How to write this user ruleset?

Discussions about the Application Boundaries Enforcer (ABE) module
emmis

How to write this user ruleset?

Post by emmis »

I have an alias in my opendns (opendns.com) configuration such that whenever I type, "blah", it launches a local ip address. However, it is now being intercepted by abe and disallowed. any thoughts on how to allow this request?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.12) Gecko/2009070611 Firefox/3.0.12 (.NET CLR 3.5.30729)
dhouwn
Bug Buster
Posts: 968
Joined: Thu Mar 19, 2009 12:51 pm

Re: How to write this user ruleset?

Post by dhouwn »

Use NoRedirect.

ABE would block only the redirect from the server OpenDNS is pointing to, to the OpenDNS search page. The browser still wouldn't know that there is no DNS entry and therefore not act accordingly.
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Guest

Re: How to write this user ruleset?

Post by Guest »

ok, let me clarify to see if there is a solution.. if not ABE will be disabled because it is unable to be configured properly.

This is the error I am getting.

Request GST {http://192.168.100.2 <<< http://guide.opendns.com/?=blah/&client=ff20 <more gobbleygook removed....> } filtered by ABE: <LOCAL> DENY

OpenDNS has a whitelist feature that it uses when resolving to real domains on the internet. A whitelist that each user can configure. One can just type in "mail" and your request could be redirected to http://mail.yahoo.com", or wherever you specify. In my case, I have created a rule that tells the opendns servers to redirect the request for "blah", to a private ip address (ie:192.168.100.2).

Basically, I need to write an exception to it's rules. A whitelist if you will..

This has always worked without issue until ABE came along. Now ABE intercepts this request and will not let the OpenDNS servers redirect to my local ip address.

How can I script an User defined ABE rule to ignore a request from my DNS service to load a local ip address?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.12) Gecko/2009070611 Firefox/3.0.12 (.NET CLR 3.5.30729)
Guest

Re: How to write this user ruleset?

Post by Guest »

This sounds complicated. If all you want to do is type in something and get redirected somewhere else, why not use Firefox bookmarks? Bookmark the address that you want to go to (such as mail.yahoo.com or that IP address). Right click on it and choose Properties. Type in "blah" in the "keyword" field. Now whenever you type in "blah" in your address bar, you will be redirected to that IP address. All done locally, no need for OpenDNS.

I apologize if this is offtopic.
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729) Creative ZENcast v2.01.01
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How to write this user ruleset?

Post by Giorgio Maone »

Just put the following rule at the beginning of the SYSTEM ruleset (before the LOCAL protection rule) in NoScript Options|Advanced|ABE:

Code: Select all

Site 192.168.1.2
Accept
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1 (.NET CLR 3.5.30729)
emmis

Re: How to write this user ruleset?

Post by emmis »

thank you, that is what I needed. not much of a scripter so this is much appreciated.

Can I do a range of ip's?

thanks again.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 (.NET CLR 3.5.30729)
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: How to write this user ruleset?

Post by GµårÐïåñ »

emmis wrote:thank you, that is what I needed. not much of a scripter so this is much appreciated.

Can I do a range of ip's?

thanks again.
For those who don't know how to do it, use this: http://www.google.com/support/analytics ... swer=55572 where you enter the starting, and ending and it will generate the regex for you. Good luck.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How to write this user ruleset?

Post by Giorgio Maone »

emmis wrote: Can I do a range of ip's?
You can use network shorthands and/or netmasks. For instance,

192.168.

is equivalent to

192.168.0.0/16

and means all the addresses whose two upper bytes are 192 and 168.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 (.NET CLR 3.5.30729)
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: How to write this user ruleset?

Post by therube »

(not sure I should <in this thread>, but following along on GµårÐïåñ's post ...)

Untested: Expresso 3.0
Expresso is useful for learning how to use regular expressions and for developing and debugging regular expressions prior to incorporating them into C#, Visual Basic code, PHP, etc.
(probably should have put it elsewhere...)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.22) Gecko/20090605 SeaMonkey/1.1.17
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: How to write this user ruleset?

Post by GµårÐïåñ »

I don't think its off topic given the OP didn't know how to do ranges and asked how and the tools and links were provided to that end. As long as it doesn't turn into a whole other discussion, it should be fine in my opinion. Providing a tool to help is part of the support.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2
corpsehu

Re: How to write this user ruleset?

Post by corpsehu »

Giorgio Maone wrote:
emmis wrote: Can I do a range of ip's?
You can use network shorthands and/or netmasks. For instance,

192.168.

is equivalent to

192.168.0.0/16

and means all the addresses whose two upper bytes are 192 and 168.

It is not working for me. i put in the whitelist the 192.168. and the noscript is blocking the 192.168.xx.xx all sites except the exact match are in the whitwlist. it's bad... I have much more web interfaces around the 192.168.xxx.xxx range... Almost 1000.

What is wrong?

CorpseHU
Mozilla/5.0 (Windows; U; Windows NT 6.0; hu; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: How to write this user ruleset?

Post by Giorgio Maone »

The syntax above was referred to ABE, not to NoScript.

Try 192.168 (without the trailing dot).
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6
Guest

Re: How to write this user ruleset?

Post by Guest »

Please add this solution to the FAQ. I just spent over 20 min trying to find this simple solution to a common issue.
Giorgio Maone wrote:Just put the following rule at the beginning of the SYSTEM ruleset (before the LOCAL protection rule) in NoScript Options|Advanced|ABE:

Code: Select all

Site 192.168.1.2
Accept
Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.24) Gecko/20111103 Firefox/3.6.24
Post Reply