• The forum software have been upgraded to the latest version.

    If you notice anything that looks off, or does not work, please let us know.

    For more information, click here.

Unable to post

The Red Devil said:
With the logs I was able to locate, it seems all 403 is connected with HTTP2 which is a protocol the server use to transfer content to the browser. It is a longshot, but I have disabled this protocol so we can test if it is the culprit. If anyone still experiences the problems moving forward, please post an update.
Click to expand...

Tnx, i'll try some tests
 
Lord Agragax of Lunaxoatl said:
The issue still shows on this thread for me: https://www.lustria-online.com/threads/as-foreseen-by-lord-kroak.19325/page-7#post-486675
Click to expand...
Thanks for the update and reference.

I believe I am onto the culprit now, by looking up in the core logs for your post attempt, I managed to locate more information, and it seems there is a security layer on the new server (mod security) that refused the post due to it logged it as potential SQL injection, that does not show up in the mod security logs, so it seems the server is running two instances of the system. I have reached out to the hosting company to get this sorted, and when we have all showing in the security logs, I can whitelist the rule so it does not trigger for lustria online.
 
The Red Devil said:
Thanks for the update and reference.

I believe I am onto the culprit now, by looking up in the core logs for your post attempt, I managed to locate more information, and it seems there is a security layer on the new server (mod security) that refused the post due to it logged it as potential SQL injection, that does not show up in the mod security logs, so it seems the server is running two instances of the system. I have reached out to the hosting company to get this sorted, and when we have all showing in the security logs, I can whitelist the rule so it does not trigger for lustria online.
Click to expand...

Ah, that makes a lot of sense... I've seen issues in programs and systems before that have been caused by security rules being too overenthusiastic and blocking things they shouldn't be.

Let us know when the host company get back to you, and hopefully this can be dealt with at long last :)
 
Okay, we're making progress, at least. The hosting company was not helpful, but I have modified the rules file so it logs correctly.

This allowed me to whitelist this specific rule for the forum, so this should resolve some of the 403, that people receive.

I assume we most probably have to whitelist additional rules, so if anyone receives a 403 or similar error when using the forum, moving forward, please post in this thread, as then I know that I need to review the logs file for additional rules.
 
The Red Devil said:
Okay, we're making progress, at least. The hosting company was not helpful, but I have modified the rules file so it logs correctly.

This allowed me to whitelist this specific rule for the forum, so this should resolve some of the 403, that people receive.

I assume we most probably have to whitelist additional rules, so if anyone receives a 403 or similar error when using the forum, moving forward, please post in this thread, as then I know that I need to review the logs file for additional rules.
Click to expand...
Thank you @The Red Devil for all your hard work. :)
 
Delayed reaction from me, but:

a704d7fa088afc83ed235bc832c68b1d.jpg
 
You must log in or register to reply here.
Back
Top