Page 1 of 1

ABE prevents local links

Posted: Fri Apr 07, 2017 5:41 pm
by alexo
When trying to click on links from a Tomcat page on a computer on the local network, I get the following:

Code: Select all

[ABE] < LOCAL> Deny on {GET http://ComputerName:8080/manager/status <<< http://ComputerName:8080/ - 6}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny
Where "ComputerName" is a machine on the LAN.

How do I fix it?

Re: ABE prevents local links

Posted: Fri Apr 07, 2017 6:01 pm
by barbaz
NoScript Options > Advanced > ABE, add at the very top of SYSTEM

Code: Select all

Site ComputerName:8080
Accept from ComputerName:8080

Re: ABE prevents local links

Posted: Fri Apr 07, 2017 9:07 pm
by alexo
For each machine on our corporate network? I am pretty sure this is not how it's supposed to work.

Re: ABE prevents local links

Posted: Fri Apr 07, 2017 9:16 pm
by barbaz
If ComputerName resolves both to an IP that falls under LOCAL *and* to an IP that doesn't fall under LOCAL, ABE might be expected to block ComputerName from redirecting to itself.

Does the ABE rule change get it working?

Re: ABE prevents local links

Posted: Fri Apr 07, 2017 10:36 pm
by alexo
Yes, the change makes it work.

Further investigation shows that that machine does not have an IPv4 address for some reason, only IPv6. Can that be the reason?

Re: ABE prevents local links

Posted: Fri Apr 07, 2017 10:43 pm
by barbaz
alexo wrote:Yes, the change makes it work.
Image

Do you have some sort of deployment software for all your corporate machines?
alexo wrote:Further investigation shows that that machine does not have an IPv4 address for some reason, only IPv6. Can that be the reason?
Likely yes, but I don't know the details of how ABE handles IPv6 addresses, sorry.

Re: ABE prevents local links

Posted: Sat Apr 08, 2017 6:30 am
by alexo
barbaz wrote:Do you have some sort of deployment software for all your corporate machines?
IT handles it.
barbaz wrote:
alexo wrote:Further investigation shows that that machine does not have an IPv4 address for some reason, only IPv6. Can that be the reason?
Likely yes, but I don't know the details of how ABE handles IPv6 addresses, sorry.
I'd say it's a bug then.