MozillaZine

http://detectportal.firefox.com/ is hammering our firewalls

Discussion of bugs in Mozilla Firefox
oldfirefoxuser69
 
Posts: 6
Joined: May 4th, 2017, 4:09 pm

Post Posted May 4th, 2017, 4:37 pm

Hi Support,

In our environment we have many hundreds of clients/visitors that heavily use the web.
Needless to say that Firefox is one of the most used web clients. :-)

We noticed a continuous hit on our firewalls which took it's toll on the cpus as the request to hhttp://detectportal.firefox.com/success.txt is from every Firefox browser installed on the desktops/laptops/etc every 3 seconds or so. ](*,)
As a workaround we've allowed through the firewall an ever growing list of IP addresses and that is plain ridiculous and simply unmanageable.

Are your network gurus/engineers going to implement solutions such as anycast to alleviate this flawed implementation of a simple service as it has been in use for quite sometime now by for example Apple, Google, etc...
For example if you ping 8.8.8.8, it's very likely hosted in a datacentre near your town.
Will you consider anycast towards detectportal.firefox.com?

Please advise.
Thanks in advance.

Yves

James
Moderator

User avatar
 
Posts: 27001
Joined: June 18th, 2003, 3:07 pm
Location: Made in Canada

Post Posted May 4th, 2017, 5:00 pm

oldfirefoxuser69 wrote:Are your network gurus/engineers...
Will you consider...

In about:config you can toggle network.captive-portal-service.enabled to false if it is set to true.

See http://www.mozillazine.org/about/

oldfirefoxuser69
 
Posts: 6
Joined: May 4th, 2017, 4:09 pm

Post Posted May 4th, 2017, 5:33 pm

James wrote: In about:config you can toggle network.captive-portal-service.enabled to false if it is set to true.
:shock:

Perhaps on my desktop/laptop, yes.
I do dabble and can/have done it.

But for any environment that has large number of clients/visitors, obviously Mozilla/Firefox is used in the enterprise. :D

Anycast is one of the solutions to alleviate the impact this captiveportal has on the infrastructures but perhaps the Mozilla/Firefox team can have other solutions instead of telling each individual client to "toggle the about:config" fields.
Please advise.

LIMPET235
Moderator

User avatar
 
Posts: 37473
Joined: October 19th, 2007, 1:53 am
Location: The South Coast of N.S.W. Oz.

Post Posted May 4th, 2017, 11:34 pm

Hi,
Please be advised that this forum is not mozilla.org/.com. Check the last entry in the RH column. --------------------------->>>
We are a user-to-user help site.
James posted the link/s for you, so that you might understand why "we" cannot do anything with Firefox.
May I suggest that you go to the Official support site & pose your question/request there...
> https://support.mozilla.org/en-US/questions
Ancient Amateur Astronomer
Win-7-HP/Intel® DualCore-2.0GHz/500G HDD/4 Gig Ram/550Watt PSU/350WattUPS/Firefox-20.0-50.0-56.0.1/T-bird-2.0.0.24/SnagIt-v10.0.1/MWP-7.11.0.
RadioYachting. Conficker Test. (Always choose the "Custom" Install.)

oldfirefoxuser69
 
Posts: 6
Joined: May 4th, 2017, 4:09 pm

Post Posted May 7th, 2017, 3:42 pm

LIMPET235 wrote:Hi,
Please be advised that this forum is not mozilla.org/.com. Check the last entry in the RH column. --------------------------->>>
We are a user-to-user help site.
James posted the link/s for you, so that you might understand why "we" cannot do anything with Firefox.
May I suggest that you go to the Official support site & pose your question/request there...
> https://support.mozilla.org/en-US/questions


Hi LIMPET235,
Thanks for the info and apologies for the confusion.
Thought this was the site for getting in touch with the developpers and support techs.
I'll try the official link you’ve provided.

Cheers

DanRaisch
Moderator

User avatar
 
Posts: 117336
Joined: September 23rd, 2004, 8:57 pm
Location: Somewhere on the right coast

Post Posted May 7th, 2017, 3:50 pm

Don't be surprised to find that the official link is staffed by volunteers as well. There is no support site that leads directly to the developers and there are no paid support techs.

