InformAction Forums

by **barbaz** » Thu Jan 28, 2016 3:08 pm

Alande wrote:i done and see kaspersky advisor in search page but i should delete this line (Site LOCAL
Accept from LOCAL
Deny) on system or not?

No!

Don't delete it!
That is protecting everything on your local network, including but not limited to your router (if you have), your computer, other computers on your same LAN,... protecting all that from tampering by websites.

Alande wrote:is this ok?

for enable every where put this "Site ff.kis.scr.kaspersky-labs.com Accept GET" or "Site ff.kis.scr.kaspersky-labs.com Accept GET POST" ?

Yes looks like you have done it right

by **Alande** » Thu Jan 28, 2016 2:52 pm

i done and see kaspersky advisor in search page but i should delete this line (Site LOCAL
Accept from LOCAL
Deny) on system or not?

is this ok?

for enable every where put this "Site ff.kis.scr.kaspersky-labs.com Accept GET" or "Site ff.kis.scr.kaspersky-labs.com Accept GET POST" ?

by **Giorgio Maone** » Tue Aug 11, 2015 9:49 pm

LuisFeps wrote:What does OP mean?

"Original Poster" (you).

LuisFeps wrote:It appeared after Kaspersky Internet Security installation.
I may be wrong but I don't think it's possible to install it without installing K. Internet Security.

That's what I suspected and wanted you to confirm, thanks.

by **LuisFeps** » Tue Aug 11, 2015 9:16 pm

What does OP mean?

I don't know how it works, but there's only one Kaspersky add-on installed: Kaspersky Protection. And it's not the URL Advisor alone because there are more Kaspersky "tools" integrated to Firefox (Private Browsing, On Screen Keyboard, Safe Money....). It appeared after Kaspersky Internet Security installation.
I may be wrong but I don't think it's possible to install it without installing K. Internet Security.

by **Giorgio Maone** » Tue Aug 11, 2015 1:50 pm

For reason unrelated to this thread, I would be grateful if the OP could explain me how to install Kaspersky URL Advisor or at least send me its XPI.
Thanks!

by **barbaz** » Tue Aug 11, 2015 12:01 am

On behalf of all of us, thanks for the kind words & you're welcome

by **LuisFeps** » Mon Aug 10, 2015 11:57 pm

barbaz wrote:If you only have "Accept GET POST", and *not* "Accept GET POST from [...]", then it's set up to work everywhere. If you want it to only work on specified sites, you would add a "from [...]" to your Accept rule as shown in Giorgio's example.

Ok! Thank you very very much!

Thank you everyone for such great support!
You guys are the best!

by **barbaz** » Mon Aug 10, 2015 11:43 pm

LuisFeps wrote:So it means, in this case, with that rule, the URL Advisor will only work with a Google search?

If you only have "Accept GET POST", and *not* "Accept GET POST from [...]", then it's set up to work everywhere. If you want it to only work on specified sites, you would add a "from [...]" to your Accept rule as shown in Giorgio's example.

by **LuisFeps** » Mon Aug 10, 2015 11:38 pm

barbaz wrote:So it needs POST as well as GET, so try Accept GET POST and see if that works?

Yes! Now it's working. No messages with Google URL in the Browser Console.

barbaz wrote:Given this console message, I don't think it's possible to restrict sites to Accept from in this case, best that can be done is limit the methods to only what's needed.

So it means, in this case, with that rule, the URL Advisor will only work with a Google search?

by **barbaz** » Mon Aug 10, 2015 11:16 pm

So it needs POST as well as GET, so try Accept GET POST and see if that works?

LuisFeps wrote:[ABE] <LOCAL> Deny on {GET https://ff.kis.scr.kaspersky-labs.com/...9E1052A0EC <<< https://forums.informaction.com/posting.php?mode=reply&f=23&t=21139 - 2}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

Given this console message, I don't think it's possible to restrict sites to Accept from in this case, best that can be done is limit the methods to only what's needed.

by **LuisFeps** » Mon Aug 10, 2015 11:07 pm

barbaz wrote:Does my suggested exception work if you put Accept GET instead of just Accept? If so that's more safer.

No it doesn't. It only works if I put just Accept.

Thrawn wrote:There's probably some other (Google?) site getting involved. LuisFeps, can you post the Browser Console messages after applying Giorgio's rule?

Here it is:

[ABE] <LOCAL> Deny on {POST https://ff.kis.scr.kaspersky-labs.com/. ... categorize <<< https://www.google.com.br/search?q=uol& ... wATGhq-wDg - 11}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny
https://www.google.com.br/search?q=uol& ... =kaspersky : Unable to run script because scripts are blocked internally.
[ABE] <LOCAL> Deny on {GET https://ff.kis.scr.kaspersky-labs.com/...9E1052A0EC <<< posting.php?mode=reply&f=23&t=21139 - 2}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

I cut off some parts of the URL's because they're too big.

by **Thrawn** » Mon Aug 10, 2015 10:46 pm

There's probably some other (Google?) site getting involved. LuisFeps, can you post the Browser Console messages after applying Giorgio's rule?

by **barbaz** » Mon Aug 10, 2015 10:15 pm

LuisFeps wrote:barbaz, your rule works, but is it safe to use?

Well, at this point it's pretty clear that address is a part of KIS (and likely just for KIS, not your whole machine), so it's probably safe to add exception.

Does my suggested exception work if you put Accept GET instead of just Accept? If so that's more safer.

by **LuisFeps** » Mon Aug 10, 2015 9:51 pm

Giorgio, your rule is not working.

Am I doing it wrong?

barbaz, your rule works, but is it safe to use?

by **Giorgio Maone** » Mon Aug 10, 2015 2:26 pm

LuisFeps wrote: So, the IPv6 Adress above is mine? Sorry, I'm very noob...

I don't know, but

Code: Select all

$ dig ff.kis.scr.kaspersky-labs.com

; <<>> DiG 9.9.6 <<>> ff.kis.scr.kaspersky-labs.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37921
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;ff.kis.scr.kaspersky-labs.com. IN      A

;; ANSWER SECTION:
ff.kis.scr.kaspersky-labs.com. 234 IN   A       127.245.107.154

;; Query time: 32 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: lun ago 10 16:22:39 CEST 2015
;; MSG SIZE  rcvd: 74

127.245.107.154 is in the 127.0.0.0/8 address block, reserved for loopback by the IPv4 standard.
This alone suffices for ABE to consider it local, no matter if it resolves also to other (IPv4 or IPv6) addresses.

InformAction Forums

[RESOLVED] ABE and Kaspersky URL Advisor

Post a reply

Expand view Topic review: [RESOLVED] ABE and Kaspersky URL Advisor

Re: [RESOLVED] ABE and Kaspersky URL Advisor

Re: [RESOLVED] ABE and Kaspersky URL Advisor

Re: [RESOLVED] ABE and Kaspersky URL Advisor

Re: [RESOLVED] ABE and Kaspersky URL Advisor

Re: [RESOLVED] ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor

Re: ABE and Kaspersky URL Advisor