(UTC)
  YaBB 2.6 Forum › Bug Zone › YaBB Bugs › Posting new thread fails with no entry in errorlog
‹ Previous Topic | Next Topic ›
Page Index Toggle Pages: 1 Send TopicPrint
Hot Topic (More than 10 Replies) Posting new thread fails with no entry in errorlog (Read 16364 times)
Monni
Senior Member
****
Offline


Min izāmō

Posts: 413
Location: Kaarina, Finland
Joined: Jul 16th, 2014
Gender: Male
Re: Posting new thread fails with no entry in errorlog
Reply #14 - Sep 5th, 2014 at 7:48pm
Print Post  
I'm pretty sure it was a false positive... I've known most of the users on the forum for several years and that IP didn't belong to a new user.
  
Back to top
GTalkSkype/VoIPFacebookTwitterYouTubeICQYIM  
IP Logged
 
Dandello
Forum Administrator
*****
Offline


I love YaBB 2.7!

Posts: 1759
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Re: Posting new thread fails with no entry in errorlog
Reply #13 - Sep 5th, 2014 at 7:25pm
Print Post  
It may be annoying but you know that mod_security bashed a spammer for you.  Grin
Unless, of course, the member was trying to let people know about spam they'd gotten...  Roll Eyes
  
Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Monni
Senior Member
****
Offline


Min izāmō

Posts: 413
Location: Kaarina, Finland
Joined: Jul 16th, 2014
Gender: Male
Re: Posting new thread fails with no entry in errorlog
Reply #12 - Sep 5th, 2014 at 6:57pm
Print Post  
Finally managed to get errorlog output... Definitely bad interaction with ModSecurity.

Quote:

[Fri Sep 05 20:49:56 2014] [error] [client 188.238.53.26] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (poker flat|casino royale)" against "MATCHED_VAR" required. [file "/usr/local/apache/conf/modsec_rules/30_asl_antispam.conf"] [line "193"] [id "300032"] [rev "10"] [msg "Atomicorp.com WAF AntiSpam Rules: Gambling or Poker Content (Disable this rule if you wish to allow that content)"] [data "poker"] [severity "CRITICAL"] [hostname "www.radiohistoria.fi"] [uri "/cgi-bin/yabb2/YaBB.pl"] [unique_id "VAn3w9BOKbgAAD@Ge@UAAAAQ"]
  
Back to top
GTalkSkype/VoIPFacebookTwitterYouTubeICQYIM  
IP Logged
 
Dandello
Forum Administrator
*****
Offline


I love YaBB 2.7!

Posts: 1759
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Re: Posting new thread fails with no entry in errorlog
Reply #11 - Sep 2nd, 2014 at 11:04pm
Print Post  
Definitely a glitch in the space-time continuum, then.
  
Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Monni
Senior Member
****
Offline


Min izāmō

Posts: 413
Location: Kaarina, Finland
Joined: Jul 16th, 2014
Gender: Male
Re: Posting new thread fails with no entry in errorlog
Reply #10 - Sep 2nd, 2014 at 11:01pm
Print Post  
Dandello wrote on Sep 2nd, 2014 at 10:59pm:
Maybe the next time it happens, someone will let you know what they were doing when it happened. (Or didn't happen.)


I know what the user was doing at the time the error happened, but I can't reproduce it...
  
Back to top
GTalkSkype/VoIPFacebookTwitterYouTubeICQYIM  
IP Logged
 
Dandello
Forum Administrator
*****
Offline


I love YaBB 2.7!

Posts: 1759
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Re: Posting new thread fails with no entry in errorlog
Reply #9 - Sep 2nd, 2014 at 10:59pm
Print Post  
Maybe the next time it happens, someone will let you know what they were doing when it happened. (Or didn't happen.)
  
Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Monni
Senior Member
****
Offline


Min izāmō

Posts: 413
Location: Kaarina, Finland
Joined: Jul 16th, 2014
Gender: Male
Re: Posting new thread fails with no entry in errorlog
Reply #8 - Sep 2nd, 2014 at 10:55pm
Print Post  
Dandello wrote on Sep 2nd, 2014 at 10:50pm:
The real weirdness is that it appears to be reporting a 404 in the access log, but the same error isn't in the server error logs.


I think something in Apache configuration is suppressing error log output. I can't check the Apache configs, because it's on a shared host where I don't have root access.
  
Back to top
GTalkSkype/VoIPFacebookTwitterYouTubeICQYIM  
IP Logged
 
Dandello
Forum Administrator
*****
Offline


I love YaBB 2.7!

Posts: 1759
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Re: Posting new thread fails with no entry in errorlog
Reply #7 - Sep 2nd, 2014 at 10:50pm
Print Post  
The real weirdness is that it appears to be reporting a 404 in the access log, but the same error isn't in the server error logs.
  
Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Monni
Senior Member
****
Offline


Min izāmō

Posts: 413
Location: Kaarina, Finland
Joined: Jul 16th, 2014
Gender: Male
Re: Posting new thread fails with no entry in errorlog
Reply #6 - Sep 2nd, 2014 at 10:42pm
Print Post  
I only enabled debugging, because it was not adding anything useful to error logs. Something tells me it's bad interaction with Apache's mod_security or one in a million case of space-time anomality.
  
