InformAction Forums

I just noticed that a website that I use in conjunction for my daily duties, does not in any way access the local system, is generating an ABE message in the console which is NOT being displayed through the GUI (via a notification). However, totally by coincidence I had the error console open when I was using the site in conjunction with something else and noticed this error pop up (for some reason in TRIPLICATE, but identical):

[ABE] <LOCAL> Deny on {GET https://xxx.edu/law/open/6498c1 <<< https://xxx.edu/law/open/index.cfm?p=300&courseid=45&cliente=742xxx737, https://xxx.edu/law/open/index.cfm?p=300&courseid=45&cliente=742xxx737}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny

The domain has been removed for privacy purposes and replaced with xxx as well as the client id, but the information is in full. So where exactly is the local access coming from that ABE blocked and denied? Why? I would appreciate some discussion and explanation on this, perhaps its a bug with ABE or something that is by design, if so how and why its happening would be personally appreciated and I am sure will help other people have a better understanding too. TIA.

Would you like to PM or Hushmail me the full URLs in strictest confidence, so that I can see if I can reproduce the issue on XP as well as on your system?
I also can try it on both Fx 3.5.5 and the deprecated 2.20 to see if it makes a difference.

Are you using a VPN?
Do the domain resolve to multiple IPs (IPv4 and IPv6)?
If so, could you PM the IPs, at least?

I am not using VPN. The IPs resolve through IPv4 at the moment for everything.

@tom, unfortunately the credentials are needed to access the site and these are restricted, so direct URL to the backsite won't help unfortunately,
@giorgio, I can give you the domain and IPs through the PM, not an issue,

I just want to figure out why its getting that far and it would be good if we can figure it out. Check you PMs.