Re: [dl-ticket-service] Not Acceptable error with SQL Server backup file

2018-09-01 Thread Yuri D'Elia
On Fri, Aug 31 2018, Kelvin Smith wrote:
> If I put the file into a zip archive, everything works normally.
> However, I'd prefer to be able to send the file directly. Any ideas on
> what's going on?

By the error message, it's mod_security detecting the attachment as SQL
(which indeed it is), and blocking it on the basis that it might cause
an SQL injection. This happens before DL can process the attachment, so
this is not a problem on DL by itself.

You should be able to disable this specific case using
"SecRuleRemoveById" (using the appropriate ID as reported in the server
log) inside a  block or inside .htaccess (if allowed).

Look up SecRuleRemoveById or SecRuleEngine for more info.




[dl-ticket-service] Not Acceptable error with SQL Server backup file

2018-08-31 Thread Kelvin Smith
Using DL v0.17.1 and either the Thunderbird add-on or a direct upload to 
the online ticket service, sending a SQL Server backup causes an error 
when I try to download it. I get the message:


"Not Acceptable!

An appropriate representation of the requested resource could not be 
found on this server. This error was generated by Mod_Security."


I've tried several different SQL Server backups (coming from SQL Server 
Express 2014 and 2012) with the same result. The files display in the 
All Tickets list; clicking on the Download button in that list gives the 
same Not Acceptable error message.


If I put the file into a zip archive, everything works normally. 
However, I'd prefer to be able to send the file directly. Any ideas on 
what's going on?


Kelvin Smith