Re: HTML Renderer Trying to Access Internet

2004-10-27 Thread 9Val
Hello John,  

JT The attach message tries to contact remote computers. To reproduce:

Should be fixed in .02

-- 

 9Val



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread Zygmunt Wereszczynski
On Tuesday, October 26, 2004, at 06:53:55 [UTC+0200] (Tuesday, October
26, 2004 06:53 my local time) Martin Schoch wrote:

 At this point, for me, TB! tries to connect to Yahoo servers on port
 445 and 139.  Can anyone confirm?

 Yes - confirmed - my firewall says that it is a ping request.

Did you click on any active link in this message? There are some in it.

-- 
Best regards,
Zygmunt Wereszczynski
(Using The Bat! v3.0.2.1 on Windows 95 4.0 Build  b)



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread NTL World
Hello John,

  A reminder of what John Thomas typed on:
  26 October 2004 at 18:51:30 GMT -0700

 At this point, for me, TB! tries to connect to Yahoo servers on port
 445 and 139.  Can anyone confirm?

 I can confirm it, thought TB wasn't supposed to do that?


-- 

Best regards,Tony.   
    
 The Bat! v3.0.2.1   26/10/2004 at 09:57 UTC   2ØØ3 - AWB




 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread Marcus Williams
On 26/10/2004, Martin Schoch wrote:
 Yes - confirmed - my firewall says that it is a ping request.

pings dont go to ports 139 and 445 - these are netbios ports. There
are some ping requests just before the other ports are connected to.
There is definitely something wierd here. I've just run ethereal (a
network sniffer) on the network activity the bat generates on this
message and what something like firefox generates on the same html.
Its quite different.

In fact I'd hazard a guess that the network trace the bat generates
looks horribly like the one Internet explorer generates when it views
the message. I didnt think the bat used the MS html component?

I'm going to dig around a bit more

Marcus

-- 
Marcus Williams -- http://www.quintic.co.uk
Quintic Ltd, 39 Newnham Road, Cambridge, UK
  This message is private [ ] public [*]



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread Tony Boom
Hello Martin,

  A reminder of what Martin Schoch typed on:
  26 October 2004 at 06:53:55 GMT +0200

 AND: When I don't allow the connection TheBat! gets confused - an
 empty Connection window is opened and I have to kill TheBat! with
 the Task Manager.

 Nothing crashed or froze here, TB just paused while Kerio waited form me to
 allow/deny the outgoing connections... I denied all requests and TB opened
 the mail without a single whinge.

 The above sequence of events are perfectly normal, I was however under the
 impression The Bat wasn't supposed to get as far as even attempting an
 outgoing connection unless specifically requested to by the user, clicking
 a URL for example.


-- 

Best regards,Tony.   
    
 The Bat! v3.0.2.1   26/10/2004 at 10:07 UTC   2ØØ4 - AWB




 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread Marcus Williams
On 26/10/2004, I wrote:
 In fact I'd hazard a guess that the network trace the bat generates
 looks horribly like the one Internet explorer generates when it views
 the message. I didnt think the bat used the MS html component?

Whilst it does look like this, its not because it uses the html
component (thank god). If you look at the html closely theres an image
in there that looks like:

img width=1 height=1 
src=//us.csc.adserver.yahoo.com/l?/SIG=11aa7evr7/D=alertrem/S=37992800:LREC/EXP=1098786821/A=-1/F=x/B=5/R=1098700421119114_9dacab9a

I suspect this is what is causing the problem - its a UNC
path which would cause the netbios lookups that are occuring.

The bat really should not do this - This is a bug as it is trying to
get something from the internet.

I think that yahoo have missed off the http: because I cant believe
they'd be serving up content this way.

Marcus
-- 
Marcus Williams -- http://www.quintic.co.uk
Quintic Ltd, 39 Newnham Road, Cambridge, UK
  This message is private [ ] public [*]



 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread Foster, Graham
Hello Marcus
 The bat really should not do this - This is a bug as it is trying to
 get something from the internet.
Clicking on the original message of this thread caused my TB! instance
to lockup completely.. I'd appreciate it if TB! didn't do this either.
Easy Denial Of Service attack on TB! then :-)

-- 
regards,
 Graham  
Using The Bat! 3.0.2.1
assisted by 
under Windows XP 5.1 
(Build 2600, Service Pack 1)



--
Notice:  This e-mail message, together with any attachments, contains information of 
Merck  Co., Inc. (One Merck Drive, Whitehouse Station, New Jersey, USA 08889), and/or 
its affiliates (which may be known outside the United States as Merck Frosst, Merck 
Sharp  Dohme or MSD and in Japan, as Banyu) that may be confidential, proprietary 
copyrighted and/or legally privileged. It is intended solely for the use of the 
individual or entity named on this message.  If you are not the intended recipient, 
and have received this message in error, please notify us immediately by reply e-mail 
and then delete it from your system.
--


 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread MAU
Hello Marcus,

 Whilst it does look like this, its not because it uses the html
 component (thank god). If you look at the html closely theres an image
 in there that looks like:
 
 img width=1 height=1
 src=//us.csc.adserver.yahoo.com/l?/SIG=11aa7evr7/D=alertrem/S=37992800:LREC/EXP=1098786821/A=-1/F=x/B=5/R=1098700421119114_9dacab9a
 
 I suspect this is what is causing the problem - its a UNC
 path which would cause the netbios lookups that are occuring.
 
 The bat really should not do this - This is a bug as it is trying to
 get something from the internet.

I agree with you. An probably TB misses it because it is not HTML code
but done with a js document.write.

