ABE blocking page, unable to debug the cause

Ask for help about NoScript, no registration needed to post
sta

ABE blocking page, unable to debug the cause

Post by sta »

Hello,
I'm here to ask how to debug abe properly and what could be the cause of a blocked site:
I'm unsing noscript 2.6.9.3 and visiting www.autistici.org , www.inventati.org , all on the same server and resolving to

www.autistici.org is an alias for www.l.autistici.org.
www.l.autistici.org has address 82.94.249.234
www.l.autistici.org has IPv6 address 2001:888:2000:56::19
www.l.autistici.org has IPv6 address 2002:b2ff:9023::1
www.l.autistici.org has IPv6 address 2a01:4f8:141:2f0::19

I see abe blocking that request with this error:

[ABE] <LOCAL> Deny on {GET https://www.autistici.org/en/index.html <<<
https://www.autistici.org/, chrome://browser/content/browser.xul - 6}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

I cannot see the real request that is triggering one of those rules, so not being able to debug that properly.
The error was not there probably some noscript version ago, but for now I'm not able to check with previous versions.
Also note that those resolved ip could be different based on your location because of dns geolocation redirects but I have reports of other people from various parts of the world having the same issue.

any help really appreciated.

bye
--s.
Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Iceweasel/31.1.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: ABE blocking page, unable to debug the cause

Post by Thrawn »

For some reason, ABE thinks that the autistici address is local. I don't know enough about IP6 to say much about those addresses, but you can probably make it work by adding the following to the top of the SYSTEM ruleset:

Code: Select all

Site www.autistici.org www.l.autistici.org
Accept from www.autistici.org www.l.autistici.org
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:33.0) Gecko/20100101 Firefox/33.0
sta

Re: ABE blocking page, unable to debug the cause

Post by sta »

is that valid even if I don't reach ipv6 ?
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.101 Safari/537.36
barbaz
Senior Member
Posts: 11066
Joined: Sat Aug 03, 2013 5:45 pm

Re: ABE blocking page, unable to debug the cause

Post by barbaz »

Yes
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (X11; Linux x86_64; rv:29.0) Gecko/20100101 Firefox/29.0
Ghostbird

Re: ABE blocking page, unable to debug the cause

Post by Ghostbird »

I have a similar issue, the HTTP packets are identical with ABE and without ABE, and I don't understand why NoScript thinks it is an ABE violation.
I'm using the development version on Firefox Nightly with the default ABE settings:

Site LOCAL
Accept from LOCAL
Deny

This is the HTTP data:

GET / HTTP/1.1
Host: rooster.utwente.nl
User-Agent: Anonymous
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-gb,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive

HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Location: https://rooster.utwente.nl/
Content-Length: 0
Date: Fri, 14 Nov 2014 16:27:15 GMT
Connection: close

P.S. I tried different User Agent strings as well, to no avail. I tried default, Anonymous and Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
I did find out that you cannot use these forums while pretending to be a Googlebot.
Anonymous
Ghostbird

Re: ABE blocking page, unable to debug the cause

Post by Ghostbird »

(Note: Sorry for the double-post, but I can't edit without sign-up)
I did manage to circumvent the InformAction Forums special treatment of the Googlebot user agent string.
This message should show up with the user agent string as Googlebot if I did it correctly.
Mozilla/5.0 (compatible; Googl‍ebot/2.1; +http://www.goo‍gle.com/bot.html) 
Lior`

ABE misidentifies site as local

Post by Lior` »

ABE considers www.planetmath.org (129.97.91.199) to be on the local network, and accordingly blocks links to this site. The ABE PDF instructions say that the LOCAL matching rule is defined in RFC 3330 -- and checking the RFC indicates that the bug is with NoScript.
Mozilla/5.0 (X11; Linux x86_64; rv:33.0) Gecko/20100101 Firefox/33.0
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: ABE misidentifies site as local

Post by therube »

Are you saying you're unable to open links on that page, that ABE is blocking you?

Like:
> [Ref] Numerical verification of the Goldbach conjecture by Paulo Fernandesky
> [Ref] example of contractive sequence
> [Ref] contractive sequence

Do you have an A/V?
Does it loop through localhost?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 5.1; rv:33.0) Gecko/20100101 SeaMonkey/2.30
barbaz
Senior Member
Posts: 11066
Joined: Sat Aug 03, 2013 5:45 pm

Re: ABE blocking page, unable to debug the cause

Post by barbaz »

WFM in SeaMonkey "2.28.2-unofficial-1" (like Firefox 31.2)... are all of you on Nightly?
*Always* check the changelogs BEFORE updating that important software!
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; en-us) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE blocking page, unable to debug the cause

Post by Giorgio Maone »

Please check latest development build 2.6.9.4rc1, thanks.
Mozilla/5.0 (Windows NT 6.3; WOW64; rv:33.0) Gecko/20100101 Firefox/33.0
Ghostbird

Re: ABE blocking page, unable to debug the cause

Post by Ghostbird »

Thank you Giorgio,

The latest NoScript development build works perfectly fine.
Does the development version not auto update? I thought I would be up to date with the latest build.

Anyway, thanks for the tip, and your prompt reply.
I rarely see a developer so closely in touch with his users, thanks for your work!
Mozilla/5.0 (X11; Linux x86_64; rv:36.0) Gecko/20100101 Firefox/36.0
Post Reply