Back to top
GTalkSkype/VoIPFacebookTwitterYouTubeICQYIM  
IP Logged
 
Dandello
Forum Administrator
*****
Offline


I love YaBB 2.7!

Posts: 1759
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Re: Posting new thread fails with no entry in errorlog
Reply #5 - Sep 2nd, 2014 at 10:36pm
Print Post  
Embarrassed Um - I just ran a test on my test bed - What I saw was debugging set to 'everybody sees' so guests ARE not allowed to post. (But they really shouldn't be allowed to see the debugging info, either.) I normally don't have debugging set so everybody sees it so I forgot about that little weirdness.

So we can forget the 403 on guests.

Now off to check what members see under the same settings.






  
Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Monni
Senior Member
****
Offline


Min izāmō

Posts: 413
Location: Kaarina, Finland
Joined: Jul 16th, 2014
Gender: Male
Re: Posting new thread fails with no entry in errorlog
Reply #4 - Sep 2nd, 2014 at 10:27pm
Print Post  
Dandello wrote on Sep 2nd, 2014 at 10:20pm:
I saw the reference to Security.pm when trying to access StartNewTopic as a guest when I should have gotten a single 'you are not allowed' line. So I'm guessing that something above line 129 is failing over something very weird. If it didn't make it into the YaBB error log, maybe it made it into the Apache error log.


Apache error log was empty...
  
Back to top
GTalkSkype/VoIPFacebookTwitterYouTubeICQYIM  
IP Logged
 
Dandello
Forum Administrator
*****
Offline


I love YaBB 2.7!

Posts: 1759
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Re: Posting new thread fails with no entry in errorlog
Reply #3 - Sep 2nd, 2014 at 10:20pm
Print Post  
I saw the reference to Security.pm when trying to access StartNewTopic as a guest when I should have gotten a single 'you are not allowed' line. So I'm guessing that something above line 129 is failing over something very weird. If it didn't make it into the YaBB error log, maybe it made it into the Apache error log.
  
Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Monni
Senior Member
****
Offline


Min izāmō

Posts: 413
Location: Kaarina, Finland
Joined: Jul 16th, 2014
Gender: Male
Re: Posting new thread fails with no entry in errorlog
Reply #2 - Sep 2nd, 2014 at 10:02pm
Print Post  
What really puzzles me is that it is returning a HTTP error 403 to the user, but the logs say error code is 404... 

As far as I understand the YaBB returned error codes, 403 means the user isn't logged in (because guests can't post threads), but 404 means I/O error (cannot_open).

Edited:

Line 129 of Security.pm is 
Code
Select All
        if ( $access ne 'granted' ) { fatal_error('no_access'); }
  
Back to top
GTalkSkype/VoIPFacebookTwitterYouTubeICQYIM  
IP Logged
 
Dandello
Forum Administrator
*****
Offline


I love YaBB 2.7!

Posts: 1759
Location: The Land of YaBB
Joined: Feb 12th, 2014
Gender: Female
Re: Posting new thread fails with no entry in errorlog
Reply #1 - Sep 2nd, 2014 at 9:49pm
Print Post  
This isn't reproduceable on a newly installed forum - however, following the full link to the site (where I should get a 'not allowed' error, I see an error call to Sources/Security.pm line 129 referring (I think) to not finding a subroutine. It also mentions '(eval)'. The only time eval gets called in Security.pm is in regards to Variables::Movedthreads

Line 129 relates to the sub AccessCheck

Going to do more sleuthing.

Edited:
On a newly installed empty forum with default settings, Guests get the 'You are not allowed to access this section.' warning when trying to get to StartNewTopic.

So, on the forum with this odd error - what are the guest posting settings?
  
Perfection is not possible. Excellence, however, is excellent.
Back to top
WWW  
IP Logged
 
Monni
Senior Member
****
Offline


Min izāmō

Posts: 413
Location: Kaarina, Finland
Joined: Jul 16th, 2014
Gender: Male
Posting new thread fails with no entry in errorlog
Sep 2nd, 2014 at 8:06pm
Print Post  
From accesslog:

Quote:

188.238.156.82 - - [02/Sep/2014:21:30:25 +0300] "POST /cgi-bin/yabb2/YaBB.pl?board=haku&action=post2 HTTP/1.1" 404 - "http://www.radiohistoria.fi/cgi-bin/yabb2/YaBB.pl?board=haku&action=post&title=S..." "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0"
  
Back to top
GTalkSkype/VoIPFacebookTwitterYouTubeICQYIM  
IP Logged
 
Page Index Toggle Pages: 1
Send TopicPrint
‹ Previous Topic | Next Topic ›
 
  « Board Index ‹ Board Top  

YaBB 2.6 Forum » Powered by YaBB 2.6.12!
YaBB Forum Software © 2000-2024. All Rights Reserved.

Valid RSS Valid XHTML Valid CSS Powered by Perl Source Forge