Webserver not accessible - 403 Request forbidden

Post your questions about Web Server usage and Apache + PHP + MySQL/SQLite web applications.
Locked
csteinhilber
First post
Posts: 1
Joined: Sat Apr 04, 2020 6:10 am

Webserver not accessible - 403 Request forbidden

Post by csteinhilber »

Hoping this is simple.

I have an old TS-439, running QTS 4.2.6 (2020/01/09). It's been running my PLEX server for a number of years, but I finally moved that to a new NAS.
I cleaned the 439 off, and wanted to get the webserver running as a development environment (local LAN only).
I removed PLEX and a couple of other apps, enabled the Webserver in Control Panel, restored it to default configuration just to start fresh, but still, whenever I try visiting port :80 in a browser from my desktop, I get:

Code: Select all

Error response
Error code 403.

Message: Not Serving Client 192.168.1.48.

Error code explanation: 403 = Request forbidden -- authorization will not help.
I've poured through all the settings I can find in the QTS, including the Allow/Deny list, user permissions, shared folders, nothing seems out of the ordinary. The "guest" user, which I assume the Webserver uses, does not appear anywhere, but I gather that's typical.

Found a couple of posts about updating the apache.conf to use "Options FollowSymLinks", restarted/reloaded the apache service several times, nothing seems to help.

Anyone have any pointers, or is there a way to basically factory reset everything in QTS back to defaults (including conf files)?

Thanks!
-Carl
Xorer
First post
Posts: 1
Joined: Sun Apr 05, 2020 10:19 pm

Re: Webserver not accessible - 403 Request forbidden

Post by Xorer »

Hello, having the same problem runing TS-873 Firmware 4.4.2.1262

"Forbidden
You don't have permission to access /AVIReport/ on this server."

Don't know if it generates from the same origin.
A Web server was intended on local network to accommodate files locally, linked from the internet by application.
Virtual host Enabled, port 80 directory /WEB/AVIReport host: AVIReport

AVIReport folder is also shared and I have full access to it as mapped network drive \\192.168......\AVIReport\

What could be the reason it won't let me access to the server?


Please Help.
You do not have the required permissions to view the files attached to this post.
WesMC
First post
Posts: 1
Joined: Fri Apr 30, 2021 6:45 am

Re: Webserver not accessible - 403 Request forbidden

Post by WesMC »

I'm running a QNAP TS230 on 4.5.3.1652.

With Default SSL
From the first unboxing, Chrome wouldn't support HTTP to the device by IP address, host name or fqdn. I've been getting by with HTTP access (local network only).
With HTTP, if I browse to http://<qnap-ip-address> and the QNAP displays the address http://<qnap-ip-address>/cgi-bin/ and the QNAP Control Panel.

With My Own SSL
I just added SSL wildcard credentials via the "Control Panel | System | Security | Replace Certificate" page. [The wildcard cert is from a trusted CA.] Now, Chrome trusts the connection to https://<fqdn>, which is within the SSL wildcard. The TS230 displays an index page - i.e., no automatic forwarding to the cgi-bin directory.
Index of /
Name Last modified Size Description
cgi-bin/ 2021-03-30 09:22 -
If I browse to https://<fqdn>/cgi-bin/ (by brute force), I get the following:
It appears you don't have
permission to access this page.
403 Error. Forbidden.
smtim
New here
Posts: 9
Joined: Thu Nov 08, 2018 12:34 am

Re: Webserver not accessible - 403 Request forbidden

Post by smtim »

If you have any SSL certificate applied, in my case Let's Encrypt, that does not allow to add any IP address rather than the domain name like https://yournasname.myqnapcloud.com
You have to add https when accessing your NAS through local IP address like https://192.168.1.150 not 192.168.1.150 to the web browser
Web browser i.e. Firefox would indicate the connection has potential security risk. Click Advanced.. and Accept the Risk and continue.

Sorry too late to reply but may be would help other people
Locked

Return to “Web Server & Applications (Apache + PHP + MySQL / SQLite)”