-- 
Best regards,

Miguel A. Urech (El Escorial - Spain)
Using The Bat! v3.0.1.33 on Windows 2000 5.0 Service Pack 4





 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread Tony Boom
Hello MAU,

  A reminder of what MAU typed on:
  26 October 2004 at 13:01:48 GMT +0200

 I agree with you. An probably TB misses it because it is not HTML code
 but done with a js document.write.

 Would it not be just a matter of finding out the extension and adding it to
 these reg entries?  Notice that .JS is already included!

ProtectDisableOpen=*.EXE,*.COM,*.BAT,*.CMD,*.VBS,*.PL,*.BAS,*.JS,*.JAVA,*.REG,*.SHS,*.PIF,*.SCR,*.DLL,*.SSH,*.CHM,*.HLP,*.LNK,*.{*},*.CPL
ProtectAllowOpen=*.JPG,*.JPEG,*.PNG,*.GIF,*.BMP,*.ICO,*.WMF,*.EMF,*.VCF,*.EML,*.MSG,*.ARJ,*.ZIP,*.RAR,*.TIF,*.ACE,*.LZH,*.WAV

Saying that though, shouldn't this reg entry have trapped it anyway?

ProtectWarnOpen=*.*

 


-- 

Best regards,Tony.   
    
 The Bat! v3.0.2.1   26/10/2004 at 12:05 UTC   2ØØ3 - AWB




 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread Marcus Ohlström

On Tuesday, October 26, 2004, 13:08, Tony Boom wrote:

  Would it not be just a matter of finding out the extension and adding
  it to these reg entries?  Notice that .JS is already included!

 ProtectDisableOpen=*.EXE,*.COM,*.BAT,*.CMD,*.VBS,*.PL,*.BAS,*.JS,*.JAVA,*.REG,*.SHS,*.PIF,*.SCR,*.DLL,*.SSH,*.CHM,*.HLP,*.LNK,*.{*},*.CPL
 ProtectAllowOpen=*.JPG,*.JPEG,*.PNG,*.GIF,*.BMP,*.ICO,*.WMF,*.EMF,*.VCF,*.EML,*.MSG,*.ARJ,*.ZIP,*.RAR,*.TIF,*.ACE,*.LZH,*.WAV

 Saying that though, shouldn't this reg entry have trapped it anyway?

 ProtectWarnOpen=*.*

No, these categories only applies when you open a document with an
external tool. Here, you don't, you view the html within TB! and then
the lists above is not considered. It's definitely a bug, but it's not
related to the lists you mention.

-- 
Regards,
Marcus Ohlström

Using The Bat! v3.0.1.33 on Windows 2000 5.0 Build 2195 Service Pack 4
PGP Public Key at http://www.canit.se/~marcus/pgp.asc






 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


Re[2]: HTML Renderer Trying to Access Internet

2004-10-26 Thread Klimov Vova
Hello!


 No. I have the preview window on - as soon as I click on the message
 001.msg the request is sent.
The same (


Klimov Vova [EMAIL PROTECTED] www.starsoft.org Sisoftware Russian localisation 
team
 Ritlabs Russian localisation 
team
Using The Bat! 3.0.2.1  Professional
on Windows XP (5. 1) Build 2600 Service Pack 2


pgph2WWkjFC38.pgp
Description: PGP signature

 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/

Re: HTML Renderer Trying to Access Internet

2004-10-26 Thread Tony Boom
Hello Marcus,

  A reminder of what Marcus Ohlström typed on:
  26 October 2004 at 13:48:03 GMT +0200

 It's definitely a bug, but it's not related to the lists you mention.

It was just a thought. if it was then ProtectWarnOpen=*.* would have
trapped it.


-- 

Best regards,Tony.   
    
 The Bat! v3.0.2.1   26/10/2004 at 13:29 UTC   2ØØ4 - AWB




 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/


HTML Renderer Trying to Access Internet

2004-10-25 Thread John Thomas
The attach message tries to contact remote computers. To reproduce:

   1. Have a firewall or some other way to watch connections
   2. Save the attached message.
   3. Import the message into TB! Message base.
   4. View Message.

At this point, for me, TB! tries to connect to Yahoo servers on port
445 and 139.  Can anyone confirm?

FYI - I modified the message to protect my identity, I hope.

--
Best regards,
John Thomas

Using The Bat! v3.0.2.1 on Windows XP 5.1 Build 2600 Service Pack 2---BeginMessage---




Yahoo! News -
 My Alerts






Monday, October 25, 2004,  3:31 AM PDT





  
  
  

BRUSSELS, Belgium (AP) The EU trade commissioner has proposed lifting punitive tariffs on U.S. goods after Washington repealed illegal corporate tax breaks.


Visit Yahoo! News for more details or search for this story on Yahoo! News Search.
  
  























You received this email because you subscribed to Yahoo! Alerts. Please do not
reply to this message to unsubscribe. If you do not want to receive this alert, use

this link 
to unsubscribe or change the frequency of your delivery.


If you have questions, send us feedback by visiting:


http://add.yahoo.com/fast/help/us/alerts/cgi_beta .


If you would like to change or edit your communications preferences for this or
other Yahoo!  business lines, please visit your
Marketing Preferences
page.
To learn more about Yahoo!'s use of personal information, including the use of
web beacons
 in HTML-based email, please read our
Privacy Policy.
Yahoo! is located at 701 First Avenue, Sunnyvale, CA 94089.


Copyright 1994-2004 Yahoo! Inc. All rights reserved.







---End Message---

 Current beta is 3.0.2.1 Beta/1 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html
IMPORTANT: To register as a Beta tester, use this link first -
http://www.ritlabs.com/en/partners/testers/