osTicket v.14.1

Dave_10

Hola a todos.
Deje de poder adjuntar archivos de un momento a otro, revisando los logs me aparece:

Curl_http_done: called premature == 0
Connection #0 to host auth.smartlinks.dev left intact
[Thu Mar 07 18:46:29.865618 2024] [:error] [pid 18701] [client 172.16.60.8:50025] [client 172.16.60.8] ModSecurity: Failed to open temporary file for reading: /tmp//20240307-184629-Zepf5QoKCiIAAEkN1PsAAAAZ-request_body-j0HAGC [hostname "tools.fidelitymkt.com"] [uri "/helpdesk/scp/ajax.php/form/upload/attach"] [unique_id "Zepf5QoKCiIAAEkN1PsAAAAZ"], referer: https://tools.fidelitymkt.com/helpdesk/scp/tickets.php?id=39766
[Thu Mar 07 18:46:29.878500 2024] [:error] [pid 18701] [client 172.16.60.8:50025] [client 172.16.60.8] ModSecurity: Input filter: Error reading from temporary file: Bad file descriptor [hostname "tools.fidelitymkt.com"] [uri "/helpdesk/scp/ajax.php/form/upload/attach"] [unique_id "Zepf5QoKCiIAAEkN1PsAAAAZ"], referer: https://tools.fidelitymkt.com/helpdesk/scp/tickets.php?id=39766
[Thu Mar 07 18:46:29.878919 2024] [:error] [pid 18701] [client 172.16.60.8:50025] [client 172.16.60.8] ModSecurity: Audit log: Failed to open temporary file for reading: /tmp//20240307-184629-Zepf5QoKCiIAAEkN1PsAAAAZ-request_body-j0HAGC [hostname "tools.fidelitymkt.com"] [uri "/helpdesk/scp/ajax.php/form/upload/attach"] [unique_id "Zepf5QoKCiIAAEkN1PsAAAAZ"], referer: https://tools.fidelitymkt.com/helpdesk/scp/tickets.php?id=39766
[Thu Mar 07 18:46:29.879085 2024] [:error] [pid 18701] [client 172.16.60.8:50025] [client 172.16.60.8] ModSecurity: Input filter: Failed to delete temporary file: /tmp//20240307-184629-Zepf5QoKCiIAAEkN1PsAAAAZ-request_body-j0HAGC [hostname "tools.fidelitymkt.com"] [uri "/helpdesk/scp/ajax.php/form/upload/attach"] [unique_id "Zepf5QoKCiIAAEkN1PsAAAAZ"], referer: https://tools.fidelitymkt.com/helpdesk/scp/tickets.php?id=39766

Al revisar la configuracion de modsecuirty no esta en modo bloqueo, ya no se que pueda ser, a alguien le ha pasado?

Saludos.

KevinTheJedi

Even though you say it’s not in blocking mode it is still blocking/logging something about a temp file for a request body. You can see the error clearly states:

ModSecurity: Audit log: Failed to open temporary file for reading: /tmp//20240307-184629-Zepf5QoKCiIAAEkN1PsAAAAZ-request_body-j0HAGC [hostname "tools.fidelitymkt.com

You should contact your server admin and/or hosting provider for further assistance.

Cheers.