Page 1 of 1

ABE rule to allow display of WLAN provider login page

Posted: Mon Jul 09, 2012 10:58 am
by problembear
Greetings,

there is trouble with ABE when a system autoconnects to a public WLAN that requires token or account based registration or access control through a initial web page presented by the public WLAN provider;
this initial webpage is returned to the browser upon any attempt to open some INTERNET webpage, before registering;
e.g.
(1) system has connection to public WLAN;
(2) attempt to open for instance 'http://www.google.com/'
(3) will return the WLAN provider registration page 'http://wlansome.dmn1.dmn2:9050/new-session.php' (or something like this) from the WLAN provider proxy ..;

With the standard ABE ruleset, the following error appears:
The request {GET http://wlansome.dmn1.dmn2:9050/new-sess ... oogle.com/<<<http://www.google.com/, chrome://browser/content/browser.xul-6} had been filtered by ABE: <LOCAL>Deny


What is the best ABE exception rule to deal with such situation ?
The rule should be something like:
--> Whatever URL the browser user requests, always accept a response coming from the domain: *wlansome.dmn1.dmn2.*
(--> How to distinguish between different WLAN provider domains - airpports, hotels .. ?)
---------------------------------------------------------------------
Site ALL
Accept ALL from *.wlansome.dmn1.dmn2
---------------------------------------------------------------------
Prepended the above to the SYSTEM and USER sections of ABE and the page loading hangs forever .. so there is a problem.
Where to change the rules - PREPEND only to SYSTEM or only to USER ?
What is the problem - any recommendations for adapting the rule, to avoid the page loading hang forever ?

Thank you for your answers and help,

Best regards, problembear

Re: ABE rule to allow display of WLAN provider login page

Posted: Tue Jul 10, 2012 9:34 am
by problembear
yes that is true, but with NoScript / ABE enabled with the standard ruleset it can not be displayed, instead an error like the following (as mentioned in the original post) is shown in a small black popup bar in the top of the firefox window:
-----------------------------
The request {GET http://wlansome.dmn1.dmn2:9050/new-sess ... ?url=http://www.google.com/<<<http://www.google.com/, chrome://browser/content/browser.xul-6} had been filtered by ABE: <LOCAL>Deny
-----------------------------

In order for this to work with activated NoScript / ABE some clever exception rule is required .. and my attempts did not work so far ..

Re: ABE rule to allow display of WLAN provider login page

Posted: Wed Jul 11, 2012 7:05 am
by Thrawn
Try

Code: Select all

Site .wlansome.dmn1.dmn2:9050
Accept
above the default rule.

What is happening is that your Wifi provider is impersonating Google and sending you a redirect to itself, which ABE sees as a request from Google to wlansome.

Re: ABE rule to allow display of WLAN provider login page

Posted: Thu Jul 12, 2012 8:57 am
by problembear
thank you for your reply, it works fine now .. with the rule:
# Rules are evaluated top to bottom - processing stops at first rule match !!
Site .wlansome.dmn1.dmn2
Accept

.. there is still a problem with certain websites loading forever and not getting to the WLAN provider login page and never display .. this seem to be associated with the combination of ADDONs (NoScript; Ghostery and https) .. because problem disappears in browser without any ADDONs .. need to further isolate issue ..