How do I set up ABE to work with intranet?

Discussions about the Application Boundaries Enforcer (ABE) module
ABEuser

How do I set up ABE to work with intranet?

Post by ABEuser »

Sorry if it's a common question and has been answered.

I've had some issues with ABE when I connected to the wireless network at my university.
The way it's set up at the moment is:

# Prevent Internet sites from requesting LAN resources.
Site LOCAL
Accept from LOCAL
Deny
Site https://[university log in site]
Accept from https://[university log in site]


It works with this setting, but since I'm unsure about how you should set up ABE, I just want to confirm if this is the right way?
(I noticed that after the Site & Accept from LOCAL it has a line that says "Deny", what does this do? Should I set "Deny" after the "Accept from https://[university log in site]" line?)
Mozilla/5.0 (Windows; U; Windows NT 6.0; sv-SE; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How do I set up ABE to work with intranet?

Post by Giorgio Maone »

The rule you put in the ruleset is apparently useless, since there's no other rule negating it.
Did it actually make some issue go away?
If so, could you please remove it temporarily and show me the message you get from ABE when (if) the issue comes back?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8
ABEuser

Re: How do I set up ABE to work with intranet?

Post by ABEuser »

Yeah, I did get the issue to go away with this rule.
I was just wondering what the "Deny" does?
Mozilla/5.0 (Windows; U; Windows NT 6.0; sv-SE; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How do I set up ABE to work with intranet?

Post by Giorgio Maone »

ABEuser wrote:I was just wondering what the "Deny" does?
It blocks any connection to LOCAL (IPs belonging to a private network) if coming from the internet.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10
Post Reply