ABE and WD My Cloud

[notyetanotherid]

Western Digital My Cloud is a NAS device accessible from the internet, via wd2go.com.

If on my local network I go to www.wd2go.com, login, and select my NAS device and then click on 'View Shares', ABE blocks the request:
[ABE] <LOCAL> Deny on {GET http://192.168.1.68/LandingPage?deviceU ... c900e03954 <<< https://www.wd2go.com/deviceLanding.do?displayId=138, https://www.wd2go.com/getDevicesInternal.do# - 6}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

If I add an ABE system rule at the start:
Site 192.168.1.68
Accept GET

it works fine; obviously I don't want such a general rule, but:
Site 192.168.1.68
Accept GET from wd2go.com

fails, as do variations on the URL. What am I doing wrong?

[barbaz]

Code: Select all

Site 192.168.1.68
Accept GET from .wd2go.com

you were missing the leading dot needed to specify that you want subdomains of "wd2go.com" also

really, best practice would be this more restrictive exception

Code: Select all

Site 192.168.1.68
Accept GET from https://www.wd2go.com/

[notyetanotherid]

Unfortunately both of those versions cause the button click action to get denied by the LOCAL rule as per previously.

I am sure that I am missing something obvious ...

[barbaz]

Weird...

Just to verify, is the error message in the Browser Console the same as in your OP if you add either of my exceptions?

[notyetanotherid]

Yes. Just done it now with the leading dot version and this is the console output:

[ABE] <LOCAL> Deny on {GET http://192.168.1.68/mapdrive/localAuth.php <<< http://192.168.1.68/LandingPage?deviceU ... 00e03954a1, https://www.wd2go.com/getDevicesInternal.do, https://www.wd2go.com/deviceLanding.do?displayId=138 - 6}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

[barbaz]

Try

Code: Select all

Site 192.168.1.68
Accept GET from 192.168.1.68 https://www.wd2go.com/

[notyetanotherid]

Perfect! Thanks.

[barbaz]

Glad we got this resolved, but could someone please explain to me why 192.168.1.68 isn't LOCAL in that last situation? Thanks in advance.

[Thrawn]

Giorgio could answer best, but my $0.02 is that ABE is funny about redirects. It's not that the IP address is not LOCAL; it's that the combination of IP address and wd2go.com needs to be specifically allowed on its own line.