[.01] No access to internet after F-Secure upgrade

AndromedaXS · Post by **AndromedaXS** » Thu Jan 24, 2013 11:02 am

After an upgrade from F-Secure my Sandboxie which has been working for years now has stopped.

I have deleted the content. Disabled firewalls.
Created a new Sandiebox. But no luck.

Using Sandboxie version 3.76 (32-bit) registrated (latest version)
WinXP ver 5.1.2600 Professional version 2002 SP 3

F-Secure Security Panel 1.62 build 373
-CCF Agent 1.62 build 284
-CCF CUIF 10.01 build 33962
-CCF DAAS2 1.10 build 299
-CCF Automatic Update Agent 1.05 build 1041
-CCF Upstream 2.00 build 107
-CCF Diagnostics 8.00 build 17952
-CCF Scanning 1.14 build 155.6945
-CCF Network 1.02 build 115
-CCF Reputation 1.0 build 25.1756

Below a copy from the accessmonitor.
Any ideas how to get Sandiebox working again?

Steven

snipped. --tzuk
--------------------------------------------------------------------

Guest10 · Post by **Guest10** » Thu Jan 24, 2013 6:29 pm

AndromedaXS wrote:... my Sandboxie which has been working for years now has stopped.

Stopped how?
Some part or all of Sandboxie won't run ?

tzuk · Post by **tzuk** » Fri Jan 25, 2013 5:23 am

Looks like F-Secure maybe added one more resource. AndromedaXS please try:

Open Sandboxie Control, go to Sandbox Settings, expand Resource Access, IPC Access, Direct Access, click Add, paste:

*\BaseNamedObjects*\pipeservertaken*

Then click OK all the way back and restart your Firefox under Sandboxie. If it still doesn't work, I would like to see a new resource log, with this setting still in effect.

AndromedaXS · Post by **AndromedaXS** » Fri Jan 25, 2013 5:55 am

>Stopped how?
>Some part or all of Sandboxie won't run ?

The Sandboxie is operational.
The issue is that after the upgrade from F-Secure is installed.
Firefox which is started through Sandboxie will not connect to the internet.

I have monitored the connection with TCPview when Sandboxie is started.
I see that
- Firefox is put in LISTING mode.
Normal behavior would be to SYNC_SENT, ESTABLISHED when connected.
Firefox is started. But doesnot appear on the taskbar as an icon. So it is
there you just do not see it. It would appear that the firewall is blocking
the response from the remote server. But after disabling the firewall the
result remains the same. F-Secure DeepGuard is disabled.

I added "*\BaseNamedObjects*\pipeservertaken*" shutdown and restarted.
But no effect. Below I added a new resouce log after adding
- Open Sandboxie Control
- click right on "Sandbox DefaultBox"
- item: Sandbox Settings
- menu: Resource Access
- submenu: IPC Access
- submenu: Direct Access

Steven

Direct IPC Access (OpenlpcPath)
*\BaseNamedObjects*\pripservertaken*
[\RPC Control\__hex12__*.*.*.*.*.*.*.*]
[\RPC Control\F-Secure ORSP V1]
[*\BaseNamedObjects*\FSMB *]
[*\BaseNamedObjects*\dxk390x-*]
[*\BaseNamedObjects*\pipserverhere*]
[*\BaseNamedObjects*\pipserversync*]
[*\BaseNamedObjects*\PGPhkSharedMemory]
[*\BaseNamedObjects*\PGPocTrayInstSem]
[*\BaseNamedObjects*\PGPocTrayListenSem]
[*\BaseNamedObjects*\PGPtray_Hidden_Window]
[*\BaseNamedObjects*\PGPlsp Debug Print Mutex]

snipped. --tzuk

tzuk · Post by **tzuk** » Fri Jan 25, 2013 6:22 am

Alright, sorry to hear that setting didn't help. I don't think I will be able to get to this today but I will make an effort to try to install F-Secure tomorrow and see if I can come up with an updated set of compatibility settings.

Guest10 · Post by **Guest10** » Fri Jan 25, 2013 6:32 am

AndromedaXS wrote:Direct IPC Access (OpenlpcPath)
*\BaseNamedObjects*\pripservertaken*

If this is the way it actually appears in your settings, it was spelled wrong.

AndromedaXS · Post by **AndromedaXS** » Fri Jan 25, 2013 8:12 am

>AndromedaXS wrote:
>Direct IPC Access (OpenlpcPath)
>*\BaseNamedObjects*\pripservertaken*
>If this is the way it actually appears in your settings, it was spelled wrong.
It was a typo. I noticed it when I posted after reading my message.
I tried to change it but had to wait 10 minutes before I could alter my message.
After 10 minutes I forgot. Reading your reply now.

Correct line is
*\BaseNamedObjects*\pipeservertaken*

Steven

Guest10 · Post by **Guest10** » Fri Jan 25, 2013 2:43 pm

I don't know if this resource means anything:
Pipe \device\namedpipe\FS_CCF_NI_DAEMON0
but it does look like it's related to F-Secure.

You could try adding it:
Sandbox Settings > Resource Access > IPC Access > Direct Access
"Add": \device\namedpipe\FS_CCF_NI_DAEMON*
OK

tzuk · Post by **tzuk** » Sat Jan 26, 2013 4:55 pm

I tried F-Secure and Firefox 18 but I don't see any connectivity problems. However F-Secure reports these version numbers for me:

version 1.71 build 340
CCF CUIF 10.01 build 35273
CCF DAAS2 1.10 build 299
CCF Automatic Update Agent 1.05 build 1048
CCF Upstream 2.00 build 113
CCF Diagnostics 8.00 build 18132
CCF Scanning 1.14 build 155.6945
CCF Network 1.02 build 126
CCF Reputation 1.0 build 25.1877

As you can see some of these numers are higher than what you posted. Maybe another update was released and it fixes the problem?

* * *

EDIT. I was checking the above with Sandboxie version 4.01. I checked again with Sandboxie 3.76 and Firefox doesn't even start.

But, I opened Sandboxie Control > Configure menu > Software Compatibility and disabled compatibility with F-Secure, then Firefox is working normally again.

So as a first step I suggest that you also try to disable compatibility with F-Secure in the Software Compatibility window in Sandboxie.

AndromedaXS · Post by **AndromedaXS** » Sun Jan 27, 2013 3:30 pm

I removed the added IPC lines and disabled the "[ ] F-Secure Internet Protection".
For improved compatiblity and everything is working again.

Thanks Tzuk for your response.
Steven

Sandboxie Support

[.01] No access to internet after F-Secure upgrade

[.01] No access to internet after F-Secure upgrade

Re: Sandiebox has no access to internet after F-Secure upgra

Who is online