Redirect URL to local IP

Discussions about the Application Boundaries Enforcer (ABE) module
Ser Bronn
Posts: 2
Joined: Sat Aug 02, 2014 8:20 pm

Redirect URL to local IP

Post by Ser Bronn »

Under the SYSTEM ruleset:

Code: Select all

Site 192.168.1.2
Accept GET from 192.168.1.2 http://subdomain.site.com/

# Prevent Internet sites from requesting LAN resources.
Site LOCAL
Accept from LOCAL
Deny
Under the USER ruleset:
blank

It works, but is this the proper way to do it?

I couldn't find any real guides on syntax, what does what, what goes before or after, and the difference between system and user.

Also, is there anything wrong with using:
Site 192.168.1.*
Accept GET from 192.168.1.* http://subdomain.site.com/
?
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
barbaz
Senior Member
Posts: 10849
Joined: Sat Aug 03, 2013 5:45 pm

Re: Redirect URL to local IP

Post by barbaz »

Ser Bronn wrote:is this the proper way to do it?
Sure. Only thing I would suggest is that you qualify that IP address with a protocol, e.g. http://192.168.1.2 instead of just 192.168.1.2.
Ser Bronn wrote:I couldn't find any real guides on syntax, what does what,
http://noscript.net/abe/abe_rules.pdf
(You did an amazingly good job making that rule exception for someone who doesn't know anything about ABE :) )
Ser Bronn wrote:what goes before or after, and the difference between system and user.
Rulesets are processed from top to bottom, and for each ruleset, the only action ABE will take on any given request is whatever it's specified to do to the *first* matching "Site". SYSTEM and USER are two different rulesets, so rules in one don't have any effect on rules in another.
Ser Bronn wrote:Also, is there anything wrong with using:
Site 192.168.1.*
Accept GET from 192.168.1.* http://subdomain.site.com/
?
Try it. (I think that would work, but again, you should specify a protocol for the IP address if possible.)
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; OpenBSD amd64; rv:26.0) Gecko/20100101 Firefox/26.0 SeaMonkey/2.23
Ser Bronn
Posts: 2
Joined: Sat Aug 02, 2014 8:20 pm

Re: Redirect URL to local IP

Post by Ser Bronn »

Thanks for the reply.
barbaz wrote: Sure. Only thing I would suggest is that you qualify that IP address with a protocol, e.g. http://192.168.1.2 instead of just 192.168.1.2.
Should I add the ports as well?
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Firefox/31.0
barbaz
Senior Member
Posts: 10849
Joined: Sat Aug 03, 2013 5:45 pm

Re: Redirect URL to local IP

Post by barbaz »

That would be a good idea. If you do that, I would suggest to also add the "/" . So you would end up with something like

Code: Select all

http://192.168.1.2:8080/
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; OpenBSD amd64; rv:26.0) Gecko/20100101 Firefox/26.0 SeaMonkey/2.23
Post Reply