Slightly less Random Ramblings

November 6, 2010

Noscript And Zimbra Problem

Filed under: computing, security — Tags: , , , , , — Robert Wicks @ 8:23 am

I log into a Zimbra server for email. I may be logged in on the local network, from outside, over the Internet, or across a VPN. The hostname is always the same. I found that I would have to actually quit Firefox in order to log back into Zimbra if I initiated a session over the Internet, and later made a VPN connection. I would see a white screen with a link in the upper left corner which said [Sign Out]. Clicking it did nothing. I actually had to restart Firefox. I discovered that this happened because of Noscript’s ABE protection. I did not wish to disable this, as it is a useful security feature. The solution is to go into the NoScript options, under ABE, and edit the SYSTEM settings. It normally says

# Prevent Internet sites from requesting LAN resources.
Accept from LOCAL

I added this line after the Accept lin:

Accept ALL from *.<mydomainname>

That fixed the issue. It might be advisable for people who use Noscript in a corporate environment with VPN access to add this to their ABE settings in order to prevent web application failures.



  1. Thanks for the tip. The article should probably read: “this happened because of **NoScripts’s** ABE protection” and “go into the **NoScript** options, under ABE”… instead of referencing Zimbra.

    Comment by Rob — June 22, 2011 @ 12:39 am

  2. Thanks! I corrected the error.

    Comment by Robert Wicks — June 22, 2011 @ 5:30 pm

  3. thank you–this helped me!

    Comment by Heather McCalley — February 6, 2012 @ 12:43 pm

RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Blog at

%d bloggers like this: