NoScript and Akamai NetSession Interface installation loop

[Guest]

I'm using Firefox 12 and NoScript 2.4.2. When I visit a site that uses Akamai Download Manager for downloads, I run into trouble with the required NetSession Interface installation. The install runs, appears to finish, but then isn't recognized as installed and the installation starts again. Round and round, infinite installation loop. I have temporarily allowed the company domain, akamai.com domain and even 127.0.0.1 which the installer uses to communicate with the NetSession Client Interface it's installing. Even with all of it allowed, the installation runs over and over ad infinitum. The only way I can get NetSession Interface to install and work is to disable NoScript.

Has anyone else run into this problem and figured out a solution other than disabling NoScript?

Thanks.

[Giorgio Maone]

Cold you check whether you can find any [ABE] or [NoScript ABE] line in your Error Console (Ctrl+Shift+J)?

[ekimeno]

I do find lots of entries like this in my error console:

Code: Select all

[ABE] <LOCAL> Deny on {GET http://127.0.0.1:9421/api?function=getClientAttributes&installcpcode=78333&cid=0&complete&wrapper=DLMHelper.setInstalled(*);&r=0.2911575514706989 <<< http://www.akamai.com/html/solutions/downloadmanager_resumable_std.html# - 2}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

and they keep happening over and over, even after I exit the NetSession Interface installation.

You can try this for yourself by visiting the following:

http://www.akamai.com/html/solutions/downloadmanager_resumable_std.html

and clicking on the Start Download button in the demo. You might want to make sure you don't have Akamai NetSession Interface already installed on your PC.

Thank you for your help with this.

[Thrawn]

In hindsight, I should have spotted this straight away. Giorgio did.

ABE won't let sites contact 127.0.0.1 (or other local addresses), to prevent attacks on your router etc. You'll need to change your default rule (in Options - Advanced - ABE - System) to:

Code: Select all

Site LOCAL
Accept from LOCAL www.akamai.com
Deny


[Tom T.]

I'm not familiar with this product, but it may be possible to tighten Thrawn's rule, so that *all* content from Akamai is not allowed to access your local resources:

Code: Select all

Site LOCAL
Accept from LOCAL http://www.akamai.com/html/solutions/downloadmanager_resumable_std.html
Deny

Or perhaps some of the stuff at the end may need to be trimmed off, perhaps something like

Code: Select all

Site LOCAL
Accept from LOCAL http://www.akamai.com/html/solutions/downloadmanager*
Deny

Anyway, start with the most restrictive, then if it still produces the error, gradually lessen the restriction.
Not personally fond of allowing the entire site, which serves content from thousands of its customers, to bypass ABE altogether.

FWIW, I don't like sites that use 127.0.0.1 (your "localhost" address), and wouldn't deal with one that did. IMHO. YMMV.

[Giorgio Maone]

Actually, the most restrictive rule, to be put before the default LOCAL one in the SYSTEM ruleset, would be:

Code: Select all

Site 127.0.0.1:9421
Accept from http://www.akamai.com/html/solutions/*