[Resolved] ABE breaks local Wiki (on IPv6)

Discussions about the Application Boundaries Enforcer (ABE) module

[Resolved] ABE breaks local Wiki (on IPv6)

Postby SkyBeam » Wed Jul 01, 2009 11:16 am

Hi

I just upgrade to the latest NoScript 1.9.5 version and noticed that my local installation of mediawiki (intranet) does not work any more. The page is displayed without any stylesheet. I found that disabling ABE in NoScript fixes the problems. Even resetting the whole NoScript settings to default did not change anything. The default SYSTEM rules
Site LOCAL
Accept from LOCAL
Deny

Seem to fail on IPv6. I found that using the local IPv4 address the page works correctly but when using the hostname (has an IPv4 and IPv6 DNS entry and FF connects using IPv6) then NoScript seems to block something.
I guess this could effect other IPv6 sites too.

Anyone else facing this bug?
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
SkyBeam
 
Posts: 2
Joined: Wed Jul 01, 2009 11:10 am

Re: ABE breaks local Wiki (on IPv6)

Postby Giorgio Maone » Wed Jul 01, 2009 11:24 am

Could you provide some more details?
  1. The exact text of the ABE message you get
  2. All the IPs of both the sites involved (origin and destination)
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
 
Posts: 6830
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: ABE breaks local Wiki (on IPv6)

Postby Guest » Wed Jul 01, 2009 9:31 pm

Giorgio Maone wrote:Could you provide some more details?
  1. The exact text of the ABE message you get
  2. All the IPs of both the sites involved (origin and destination)


ABE messages:
I do not get any messages regarding ABE. I also allowed all scripts for the site specified. Is there some log which I can quote/attach?
I just discoveered when I click on the "Log in" link I get the following ABE message:
Code: Select all
Request {GET http://server/index.php?title=Special:UserLogin&returnto=Main_Page <<< http://server/wiki/Main_Page} filtered by ABE <LOCAL> Deny


IPs:
Hostname used: http://server/
Server IPv4 address: 10.0.1.6
Server IPv6 adresses:
Server Global Unicast: 2001:41e0... (not fully disclosed)
Server ULA: fd00:0:1:1::6

Client IPv4 address: 10.0.1.208
Client IPv6 adresses:
Client Globel Unicast: 2001:41e0:.... (not fully disclosed)
Client ULA: fd00:0:1:1:xxx:xxxx:xxxx:xxxx (generated)
DNS suffix used: domain.local

Nslookup from client shows the following (Vista x64 client):
Code: Select all
C:\>nslookup server
Server:  server.domain.local
Address:  10.0.1.6

Name:    server.domain.local
Addresses:  fd00:0:1:1::6
          10.0.1.6


Wiki used: Mediawiki

I also tried to change the DNS entry in order to return the either the ULA or the global unicast address. The result is exactly the same. ABE seems to block the page or parts of it (stylesheet, scripts...).

I hope this helps to reproduce the problem.

When I disable ABE completely, then the page works perfectly as expected. When I use http://10.0.1.6/ in Firefox then it works too (forces usage of IPv4 addresses).
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
Guest
 

Re: ABE breaks local Wiki (on IPv6)

Postby Giorgio Maone » Wed Jul 01, 2009 10:34 pm

Could you check latest development build 1.5.9.2?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
 
Posts: 6830
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy

Re: ABE breaks local Wiki (on IPv6)

Postby SkyBeam » Thu Jul 02, 2009 8:37 am

Giorgio Maone wrote:Could you check latest development build 1.5.9.2?


I just installed 1.5.9.2 and re-enabled ABE. The intranet Wiki now shows up as expected again.
So I consider it to be fixed.

Thank you very much!
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
SkyBeam
 
Posts: 2
Joined: Wed Jul 01, 2009 11:10 am

Re: [Resolved] ABE breaks local Wiki (on IPv6)

Postby Sarathos » Sun Jul 26, 2009 1:36 pm

Well mine blocked redtube :p.....

Anyways, i i disabled ABE, but how do i re-enable it again?
Mozilla/5.0 (Windows; U; Windows NT 6.0; nb-NO; rv:1.9.0.12) Gecko/2009070611 Firefox/3.0.12 (.NET CLR 3.5.30729)
Sarathos
 

Re: [Resolved] ABE breaks local Wiki (on IPv6)

Postby Giorgio Maone » Sun Jul 26, 2009 2:33 pm

Sarathos wrote:Well mine blocked redtube :p.....

What [ABE] messages can you see in Tools|Error Console?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
 
Posts: 6830
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy


Return to ABE

Who is online

Users browsing this forum: No registered users and 3 guests