Page 1 of 1
NoScript and Akamai NetSession Interface installation loop
Posted: Thu May 24, 2012 3:01 am
by Guest
I'm using Firefox 12 and NoScript 2.4.2. When I visit a site that uses Akamai Download Manager for downloads, I run into trouble with the required NetSession Interface installation. The install runs, appears to finish, but then isn't recognized as installed and the installation starts again. Round and round, infinite installation loop. I have temporarily allowed the company domain, akamai.com domain and even 127.0.0.1 which the installer uses to communicate with the NetSession Client Interface it's installing. Even with all of it allowed, the installation runs over and over ad infinitum. The only way I can get NetSession Interface to install and work is to disable NoScript.
Has anyone else run into this problem and figured out a solution other than disabling NoScript?
Thanks.
Re: NoScript and Akamai NetSession Interface installation lo
Posted: Thu May 24, 2012 7:31 am
by Giorgio Maone
Cold you check whether you can find any [ABE] or [NoScript ABE] line in your
Error Console (Ctrl+Shift+J)?
Re: NoScript and Akamai NetSession Interface installation lo
Posted: Thu May 24, 2012 5:25 pm
by ekimeno
I do find lots of entries like this in my error console:
Code: Select all
[ABE] <LOCAL> Deny on {GET http://127.0.0.1:9421/api?function=getClientAttributes&installcpcode=78333&cid=0&complete&wrapper=DLMHelper.setInstalled(*);&r=0.2911575514706989 <<< http://www.akamai.com/html/solutions/downloadmanager_resumable_std.html# - 2}
SYSTEM rule:
Site LOCAL
Accept from LOCAL
Deny
and they keep happening over and over, even after I exit the NetSession Interface installation.
You can try this for yourself by visiting the following:
http://www.akamai.com/html/solutions/do ... e_std.html
and clicking on the Start Download button in the demo. You might want to make sure you don't have Akamai NetSession Interface already installed on your PC.
Thank you for your help with this.
Re: NoScript and Akamai NetSession Interface installation lo
Posted: Thu May 24, 2012 8:28 pm
by Thrawn
In hindsight, I should have spotted this straight away. Giorgio did.
ABE won't let sites contact 127.0.0.1 (or other local addresses), to prevent attacks on your router etc. You'll need to change your default rule (in Options - Advanced - ABE - System) to:
Code: Select all
Site LOCAL
Accept from LOCAL www.akamai.com
Deny
Re: NoScript and Akamai NetSession Interface installation lo
Posted: Sat May 26, 2012 1:46 am
by Tom T.
I'm not familiar with this product, but it may be possible to tighten Thrawn's rule, so that *all* content from Akamai is not allowed to access your local resources:
Code: Select all
Site LOCAL
Accept from LOCAL http://www.akamai.com/html/solutions/downloadmanager_resumable_std.html
Deny
Or perhaps some of the stuff at the end may need to be trimmed off, perhaps something like
Code: Select all
Site LOCAL
Accept from LOCAL http://www.akamai.com/html/solutions/downloadmanager*
Deny
Anyway, start with the most restrictive, then if it still produces the error, gradually lessen the restriction.
Not personally fond of allowing the entire site, which serves content from thousands of its customers, to bypass ABE altogether.
FWIW, I don't like sites that use 127.0.0.1 (your "localhost" address), and wouldn't deal with one that did. IMHO. YMMV.
Re: NoScript and Akamai NetSession Interface installation lo
Posted: Sat May 26, 2012 8:12 am
by Giorgio Maone
Actually, the most restrictive rule,
to be put before the default LOCAL one in the SYSTEM ruleset, would be:
Code: Select all
Site 127.0.0.1:9421
Accept from http://www.akamai.com/html/solutions/*