RFE: Improve ABE messages

Discussions about the Application Boundaries Enforcer (ABE) module
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

RFE: Improve ABE messages

Post by Thrawn »

I've been experimenting recently with using ABE to replace RequestPolicy (haven't worked on the RP-style interface in a while, sorry :( - haven't forgotten it, though). In the process, I've found a few areas for possible refinement of ABE as a general-purpose tool.

Are any of the following feasible?
  • Option to suppress ABE messages, either for individual rules or en masse. I'm using 'Site ALL / Accept from SELF++ / Anon', so it generates a lot of console spam...
  • Change the message format to use more natural language. Instead of something like:

    Code: Select all

    [ABE] <.random.com> Anonymize on {GET https://www.random.com/bar.css <<< https://www.example.com.au/foo - 4}
    USER rule:
    Site .random.com
    Accept from SELF++
    Anonymize
    
    it might be easier (especially for newcomers) to understand:

    Code: Select all

    [ABE]Rule fired for Site <.random.com>: Anonymize on GET request from origin {https://www.example.com.au/foo - 4} to destination {https://www.random.com/bar.css}
    USER rule:
    Site .random.com
    Accept from SELF++
    Anonymize
    
  • Suggest possible rules that would allow the traffic, eg for the above example, add the following to the error message:

    Code: Select all

    To stop filtering traffic from example.com to random.com, change this rule to:
    Site .random.com
    Accept from SELF++
    Accept from .example.com
    Anonymize
    
Mozilla/5.0 (Linux; U; Android 2.2) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: RFE: Improve ABE messages

Post by GµårÐïåñ »

Yeah I haven't forgotten either my friend, just been overwhelmed with a lot right now, but as soon as it calms down a bit, I will be back on track.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.2.0 Safari/537.31
Post Reply