Hello,
I am having trouble uploading 35M mp3 files using wordpress Media Manger (upload) and it appears this has something to do with mod security/comodoWAF on a cpanel server. The mp3 file uploads 100% and then stays there without completing the process and finally showing http error ( as generic error message ) within few seconds after 100% upload is completed.
Here is the log that i see in modsec audit log
##############################################
[16/Jun/2017:14:31:29 --0400] WUQjN0o0Y2IAAz8H694AAAAB 3.4.5.6 37056 4.5.6.7 80
–7d92f751-B–
POST /wp-admin/async-upload.php HTTP/1.1
Host: www.mywebsitenamejustused.com
Connection: Keep-Alive
Accept-Encoding: gzip
CF-IPCountry: IN
X-Forwarded-For: 1.2.3.4
CF-RAY: 36ffcb67342d8472-HKG
Content-Length: 41109860
X-Forwarded-Proto: http
CF-Visitor: {“scheme”:“http”}
Origin: http://www.mywebsitenamejustused.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.104 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryXARTwFlQ0wvcR7An
Accept: /
Referer: http://www.mywebsitenamejustused.com/wp-admin/media-new.php
Accept-Language: en-US,en;q=0.8
Cookie: wordpress_8c86efabaf829e7330f3ea3253eb2ff6=nimda%7C1497809851%7CXG4e0z3xef1BSYGiGDHXSsgUFZJdZWLYZid0E15cfaW%7Cfadbbc6392aa81c6af66a484c345792fa9e319b6b74089b7ae885492d961641c; __cfduid=d90f42823e41a2910585130e42eb8c72e1497637034; wordpress_test_cookie=WP+Cookie+check; wordpress_logged_in_8c86efabaf829e7330f3ea3253eb2ff6=nimda%7C1497809851%7CXG4e0z3xef1BSYGiGDHXSsgUFZJdZWLYZid0E15cfaW%7Cd2c43e08ee39f4d111cef2ec5c39a21cb4533b42d83f5aa89a89325a1055a40b; wp-settings-1=libraryContent%3Dbrowse%26editor%3Dtinymce; wp-settings-time-1=1497637055
CF-Connecting-IP: 1.2.3.4
–7d92f751-F–
HTTP/1.1 500 Internal Server Error
Content-Length: 664
Connection: close
Content-Type: text/html; charset=iso-8859-1
–7d92f751-H–
Message: Error reading request body: Partial results are valid but processing is incomplete
Apache-Error: [file “config.c”] [line 454] [level 3] AH00524: Handler for %s returned invalid result code %d
Stopwatch: 1497637687436761 201780069 (- - -)
Stopwatch2: 1497637687436761 201780069; combined=1147, p1=878, p2=0, p3=154, p4=58, p5=56, sr=82, sw=1, l=0, gc=0
Producer: ModSecurity for Apache/2.9.0 (http://www.modsecurity.org/); CWAF_Apache.
Server: Apache
Engine-Mode: “ENABLED”
Note ( i have changed ips in 4octets above like 3.4.5.6 , 1.2.3.4 etc )
Please advice how can we fix this or what to look for?