[RESOLVED] NoScript Blocking PowerChute Login

[Soda]

I'm trying to access the webpage login for my APC SMC1000 UPS's PowerChute Business Edition software. Right clicking on the Agent Web Interface properties shows that it's trying to take me to http://localhost:3052 which NoScript is blocking. The drop down message I get states what I'm trying to connect to is filtered by ABE: <LOCAL> Deny. Clicking options next to this brings me to the advanced tab in NoScripts settings, sub-tab ABE. Currently the boxes for enable ABE & WAN IP are checked on, the system box says: # Prevent Internet sites from requesting LAN resources.
Site LOCAL Accept from LOCAL Deny. While under the user ruleset it says # User-defined rules. Feel free to experiment here. I know this is going to involve me setting custom user rulesets I just need to be walked through on how please.

[GµårÐïåñ]

If you trust what it is doing and want to allow it, simply add the rule

Code: Select all

Site http://localhost:3052
Accept From Local
Allow

[Soda]

If you trust what it is doing and want to allow it, simply add the rule

Code: Select all

Site http://localhost:3052
Accept From Local
Allow

Thank you & that will only allow PowerChute login specifically & not any other from another unrelated site that could be malicious? Sorry I'm just trying to cover all bases because configuration on this level is very new for me.

[Soda]

If you trust what it is doing and want to allow it, simply add the rule

Code: Select all

Site http://localhost:3052
Accept From Local
Allow

I tried what you said & it gave me a Syntax error in ABE ruleset line 3:14 mismatched character 'c' expecting 'g'.

[GµårÐïåñ]

Thank you & that will only allow PowerChute login specifically & not any other from another unrelated site that could be malicious? Sorry I'm just trying to cover all bases because configuration on this level is very new for me.

That will allow any call to LOCAL that is on THAT port, which from the information would suggest is associated to that specific software in your environment. Now if someone/something else makes a local request on that port and is not the software, then yeah they'll have access too. With more information, we can do a site binding rule that will restrict WHO can call that particular rule, but without it that's the most broad that would solve your issue.

I tried what you said & it gave me a Syntax error in ABE ruleset line 3:14 mismatched character 'c' expecting 'g'.

Not sure why, I checked and the spelling is correct, my initial thinking was I mistyped something and the syntax is valid, so I am not 100% sure why. Try removing the http:// and use just localhost:3052 because perhaps its a protocol collision with the local object.

[Soda]

Thank you & that will only allow PowerChute login specifically & not any other from another unrelated site that could be malicious? Sorry I'm just trying to cover all bases because configuration on this level is very new for me.

That will allow any call to LOCAL that is on THAT port, which from the information would suggest is associated to that specific software in your environment. Now if someone/something else makes a local request on that port and is not the software, then yeah they'll have access too. With more information, we can do a site binding rule that will restrict WHO can call that particular rule, but without it that's the most broad that would solve your issue.

I tried what you said & it gave me a Syntax error in ABE ruleset line 3:14 mismatched character 'c' expecting 'g'.

Not sure why, I checked and the spelling is correct, my initial thinking was I mistyped something and the syntax is valid, so I am not 100% sure why. Try removing the http:// and use just localhost:3052 because perhaps its a protocol collision with the local object.

Okay well I tried that & got the error line 4:1 no viable alternative at character 'l'. Here's exactly what it says in the NoScript drop down menu upon trying to open the Agent Web Interface.

Code: Select all

Request {GET https://soda-pc:6547/status;**snipped** <<< https://soda-pc:6547/, chome://browser/content/browser.xul, http://localhost:3052/ - 6} filtered by ABE: <LOCAL> Deny

*EDIT: The webpage opens fine in Edge but I'd rather use Firefox since that's my default browser. If this turns out to be impossible though I do have that as a backup plan for editing my UPS's settings.

[barbaz]

Try this one instead -

Code: Select all

Site https://soda-pc:6547/* localhost:3052/*
Accept from soda-pc localhost chrome:

Make sure to put it above the default SYSTEM rule.

[Soda]

Try this one instead -

Code: Select all

Site https://soda-pc:6547/* localhost:3052/*
Accept from soda-pc localhost chrome:

Make sure to put it above the default SYSTEM rule.

Oh I was putting the other ones under user ruleset below where it said "# User-defined rules. Feel free to experiment here." before. Just did what ya said & it worked fine. Should I be concerned about leaving that full Request line in my other post? I'm not sure if it's something like an IP address that a third-party viewer on these forums could use to tap into my system or something. Now under system it says the following, this correct?

Code: Select all

Site https://soda-pc:6547/* localhost:3052/*
Accept from soda-pc localhost chrome:
# Prevent Internet sites from requesting LAN resources.
Site LOCAL
Accept from LOCAL
Deny

[barbaz]

Please use code tags when posting console messages or ABE rules. It makes it easier to read and prevents the board auto-generating unwanted links. Thanks.

Should I be concerned about leaving that full Request line in my other post? I'm not sure if it's something like an IP address that a third-party viewer on these forums could use to tap into my system or something.

Not sure. I've snipped the part which might be of concern.

"soda-pc" isn't enough information to find your computer, it would only resolve inside your own local network.

[Soda]

Please use code tags when posting console messages or ABE rules. It makes it easier to read and prevents the board auto-generating unwanted links. Thanks.

Should I be concerned about leaving that full Request line in my other post? I'm not sure if it's something like an IP address that a third-party viewer on these forums could use to tap into my system or something.

Not sure. I've snipped the part which might be of concern.

"soda-pc" isn't enough information to find your computer, it would only resolve inside your own local network.

Oh okay thank you I wasn't sure how, it's working now though so thanks so much. I'm lookin forward to browsing these forums more & learning more about NoScript. It's really powerful I just gotta fine tune mine more so I have to disable it entirely less often .

[GµårÐïåñ]

From the message you posed, it seems there are more than just localhost:3052 involved, so go with the rule that @barbaz gave you since he had more information to work with and it should resolve your issue, thank you @barbaz.

[Soda]

From the message you posed, it seems there are more than just localhost:3052 involved, so go with the rule that @barbaz gave you since he had more information to work with and it should resolve your issue, thank you @barbaz.

I did although it took me about an hour before I realized I was replying to two different users lol. The 2nd more detailed rule is working fine though, thank you both again.

[GµårÐïåñ]

It's quite alright, in spirit all the mods here are the same, we just help the user, which one of us, doesn't matter - we are a team. Glad you got it working.