ABE WAN IP Lookup

Discussions about the Application Boundaries Enforcer (ABE) module
shql

ABE WAN IP Lookup

Post by shql »

I've tried to edit noscript.ABE.wanIpCheckURL to a server on my network, but NoScript doesn't seem to accept the IP it returns. Anyway, since I'm too lazy to edit the ABE rules on all Firefoxes I decided to return NXDOMAIN via DNS for secure.informaction.com. My router indeed shows the web interface when requesting the WAN IP, however - it requires authentication even from local IPs so It shouldn't be an issue at all - right?

Is there a way to set the WAN IP to a static address in the local ruleset without looking up anything?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12
Guest

Re: ABE WAN IP Lookup

Post by Guest »

I suppose changing the system rules to something like this, not sure if right though. Don't forget to uncheck the WAN IP box.

Code: Select all

# If you don't use your WANIP to change router settings, this should be fine:
Site WANIP
Deny

Site ROUTERIP
Accept from ROUTERIP
Deny 
Mozilla/5.0 (Windows NT 5.1; rv:2.0b6) Gecko/20100101 Firefox/4.0b6
shql

Re: ABE WAN IP Lookup

Post by shql »

Yeah that seems to work fine. Used your example and set ROUTERIP to the LAN address and WANIP (obviously) to my WAN IP.

Thanks. Still not sure why NoScript didn't accept the IP my server returned earlier.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12
dhouwn
Bug Buster
Posts: 968
Joined: Thu Mar 19, 2009 12:51 pm

Re: ABE WAN IP Lookup

Post by dhouwn »

shql wrote:My router indeed shows the web interface when requesting the WAN IP, however - it requires authentication even from local IPs so It shouldn't be an issue at all - right?
Depends. There might be exploits if not to gain access then at least to "have fun", e.g. I happened to have an home router which would reboot when you entered a long password (> 255 characters I believe) into the authentication box.
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b8pre) Gecko/20101123 Firefox/4.0b8pre
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3369
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: ABE WAN IP Lookup

Post by GµårÐïåñ »

NoScript is trying to use a server it trusts to ensure that indeed the information is correct. So you can go ahead and try to change it and best of luck to you but if at any point you are dealing with the wrong information and it bypasses the security provided to you, its your own fault, just so you know.
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20100101 Firefox/15.0
Post Reply