403 error

[Sick Puppy]

Trying to post and keep getting 403 error???

Edit 1 - OK, it let me post and edit this one but I couldn't ask a question I the 'Engine' forum???

Edit 2 - I think it didn't like the RockAuto links I was trying to post...

[MikeFleming]

I suspect it just doesn't like you.

What OS, Browser, etc.? Specific time when access error occurred (for log searching)? How close was your beer to the keyboard?

[Mike S]

I'm getting the same error when I try to add a picture. It is really annoying. It just happened moments ago in the valve seal thread.

I'm using firefox.

[MikeFleming]

Fascinating. No idea where to look though. All Diagnostic tests pass, there's plenty of disk space, file/dir perms have not changed, etc.

Will investigate further when I have time.

9414

[MikeFleming]

Hmmm ...

It's related to new definitions from ModSecurity. If I disable the security module, it works, Enable and it fails. Similar to AV definitions, it is updated daily in most cases. And it looks to be having several issues with false positives.

Grrr...

[MikeFleming]

2017.05.10:
9418

Appears the ModSecurity defs have been updated and are not blocking attachments today.

And we all wonder what tomorrow will bring.

Carry On.

[Mike S]

Yep, it worked OK today. Thanks for checking.

[MikeFleming]

Yep, it worked OK today. Thanks for checking. No worries, Mate.

What concerns me is the fact ModSecurity is a third-party product that seems to be making a lot of mistakes deciding what is hostile vs what is "normal" traffic. The "update" lLast PM "whitelisted " some stuff that was in the "bad" category the day before, that broke uploads on our forum. And these daily updates seem to be breaking things on odd-numbered days then fixing them again for even-numbered ones.

So we may not be able to post pics tomorrow - who knows??