Upgrading from 3.4.2 Permisson Issue Problem?

[nsti]

I am upgrading from v3.4.2. Yes, climbing the latter. I am running PHP 5.5.9 and MYSQL Distrib 5.5.49. All ownership and group settings in the EspoCRM folder are www-data and all permissions on php files are what you recommend. Up until I began this quest to upgrade everything has worked as expected and staff is happy with the product. No errors, no issues.

I have been able to get to v3.7.0. There are no errors reported during the upgrades, there are no errors reported in logs that I can find, software comes up and is accessible. (If there is a specific log to look at please let me know.) I can access the Administration area and open any of the options, make changes and they are saved. When I attempt to open Accounts, Contacts, Leads, Opportunities I get Error 403. Once the error occurs I lose access to the Admin area as well. I have checked the MYSQL database and everything is there as I would expect.

I have to believe that the 403 error is a permissions issue but I am not sure where specifically to look or change at this point. I am running as admin in the software. Did something in the upgrade cause a permission issue with the software or maybe MYSQL?

I am truly stuck at this point. Any assistance would be greatly appreciated! I do not want to go beyond v3.7 until I get this resolved.

Thank you in advance!

Jack

[nsti]

One additional note. When I did the upgrade from 3.6.2 to 3.7.0 I just noticed the following in the EspoCRM/data/logs, latest log

Identicon.php","line":52} []
[2016-05-22 19:16:18] Espo.ERROR: API [POST]:/:controller/action/:action, Params:Array
(
[controller] => Admin
[action] => uploadUpgradePackage
)
, InputData: - It's not an Installation package. [] []
[2016-05-22 19:16:18] Espo.ERROR: Display Error: It's not an Installation package., Code: 500 URL: /api/v1/Admin/action/uploadUpgradePackage [] []

Then 4 lines of:

[2016-05-22 19:27:00] Espo.WARNING: E_WARNING: Cannot modify header information - headers already sent {"file":"/var/www/espocrm/vendor/yzalis/identicon/src/Identicon/Identicon.php","line":52} []

Not sure if this is relating to the issue I am having or not.

Jack

[nsti]

Update...I figured out which error log is keeping the 403 errors. That being error_ssuite.log. The following is from accessing the software and clicking on Contacts:

[Sun May 22 15:18:12.892608 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.893585 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.894515 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.895651 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.896598 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.897544 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.898621 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.900328 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.901268 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/api/v1/Contact, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.902189 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/client/src/views/fields/varchar.js, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.903068 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/client/src/views/fields/enum.js, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.903937 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/client/src/views/fields/phone.js, referer: http://crm.nwsoftware.net/
[Sun May 22 15:18:12.904832 2016] [evasive20:error] [pid 12611] [client 192.168.53.1:32983] client denied by server configuration: /var/www/espocrm/client/src/views/record/row-actions/default.js, referer: http://crm.nwsoftware.net/

Jack

[nsti]

Update...

I believe the issue is with Mod_Evasive, an Apache module. If I turn it off, everything starts working. Turn it back on, errors start up again. So it potentially looks like more activity is happening with the 3.7 release that was 3.4.2. Hopefully you can confirm this? If so, can you give me any recommended settings to make EspoCRM and Mod_Evasive happy with one another? Given what I have supplied, am I on or off target?

Thank you in advance