I currently have Asterisk version 16 and Freepbx version 14 installed – this is a manual install and not a distro install
Remote access to the server is done only via VPN with a few exceptions –
One of the exceptions is i have setup a virtual host in apache on port 82 which points to /var/www/html/ucp – this allows my users to gain remote access to their voicemails etc… without having to go through a vpn – with strong passwords being enforced it works well
the issue i am having is that is two fold –
i am getting the following errors in the apache logs –
[authz_core:error] [pid 3101] [client x.x.x.x:59443] AH01630: client denied by server configuration: /var/www/html/ucp/index.html – this is my ip address which is being listed as denied – then after it gets denied in apache
fail2ban then kicks in – under apache-auth and bans my ip – which means that my network cannot connect to the server – and this is a big issue
And you have the proper permissions and ownerships on all the files? This isn’t a FreePBX issue as it is a standard Apache issue with how your web configs are done and the directory/files are handled.
Did you try doing this without adding the directive for :82? You could just do http://ip/ucp and not http://ip:82 does it work when not trying to use a specific port?
I am specifically trying to separate access to the Admin GUI from access to UCP – this is pretty basic – if i followed your suggestion i would open both the admin and UCP on port 80 to the internet which is not a great idea
So i re-read the wiki here https://wiki.freepbx.org/display/PPS/Ports+used+on+your+PBX and noticed that UCP on HTTPS runs on port 4443 – great – so i went in and changed everything to point to 4443 – figuring that would fix it – now i am able to connect on 4443 using my SSL cert – fine – however i am still getting the error in the apache logs –
[authz_core:error] [pid 3101] [client x.x.x.x:59443] AH01630: client denied by server configuration: /var/www/html/ucp/index.html
thoughts?
PS I know – if i was running the distro this would be easier – again i am not running the distro – nor do i want to run the distro – i enjoy learning how to run my own server – have no issues dropping into the CLI and working on things and understanding what and why goes on behind the scenes
I understand what you are trying to do. It is pretty basic. So what I asked was, does it work in the most basic setup? So try testing that it actually works before you try “separating” it by a custom directive.
You were referred by an HTTPS request that is on 4443 which is the default HTTPS port used for HTTPS access to the UCP.
So again, you’re saying that you’re just doing this on port 80 but I’m seeing 4443 refers. From what I know these port configs don’t hit Apache without System Admin.
Please confirm how you’re accessing the UCP and what you have done with the configs so far because this is the problem with supporting manual installs, we have no idea what you’ve done unless you tell us explicitly.