User
Forum User
Posts: 5
Joined: Sat May 17, 2014 9:12 am
Location: North Carolina

Re: Plesk 12 and ASL

Unread post by rockbrook »

How about this for an upgrade procedure?

1. Disable ASL WAF using the web GUI.
2. Use Plesk auto-installed to upgrade to Version 12
3. Disable Plesk modsecurity module, Tools & Settings > Web Application Firewall (ModSecurity)
4. Re-enable ASL WAF module.
User avatar
mikeshinn
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4152
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Re: Plesk 12 and ASL

Unread post by mikeshinn »

You may likely have to reinstall the mod_security rpm as well as Plesk may replace it with a known broken version, and prevent installation of the known good version we provide.

If this happens, the easiest solution is just run the ASL installer again. No need to uninstall, and you wont lose any of your settings or events. Its safe to run the ASL installer over an existing installation.
User avatar
rockbrook
Forum User
Forum User
Posts: 5
Joined: Sat May 17, 2014 9:12 am
Location: North Carolina

Re: Plesk 12 and ASL

Unread post by rockbrook »

All set. The Plesk update to 12.0.18 ran with no errors, and the ASL installer 4.0.4-15 was also good.
User avatar
JnascECSI
Forum Regular
Forum Regular
Posts: 306
Joined: Mon Apr 14, 2008 8:29 am
Location: Rhode Island

Re: Plesk 12 and ASL

Unread post by JnascECSI »

rockbrook wrote:All set. The Plesk update to 12.0.18 ran with no errors, and the ASL installer 4.0.4-15 was also good.
I am getting ready to jump from 11.5 to 12.0.18, you mentioned you had no issues. What process did you follow? scared as hell to make the jump as usually plesk always messes something up.
James Nascimento
Chief Information Officer
East Commerce Solutions, Inc.
22 Morris Lane
East Providence, RI 02914
Ph. 800-527-5395 x263
Fax. 888-999-5891
prupert
Forum Regular
Forum Regular
Posts: 573
Joined: Tue Aug 01, 2006 2:45 pm
Location: Netherlands

Re: Plesk 12 and ASL

Unread post by prupert »

I suggest to upgrade to Plesk 12 now only if you need their new features.

Plesk 11.x is still supported for two years, see http://www.parallels.com/support/policy ... lifecycle/
Lemonbit Internet Dedicated Server Management
User avatar
rockbrook
Forum User
Forum User
Posts: 5
Joined: Sat May 17, 2014 9:12 am
Location: North Carolina

Re: Plesk 12 and ASL

Unread post by rockbrook »

I agree that the upgrade isn't necessary. I followed the procedure I outlined above making sure that both Plesk and ASL were updated beforehand.
User avatar
JnascECSI
Forum Regular
Forum Regular
Posts: 306
Joined: Mon Apr 14, 2008 8:29 am
Location: Rhode Island

Re: Plesk 12 and ASL

Unread post by JnascECSI »

Thanks guys,
I didn't really want to go to 12 either but tired of seeing the "Upgrade to the version 12.0.18 is available." every time i login to Plesk and seems that there's no way to make it only show updates for 11.5 and not the next major versions.
James Nascimento
Chief Information Officer
East Commerce Solutions, Inc.
22 Morris Lane
East Providence, RI 02914
Ph. 800-527-5395 x263
Fax. 888-999-5891
StephanS
New Forum User
New Forum User
Posts: 2
Joined: Tue Sep 10, 2013 12:00 pm
Location: BE

Re: Plesk 12 and ASL

Unread post by StephanS »

Any idea if these issues have been resolved yet?

Looking to use ASL with Plesk 12 / CloudLinux / mod_security.
User avatar
mikeshinn
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 4152
Joined: Thu Feb 07, 2008 7:49 pm
Location: Chantilly, VA

Re: Plesk 12 and ASL

Unread post by mikeshinn »

We're using Plesk 12 on all our servers, no problems with ASL.
Garcia65
New Forum User
New Forum User
Posts: 3
Joined: Tue Mar 24, 2015 4:01 am
Location: USA

Re: Plesk 12 and ASL

Unread post by Garcia65 »

Now you can update to 12.5 and the same error is occurring can this be reported to plesk? I am not sure the bet way to do this.
Post Reply