Bug: Expand maxmimum upload size #1200

New Issue

MrUnknownDE · 2026-04-05T18:30:54+02:00

MrUnknownDE commented

2026-04-05 18:30:54 +02:00

Originally created by @MorganKryze on 7/21/2025

TLDR

Trying to upload files through a service, everything above 10Mb returns me 403 Forbidden.

Situation & steps

VPS setup:

Pangolin v1.7.3 (crowdsec v1.6.10, traefik v3.4.4)
Filebrowser v2.40.2

From my laptop, when trying to upload files under (around) 10Mb, everything works correctly.
Above (around) 10Mb, the file(s) try to upload in a cycle of one to three times, then crashes. The file(s) is not uploaded, or some are if multiple files.

Leads

Filebrowser is a service I am used to, and I knwo for sure that it can handle more than 10Mb transfers.

My assumption is that Crowdsec is responsible for this issue. The size of the packet outranges a maximum set somewhere, then with multiple tries, flag my ip and ban it for 4h (default) with a 403 Forbidden error.

This is an extract of a repetitive log message i get from the crowdsec instance whenever I try to upload a large file.

crowdsec  | time="2025-07-21T22:59:28Z" level=warning msg="Disrupting transaction with body size above the configured limit (Action Reject)" band=outband chain_rule_id=749632433 name=myAppSecComponent runner_uuid=faefd14f-c*****************7fc9ede6c tx_id=d1c1621d-3****************9080e7d7ef type=appsec

I guess that there should be a setting somewhere to change this maximum value, but cannot find it up until now.

I may be clumsy, if you need any more information about the config or the logs... feel free to ask!
Thanks for the help :) Fantastic tool btw

*Originally created by @MorganKryze on 7/21/2025* ## TLDR Trying to upload files through a service, everything above `10Mb` returns me `403 Forbidden`. ## Situation & steps VPS setup: - Pangolin v1.7.3 (crowdsec v1.6.10, traefik v3.4.4) - Filebrowser v2.40.2 From my laptop, when trying to upload files under (around) `10Mb`, everything works correctly. Above (around) `10Mb`, the file(s) try to upload in a cycle of one to three times, then crashes. The file(s) is not uploaded, or some are if multiple files. ## Leads Filebrowser is a service I am used to, and I knwo for sure that it can handle more than 10Mb transfers. My assumption is that Crowdsec is responsible for this issue. The size of the packet outranges *a* maximum set somewhere, then with multiple tries, flag my ip and ban it for 4h (default) with a `403 Forbidden error`. This is an extract of a repetitive log message i get from the crowdsec instance whenever I try to upload a large file. ```plain crowdsec | time="2025-07-21T22:59:28Z" level=warning msg="Disrupting transaction with body size above the configured limit (Action Reject)" band=outband chain_rule_id=749632433 name=myAppSecComponent runner_uuid=faefd14f-c*****************7fc9ede6c tx_id=d1c1621d-3****************9080e7d7ef type=appsec ``` I guess that there should be a setting somewhere to change this maximum value, but cannot find it up until now. I may be clumsy, if you need any more information about the config or the logs... feel free to ask! Thanks for the help :) Fantastic tool btw

MrUnknownDE closed this issue

2026-04-05 18:30:54 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1200