Post request 403 Forbidden

alex.b · 2017-05-24T21:46:54+00:00

What I want is a api like this:local sock = ngx.socket.tcp() connect then send and receive...if sock.is_closed() then do something here...end

Post request 403 Forbidden

alex.b

Hi,

I'm using OpenResty Nginx as proxy server with waf.

In some reason blocks request POST that look like:

https://jenkins-auto.90min.com/$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render

There is nothing in logs of waf. The only error I found, it's:

199.203.151.53 - - [24/May/2017:13:39:12 +0000] "POST /$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render HTTP/1.1" 403 577 "https://jenkins-auto.90min.com/job/my_test/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "-"

in Nginx access log.
I can't figure out, why Nginx giving me this error.

rpaprocki

Sounds like you want to contact the WAF dev/maintainer then?

On May 24, 2017, at 06:46, al...@minutemedia.com wrote:

Hi,

I'm using OpenResty Nginx as proxy server with waf.
In some reason blocks request POST that look like:
https://jenkins-auto.90min.com/$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render

There is nothing in logs of waf. The only error I found, it's:
199.203.151.53 - - [24/May/2017:13:39:12 +0000] "POST /$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render HTTP/1.1" 403 577 "https://jenkins-auto.90min.com/job/my_test/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "-"

in Nginx access log.
I can't figure out, why Nginx giving me this error.

CONFIDENTIALITY NOTICE: This message, including any attachments, is the property of Sportority Group of companies, its affiliates and/or subsidiaries and/or its Brands Minute Media, 90min and 12up, is solely for the use of the individual or entity intended to receive it. It may contain confidential, proprietary and/or privileged information, and any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient or if you have received this message in error, please permanently delete it and contact the sender by reply e-mail.

.

alex.b

WAF dev/maintainer it's lua-resty-waf

But yes, probably you right, I should ask them.

The main problem for me here, it's that I don't see WAF blocking this requests, more looks like Nginx failed to handle them.

Log of WAF even in debug mode is clear. The message with 403 error I got from Nginx itself, if I understand right.

On Wednesday, May 24, 2017 at 5:01:04 PM UTC+3, rpaprocki wrote:

Sounds like you want to contact the WAF dev/maintainer then?

On May 24, 2017, at 06:46, ale...@minutemedia.com wrote:

Hi,

I'm using OpenResty Nginx as proxy server with waf.
In some reason blocks request POST that look like:
https://jenkins-auto.90min.com/$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render

There is nothing in logs of waf. The only error I found, it's:
199.203.151.53 - - [24/May/2017:13:39:12 +0000] "POST /$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render HTTP/1.1" 403 577 "https://jenkins-auto.90min.com/job/my_test/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "-"

in Nginx access log.
I can't figure out, why Nginx giving me this error.

CONFIDENTIALITY NOTICE: This message, including any attachments, is the property of Sportority Group of companies, its affiliates and/or subsidiaries and/or its Brands Minute Media, 90min and 12up, is solely for the use of the individual or entity intended to receive it. It may contain confidential, proprietary and/or privileged information, and any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient or if you have received this message in error, please permanently delete it and contact the sender by reply e-mail.

.

rpaprocki

I maintain this project. :)

Go ahead and open an issue on GitHub. Thanks!

On May 24, 2017, at 07:24, al...@minutemedia.com wrote:

WAF dev/maintainer it's lua-resty-waf
But yes, probably you right, I should ask them.

The main problem for me here, it's that I don't see WAF blocking this requests, more looks like Nginx failed to handle them.
Log of WAF even in debug mode is clear. The message with 403 error I got from Nginx itself, if I understand right.

On Wednesday, May 24, 2017 at 5:01:04 PM UTC+3, rpaprocki wrote:
Sounds like you want to contact the WAF dev/maintainer then?

On May 24, 2017, at 06:46, ale...@minutemedia.com wrote:

Hi,

I'm using OpenResty Nginx as proxy server with waf.
In some reason blocks request POST that look like:
https://jenkins-auto.90min.com/$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render

There is nothing in logs of waf. The only error I found, it's:
199.203.151.53 - - [24/May/2017:13:39:12 +0000] "POST /$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render HTTP/1.1" 403 577 "https://jenkins-auto.90min.com/job/my_test/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "-"

in Nginx access log.
I can't figure out, why Nginx giving me this error.

