ABE blocking Zumocast

Discussions about the Application Boundaries Enforcer (ABE) module
Morac
Junior Member
Posts: 36
Joined: Thu May 21, 2009 5:33 pm

ABE blocking Zumocast

Post by Morac »

Zumocast is a program that let's you stream your own files out over the web. NoScript's ABE blocks the web part of that. Here's what ABE reports (this was tricky to get since it scrolls by very quickly). I replaced a few strings since they seem to be keys.

[ABE] <LOCAL> Deny on {GET http://192.168.1.6:10552/api/ping?serve ... onp=_jqjsp <<< https://www.zumocast.com/static/browser ... index.html, https://www.zumocast.com/static/browser ... index.html - 2}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny
----------
[ABE] <LOCAL> Deny on {GET http://68.37.x.x:10552/api/ping?server_ ... onp=_jqjsp <<< https://www.zumocast.com/static/browser ... index.html, https://www.zumocast.com/static/browser ... index.html - 2}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny


It looks like it tries my LAN ip first and then the public one if that doesn't work. The following rule in the SYSTEM settings seems to work. I'm not sure how to make it more restrictive though since putting "Site ^http://192\.168\.1\.\d+:\d+/api/ping?serverid=.*" doesn't work.

# Zumocast
Site ^http://192\.168\.1\.\d+:\d+/.*
Accept from https://www.zumocast.com
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.9) Gecko/20100824 Firefox/3.6.9
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE blocking Zumocast

Post by Giorgio Maone »

Morac wrote: I'm not sure how to make it more restrictive though since putting "Site ^http://192\.168\.1\.\d+:\d+/api/ping?serverid=.*" doesn't work.
This regular expression is probably broken by the unescaped "?", which makes it match "pingserverid", "pinserverid" but not "ping?serverid".
You can change it to

Code: Select all

# Zumocast
Site ^http://192\.168\.1\.\d+:\d+/api/ping\?serverid=
Accept from https://www.zumocast.com[/quote]
(notice that you don't need the trailing .* either, since the regexp is not anchored).
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.9) Gecko/20100824 Firefox/3.6.9
Post Reply