403 forbidden

[jlittle]

Hi

Just got one of these trying to access the " Sleep and re-activation" thread in Help the New Guy. All I did was click on the new post button in "New Posts"; then the same again on the post in the "Activity Stream". I've no trouble with other posts.

403 FORBIDDEN!

Either the address you are accessing this site from has been banned for previous malicious behavior or the action you attempted is considered to be hostile to the proper functioning of this system.

The detected reason(s) you were blocked are:
SQLi (QU-024.9).

Your IP, Domain Name (if resolvable), the referring page (if any), QUERY, POST, User Agent, time of access, and date have been logged and flagged for admin review. Please either 1. Stop the bad behavior, or 2. Cease accessing this system.
The webmaster of this site has decided to provide you with an e-mail link to start a trouble ticket about this block.
Please do not change the beginning of the subject line, nor the preamble of the body text.

Click HERE to start a trouble ticket.

Your connection details:
Record #: 398544
Time: Thu, 21 Aug 2014 16:37:27 -0500
Running: 0.4.10a3 / 76f / c1c
Host: 52.110.252.27.dyn.cust.vf.net.nz
IP: 27.252.110.52
Post:
Query: 66181-Sleep-and-re-activation&goto=newpost
Stripped Query: 66181-sleep-and-re-activation&goto=newpost
Referer: https://www.kubuntuforums.net/search...earchid=472399
User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0
Reconstructed URL: http:// www.kubuntuforums.net /showthread.php?66181-Sleep-and-re-activation&goto=newpost

Generated by ZB Block 0.4.10a3 / 76f / c1c

[kubicle]

Be careful with that, ZB Block will lock you out if you trigger that too often (so don't retry to see if the issue is still there).

There have been problematic threads/links before (Rog seems particularly adept at finding them ) though I'm not sure the root cause for those have yet been found.

[vinnywright]

ya I got hit with that this evening as well ,,,,,,,,same post .

I filed out the trouble ticket ,,,,,,Gmaild it in,,,, tried it one more time and am now avoiding it

VINNY

[Rod J]

I get the same error here accessing that thread: https://www.kubuntuforums.net/showth...-re-activation

[Snowhog]

Due to some SQL Injection protection signatures used by ZB Block which are to broadly written, some of our existing threads/posts are triggering the 403 page. I've brought this to the attention of the developer of ZB Block this evening.

[jlittle]

Be careful with that, ZB Block will lock you out if you trigger that too often (so don't retry to see if the issue is still there).

Thanks for the warning.

[andystmartin]

I'm getting this by the 403 problem, as well. I'm definitely not happy to be accused of "malicious behavior".

[Snowhog]

Discussion on SpambotSecurity over this issue. For now, I've commented the particular signature that is triggering this 403.

[zaphod]

ZB Block beta signature release 77a is out, with the tighter, improved SQLi detections. The issue should vaporize.

Zap

[Snowhog]

ZB Block beta signature release 77a installed this evening.