Did I write this rule right?

Discussions about the Application Boundaries Enforcer (ABE) module
benhamill
Posts: 3
Joined: Wed Mar 31, 2010 1:19 pm

Did I write this rule right?

Post by benhamill »

My city's train system has a wireless network on it. It seems they want to show you a splash screen the first time you make an HTTP request and then store some kind of token. Basically, they're intercepting every request, checking the token, and then redirecting you where you were going in the first place. This tripped up ABE and gave me this message:

Code: Select all

Request { GET http://portal.ridernet3.com/splash?token=b0653...59da&url=http%3A//anythinghere.com/ <<<
http://anythinghere.com/, chrome://browser/content/browser.xul, chrome://browser/content/browser.xul} filtered by ABE: <LOCAL> Deny
After doing some research, I wrote the following rule:

Code: Select all

Site portal.ridernet3.com
Accept from *
That works, but it seems... wide open. I'm always wary of wild cards like that. However, it's not a specific site I'm trying to admit to local (if that makes sense), but all sites I want to admit to... ridernet3?

Anyway, this is my first foray into messing with ABE, so: Did I do this right? Thanks.


Ben
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.8) Gecko/20100214 Ubuntu/9.10 (karmic) Firefox/3.5.8
al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

Re: Did I write this rule right?

Post by al_9x »

"Accept from ALL" which can be shortened to just "Accept" might be better since it should bypass url matching code.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2
benhamill
Posts: 3
Joined: Wed Mar 31, 2010 1:19 pm

Re: Did I write this rule right?

Post by benhamill »

Thanks for the suggestion, al_9x.

Should I actually be opening it up that much, though, or am I writing too broad of a rule because I don't understand what the syntax actually means (which I don't)?


Ben
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET CLR 3.5.30729)
al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

Re: Did I write this rule right?

Post by al_9x »

benhamill wrote:Should I actually be opening it up that much
If every site gets their urls modified to go through that local domain, then yes
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2
benhamill
Posts: 3
Joined: Wed Mar 31, 2010 1:19 pm

Re: Did I write this rule right?

Post by benhamill »

Fair enough, then. Thanks so much for your help.


Ben
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.2) Gecko/20100316 Firefox/3.6.2 (.NET CLR 3.5.30729)
Post Reply