Page 1 of 1

ABE blocking page, unable to debug the cause

Posted: Mon Nov 10, 2014 3:05 pm
by sta
Hello,
I'm here to ask how to debug abe properly and what could be the cause of a blocked site:
I'm unsing noscript 2.6.9.3 and visiting www.autistici.org , www.inventati.org , all on the same server and resolving to

www.autistici.org is an alias for www.l.autistici.org.
www.l.autistici.org has address 82.94.249.234
www.l.autistici.org has IPv6 address 2001:888:2000:56::19
www.l.autistici.org has IPv6 address 2002:b2ff:9023::1
www.l.autistici.org has IPv6 address 2a01:4f8:141:2f0::19

I see abe blocking that request with this error:

[ABE] <LOCAL> Deny on {GET https://www.autistici.org/en/index.html <<<
https://www.autistici.org/, chrome://browser/content/browser.xul - 6}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

I cannot see the real request that is triggering one of those rules, so not being able to debug that properly.
The error was not there probably some noscript version ago, but for now I'm not able to check with previous versions.
Also note that those resolved ip could be different based on your location because of dns geolocation redirects but I have reports of other people from various parts of the world having the same issue.

any help really appreciated.

bye
--s.

Re: ABE blocking page, unable to debug the cause

Posted: Tue Nov 11, 2014 12:44 am
by Thrawn
For some reason, ABE thinks that the autistici address is local. I don't know enough about IP6 to say much about those addresses, but you can probably make it work by adding the following to the top of the SYSTEM ruleset:

Code: Select all

Site www.autistici.org www.l.autistici.org
Accept from www.autistici.org www.l.autistici.org

Re: ABE blocking page, unable to debug the cause

Posted: Thu Nov 13, 2014 6:04 pm
by sta
is that valid even if I don't reach ipv6 ?

Re: ABE blocking page, unable to debug the cause

Posted: Thu Nov 13, 2014 7:13 pm
by barbaz
Yes

Re: ABE blocking page, unable to debug the cause

Posted: Fri Nov 14, 2014 4:44 pm
by Ghostbird
I have a similar issue, the HTTP packets are identical with ABE and without ABE, and I don't understand why NoScript thinks it is an ABE violation.
I'm using the development version on Firefox Nightly with the default ABE settings:

Site LOCAL
Accept from LOCAL
Deny

This is the HTTP data:

GET / HTTP/1.1
Host: rooster.utwente.nl
User-Agent: Anonymous
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-gb,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive

HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Location: https://rooster.utwente.nl/
Content-Length: 0
Date: Fri, 14 Nov 2014 16:27:15 GMT
Connection: close

P.S. I tried different User Agent strings as well, to no avail. I tried default, Anonymous and Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
I did find out that you cannot use these forums while pretending to be a Googlebot.

Re: ABE blocking page, unable to debug the cause

Posted: Fri Nov 14, 2014 4:59 pm
by Ghostbird
(Note: Sorry for the double-post, but I can't edit without sign-up)
I did manage to circumvent the InformAction Forums special treatment of the Googlebot user agent string.
This message should show up with the user agent string as Googlebot if I did it correctly.

ABE misidentifies site as local

Posted: Fri Nov 14, 2014 7:05 pm
by Lior`
ABE considers www.planetmath.org (129.97.91.199) to be on the local network, and accordingly blocks links to this site. The ABE PDF instructions say that the LOCAL matching rule is defined in RFC 3330 -- and checking the RFC indicates that the bug is with NoScript.

Re: ABE misidentifies site as local

Posted: Fri Nov 14, 2014 7:53 pm
by therube
Are you saying you're unable to open links on that page, that ABE is blocking you?

Like:
> [Ref] Numerical verification of the Goldbach conjecture by Paulo Fernandesky
> [Ref] example of contractive sequence
> [Ref] contractive sequence

Do you have an A/V?
Does it loop through localhost?

Re: ABE blocking page, unable to debug the cause

Posted: Fri Nov 14, 2014 8:03 pm
by barbaz
WFM in SeaMonkey "2.28.2-unofficial-1" (like Firefox 31.2)... are all of you on Nightly?

Re: ABE blocking page, unable to debug the cause

Posted: Fri Nov 14, 2014 8:35 pm
by Giorgio Maone
Please check latest development build 2.6.9.4rc1, thanks.

Re: ABE blocking page, unable to debug the cause

Posted: Sat Nov 15, 2014 7:52 pm
by Ghostbird
Thank you Giorgio,

The latest NoScript development build works perfectly fine.
Does the development version not auto update? I thought I would be up to date with the latest build.

Anyway, thanks for the tip, and your prompt reply.
I rarely see a developer so closely in touch with his users, thanks for your work!