Broken but available images on the pages.

mbsmt

mbsmt

Verified User
Joined
Jul 24, 2013
Messages
138
Location
Mashhad, Iran
Hi. I have a problem on my server for some month and I could not solve it.
Most of the hosted websites on my server have problem with images. Imagine that there is a clients page in one website that contains clients' logos. On each page load, one or some of images don't be shown and seem to be broken, weather they are existing and if I open those broken images in a new tab, I can see that images. On the next refresh, this behavior might be occurred on some other images and the previous ones become visible!

What's the problem? I'm sure this is a problem on my server because I have not such problem on local machine.
This is some of my server configuration:
Code: 
#PHP Settings
php1_release=5.6
php1_mode=suphp
php2_release=5.4
php2_mode=suphp
opcache=no
htscanner=no
php_ini=no
php_timezone=Asia/Tehran
php_ini_type=production
ioncube=yes
zend=yes
suhosin=no
x_mail_header=yes

#WEB Server Settings
webserver=apache
litespeed_serialno=trial
modsecurity=no
modsecurity_ruleset=comodo
apache_ver=2.4
apache_mpm=auto
mod_ruid2=no
userdir_access=yes
harden_symlinks_patch=yes
use_hostname_for_alias=no
redirect_host=fr.linux1.parniahost.com
redirect_host_https=no

I configured custombuild with nginx_apache and though this might be the problem. So I changed web server to apache, but the problem still exists.
 
I think these would do fine:
/var/log/httpd/error_log
but especially:
/var/log/httpd/domains/problemdomain.com.log
/var/log/httpd/domains/problemdomain.com.error.log
 
Richard G said:
I think these would do fine:
/var/log/httpd/error_log
but especially:
/var/log/httpd/domains/problemdomain.com.log
/var/log/httpd/domains/problemdomain.com.error.log
Click to expand...

/var/log/httpd/error_log
Code: 
[Fri Sep 30 21:09:06.604305 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured.
[Fri Sep 30 21:09:06.604323 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: APR compiled version="1.5.2"; loaded version="1.5.2"
[Fri Sep 30 21:09:06.604333 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: PCRE compiled version="8.20 "; loaded version="8.20 2011-10-21"
[Fri Sep 30 21:09:06.604342 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: LIBXML compiled version="2.9.3"
[Fri Sep 30 21:09:06.604350 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Fri Sep 30 21:09:06.732744 2016] [auth_digest:notice] [pid 17435:tid 140153481189312] AH01757: generating secret for digest authentication ...
[Fri Sep 30 21:09:07.197302 2016] [ssl:warn] [pid 17435:tid 140153481189312] AH01909: www.example.com:8081:0 server certificate does NOT include an ID which matches the server name
[Fri Sep 30 21:09:07.197543 2016] [lbmethod_heartbeat:notice] [pid 17435:tid 140153481189312] AH02282: No slotmem from mod_heartmonitor
[Fri Sep 30 21:09:07.201517 2016] [mpm_event:notice] [pid 17435:tid 140153481189312] AH00489: Apache/2.4.23 (Unix) OpenSSL/1.0.1e-fips configured -- resuming normal operations
[Fri Sep 30 21:09:07.201567 2016] [core:notice] [pid 17435:tid 140153481189312] AH00094: Command line: '/usr/sbin/httpd'

/var/log/httpd/domains/problemdomain.com.log
Code: 
188.158.56.226 - - [30/Sep/2016:21:44:01 +0330] "GET /fa/images/customers/rubyencoder.png HTTP/1.0" 200 571 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:01 +0330] "GET /fa/images/customers/silverage.png HTTP/1.0" 200 569 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:01 +0330] "GET /fa/images/customers/charogh.png HTTP/1.0" 200 567 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:01 +0330] "GET /fa/images/icons/easytouse-active.png HTTP/1.0" 200 572 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:01 +0330] "GET /fa/images/icons/responsive-active.png HTTP/1.0" 200 573 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:01 +0330] "GET /fa/images/icons/support-active.png HTTP/1.0" 200 570 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:01 +0330] "GET /fa/images/icons/farsi-active.png HTTP/1.0" 200 568 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:02 +0330] "GET /fa/images/icons/savemoney-active.png HTTP/1.0" 200 572 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:02 +0330] "GET /fa/images/icons/noskill-active.png HTTP/1.0" 200 570 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"
188.158.56.226 - - [30/Sep/2016:21:44:02 +0330] "GET /fa/images/favicon.ico HTTP/1.0" 200 561 "https://www.helpical.com/fa/customers/" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36"

