Android Question mod security error 403??

ilan

Expert
Licensed User
Longtime User
yesterday i get a mail from my server provider

Dear Customer,

Please be advised that the following Windows hosting servers will be undergoing maintenance as per the schedule and reason mentioned below.

Reason:

To enable mod_security rules to increase the security on the servers.

after that update my apps cannot download text files from my server. i am using HttpUtills2Service to download the file and read the text with job.GetString. until yersterday it worked fine but now i get an error:

** Activity (main) Create, isFirst = true **
** Activity (main) Resume **
** Activity (main) Pause, UserClosed = true **
** Activity (menu) Create, isFirst = true **
** Activity (menu) Resume **
** Service (httputils2service) Create **
** Service (httputils2service) Start **
** Service (httputils2service) Start **
JobName = Job6, Success = true
JobName = Job1, Success = true
http://sagital.net.208-91-198-176.plesk-web15.webhostbox.net/lists/0504844663.txt
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>IIS 7.5 Detailed Error - 403.0 - ModSecurity Action</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana,Arial,Helvetica,sans-serif;background:#CBE1EF;}
code{margin:0;color:#006600;font-size:1.1em;font-weight:bold;}
.config_source code{font-size:.8em;color:#000000;}
pre{margin:0;font-size:1.4em;word-wrap:break-word;}
ul,ol{margin:10px 0 10px 40px;}
ul.first,ol.first{margin-top:5px;}
fieldset{padding:0 15px 10px 15px;}
.summary-container fieldset{padding-bottom:5px;margin-top:4px;}
legend.no-expand-all{padding:2px 15px 4px 10px;margin:0 0 0 -12px;}
legend{color:#333333;padding:4px 15px 4px 10px;margin:4px 0 8px -12px;_margin-top:0px;
border-top:1px solid #EDEDED;border-left:1px solid #EDEDED;border-right:1px solid #969696;
border-bottom:1px solid #969696;background:#E7ECF0;font-weight:bold;font-size:1em;}
a:link,a:visited{color:#007EFF;font-weight:bold;}
a:hover{text-decoration:none;}
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;}
h3{font-size:1.4em;margin:10px 0 0 0;color:#CC0000;}
h4{font-size:1.2em;margin:10px 0 5px 0;
}#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS",Verdana,sans-serif;
color:#FFF;background-color:#5C87B2;
}#content{margin:0 0 0 2%;position:relative;}
.summary-container,.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
.config_source{background:#fff5c4;}
.content-container p{margin:0 0 10px 0;
}#details-left{width:35%;float:left;margin-right:2%;
}#details-right{width:63%;float:left;overflow:hidden;
}#server_version{width:96%;_height:1px;min-height:1px;margin:0 0 5px 0;padding:11px 2% 8px 2%;color:#FFFFFF;
background-color:#5A7FA5;border-bottom:1px solid #C1CFDD;border-top:1px solid #4A6C8E;font-weight:normal;
font-size:1em;color:#FFF;text-align:right;
}#server_version p{margin:5px 0;}
table{margin:4px 0 4px 0;width:100%;border:none;}
td,th{vertical-align:top;padding:3px 0;text-align:left;font-weight:bold;border:none;}
th{width:30%;text-align:right;padding-right:2%;font-weight:normal;}
thead th{background-color:#ebebeb;width:25%;
}#details-right th{width:20%;}
table tr.alt td,table tr.alt th{background-color:#ebebeb;}
.highlight-code{color:#CC0000;font-weight:bold;font-style:italic;}
.clear{clear:both;}
.preferred{padding:0 5px 2px 5px;font-weight:normal;background:#006633;color:#FFF;font-size:.8em;}
-->
</style>

</head>
<body>
<div id="header"><h1>Server Error in Application "SAGITAL.NET"</h1></div>
<div id="server_version"><p>Internet Information Services 7.5</p></div>
<div id="content">
<div class="content-container">
<fieldset><legend>Error Summary</legend>
<h2>HTTP Error 403.0 - ModSecurity Action</h2>
<h3>You do not have permission to view this directory or page.</h3>
</fieldset>
</div>
<div class="content-container">
<fieldset><legend>Detailed Error Information</legend>
<div id="details-left">


