403 Forbidden/"client denied by server configuration" errors 403 Forbidden/"client denied by server configuration" errors
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

403 Forbidden/"client denied by server configuration" errors

Started by creativename, June 25, 2005, 08:53:05 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

creativename

I'm getting frequent 403 forbidden ("You don't have permission to access...") errors on most Coppermine pages. In the server log these show up as "client denied by server configuration". However there is nothing in the .htaccess file or httpd.conf that would cause this. A blank .htaccess file doesn't fix it either. My installation is at:

[snip]

It seems that I only get these errors after trying to Batch Add, or while doing so (though I could be wrong about that). These errors affect the pages (e.g., searchnew.php, index.php) themselves, but even when the pages work sometimes the stylesheet doesn't; and the images also have this problem, and often do not display.

Some sample errors from the error log:
client denied by server configuration: /home/public_html/gallery/addpic.php
client denied by server configuration: /home/public_html/gallery/themes/classic/images/site_logo.png
client denied by server configuration: /home/public_html/gallery/themes/classic/style.css
client denied by server configuration: /home/public_html/gallery/searchnew.php
client denied by server configuration: /home/public_html/gallery/showthumb.php
client denied by server configuration: /home/public_html/gallery/albums/sc2k4/thumb_sum04b63h.jpg

Chmodding the files in question to 777 doesn't even help.

This is on my dedicated server and I've never encountered these types of errors before.

Any help would be much appreciated.

creativename

Solved! Turns out it was a server configuration problem.

The problems were caused by a module, mod_dosevasive, which tries to prevent DoS attacks. This causes problems on pages with lots of graphics because the server thinks all those requests represent a DoS attack.

To fix this, comment out the following lines in httpd.conf (note that these lines are probably not next to each other), and then do "httpd restart":
#LoadModule dosevasive_module libexec/mod_dosevasive.so
#AddModule mod_dosevasive.c


Now that I've seen Coppermine in action, I must say that I am greatly impressed :) Truly an admirable application.