How do I block these... ?

Ask for help about NoScript, no registration needed to post
OttifantSir

How do I block these... ?

Post by OttifantSir »

I want to block creatives.livejasmin.com and partypoker.com from opening a window when viewing some sites. Problem is, they're opened after having allowed the main site, and usually they pop up after I place the marker in the site's search bar. Any ideas? I'll take Firefox-only tricks too.

Using Firefox 3.5.7pre on Ubuntu 9.04, so any Linux-only tricks is also welcome.
Last edited by Alan Baxter on Fri Dec 11, 2009 4:28 am, edited 1 time in total.
Reason: Broke commercial links
Opera/9.80 (X11; Linux i686; U; nb) Presto/2.2.15 Version/10.10
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: How do I block these... ?

Post by Tom T. »

What are the URLs of the sites where this happens?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20
OttifantSir

Re: How do I block these... ?

Post by OttifantSir »

One of the sites it happens on, are Grayvee.com (adult-tube site), and I have traced it to a script that launches a popunder if I don't have a cookie from the site in my cache. Don't yet know how to disable it though, but I have installed Greasemonkey if the answer is a JavaScript that disables the code that launches it.
Opera/9.80 (X11; Linux i686; U; nb) Presto/2.2.15 Version/10.10
OttifantSir

Re: How do I block these... ?

Post by OttifantSir »

This is the script from Grayvee that causes the problems. I assume it's similar on other sites that has the same behaviour:

http://ottifantsir-laptop.ottifantsir.o ... script.pdf

Had to put the script in a PDF so I wouldn't get STALLOWN3D!...
Opera/9.80 (X11; Linux i686; U; nb) Presto/2.2.15 Version/10.10
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How do I block these... ?

Post by Giorgio Maone »

Try editing the noscript.surrogate.fap.sources about:config preference, adding "*.grayvee.com grayvee.com" (without quotes).
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: How do I block these... ?

Post by GµårÐïåñ »

Also in the future, you can easily add sites you don't want to have access to you in the host file of your system or simply open up ABE and put:

Site <whetever that is offending you>
DENY ALL

or

Site ALL
DENY ALL from <whatever that is offending you>

and of course what Giorgio said.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How do I block these... ?

Post by Giorgio Maone »

Please ignore my suggestion above and install latest development build instead, which replaces the "fap" surrogate with a generic "popunder" surrogate which applies to grayvee as well.
BTW, if you don't want to be stallownd again, just put "Gecko" somewhere in your user agent string.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: How do I block these... ?

Post by Tom T. »

GµårÐïåñ wrote:Also in the future, you can easily add sites you don't want to have access to you in the host file of your system or simply open up ABE and put:

Site <whetever that is offending you>
DENY ALL

or

Site ALL
DENY ALL from <whatever that is offending you>

and of course what Giorgio said.
A generic rule like that sounds like a worthwhile addition to the ABE FAQ, IMHO, as well as to the user guide that is planned.

Would that go under SYSTEM or USER, or does it matter? Sounds like a User rule, but might as well draw the distinction while we're talking about it.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: How do I block these... ?

Post by GµårÐïåñ »

It does not matter. However, I normally do NOT put any mods into the SYSTEM rule for the simple fact that I want to ensure my exceptions are the LAST to apply as to ensure other defenses respond first and effectively and the left over is grabbed JUST in case it manages to make it through. OR, when I specifically WANT to open a hole in my defenses and I put it there to allow it to be effectively border limited. Virtual TCP/IP sandbox if you will. The only reasonable time I can see modifying SYSTEM would be anything that needs an exception to the LOCAL rule because that's where it is asserted and you need to beat it to the punch to allow local access for any reason. Otherwise, most if not all will always go in the USER section. System is best for any general and broad rule that is consistently and strictly applied no matter, to be most effective as a security measure.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: How do I block these... ?

Post by Tom T. »

IMHO, that's a very fine reason to specify that this type of rule should go in User. Some version of your explanation of the distinction, especially regarding order of application, would also help users to understand the flow and the reason for the distinction. Very well said, Brother. :)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
OttifantSir

Re: How do I block these... ?

Post by OttifantSir »

After having added what I can understand is correct from the SITE/DENY-tip, I get this: line 3:0 required (...)+ loop did not match anything at input 'DENY'

What I input:

Code: Select all

Site http://promo.awempire.com
DENY ALL
This is the true offender on Grayvee and many other sites that pop under and leads to either www. or creatives.livejasmin.com.

I have put the IP-adress of all of these into my firewall, so they won't load, but a window still opens.

So, where did I go wrong in my input into ABE?
Opera/9.80 (X11; Linux i686; U; nb) Presto/2.2.15 Version/10.10
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How do I block these... ?

Post by Giorgio Maone »

OttifantSir wrote:After having added what I can understand is correct from the SITE/DENY-tip, I get this: line 3:0 required (...)+ loop did not match anything at input 'DENY'[/qupte]
ABE rules are case-sensitive, it should be "Deny" (title case), and you can omit "ALL" which is implicit.

What I input:

Code: Select all

Site http://promo.awempire.com
DENY ALL
OttifantSir wrote: This is the true offender on Grayvee and many other sites
As far as I can see, the "true" offender is inline, so you can't just block it.
You need a script surrogate, and it's provided (for Grayvee and FAP at least) in latest development build.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5 (.NET CLR 3.5.30729)
OttifantSir

Re: How do I block these... ?

Post by OttifantSir »

As far as I can tell, with only a glancing experience of HTML, JavaScript and Python (I mean glancing, as in never written anything above a BATCH-code menu in DOS 6.0) it seems as though these two sites are opened through the code 'popundr'. Wouldn't it be an easy fix to write in some code into NoScript that negated that code? Seeing as it's mainly used for spam?
Opera/9.80 (X11; Linux i686; U; nb) Presto/2.2.15 Version/10.10
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: How do I block these... ?

Post by Tom T. »

OttifantSir wrote:As far as I can tell, with only a glancing experience of HTML, JavaScript and Python (I mean glancing, as in never written anything above a BATCH-code menu in DOS 6.0) it seems as though these two sites are opened through the code 'popundr'. Wouldn't it be an easy fix to write in some code into NoScript that negated that code? Seeing as it's mainly used for spam?
If that is true, then I agree that an addition to Embeddings tab, "Block <popundr>" would be a good enhancement.

Giorgio?

EDIT: Just noticed the entry in latest development build log:
Turned the "fap" surrogate into a generic "popunder" one
So it looks like what you're requesting has already been done. Advise if you encounter other popunders after installing latest development build.
Last edited by Tom T. on Tue Dec 15, 2009 12:09 am, edited 1 time in total.
Reason: latest dev build
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20
OttifantSir

Re: How do I block these... ?

Post by OttifantSir »

Installed latest development build, and still no luck in stopping the popunder windows...
Opera/9.80 (X11; Linux i686; U; nb) Presto/2.2.15 Version/10.10
Post Reply