ABE rule to allow display of WLAN provider login page

Discussions about the Application Boundaries Enforcer (ABE) module
problembear

ABE rule to allow display of WLAN provider login page

Post by problembear »

Greetings,

there is trouble with ABE when a system autoconnects to a public WLAN that requires token or account based registration or access control through a initial web page presented by the public WLAN provider;
this initial webpage is returned to the browser upon any attempt to open some INTERNET webpage, before registering;
e.g.
(1) system has connection to public WLAN;
(2) attempt to open for instance 'http://www.google.com/'
(3) will return the WLAN provider registration page 'http://wlansome.dmn1.dmn2:9050/new-session.php' (or something like this) from the WLAN provider proxy ..;

With the standard ABE ruleset, the following error appears:
The request {GET http://wlansome.dmn1.dmn2:9050/new-sess ... oogle.com/<<<http://www.google.com/, chrome://browser/content/browser.xul-6} had been filtered by ABE: <LOCAL>Deny


What is the best ABE exception rule to deal with such situation ?
The rule should be something like:
--> Whatever URL the browser user requests, always accept a response coming from the domain: *wlansome.dmn1.dmn2.*
(--> How to distinguish between different WLAN provider domains - airpports, hotels .. ?)
---------------------------------------------------------------------
Site ALL
Accept ALL from *.wlansome.dmn1.dmn2
---------------------------------------------------------------------
Prepended the above to the SYSTEM and USER sections of ABE and the page loading hangs forever .. so there is a problem.
Where to change the rules - PREPEND only to SYSTEM or only to USER ?
What is the problem - any recommendations for adapting the rule, to avoid the page loading hang forever ?

Thank you for your answers and help,

Best regards, problembear
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1
problembear

Re: ABE rule to allow display of WLAN provider login page

Post by problembear »

yes that is true, but with NoScript / ABE enabled with the standard ruleset it can not be displayed, instead an error like the following (as mentioned in the original post) is shown in a small black popup bar in the top of the firefox window:
-----------------------------
The request {GET http://wlansome.dmn1.dmn2:9050/new-sess ... ?url=http://www.google.com/<<<http://www.google.com/, chrome://browser/content/browser.xul-6} had been filtered by ABE: <LOCAL>Deny
-----------------------------

In order for this to work with activated NoScript / ABE some clever exception rule is required .. and my attempts did not work so far ..
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: ABE rule to allow display of WLAN provider login page

Post by Thrawn »

Try

Code: Select all

Site .wlansome.dmn1.dmn2:9050
Accept
above the default rule.

What is happening is that your Wifi provider is impersonating Google and sending you a redirect to itself, which ABE sees as a request from Google to wlansome.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (Android; Mobile; rv:15.0) Gecko/15.0 Firefox/15.0a1
problembear

Re: ABE rule to allow display of WLAN provider login page

Post by problembear »

thank you for your reply, it works fine now .. with the rule:
# Rules are evaluated top to bottom - processing stops at first rule match !!
Site .wlansome.dmn1.dmn2
Accept

.. there is still a problem with certain websites loading forever and not getting to the WLAN provider login page and never display .. this seem to be associated with the combination of ADDONs (NoScript; Ghostery and https) .. because problem disappears in browser without any ADDONs .. need to further isolate issue ..
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:13.0) Gecko/20100101 Firefox/13.0.1
Post Reply