06-10-2024, 10:02 PM
Two kind of errors from you address (hours in UTC/GMT)
error.log:[Mon Jun 10 20:40:12.437504 2024] [:error] [pid 28622] [client 176.149.***.***] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "84"] [id "200003"] [msg "Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM 0, IQ 1, IP 0, IH 0, FL 0"] [hostname "www.gimp-forum.net"] [uri "/newthread.php"] [unique_id "ZmdkrH8AAQEAAG-O-10AAAAD"]
and later:
error.log:[Mon Jun 10 21:17:47.680886 2024] [:error] [pid 29565] [client 176.149.***.***] ModSecurity: Request body (Content-Length) is larger than the configured limit (2200000). [hostname "www.gimp-forum.net"] [uri "/newthread.php"] [unique_id "Zmdte38AAQEAAHN9PqwAAAAK"]
Our protections truncate requests, they don't generate oversize ones. I see that you run a very recent Firefox (126), so it coud be a bug in that version. Did you try with another browser or an older version?
error.log:[Mon Jun 10 20:40:12.437504 2024] [:error] [pid 28622] [client 176.149.***.***] ModSecurity: Access denied with code 400 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/etc/modsecurity/modsecurity.conf"] [line "84"] [id "200003"] [msg "Multipart request body failed strict validation: PE 0, BQ 0, BW 0, DB 0, DA 0, HF 0, LF 0, SM 0, IQ 1, IP 0, IH 0, FL 0"] [hostname "www.gimp-forum.net"] [uri "/newthread.php"] [unique_id "ZmdkrH8AAQEAAG-O-10AAAAD"]
and later:
error.log:[Mon Jun 10 21:17:47.680886 2024] [:error] [pid 29565] [client 176.149.***.***] ModSecurity: Request body (Content-Length) is larger than the configured limit (2200000). [hostname "www.gimp-forum.net"] [uri "/newthread.php"] [unique_id "Zmdte38AAQEAAHN9PqwAAAAK"]
Our protections truncate requests, they don't generate oversize ones. I see that you run a very recent Firefox (126), so it coud be a bug in that version. Did you try with another browser or an older version?