BulletProof Security PRO setup Problem

Resolved minami2013
(@minami2013)

11 years, 5 months ago

Urgent !

Durring PreWizard Setting, Process is not finished.
So, Logout And try to login.
But no reply,
Also http Aceess is no reply in all my VPS site.
Filezilla is not worked.
Teraterm SHH is not worked.

Setup Domain – wordpress-admindocs.com
Server Ip – 133.242.171.151

Thank you for advice in advance.

https://wordpress.org/plugins/bulletproof-security/

Viewing 13 replies - 1 through 13 (of 13 total)

Thread Starter minami2013
(@minami2013)

11 years, 5 months ago

I go to VPS control panel.
It seems to be stoped running.
Before 30min big disk i/o was recorded.
After Apache restart,But same condition.

Plugin Author AITpro
(@aitpro)

11 years, 5 months ago

On the Setup Wizard page select the Turn Off cURL Scan option, click the Save Options button and run the Pre-Installation Wizard again. Let me know if the Pre-Installation Wizard completes successfully.
http://forum.ait-pro.com/forums/topic/pre-installation-wizard-setup-wizard-does-not-complete-hangs-memory-issue/#post-14156

Plugin Author AITpro
(@aitpro)

11 years, 5 months ago

Is this issue/problem resolved? If so, please resolve this thread. If not, please post any additional information.

For future BPS Pro questions please post them on the BPS Pro forum site here: http://forum.ait-pro.com/forums/forum/bulletproof-security-pro/

Thread Start Date: 10-16-2014 – 10-17-2014
Current Date: 10-18-2014

Thread Starter minami2013
(@minami2013)

11 years, 5 months ago

Thanks for AITpro advice.
I wrote again all status as follws:

【OK on 1st Website】
On New Website – VPS PRO 1st Site
・A-VPS, A1-Website
・1 Post existing fot test.
・BPS PRO completed without proberm including Wizard.

【Problem on 2nd Website】
Staus of Problem – VPS PRO 2nd Site
・A-VPS, A2-Website
・BPS PRO hungup durring Pre-Wizard
・Then Logout WordPress
・After that – Login Erorr
・Norply – TeraTerm SSH
・Norply – FileZilla
・Goto VPS control panel – VPS seems to be stoped
・Restart VPS – No Change
・Some times ago, TeraTerm Login OK, maybe VPS has been Stoped
・But TeraTerm Mysql Login was NG
・phpMyAdmin Login was NG

【MySQL Restat】
・Just Missed try to MySQL Restat

【Resetup】
MySQL Database
・Clear MySQL Database
・Newly Installed MySQL Database

【Import Problem on Backup Database – BPS PRO Probrem Webiite】
phpMyAdmin Import – Backup was Few Days Before
・Durring Import, it was observed #1062 error.
#1062 – Duplicate Entry ‘9999’ for key ‘PROMARY’
・1062 look at Post Dated May19/2014 or May 20/2014
・It was changed Primary Key of Post Records 18Times.
・Then Completed database import.
・Goto WordPress, Restore was almost OK, but some of Contents Block Data was lost.
Note: I am not sure, Duplicated Primary Key of Post may be related to BPS Problem.

【Custom Permalink】 Latest Update – 5 Month Ago
Custom Permalink may be related to Post Primary Key.
0.7.19
・WP 3.9 compatibility fix, thanks to Sowmedia
0.7.18
・Patch to address 404 errors when displaying a page/post that shares a permalink with a trashed page/post, thanks to Tor Johnson

【Retry BPS PRO】
・Import Database of A2-Website as temporary to B-VPS on diff domain for Test.
・BPS PRO Setup was OK by cURL turened off.

【Retry BPS PRO on A-VPS A2-Website】
Not Yet

Q:
If same problem, Will MySQL restart soleve this problem ?
It means no damage on database.
If so, I can try again on A-VPS/A2-Website.

