False (I think) LOCAL deny

Discussions about the Application Boundaries Enforcer (ABE) module
User avatar
Giorgio Maone
Site Admin
Posts: 9526
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: False (I think) LOCAL deny

Post by Giorgio Maone »

Could you open a command prompt and enter

Code: Select all

ping finmarket.ru
to check if it actually resolves to an IP outside your LAN?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
texpert
Posts: 1
Joined: Sun Feb 21, 2010 6:52 pm

Re: False (I think) LOCAL deny

Post by texpert »

It is certainly resolving:

finmarket.ru [213.134.198.50]

Forgot to mention that the news are opening OK when I am disabling ABE.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2pre) Gecko/20100221 Namoroka/3.6.2pre GTBDFff GTB7.0 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9526
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: False (I think) LOCAL deny

Post by Giorgio Maone »

Mmm, that's very strange and looking like a real bug.
Investigating, thanks.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
User avatar
Giorgio Maone
Site Admin
Posts: 9526
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: False (I think) LOCAL deny

Post by Giorgio Maone »

Yes, there's a bug, but it's not ABE's, it's by finmarket.ru network administrators:

Code: Select all

dig finmarket.ru

; <<>> DiG <<>> finmarket.ru

;; QUESTION SECTION:
;finmarket.ru.                  IN      A

;; ANSWER SECTION:
finmarket.ru.           600     IN      A       213.134.198.50
finmarket.ru.           600     IN      A       172.16.2.102
172.16.2.102 is a private network address, reserved for LANs, so ABE is correct in matching the LOCAL rule.
Having put it in a public DNS record is the error causing this problem, and it should be fixed by finamrket.ru's network administrators.
You can work around by putting a

Code: Select all

213.134.198.50 finmarket.ru
line in your hosts file.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
Post Reply