Blocking of EAC

Discussions about the Application Boundaries Enforcer (ABE) module
Jojo999
Senior Member
Posts: 147
Joined: Mon Jun 01, 2009 3:54 am

Blocking of EAC

Post by Jojo999 »

The latest NS release is screwing up the website http://www.exactaudiocopy.de/.

It no longer displays correctly. And when I try to click on a link (like download) on the left, I get this NS error:

=========
Request {GET http://www.exactaudiocopy.de/en/index.p ... /download/ <<< http://www.exactaudiocopy.de/, http://www.exactaudiocopy.de/ - 6} filtered by ABE: <LOCAL>
Deny
=========

When I click on Options, I get taken to the ABE SYSTEM options, where I see:

# Prevent Internet sites from requesting LAN resources.
Site LOCAL
Accept from LOCAL
Deny

I am assuming that I need some sort of exception in this rule for at least the EAC website. Can anyone show me how to do that since I find the short ABE doc and overall syntax unintelligible.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 FlyPaper/RC1 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9526
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Blocking of EAC

Post by Giorgio Maone »

The only way this can happen is www.exactaudiocopy.de resolving both to an internet and a local address for you.
Is this the case?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Jojo999
Senior Member
Posts: 147
Joined: Mon Jun 01, 2009 3:54 am

Re: Blocking of EAC

Post by Jojo999 »

Giorgio Maone wrote:The only way this can happen is http://www.exactaudiocopy.de resolving both to an internet and a local address for you.
Is this the case?
I don't know. Have you tried going to the website address? Does it look normal to you? Did you try and click on the say, Download link? Did it work for you?

I just tried to go to the site via the link I posted previously and I got this ABE error again:

Request {GET http://www.exactaudiocopy.de/ <<< http://forums.informaction.com/posting. ... 23&p=25298, http://forums.informaction.com/posting. ... 23&p=25298 - 6} filtered by ABE: <LOCAL> Deny
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 FlyPaper/RC1 (.NET CLR 3.5.30729)
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Blocking of EAC

Post by therube »

Yes, yes, & yes.

How about a screenshot of your abnormal looking page?


(Hadn't realized it had been updated. Last version I had was 0.99 prebeta 4, though it has been a long time since I've ripped anything.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.17) Gecko/20110123 SeaMonkey/2.0.12
User avatar
Giorgio Maone
Site Admin
Posts: 9526
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Blocking of EAC

Post by Giorgio Maone »

Could you open Tools|Error Console and evaluate the following code:

Code: Select all

Components.classes["@maone.net/noscript-service;1"].getService().wrappedJSObject.__parent__.DNS.resolve("www.exactaudiocopy.de", 0, function(r) { alert(r.entries.toSource()) })
Please select the content of the alert you get and copypaste it here.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Blocking of EAC

Post by therube »

null, in my case.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.17) Gecko/20110123 SeaMonkey/2.0.12
User avatar
Giorgio Maone
Site Admin
Posts: 9526
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Blocking of EAC

Post by Giorgio Maone »

therube wrote:null, in my case.
Because I wrote "www.exactaudiocopy.com" instead of "www.exactaudiocopy.de".
However, I'm more interested in OP's result.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Blocking of EAC

Post by therube »

OK, now it returns the IP like you'd expect, 88.198.13.12.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.17) Gecko/20110123 SeaMonkey/2.0.12
Jojo999
Senior Member
Posts: 147
Joined: Mon Jun 01, 2009 3:54 am

Re: Blocking of EAC

Post by Jojo999 »

Giorgio Maone wrote:Could you open Tools|Error Console and evaluate the following code:

Code: Select all

Components.classes["@maone.net/noscript-service;1"].getService().wrappedJSObject.__parent__.DNS.resolve("www.exactaudiocopy.de", 0, function(r) { alert(r.entries.toSource()) })
Please select the content of the alert you get and copypaste it here.
["88.198.13.12", "fe80::21d:92ff:feeb:816e"]
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 FlyPaper/RC1 (.NET CLR 3.5.30729)
Jojo999
Senior Member
Posts: 147
Joined: Mon Jun 01, 2009 3:54 am

Re: Blocking of EAC

Post by Jojo999 »

therube wrote:How about a screenshot of your abnormal looking page?
Here you go:
http://i.min.us/icb0Bu.jpg
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 FlyPaper/RC1 (.NET CLR 3.5.30729)
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Blocking of EAC

Post by therube »

(Your screenshot was only 1/3 of the way working last night. Much better today.)

You IE8 version looks just like my SeaMonkey.
Your FF looks (basically) like SeaMonkey when I; View | Use Style -> None (though I *do* have screenshot of EAC displaying at the very bottom).

So look if you don't have some .css blocked somewhere? Adblock Plus perhaps?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.17) Gecko/20110123 SeaMonkey/2.0.12
Jojo999
Senior Member
Posts: 147
Joined: Mon Jun 01, 2009 3:54 am

Re: Blocking of EAC

Post by Jojo999 »

therube wrote:(Your screenshot was only 1/3 of the way working last night. Much better today.)

You IE8 version looks just like my SeaMonkey.
Your FF looks (basically) like SeaMonkey when I; View | Use Style -> None (though I *do* have screenshot of EAC displaying at the very bottom).

So look if you don't have some .css blocked somewhere? Adblock Plus perhaps?
I tried turning off Adblock PLus for the site. Also Greasemonkey. Nothing changed. I then ran Firebug. I clicked on the CSS and ti said there was no CSS.

This is the only page that seems to be having a problem. Since I am also having a problem with NS ABE, I have to believe that there is some sort of connection.

BTW: Why do I get the ABE error when I click on a link to the EAC home page from this forum BUT don't get that error if I paste the same URL into the address bar?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 FlyPaper/RC1 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9526
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Blocking of EAC

Post by Giorgio Maone »

Jojo999 wrote: ["88.198.13.12", "fe80::21d:92ff:feeb:816e"]
The problem is the second IP fe80::21d:92ff:feeb:816e which EAC is resolved to for you, which is considered private (local) by ABE:
http://en.wikipedia.org/wiki/Private_ne ... _addresses

Have you got any idea of why you get this nonsense DNS result?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
User avatar
therube
Ambassador
Posts: 7969
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Blocking of EAC

Post by therube »

I thought that was an IPv6 address?
(Searches say, "www.exactaudiocopy.de has two IP numbers ...".)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.17) Gecko/20110123 SeaMonkey/2.0.12
User avatar
Giorgio Maone
Site Admin
Posts: 9526
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Blocking of EAC

Post by Giorgio Maone »

therube wrote:I thought that was an IPv6 address?
(Searches say, "www.exactaudiocopy.de has two IP numbers ...".)
Yes, it's an IPV6 address that looks like belonging to an address range reserved for private (LAN) usage.
However I've looked more closely into this issue, and it seems to actually be a subnetting issue in ABE's local IP checking code.
In fact, while fe80::::feeb:816e would have been a proper link-local address, fe80::21d:92ff:feeb:816e is not, because it falls out the fe80::/64 range set aside for autoconfiguration.

This is going to be fixed in next dev build.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Post Reply