Friday, September 4, 2009

VMware Server and NoScript ABE

NoScriptI have been using NoScript with with Firefox for a while now. It is a Firefox extension that blocks scripts from running in Firefox. For each web page, you can allow scripts from each site that the page has scripts to run or not. This can be a temporary "Allow" or it can be permanent.

So, for sites I visit frequently and trust like Gmail, I permanently allow scripts from For other sites that I do not visit often or if it's just a one time visit, I may temporarily allow scripts. NoScript blocks JavaScript, Java, and Flash. It's great because if has some scripts in their page, but also has scripts from, you can allow, but not

Recently, I started having problems connecting to my locally running VMware Server using Firefox because of NoScript's ABE feature after a NoScript update.

ABE is Application Boundaries Enforcer which protects against CSRF attacks. Apparently the VMware application was trying to talk back to the browser or something. By going into NoScript's Options, in the Advanced tab, and in the ABE sub-tab, and editing the SYSTEM ruleset, I was able to make VMware work again. Windows didn't know how to edit an ".abe" file, so I had to configure it to use Notepad. Then, I made the ruleset look like the one below. Be sure to use the URL that you connect to VMware server with.

# Prevent Internet sites from requesting LAN resources.
Accept from LOCAL
Accept from https://vmware_server_name:8333/