It should be possible to include a configuration file that would be distributed to each user's system to toggle that setting to false -- https://developer.mozilla.org/en-US/Fir ... deployment

oldfirefoxuser69
 
Posts: 6
Joined: May 4th, 2017, 4:09 pm

Post Posted May 7th, 2017, 5:09 pm

DanRaisch wrote:Don't be surprised to find that the official link is staffed by volunteers as well. There is no support site that leads directly to the developers and there are no paid support techs.

It should be possible to include a configuration file that would be distributed to each user's system to toggle that setting to false -- https://developer.mozilla.org/en-US/Fir ... deployment


Thanks for the update.
It would be quite sad if they wouldn't investigate a better solution.
As a collective, we could even provide the network engineering assistance to help make it better.

If no answer comes from the official site, guess I'll have to put in a change request to locally dns black-hole the domain or similar

Hope you have a great week and don't work too hard!

malliz
Folder@Home

User avatar
 
Posts: 43187
Joined: December 7th, 2002, 4:34 am
Location: Australia

Post Posted May 7th, 2017, 6:00 pm

You could file a bug report on Bugzilla that would be seen by the devs and at least you would get a response
https://bugzilla.mozilla.org/
And
https://developer.mozilla.org/en-US/doc ... guidelines
What sort of man would put a known criminal in charge of a major branch of government? Apart from, say, the average voter.
"Terry Pratchett"

oldfirefoxuser69
 
Posts: 6
Joined: May 4th, 2017, 4:09 pm

Post Posted May 7th, 2017, 7:24 pm

malliz wrote:You could file a bug report on Bugzilla that would be seen by the devs and at least you would get a response
https://bugzilla.mozilla.org/
And
https://developer.mozilla.org/en-US/doc ... guidelines


Thanks :-)

DN123ABC
 
Posts: 289
Joined: January 9th, 2017, 10:10 am

Post Posted May 8th, 2017, 7:15 am

oldfirefoxuser69 wrote:
malliz wrote:You could file a bug report on Bugzilla that would be seen by the devs and at least you would get a response
https://bugzilla.mozilla.org/
And
https://developer.mozilla.org/en-US/doc ... guidelines


Thanks :-)


Then post a link to that bug here, so others can see it. ;-)

oldfirefoxuser69
 
Posts: 6
Joined: May 4th, 2017, 4:09 pm

Post Posted May 9th, 2017, 11:35 pm

DN123ABC wrote:
oldfirefoxuser69 wrote:
malliz wrote:You could file a bug report on Bugzilla that would be seen by the devs and at least you would get a response
https://bugzilla.mozilla.org/
And
https://developer.mozilla.org/en-US/doc ... guidelines


Thanks :-)


Then post a link to that bug here, so others can see it. ;-)


This link is interesting:
https://bugzilla.mozilla.org/show_bug.cgi?id=1112330 #-o

therube

User avatar
 
Posts: 17503
Joined: March 10th, 2004, 9:59 pm
Location: Maryland USA

Post Posted May 13th, 2017, 6:31 am

Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript

Grumpus

User avatar
 
Posts: 11520
Joined: October 19th, 2007, 4:23 am
Location: ... Da' Swamp

Post Posted May 15th, 2017, 10:34 am

This was/is a default setting from Ubuntu and some Linux Firefox versions to allow for connection in various locations to other wifi networks.
Ex: at a coffee shop where wifi is provided to the patrons as a courtesy, also some ISPs, where an access or password page is used.
Look at the following settings in about config - NOTE: canonical may be replaced by another OS provider name.
Modify and a space will provide the "0" for Integer and string values.
captivedetect.canonicalContent - make blank
captivedetect.canonicalURL - make blank
captivedetect.maxRetryCount - 0
captivedetect.maxWaitingTime - 0
captivedetect.pollingTime - 0
network.captive-portal-service.backoffFactor - make blank
network.captive-portal-service.enabled - false
network.captive-portal-service.maxInterval - 0
network.captive-portal-service.minInterval - 0

Return to Firefox Bugs


Who is online

Users browsing this forum: No registered users and 4 guests