BPS preventing me from podcasting…….

  • Resolved Ham Radio

    (@ham-radio)


    11 years, 3 months ago

    Hi Everyone!

    I have done some searches and have come up empty so sorry if this has been answered already.

    I am trying to do some podcasting, and it seems that BPS is preventing me from doing that.

    I use PowerPress for my podcasting, and every time it was trying to verify the MP3 file, it was returing a 403 error. That was easy to fix, since I just moved my MP3 files to a directory outside of my WordPress directory.

    However, I use a program called AntennaPod on my phone for podcasts, and to make sure my podcasts work, I entered in my URL. It also returned a 403 error. I can’t download my MP3 files, and can’t even add the feed to my app. I went ahead an deleted my .htaccess file, and everything works just fine. I would really like to keep BPS as I feel it protects me, so is there any way to allow these kinds of requests? Thanks!

    https://www.ads-software.com/plugins/bulletproof-security/

Viewing 8 replies - 16 through 23 (of 23 total)
  • Thread Starter Ham Radio

    (@ham-radio)

    Narrowing the problem, it’s between line 57, and 183.

    Thread Starter Ham Radio

    (@ham-radio)

    This might be a problem, you say in the .htaccess file “# IMPORTANT!!! If you add or remove a skip rule you must change S= to the new skip number” However, it seems you are missing [S=2], you go straight from [S=1] to [S=3]

    Thread Starter Ham Radio

    (@ham-radio)

    Figured it out. I have to comment out these three lines:

    #RewriteCond %{HTTP_USER_AGENT} (havij|libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]
#RewriteCond %{HTTP_USER_AGENT} (%0A|%0D|%27|%3C|%3E|%00) [NC,OR]
#RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|"|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]
    Plugin Author AITpro

    (@aitpro)

    Great! yep when I looked at the code in the AntennaPod app it seemed like the User Agent would be the most likely issue/problem. You can narrow it down even further by removing one thing at a time. I would start by removing |java from the User Agent filters.

    RewriteCond %{HTTP_USER_AGENT} (havij|libwww-perl|wget|python|nikto|curl|scan|winhttp|clshttp|loader) [NC,OR]

    Not sure exactly what would need to be removed in this filter.
    RewriteCond %{HTTP_USER_AGENT} (%0A|%0D|%27|%3C|%3E|%00) [NC,OR]

    Where is this outdated Server Protocol coming from in the Security log error you posted?
    SERVER_PROTOCOL: HTTP/1.0

    HTTP/1.0 typically indicates either shady activity by a hacker or spammer or an extremely outdated proxy. As of 1997 the new Server Protocol is HTTP/1.1. All legitimate requests should be using HTTP/1.1.

    Nope the skip rules are correct. There is not supposed to be an S=2 rule.

    Thread Starter Ham Radio

    (@ham-radio)

    Awesome! I re-enabled all three lines, and removed |Java| and it still works! That is great! Thank you soooooo much!!!! I love BPS!!!!!!!

    About the outdated Server Protocol, I am not sure……I have several of those in my log.

    >>>>>>>>>>> 403 GET or Other Request Error Logged - August 19, 2013 - 4:17 pm <<<<<<<<<<<
REMOTE_ADDR: 173.254.28.43
Host Name: just43.justhost.com
SERVER_PROTOCOL: HTTP/1.0
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER:
REQUEST_URI: /archives/thewordtoliveby/2013/the_word_to_live_by_08-17-13.mp3.mp3
QUERY_STRING:
HTTP_USER_AGENT: WordPress/3.6; https://lwhf.com

>>>>>>>>>>> 403 GET or Other Request Error Logged - August 19, 2013 - 4:17 pm <<<<<<<<<<<
REMOTE_ADDR: 173.254.28.43
Host Name: just43.justhost.com
SERVER_PROTOCOL: HTTP/1.0
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER:
REQUEST_URI: /archives/thewordtoliveby/2013/the_word_to_live_by_08-17-13.mp3.mp3
QUERY_STRING:
HTTP_USER_AGENT: WordPress/3.6; https://lwhf.com
    Plugin Author AITpro

    (@aitpro)

    Cool!

    You can disregard the HTTP/1.0 issue.

    I used Firefox with the Live HTTP Header add-on and I have seen this issue before. It is not important.

    OCSP (Online Certificate Status Protocol)

    https://ocsp.verisign.com/

POST / HTTP/1.1
Host: ocsp.verisign.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:22.0) Gecko/20100101 Firefox/22.0 AlexaToolbar/alxf-2.18
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Content-Length: 115
Content-Type: application/ocsp-request
Connection: keep-alive
0q0o0M0K0I0	+

HTTP/1.0 200 Ok
Last-Modified: Mon, 19 Aug 2013 13:13:08 GMT
Expires: Mon, 26 Aug 2013 13:13:08 GMT
Content-Type: application/ocsp-response
content-transfer-encoding: binary
Content-Length: 1856
Cache-Control: max-age=507268, public, no-transform, must-revalidate
Date: Tue, 20 Aug 2013 16:18:40 GMT
nncoection: close
Connection: Keep-Alive
    Thread Starter Ham Radio

    (@ham-radio)

    Sounds good! Thanks a lot for helping me out, sure apreciate it!

    Plugin Author AITpro

    (@aitpro)

    Very welcome! Resolving this thread. Thanks.

Viewing 8 replies - 16 through 23 (of 23 total)
  • The topic ‘BPS preventing me from podcasting…….’ is closed to new replies.