Page 1 of 1
How do I block these... ?
Posted: Wed Dec 09, 2009 8:11 pm
by OttifantSir
I want to block creatives.livejasmin.com and partypoker.com from opening a window when viewing some sites. Problem is, they're opened after having allowed the main site, and usually they pop up after I place the marker in the site's search bar. Any ideas? I'll take Firefox-only tricks too.
Using Firefox 3.5.7pre on Ubuntu 9.04, so any Linux-only tricks is also welcome.
Re: How do I block these... ?
Posted: Sun Dec 13, 2009 9:55 am
by Tom T.
What are the URLs of the sites where this happens?
Re: How do I block these... ?
Posted: Sun Dec 13, 2009 10:01 pm
by OttifantSir
One of the sites it happens on, are Grayvee.com (adult-tube site), and I have traced it to a script that launches a popunder if I don't have a cookie from the site in my cache. Don't yet know how to disable it though, but I have installed Greasemonkey if the answer is a JavaScript that disables the code that launches it.
Re: How do I block these... ?
Posted: Sun Dec 13, 2009 10:11 pm
by OttifantSir
This is the script from Grayvee that causes the problems. I assume it's similar on other sites that has the same behaviour:
http://ottifantsir-laptop.ottifantsir.o ... script.pdf
Had to put the script in a PDF so I wouldn't get STALLOWN3D!...
Re: How do I block these... ?
Posted: Sun Dec 13, 2009 10:19 pm
by Giorgio Maone
Try editing the
noscript.surrogate.fap.sources about:config preference, adding "*.grayvee.com grayvee.com" (without quotes).
Re: How do I block these... ?
Posted: Mon Dec 14, 2009 12:28 am
by GµårÐïåñ
Also in the future, you can easily add sites you don't want to have access to you in the host file of your system or simply open up ABE and put:
Site <whetever that is offending you>
DENY ALL
or
Site ALL
DENY ALL from <whatever that is offending you>
and of course what Giorgio said.
Re: How do I block these... ?
Posted: Mon Dec 14, 2009 12:48 am
by Giorgio Maone
Please ignore my suggestion above and install
latest development build instead, which replaces the "fap" surrogate with a generic "popunder" surrogate which applies to grayvee as well.
BTW, if you don't want to be stallownd again, just put "Gecko" somewhere in your user agent string.
Re: How do I block these... ?
Posted: Mon Dec 14, 2009 12:48 am
by Tom T.
GµårÐïåñ wrote:Also in the future, you can easily add sites you don't want to have access to you in the host file of your system or simply open up ABE and put:
Site <whetever that is offending you>
DENY ALL
or
Site ALL
DENY ALL from <whatever that is offending you>
and of course what Giorgio said.
A generic rule like that sounds like a worthwhile addition to the
ABE FAQ, IMHO, as well as to the user guide that is planned.
Would that go under SYSTEM or USER, or does it matter? Sounds like a User rule, but might as well draw the distinction while we're talking about it.
Re: How do I block these... ?
Posted: Mon Dec 14, 2009 2:07 am
by GµårÐïåñ
It does not matter. However, I normally do NOT put any mods into the SYSTEM rule for the simple fact that I want to ensure my exceptions are the LAST to apply as to ensure other defenses respond first and effectively and the left over is grabbed JUST in case it manages to make it through. OR, when I specifically WANT to open a hole in my defenses and I put it there to allow it to be effectively border limited. Virtual TCP/IP sandbox if you will. The only reasonable time I can see modifying SYSTEM would be anything that needs an exception to the LOCAL rule because that's where it is asserted and you need to beat it to the punch to allow local access for any reason. Otherwise, most if not all will always go in the USER section. System is best for any general and broad rule that is consistently and strictly applied no matter, to be most effective as a security measure.
Re: How do I block these... ?
Posted: Mon Dec 14, 2009 3:19 am
by Tom T.
IMHO, that's a very fine reason to specify that this type of rule should go in User. Some version of your explanation of the distinction, especially regarding order of application, would also help users to understand the flow and the reason for the distinction. Very well said, Brother.

Re: How do I block these... ?
Posted: Mon Dec 14, 2009 1:40 pm
by OttifantSir
After having added what I can understand is correct from the SITE/DENY-tip, I get this: line 3:0 required (...)+ loop did not match anything at input 'DENY'
What I input:
Code: Select all
Site http://promo.awempire.com
DENY ALL
This is the true offender on Grayvee and many other sites that pop under and leads to either www. or creatives.livejasmin.com.
I have put the IP-adress of all of these into my firewall, so they won't load, but a window still opens.
So, where did I go wrong in my input into ABE?
Re: How do I block these... ?
Posted: Mon Dec 14, 2009 1:52 pm
by Giorgio Maone
OttifantSir wrote:After having added what I can understand is correct from the SITE/DENY-tip, I get this: line 3:0 required (...)+ loop did not match anything at input 'DENY'[/qupte]
ABE rules are case-sensitive, it should be "Deny" (title case), and you can omit "ALL" which is implicit.
What I input:
Code: Select all
Site http://promo.awempire.com
DENY ALL
OttifantSir wrote:
This is the true offender on Grayvee and many other sites
As far as I can see, the "true" offender is inline, so you can't just block it.
You need a script surrogate, and it's provided (for Grayvee and FAP at least) in
latest development build.
Re: How do I block these... ?
Posted: Mon Dec 14, 2009 5:14 pm
by OttifantSir
As far as I can tell, with only a glancing experience of HTML, JavaScript and Python (I mean glancing, as in never written anything above a BATCH-code menu in DOS 6.0) it seems as though these two sites are opened through the code 'popundr'. Wouldn't it be an easy fix to write in some code into NoScript that negated that code? Seeing as it's mainly used for spam?
Re: How do I block these... ?
Posted: Tue Dec 15, 2009 12:04 am
by Tom T.
OttifantSir wrote:As far as I can tell, with only a glancing experience of HTML, JavaScript and Python (I mean glancing, as in never written anything above a BATCH-code menu in DOS 6.0) it seems as though these two sites are opened through the code 'popundr'. Wouldn't it be an easy fix to write in some code into NoScript that negated that code? Seeing as it's mainly used for spam?
If that is true, then I agree that an addition to Embeddings tab, "Block <popundr>" would be a good enhancement.
Giorgio?
EDIT: Just noticed the entry in
latest development build log:
Turned the "fap" surrogate into a generic "popunder" one
So it looks like what you're requesting has already been done. Advise if you encounter other popunders after installing
latest development build.
Re: How do I block these... ?
Posted: Wed Dec 16, 2009 2:34 pm
by OttifantSir
Installed latest development build, and still no luck in stopping the popunder windows...