CONFIDENTIALITY NOTICE: This message, including any attachments, is the property of Sportority Group of companies, its affiliates and/or subsidiaries and/or its Brands Minute Media, 90min and 12up, is solely for the use of the individual or entity intended to receive it. It may contain confidential, proprietary and/or privileged information, and any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient or if you have received this message in error, please permanently delete it and contact the sender by reply e-mail.

.

alex.b

Aah okay =)

lua-resty-waf works like a charm.

To be clear I am looking for the root of this strange 403 Error more then two days, but still not clear why it happens,

I even can't understand from logs if it blocked by waf or nginx.

in waf logs nothing was found. d

On Wednesday, May 24, 2017 at 5:31:40 PM UTC+3, rpaprocki wrote:

I maintain this project. :)

Go ahead and open an issue on GitHub. Thanks!

On May 24, 2017, at 07:24, ale...@minutemedia.com wrote:

WAF dev/maintainer it's lua-resty-waf
But yes, probably you right, I should ask them.

The main problem for me here, it's that I don't see WAF blocking this requests, more looks like Nginx failed to handle them.
Log of WAF even in debug mode is clear. The message with 403 error I got from Nginx itself, if I understand right.

On Wednesday, May 24, 2017 at 5:01:04 PM UTC+3, rpaprocki wrote:
Sounds like you want to contact the WAF dev/maintainer then?

On May 24, 2017, at 06:46, ale...@minutemedia.com wrote:

Hi,

I'm using OpenResty Nginx as proxy server with waf.
In some reason blocks request POST that look like:
https://jenkins-auto.90min.com/$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render

There is nothing in logs of waf. The only error I found, it's:
199.203.151.53 - - [24/May/2017:13:39:12 +0000] "POST /$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render HTTP/1.1" 403 577 "https://jenkins-auto.90min.com/job/my_test/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "-"

in Nginx access log.
I can't figure out, why Nginx giving me this error.

CONFIDENTIALITY NOTICE: This message, including any attachments, is the property of Sportority Group of companies, its affiliates and/or subsidiaries and/or its Brands Minute Media, 90min and 12up, is solely for the use of the individual or entity intended to receive it. It may contain confidential, proprietary and/or privileged information, and any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient or if you have received this message in error, please permanently delete it and contact the sender by reply e-mail.

.

alex.b

Thanks, I will open it on Github

On Wednesday, May 24, 2017 at 5:31:40 PM UTC+3, rpaprocki wrote:
I maintain this project. :)

Go ahead and open an issue on GitHub. Thanks!

On May 24, 2017, at 07:24, ale...@minutemedia.com wrote:

WAF dev/maintainer it's lua-resty-waf
But yes, probably you right, I should ask them.

The main problem for me here, it's that I don't see WAF blocking this requests, more looks like Nginx failed to handle them.
Log of WAF even in debug mode is clear. The message with 403 error I got from Nginx itself, if I understand right.

On Wednesday, May 24, 2017 at 5:01:04 PM UTC+3, rpaprocki wrote:
Sounds like you want to contact the WAF dev/maintainer then?

On May 24, 2017, at 06:46, ale...@minutemedia.com wrote:

Hi,

I'm using OpenResty Nginx as proxy server with waf.
In some reason blocks request POST that look like:
https://jenkins-auto.90min.com/$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render

There is nothing in logs of waf. The only error I found, it's:
199.203.151.53 - - [24/May/2017:13:39:12 +0000] "POST /$stapler/bound/36b9b4f5-2a58-474c-826c-b9a5aa7dcde8/render HTTP/1.1" 403 577 "https://jenkins-auto.90min.com/job/my_test/configure" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "-"

in Nginx access log.
I can't figure out, why Nginx giving me this error.

CONFIDENTIALITY NOTICE: This message, including any attachments, is the property of Sportority Group of companies, its affiliates and/or subsidiaries and/or its Brands Minute Media, 90min and 12up, is solely for the use of the individual or entity intended to receive it. It may contain confidential, proprietary and/or privileged information, and any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient or if you have received this message in error, please permanently delete it and contact the sender by reply e-mail.

.