403 Forbidden

[sajoupa]

I hope sajoupa (post 3) has a suitable brush and comb..............

The difficulty isn't really with regex (even though they are hairy), but rather with identifying what's a legitimate use and what's an attack attempt (the logs have few of the former, but a lot of the latter).

[TheFu]

The difficulty isn't really with regex (even though they are hairy), but rather with identifying what's a legitimate use and what's an attack attempt (the logs have few of the former, but a lot of the latter).

Understood. I've been running different sorts of servers for over 25 yrs and was a software developer prior to that (with some overlap). Once worked on a project where we'd use regex to match document TOC and Indexes into the current and different documents in the library. There wasn't any standard format and we had to support type-3 fonts, which are just glyphs, not translated into characters. Thankfully, the type3 font use was minimal, usually just i/I and l/L and 1 stuff to certain in extremely technical documents, readers wouldn't/couldn't confuse the number from the letters due to a bad font selection in the document.

I won't pretend to know what an attack post to forum software looks like. I've specifically NEVER run any forum software because I didn't feel I could secure it.

Is there any chance to have the post-count used in this filtering? People with 500+ posts aren't likely to be attackers, so it is just the inappropriate words that need filtering. Perhaps 500 is too high? Heck, I wouldn't mind 20K posts being the limit, but we'd all miss out on some great posts by people with more outside interested who only have a few hundred posts.

Seems that a look up for the number of posts would be faster to process than all the anti-attack checks?

Just a though.

[tea for one]

Thanks for the report, I could find what was causing the denial, and pushed a fix. Can you try again ?

I'd rather not try again with the same thread.
A new post with sudo parted -l would not be an integral part of the current flow of the thread.

If it is any help, I did manage to post the code subsequently - post 24 https://ubuntuforums.org/showthread....2465857&page=3

[TheFu]

For reporting issues, what is the ideal way?
What do you need?
URL? Timestamp? Content?

The the last week or so, about 1 post every 2-3 days has been rejected.

[sajoupa]

For reporting issues, what is the ideal way?
What do you need?
URL? Timestamp? Content?

The the last week or so, about 1 post every 2-3 days has been rejected.

URL + timestamp is perfect. Thanks !

[TheFu]

URL + timestamp is perfect. Thanks !

https://ubuntuforums.org/newreply.ph...eply&t=2465965
Tue 17 Aug 2021 11:19:05 AM EDT

[sajoupa]

https://ubuntuforums.org/newreply.ph...eply&t=2465965
Tue 17 Aug 2021 11:19:05 AM EDT

Thanks, I found the error, and pushed a fix.

[TheFu]

https://ubuntuforums.org/showthread....7#post14056087
Fri Aug 27 11:12:00 .... around that time.

I had just posted and that went through, then saw a grammar error and wanted to change "only" to "one" ... which resulted in the 403 Forbidden error.
I had not seen any issues the last week.

[sajoupa]

Thanks for the report, I just pushed a fix for this one.

[rsteinmetz70112]

I just got the error again editing one of my own posts.
https://ubuntuforums.org/showthread.php?t=2467600