I'm trying to get bgp to work, and I'm getting both "unknown process" and "access denied" errors in the watchdog table.

However, if I click on the link directly from the "access denied" watchdog error, the process executes perfectly and completes correctly.

I've been through every issue in the issue queue and tried every variation of config in settings.php and nothing works.

However, for another site on the same server it works fine.

The vhosts are configured as follows

<VirtualHost *:80>
  ServerName prod.servername.companyname.net
  ServerAlias insite2
  DocumentRoot /var/www/html/prod
</VirtualHost>
<VirtualHost *:80>
  ServerName qa.servername.companyname.net
  DocumentRoot /var/www/html/qa
</VirtualHost>
<VirtualHost *:80>
  ServerName dev.servername.companyname.net
  DocumentRoot /var/www/html/dev
</VirtualHost>

It works perfectly on dev.servername.companyname.net but neither of the other two.

The relevant apache log lines are:

Successful run on dev:

10.140.160.101 - - [03/Nov/2016:17:20:03 -0400] "POST /bgp-start/572f571aad46e0865e2d77252202f947/e7b12a4c5afc46ef0268234931865bee 

HTTP/1.0" 200 - "http://dev.servername.companyname.net/node/add/sc-build/1035/4505?destination=/server-com/build-dashboard" "Mozilla/5.0 

(Windows NT 6.1; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0"

Unsuccessful run on prod/insite2:

10.140.160.101 - - [03/Nov/2016:17:17:29 -0400] "POST /bgp-start/2419ece5789ff845e366914c0a616550/34bf7785b7e87e1b588a70d05ab81e3d 

HTTP/1.0" 403 28537 "http://insite2/node/add/sc-build/8638/33489?destination=/server-com/build-dashboard" "Mozilla/5.0 (Windows NT 6.1; 

WOW64; rv:49.0) Gecko/20100101 Firefox/49.0"

Successful click on link directly:

10.121.87.63 - - [03/Nov/2016:17:26:14 -0400] "GET /bgp-start/5609cff6abea29fd8f74fdd2eba00220/041984a1797fd2a7ff59aaaf3fd9404c HTTP/1.1" 200 - "http://insite2/admin/reports/event/26773" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0"

I have no clue why that IP is different.

I'm on RHEL7 (CentOS) with SELinux but the settings should apply to all the sites on that server.

Maybe it has something to do with that short non fully qualified domain name?

I'm really at a loss. Any suggestions would be greatly appreciated.

Thanks!