Plugin Author AITpro
(@aitpro)

11 years, 5 months ago

Wow lots of great details.
What causes this particular MySQL Server problem is this:

The cURL Scanner queries your MySQL Server database to get all of your existing pages and post URI’s/URL’s to scan and then scans those pages and posts for frontloading plugin scripts that need to be whitelisted in the Plugin Firewall. On some VPS hosted servers (this problem has never occurred on any Shared hosting servers) this causes the MySQL server to hang or crash. Restarting/rebooting the MySQL server and setting the turn off cURL Scan option solves the problem.

We are still not quite sure why this problem occurs on some VPS MySQL servers and are working on some sort of alternative cURL scanning method for these particular VPS MySQL server types. For now using the Setup Wizard “Turn Off cURL Scan” option solves the issue. The Plugin Firewall will need to be setup by watching this video tutorial: http://forum.ait-pro.com/video-tutorials/#security-log-firewall and using this alternative Plugin Firewall setup method shown in the video tutorial.

Plugin Author AITpro
(@aitpro)

11 years, 5 months ago

Increased automation is currently being worked on for the Plugin Firewall. What that means is that Plugin Firewall whitelist rules will be created in real-time. ie you have an existing plugin or install a new plugin that has a frontloading plugin script that needs to be whitelisted in the Plugin Firewall. The Plugin Firewall will automatically detect that a new Plugin Firewall whitelist rule needs to be added/created and will automatically create that new whitelist rule.

Thread Starter minami2013
(@minami2013)

11 years, 5 months ago

Thaks AITpro for good informations.

I understand cURL Scanner makes Plugin Firewall.
I saw plugin video, but I can not understand it. because of video is too fast for me(Japanese).
I don’t know what does Plugin Firewall.

It supposed to be:
Some hacker can not access to plugin directory or files.
Becase of no white list.
So never makes malware on plugins directory or files.
Is this true or not ?

Plugin Author AITpro
(@aitpro)

11 years, 5 months ago

The Plugin Firewall is designed to prevent Remote Access to the plugins folder from external sources (remote script execution, hacker recon, remote scanning, remote accessibility, etc.) and only allows internal access to the plugins folder based on this criteria: Domain name, Server IP Address and Public IP / Your Computer IP Address.

Some plugins have frontloading plugin scripts that load on the frontend of your website that need to be publicly accessible to everyone. Those plugin scripts need to be whitelisted in the Plugin Firewall whitelist text area so that they are publicly accessible to everyone.

Thread Starter minami2013
(@minami2013)

11 years, 5 months ago

Thaks AITpro for good informations.

Then, I have two Qs:

Q1: Does it also same on WorPress own folder.

Q2: My Public IP adrees is changed in some times, it is not static.
In that cases, no Problem for me.

Plugin Author AITpro
(@aitpro)

11 years, 5 months ago

The Plugin Firewall protects the /plugins/ folder and all plugins and plugins files in that folder. The root and wp-admin .htaccess files protect WordPress folders and other files and of course ARQ IDPS, UAEG, etc etc etc. 😉

The Plugin Firewall automatically updates your IP address in real-time when your IP address changes.

Thread Starter minami2013
(@minami2013)

11 years, 5 months ago

Thaks AITpro for good informations.

I am fine now.

Then, Iwill try to scan cURL on my problem website in a few days.
If any Problem, I will report again.

Plugin Author AITpro
(@aitpro)

11 years, 5 months ago

If you use the Pro-Tools cURL Scan tool then ONLY use the “Multi 20 Page/Post cURL Scanner (20 Posts or Pages).” Do NOT use the “Multi Page/Post cURL Scanner (The default scan is already set to scan up to 250 Pages/Posts)” tool or your MySQL server will crash. The same code used in this Pro-Tools cURL Scan tool is the same code used in the Pre-Installation Wizard.

Or you can use this alternative method to get Plugin Firewall whitelist rules: http://forum.ait-pro.com/video-tutorials/#security-log-firewall

Thread Starter minami2013
(@minami2013)

11 years, 5 months ago

Thaks AITpro for good informations.

It is reminded your informations.

Viewing 13 replies - 1 through 13 (of 13 total)

The topic ‘BulletProof Security PRO setup Problem’ is closed to new replies.

Tags