ABE rule to allow display of WLAN provider login page

Discussions about the Application Boundaries Enforcer (ABE) module

ABE rule to allow display of WLAN provider login page

Postby problembear » Mon Jul 09, 2012 10:58 am

Greetings,

there is trouble with ABE when a system autoconnects to a public WLAN that requires token or account based registration or access control through a initial web page presented by the public WLAN provider;
this initial webpage is returned to the browser upon any attempt to open some INTERNET webpage, before registering;
e.g.
(1) system has connection to public WLAN;
(2) attempt to open for instance 'http://www.google.com/'
(3) will return the WLAN provider registration page 'http://wlansome.dmn1.dmn2:9050/new-session.php' (or something like this) from the WLAN provider proxy ..;

With the standard ABE ruleset, the following error appears:
The request {GET http://wlansome.dmn1.dmn2:9050/new-sess ... oogle.com/<<<http://www.google.com/, chrome://browser/content/browser.xul-6} had been filtered by ABE: <LOCAL>Deny


What is the best ABE exception rule to deal with such situation ?
The rule should be something like:
--> Whatever URL the browser user requests, always accept a response coming from the domain: *wlansome.dmn1.dmn2.*
(--> How to distinguish between different WLAN provider domains - airpports, hotels .. ?)
---------------------------------------------------------------------
Site ALL
Accept ALL from *.wlansome.dmn1.dmn2
---------------------------------------------------------------------
Prepended the above to the SYSTEM and USER sections of ABE and the page loading hangs forever .. so there is a problem.
Where to change the rules - PREPEND only to SYSTEM or only to USER ?
What is the problem - any recommendations for adapting the rule, to avoid the page loading hang forever ?

Thank you for your answers and help,

Best regards, problembear
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1
problembear
 

Re: ABE rule to allow display of WLAN provider login page

Postby problembear » Tue Jul 10, 2012 9:34 am

yes that is true, but with NoScript / ABE enabled with the standard ruleset it can not be displayed, instead an error like the following (as mentioned in the original post) is shown in a small black popup bar in the top of the firefox window:
-----------------------------
The request {GET http://wlansome.dmn1.dmn2:9050/new-sess ... ?url=http://www.google.com/<<<http://www.google.com/, chrome://browser/content/browser.xul-6} had been filtered by ABE: <LOCAL>Deny
-----------------------------

In order for this to work with activated NoScript / ABE some clever exception rule is required .. and my attempts did not work so far ..
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1
problembear
 

Re: ABE rule to allow display of WLAN provider login page

Postby Thrawn » Wed Jul 11, 2012 7:05 am

Try
Code: Select all
Site .wlansome.dmn1.dmn2:9050
Accept

above the default rule.

What is happening is that your Wifi provider is impersonating Google and sending you a redirect to itself, which ABE sees as a request from Google to wlansome.
======
Thrawn
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCM/CS/IT/M/S d++(-) s+: C++$ ULS$>++++ P(+) L++ W++
K- w V? PS-(---) PE Y+ PGP->++ t@ X R tv b++>+++ DI+@
!D G>+++ e++>+++ h--- r+++ m?
-----END GEEK CODE BLOCK-----
Mozilla/5.0 (Android; Mobile; rv:15.0) Gecko/15.0 Firefox/15.0a1
User avatar
Thrawn
Senior Member
 
Posts: 959
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia

Re: ABE rule to allow display of WLAN provider login page

Postby problembear » Thu Jul 12, 2012 8:57 am

thank you for your reply, it works fine now .. with the rule:
# Rules are evaluated top to bottom - processing stops at first rule match !!
Site .wlansome.dmn1.dmn2
Accept

.. there is still a problem with certain websites loading forever and not getting to the WLAN provider login page and never display .. this seem to be associated with the combination of ADDONs (NoScript; Ghostery and https) .. because problem disappears in browser without any ADDONs .. need to further isolate issue ..
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1
problembear
 


Return to ABE

Who is online

Users browsing this forum: No registered users and 2 guests