403 禁止及其他错误

[poyrazdursuncan (Dursun Can)]

我收到 403 禁止错误。我无法更改设置。我无法创建主题，还有更多问题。我最后添加了 WAF。一旦我收到 429 速率限制错误。我该如何解决这个问题？

浏览器控制台

浏览器网络

[poyrazdursuncan (Dursun Can)]

操作失败时出现控制台错误。

[JammyDodger]

我恐怕没有Web应用防火墙（WAF）方面的经验，但搜索结果中有几个可能有用（也可能没用）的主题？

How to build a Discourse Installation with an Open Source WAF

I am not allowed to post in How-Tos so I will post this here Overview The goal is to add a WAF to existing resources while maintaining performance on a small installation. In this example, we will use a single EC2 instance. Since Discourse is run in docker, we are able to install NGINX on the host and use proxy pass to feed traffic into our docker container. We are also using RDS for PostgreSQL. [Web%20App%20Reference%20Architecture(3)] Discourse Configuration Our first step…

Discourse + Web Application Firewall (WAF) mod_security

What is the recommended WAF to run in-front of Discourse? I recently succeeded in modifying the nginx config installed in the Discourse docker container to include ModSecurity and the OWASP (Open Web Application Security Project) CRS (Core Rule Set). OWASP ModSecurity Core Rule Set (CRS) So far my tests are great, and ModSecurity appears to play very well with Discourse ootb. What are other users’ experiences with WAFs & Discourse? Do you have any recommendations other than ModSecurity?

你确定需要Web应用防火墙（WAF）吗？

[pfaffman (Jay Pfaffman)]

您是如何安装 discourse 的？这是一个标准安装吗？

[poyrazdursuncan (Dursun Can)]

修复 WAF 配置解决了该问题。