[RESOLVED] ABE is blocking local IP's

[langolier]

My local subnet is 192.168.0.0/24. When I try to go to http://192.168.0.1/ from my browser, ABE blocks it and gives me this message:

Request {GET http://192.168.0.1/ <<< about:blank - 6} filtered by ABE: <LOCAL> Deny

The same thing happens if I try to go to 192.168.0.2, etc. I don't see any messages in Firefox's error console. Why is ABE blocking this? Do I have to add a whitelist entry somewhere in Noscript to get this to work? I already have the default

Site LOCAL
Accept from LOCAL
Deny

in the System ruleset section of ABE. I'm running FF 20.0.1 and Noscript 2.6.6.

[Ralph]

Same here. The new version 2.6.6 does seem to misinterpret the about:* sites as not being in LOCAL. Obviously a bug. My Firefox comes up with about:home and gave me the mentioned error message when I tried to access the web interface of one of my routers (192.168.0.2).

I added one line to the default System rule:

# Prevent Internet sites from requesting LAN resources.
Site LOCAL
Accept from about:*
Accept from LOCAL
Deny

That did the trick for me and now I can get access to the web interfaces of my routers again. Hope that helps you as well.

[Giorgio Maone]

It seems to be a bug introduced by Gecko 20. Investigating, thanks.

[Giorgio Maone]

Questions for both:

1. Are you using Tab Mix Plus 4.1.0 or above?
2. how do you open the URL? By typing it in the address bar, by clicking a bookmark or...?

[Giorgio Maone]

It turns out it was a Tab Mix Plus change causing this problem.
Should be worked around in latest development build 2.6.6.1rc1, thanks.

[langolier]

Yes, it's working for me now with your dev build and TMP 0.4.1.0pre.130408a. Thanks!

[Ralph]

Just for feedback:
I've been using TMP 0.4.1.0 (final) as well. I usually enter the first two digits of the router's IP into the "Awesome Bar" and select the link from the history popping up.

Anyhow: Your dev build 2.6.6.1rc1 of NoScript is working flawlessly again. Thank you very much for that fix and your efforts! .

[chaos2oo2]

the problem seems not to be fixed. I had the RC1 installed and after several days the problem of the local ip being blocked by ABE was back again. Deactivating and reactivating Tab Mix Plus worked, but just for the Windows session. After restarting Windows all local access to router for e.g. is blocked again.

2.6.6.1 change
x [ABE] Fixed letest Tab Mix Plus version (4.1.0) causing loads started

does not fix the problem

[sa878]

FF 21.0
Noscript 2.6.6.2rc1

Tab mix plus 0.4.1.0

It has worked for at least a week since updaing to the RC1 as noted above, but yesterday I updated Firefox to v21.0 and today the ABE is blocking when I try to access local IPs when I enter the address into the bar, but only if an external site is loaded in the current tab.

There is no blocking when trying to access a local IP from a newly loaded tab page.

And the issue is not present when loading local IP's from tabs with an external site after disabling tab mix plus.

Seems to have been broken again since I updated to FF21.0

[hugo0815]

same here...but nobody seems to care

[Giorgio Maone]

same here...but nobody seems to care

Could you be more specific?
Firefox 21 (clean profile)
NoScript 2.6.6.1
Tab Mix Plus 0.4.1
With the http://noscript.net/ page opened in a tab, I type http://localhost/ (or the IP of my router) in the address bar and hit "enter".
The page loads without any problem.

In other words, I cannot reproduce.
Can you on a clean profile and default configuration, as above?
If you can't, can you point out the specifics of your configuration which appear to cause the issue?

[al_9x]

In other words, I cannot reproduce.

Here's a reproducible scenario: http://forums.informaction.com/viewtopi ... 10&t=14256

[hugo0815]

I created a clean profile and I think I found a reproducable way:

- create new Firefox profile
- install NoScript
- install Tab Mix Plus
- restart
- use Firefox session manager
- go to Firefox options -> Privacy -> turn off history completely
- restart firefox
- now enter a url to a device in the LAN (e.g. your router) like 'fritz.box'

now the access to the device should be blocked by ABE

In my test case the access was allowed as soon as I reactived the history in Firefox. As soon as I turned it off I got the blocking message.

[hugo0815]

things I've changed to:

- set the firefox start page to 'http://www.google.de'
- set Tab Mix Plus to open each new tab on the start page

from then on it doesn't matter if history is enable or not I always get a block message when I try to access 'http://localhost'

[hugo0815]

I played around a little bit and it seems like

option 1:
- installing noscript and tab mix plus, everything works
- change privacy to not save history, localhost is not accessible anymore
- change privacy back, still corrupted

option 2:
- installing noscript and tab mix plus, everything works
- change firefox start page to 'http://google.de'
- make tab mix plus open each new tab on startpage
--> corrupted

switchting back does not fix the problem anymore. AND accessing localhost from default firefox search/start page works, you MUST open a different page before.