<table border="0" cellpadding="0" cellspacing="0">
<tr class="alt"><th>Module</th><td>ModSecurity IIS (32bits)</td></tr>
<tr><th>Notification</th><td>BeginRequest</td></tr>
<tr class="alt"><th>Handler</th><td>StaticFile</td></tr>
<tr><th>Error Code</th><td>0x00000000</td></tr>

</table>
</div>
<div id="details-right">
<table border="0" cellpadding="0" cellspacing="0">
<tr class="alt"><th>Requested URL</th><td>http://sagital.net.208-91-198-176.plesk-web15.webhostbox.net:80/lists/0504844663.txt</td></tr>
<tr><th>Physical Path</th><td>D:\inetpub\vhosts\sagital.net\httpdocs\lists\0504844663.txt</td></tr>
<tr class="alt"><th>Logon Method</th><td>Not yet determined</td></tr>
<tr><th>Logon User</th><td>Not yet determined</td></tr>

</table>
<div class="clear"></div>
</div>
</fieldset>
</div>
<div class="content-container">
Message longer than Log limit (4000). Message was truncated.
JobName = listdown, Success = false
Error: ModSecurity Action

what can i do to solve this problem?? i tried to contact my server provider but they are really dump. they say everything is fine on their side and they need a screenshot of the msg i get even i sent them the error msg they still want to see a screenshot...

can someone please help me? some of my apps are not working now because of that...

thanx
 

ilan

Expert
Licensed User
Longtime User
A 403 error on IIS usually means security related issue on the server or permission denied to that directory. If you have access to that directory check permissions settings.

thank you for your help, i did what you said (i guess i did :confused:)

is this ok like this:

perm.jpg


but still after update the permission i am not able do download, could it be that it takes time until the setting will effect??
 
Upvote 0

sorex

Expert
Licensed User
Longtime User
it should be direct, read should be enough tho.

can you pm the link?
 
Upvote 0

ilan

Expert
Licensed User
Longtime User
yes i can too, but when i try to use Http in my app to download it and get string from the text file job fails...
and i get this error http://www.sagital.net/er1.jpg

EDIT: btw it worked perfect before they did and server security update on 1/9/2015 (2 days ago) so it has something to do with that
 
Upvote 0

sorex

Expert
Licensed User
Longtime User
B4X:
dl.Initialize("kkk",Me)
dl.Download("http://www.sagital.net/lists/0504844663.txt")

I use the httputils2 (version 2.10) library, not that class file

The one that was modded for use with/via that new Okhttp lib
 
Upvote 0

ilan

Expert
Licensed User
Longtime User
Thank you, i am using the class file.
I will check that lib, can you please tell me where i can download it?

(Btw do you have any experience with creating your own ftp server? I had enough from those companies, i would like to use my mac mini and turn it to an ftp server where i can store my files and download them..)
 
Upvote 0

sorex

Expert
Licensed User
Longtime User
well, you have an ftp service in windows that you can use or use something like serv-u / filezilla
 
Upvote 0

sorex

Expert
Licensed User
Longtime User
you can also search for 3CDeamon, it's a free (t)ftp server program from 3Com which is used a lot to upgrade firewalls, switches, voip phones etc

I don't know if any of these exist for mac tho but you could setup a virtual machine on your mac with windows and install it there.
 
Upvote 0

ilan

Expert
Licensed User
Longtime User
There is an app called Os X Server created by apple it cost about 15$ and it support lot of great stuff including file sharing...

I will maybe try it out...

Thanx anyway sorex :)
 
Upvote 0

ilan

Expert
Licensed User
Longtime User
thank you so much sorex, updating to okHttp has solved the problem!!

i think @Erel should add a feature to b4a/b4i/b4j that if there is a new lib version available i will see a notification in my library tab (only for libs that i am using) like if i use http v1.0 and there is a new version v1.2 then i should see a notification near to that lib... that would be really great and save lot of frustration :confused:
 
Upvote 0
Top