A small doubt reg. ABE

Discussions about the Application Boundaries Enforcer (ABE) module
guest

A small doubt reg. ABE

Post by guest »

Today, I was just going through the options of noscript and saw the ABE 'system rule' which mentions '# Prevent Internet sites from requesting LAN resources'. I am in a LAN with internet access (proxy) and out of curiosity I just visited the below given website to know what information do this website give regarding my ipaddress :

http://whatismyipaddress.com/

The site was showing not only my website but the local LAN TCIP/IP was also displayed by the site. If so, what do ABE do to '# Prevent Internet sites from requesting LAN resources'.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: A small doubt reg. ABE

Post by Giorgio Maone »

ABE prevents internet sites from originating HTTP requests (AKA "linking") towards internal LAN resources, e.g. to hack your router.
The case you're reporting is an entirely different scenario, regarding the "transparence" of your proxy.
It has nothing to do with ABE's SYSTEM rule, but is more a privacy issue.
Most proxies give away the original IP through the "X-Forwarded-For" header, and that's probably the way your got revealed.
Another way to reveal your IP is using Java or Flash to open a raw socket, which bypasses your proxy.
If you really want to shield your IP, you must use both NoScript and TOR button.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)
Guest

Re: A small doubt reg. ABE

Post by Guest »

Thanks a lot for the clarification. Mine is not a TOR proxy but we have internet access through LAN. The site was showing my real IP and my LAN ip thats why I raised the question to know whether this is what ABE system rule stands for. Any way I am using noscript and am very much thankful for this great product.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3
Post Reply