Wilders Security Forums  

Go Back   Wilders Security Forums > Software, Hardware and General Services > software & services
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old October 29th, 2006, 08:03 PM
squinteyes squinteyes is offline
Infrequent Poster
 
Join Date: Apr 2006
Posts: 9
Default Firefox quietly "contacting"Google?

I'm a life long nube who's always used ZoneAlarm as my firewall.I recently replaced ZA with Sygate 5.5 free and was looking through the traffic logs and noticed that Firefox was contacting Google and Google was replying.Is this normal?

I created an advanced rule to block IP addresses 72.14.xxx.xx so on and 216.239.xx.xx so on.It seems to block the communication between the two but I don't know if this is something common with Firefox.

Any ideas?



Windows ME
Dial-Up
  #2  
Old October 29th, 2006, 08:07 PM
sukarof's Avatar
sukarof sukarof is offline
Very Frequent Poster
 
Join Date: Jun 2004
Location: Stockholm Sweden
Posts: 1,450
Default Re: Firefox quietly "contacting"Google?

Do you have gmail extension installed?
__________________
Ubuntu 64 8.10
  #3  
Old October 29th, 2006, 08:37 PM
squinteyes squinteyes is offline
Infrequent Poster
 
Join Date: Apr 2006
Posts: 9
Default Re: Firefox quietly "contacting"Google?

No I don't use that. The only two extensions I use are AdBlock and Quick Preference Button.
  #4  
Old October 29th, 2006, 08:43 PM
ronjor's Avatar
ronjor ronjor is offline
Global Moderator
 
Join Date: Jul 2003
Location: Texas, USA
Posts: 40,696
Default Re: Firefox quietly "contacting"Google?

Do you have Firefox configured to use Google's list of phishing sites?
  #5  
Old October 30th, 2006, 10:24 AM
squinteyes squinteyes is offline
Infrequent Poster
 
Join Date: Apr 2006
Posts: 9
Default Re: Firefox quietly "contacting"Google?

I have it checked for the first option, "To check using a downloaded lists of suspected sites".

Does this list come from Google as well as the second option you can choose?
  #6  
Old October 30th, 2006, 11:18 AM
GideonD GideonD is offline
Regular Poster
 
Join Date: Oct 2006
Posts: 73
Default Re: Firefox quietly "contacting"Google?

It could possibly be the search box as well. When you use search function in 2.0 it automatically starts bringing up the most common matches as you type. It has to get those matches somewhere so I'd assume it's contacting google at some point if that is your selected search provider.
  #7  
Old October 30th, 2006, 11:20 AM
ronjor's Avatar
ronjor ronjor is offline
Global Moderator
 
Join Date: Jul 2003
Location: Texas, USA
Posts: 40,696
Default Re: Firefox quietly "contacting"Google?

Quote:
Does this list come from Google
More than likely since Google was involved in the design of the filter.

http://wiki.mozilla.org/Phishing_Pro..._Documentation

Also from the firefox help file.
Quote:
Check using a downloaded list of suspected sites

With this optionpreference selected, Firefox will check the current
site against a frequently updated list stored on your computer. No data about
the sites you visit is transferred to third-party anti-phishing providers
during normal browsing. Since phishing techniques and sites evolve quickly,
this mode of protection may not be as effective as having an anti-phishing
provider check every site you visit.


Check by asking ... about each site I visit

With this optionpreference selected, Firefox will send the address of
the current page over an encrypted connection to the selected third-party
anti-phishing provider in order to verify its identity. This method offers the
greatest protection, but information such as your IP address and browser
version may be transfered and stored by the selected provider. You will be
prompted to review and agree to the selected data provider's privacy policy
after selecting this optionpreference.
  #8  
Old October 31st, 2006, 11:49 AM
tlu's Avatar
tlu tlu is offline
Very Frequent Poster
 
Join Date: Sep 2004
Posts: 1,053
Default Re: Firefox quietly "contacting"Google?

Quote:
Originally Posted by squinteyes
I'm a life long nube who's always used ZoneAlarm as my firewall.I recently replaced ZA with Sygate 5.5 free and was looking through the traffic logs and noticed that Firefox was contacting Google and Google was replying.Is this normal?
Unfortunately yes, at least for RSS feeds. See http://www.legroom.net/modules.php?o...rticle&sid=215
__________________
Greetings, Thomas
  #9  
Old October 31st, 2006, 12:07 PM
iceni60 iceni60 is offline
( ^o^)
 
Join Date: Jun 2004
Posts: 5,009
Default Re: Firefox quietly "contacting"Google?

i have a ssl connexion to google sometimes when firefox starts up, i just had it when i started ff afew minutes ago. but, i just block it and haven't bothered checking where it comes from. i'll try to remember to check what's happening next time.
  #10  
Old October 31st, 2006, 02:39 PM
Hyperion's Avatar
Hyperion Hyperion is offline
Frequent Poster
 
Join Date: Sep 2003
Posts: 302
Default Re: Firefox quietly "contacting"Google?

Thank God i saw this topic.I was going insane.I was using ZAF.Today i switched back to Kerio,and here is my log:

http://img211.imageshack.us/img211/464/logek9.png


All addresses resolve to Google Inc. And this even if i have UNCHECKED the antiphishing filter.

P.S: I don't use Rss feeds.Never click on them,don't like them.
  #11  
Old November 1st, 2006, 05:52 PM
iceni60 iceni60 is offline
( ^o^)
 
Join Date: Jun 2004
Posts: 5,009
Default Re: Firefox quietly "contacting"Google?

this is the connection i have -

http://kb.mozillazine.org/Browser.sa...vider.*.keyURL

i think it's to do with proxomitron (it causes mismatched certificates), because the dns resolved to one of my feeds - leoville EDIT i wasn't really looking very closely, what i saw was sb-ssl.google.com and leoville using the same DNS

you can disable it by doing this -

type about:config in to the address bar
then paste this into the filter bar that's just below the tabs
browser.safebrowsing.enabled

then double click it so it goes to false

so what is it then

Last edited by iceni60 : November 1st, 2006 at 06:40 PM.
  #12  
Old November 1st, 2006, 06:19 PM
iceni60 iceni60 is offline
( ^o^)
 
Join Date: Jun 2004
Posts: 5,009
Default Re: Firefox quietly "contacting"Google?

i really don't like google or firefox very much. i'll just use opera instead. i've only been using firefox for about 3 weeks, and i don't like it.

so is it something built into the browser? or is it something else? i can't find anything about it
  #13  
Old November 1st, 2006, 06:34 PM
iceni60 iceni60 is offline
( ^o^)
 
Join Date: Jun 2004
Posts: 5,009
Default Re: Firefox quietly "contacting"Google?

i just asked at irc.mozilla.org. this is what it is -
Quote:
It downloads a blacklist of phising sites from sb-ssl.google.com every half hour

so when i said it resolves to leoville, what i ment was sb-ssl.google.com and leoville were both querying the same DNS
  #14  
Old November 2nd, 2006, 11:14 AM
Lamehand's Avatar
Lamehand Lamehand is offline
Frequent Poster
 
Join Date: Mar 2006
Location: the Netherlands,very near to the North sea
Posts: 428
Default Re: Firefox quietly "contacting"Google?

They better rename it to 'GoogleFox 2.0', is it becoming a closed source program?
Too much google will ruin this browser once and for all. This is not open source software but 'open the door to google' software.


Lamehand
__________________
For now; Ubuntu Hardy Heron
 

Wilders Security Forums > Software, Hardware and General Services > software & services « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 12:21 PM.


Powered by vBulletin® Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2010, Wilders Security Forums