wget download forbidden

[Jan Andrasko]

Hi guys,

today, when trying to download ossec from your website, I was constatnly getting 403 error:

wget http://www.ossec.net/files/ossec-hids-2.8.tar.gz
--2014-07-29 15:16:21--  http://www.ossec.net/files/ossec-hids-2.8.tar.gz
Resolving www.ossec.net (www.ossec.net)... 150.70.191.237
Connecting to www.ossec.net (www.ossec.net)|150.70.191.237|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2014-07-29 15:16:21 ERROR 403: Forbidden.

After spoofing Mozilla Firefox user agent, file was downloaded correctly. Is there any special reason for blocking wget downloads?

Thanks

Jan

[Iacob Alexandru]

Yap, 403 with wget as well.

I used this ;

curl --header 'Host: www.ossec.net' --header 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0' --header 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' --header 'Accept-Language: en-US,en;q=0.5' --header 'DNT: 1' --header 'Referer: http://www.ossec.net/?page_id=19' --header 'Connection: keep-alive' 'http://www.ossec.net/files/ossec-hids-2.8.tar.gz' -o 'ossec-hids-2.8.tar.gz' -L

curl --header 'Host: www.ossec.net' --header 'User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0' --header 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' --header 'Accept-Language: en-US,en;q=0.5' --header 'DNT: 1' --header 'Content-Type: application/x-www-form-urlencoded' 'http://www.ossec.net/files/ossec-hids-2.8-checksum.txt' -O -J -L

[awidde...@hotmail.com]

I'm not sure they are blocking wget downloads specifically. Seems like they are just blocking anything without a user-agent specified which I guess could be for a number of things like bots or crawlers or something. I agree though that it is really annoying. I for one hope it gets fixed but I'm not sure who really runs/controls the OSSEC site.

[dan (ddp)]

I've forwarded this on to Vic and JB.

> --
>
> ---
> You received this message because you are subscribed to the Google Groups
> "ossec-list" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to ossec-list+...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[Joe Evango]

Hello,

This works for me:

wget -U ossec http://www.ossec.net/files/ossec-hids-2.8.tar.gz

[Jan Andrasko]

Hello Joe,

for me too, however all howtos and installation manuals don't contain information that you have to use -U option in wget. Could be misleading for newbies.

Jan

[dan (ddp)]

On Wed, Sep 3, 2014 at 9:27 AM, Jan Andrasko <andr...@gmail.com> wrote:
> Hello Joe,
>
> for me too, however all howtos and installation manuals don't contain
> information that you have to use -U option in wget. Could be misleading for
> newbies.
>

We're just waiting for the documentation site to use the latest
documentation. It's in the code, just hasn't been pulled. Sorry about
the delays.

[Patrick Morton]

Thank you!