/var/log/httpd/domains/problemdomain.com.error.log
Code: 
[Fri Sep 30 20:00:27.698019 2016] [:error] [pid 10442:tid 140082558158592] [client 188.159.247.35:56370] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
[Fri Sep 30 20:54:56.311586 2016] [:error] [pid 10442:tid 140082705016576] [client 180.76.15.9:33202] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
[Fri Sep 30 21:14:48.314004 2016] [:error] [pid 17506:tid 140153295202048] [client 196.53.53.46:34548] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
[Fri Sep 30 21:14:50.430530 2016] [:error] [pid 17506:tid 140153305691904] [client 196.53.53.46:34550] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
[Fri Sep 30 21:19:57.960660 2016] [:error] [pid 17506:tid 140153232262912] [client 196.53.53.46:34832] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
[Fri Sep 30 21:22:23.289739 2016] [:error] [pid 17506:tid 140152697280256] [client 149.154.167.162:35000] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
[Fri Sep 30 21:25:37.947586 2016] [:error] [pid 17506:tid 140153221773056] [client 188.158.56.226:35452] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
[Fri Sep 30 21:26:27.009456 2016] [:error] [pid 17506:tid 140153116874496] [client 66.249.93.210:35490] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
[Fri Sep 30 21:28:24.632090 2016] [:error] [pid 17506:tid 140152990996224] [client 180.76.15.161:35732] PHP Notice:  Undefined index: HTTP_REFERER in /home/helpical/domains/helpical.com/public_html/fa/index.php on line 28
 
The logs still show that Apache is build with mod_security:

Code: 
[Fri Sep 30 21:09:06.604305 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured.
[Fri Sep 30 21:09:06.604323 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: APR compiled version="1.5.2"; loaded version="1.5.2"
[Fri Sep 30 21:09:06.604333 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: PCRE compiled version="8.20 "; loaded version="8.20 2011-10-21"
[Fri Sep 30 21:09:06.604342 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: LIBXML compiled version="2.9.3"
[Fri Sep 30 21:09:06.604350 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.

sure they say that "ModSecurity: Status engine is currently disable". But still I'd start with complete removal of the module.

The logs do not show anything useful, the site is not available from my location. Probably you block country of my origin. So do not have any ideas for you (on how to diagnose the issue remotely. I need an access on the server if you want further help).

Probably somebody else have ideas.
 
zEitEr said:
The logs still show that Apache is build with mod_security:

Code: 
[Fri Sep 30 21:09:06.604305 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/) configured.
[Fri Sep 30 21:09:06.604323 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: APR compiled version="1.5.2"; loaded version="1.5.2"
[Fri Sep 30 21:09:06.604333 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: PCRE compiled version="8.20 "; loaded version="8.20 2011-10-21"
[Fri Sep 30 21:09:06.604342 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: LIBXML compiled version="2.9.3"
[Fri Sep 30 21:09:06.604350 2016] [:notice] [pid 17434:tid 140153481189312] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.

sure they say that "ModSecurity: Status engine is currently disable". But still I'd start with complete removal of the module.

The logs do not show anything useful, the site is not available from my location. Probably you block country of my origin. So do not have any ideas for you (on how to diagnose the issue remotely. I need an access on the server if you want further help).

Probably somebody else have ideas.
Click to expand...

Firewall does not block any country zEitEr. Domain is www.helpical.com ...
I've CXS installed on my server and I think it needs mod_security. Am I wrong?
 
I've done a new test on my problem. I found out that problem happens on Chrome, and if I use Firefox, everything is OK. I asked someone else to check this too, and the result was same! But we have this problem only on loading hosted websites on our server. So we think this must be a server problem.
To test it, please visit https://www.parniagroup.com/en/clients/

On each refresh using Chrome, you will lose one or more logos. On the next refresh, you can view previous broken images and now, you might see new broken images in different positions!
 
The site does not open from my location, probably it's due to your firewall restrictions.

Probably Chrome opens too many concurrent connections to your server, and you have a limit on number of them either in firewall or in webserver's settings.

So disable firewall and see whether or not the issue persists.
 
zEitEr said:
OK, now the sites open for me. And however I'd refreshed the pages no issue with pictures noticed.
Click to expand...
Thanks to you previous reply, I think the problem was on concurrent connections set in CSF. I change them and it seems there is no problem anymore. However I asked someone else (who had such problem on her website) to test it too.

Thank you Alex.
 
You must log in or register to reply here.
Back
Top