Debating Disabling

[AdamB]

I am thinking about disabling this module all together as it just causes far to much grief. I am constantly getting emails with complaints about slow sites and sure enough its spyware blocker every time. I understand there has to be sometimes when I need to add url's to the pass list but this is just getting out of hand. It effects everything from kelly blue book to new egg and seems like a new issue/site everyday.

I just wanted to get other users input on how it is effecting you and your network. Don't get me wrong what spyware blocker does is great, but at the cost of slowing things down severely is not worth it. I see these exact issues both on my work network and my home network which both have the spyware module working. I appreciate everyone's input!!

[dmorris]

did you submit any of the sites you don't think are spyware to be removed?

Remember, the spyware database in spyware blocker is community maintained. Its only as good as you make it.

Regardless I'm not sure why spyware blocker would cause 'slowness.'
It will either block the site or it won't.

Personally I think if you have web filter installed with the malware category blocked you can disable the URL blocking in spyware (at least the community list - I would keep the google list). The malware category in web filter is maintained up to the minute.

[AdamB]

Very good point! I will make sure to submit those URL's.

This is what I see happening.

When navigating to lets say Kelly Blue Book it will hang for 10-15 seconds and there is block coming up in spyware blocker for
"http://es.optimost.com/es/422/c/37/u/live.js"

As soon as I add that url to the pass list in spyware blocker the site loads up within a second. This is happening more and more.

[AdamB]

If I disable the module all together the issue goes away. It also goes away if I only disable the "Web" section of spyware blocker.

[dmorris]

if you go to http://es.optimost.com/es/422/c/37/u/live.js directly in your browser do you get a blockpage?

As I said, It should not hang. it should be blocked immediately with a blockpage.

[AdamB]

if you go to http://es.optimost.com/es/422/c/37/u/live.js directly in your browser do you get a blockpage?

As I said, It should not hang. it should be blocked immediately with a blockpage.

No block page at all, see all the java code. But I do see a block in the logs.

2011-12-01 5:10:21 pm
block
10.80.8.150:2425

http://by.optimost.com/trial/422/p/h..._ref=http%3A// : http://by.optimost.com/trial/422/p/h..._ref=http%3A//

in URL List
69.31.76.8:80

[dmorris]

No block page at all, see all the java code. But I do see a block in the logs.

2011-12-01 5:10:21 pm
block
10.80.8.150:2425

http://by.optimost.com/trial/422/p/h..._ref=http%3A// : http://by.optimost.com/trial/422/p/h..._ref=http%3A//

in URL List
69.31.76.8:80

weird.

did you remove it from the pass list you just added it to and reenable URL blocking?

if you go to 'gator.com' do you see a blockpage?

[sky-knight]

I just reinstalled the Spyware Blocker on my 9.0.2 32bit box here at Intouch.

http://es.optimost.com/es/422/c/37/u/live.js

Returns code, a sample follows

/* OPTIMOST LIVE CODE [start] */
var opContentUrls = new Array();
var opModulesArray = new Array();
$optgb = {};
$optgb.opPro = (("https:" == document.location.protocol) ? "https://by.essl.optimost.com/by" : "http://by.optimost.com");

function opSeparateCheck(stickyCookie){
	var blackList=["op422recentlyviewedmodal1gum","op422carwoomodule1gum","op422trade-inequitytoolgum"];
	
	var matches=[];
	for(var x=0; x<blackList.length; x++){
		if(typeof(optimost.C[blackList[x]])!='undefined' && optimost.C[blackList[x]]!="mvt-no")
			matches.push(blackList[x]);
	}
	
	if(matches.length==0 || (matches.length==1 && matches[0]==stickyCookie)){
		return true;
	} else if(matches.length==1 && matches[0]!=stickyCookie){
		return false;
	} else if(matches.length>1){
		for(var x=0; x<matches.length; x++){
			if(matches[x]!=stickyCookie)
				if(typeof(optimost.SC)!='undefined')
					optimost.SC(matches[x],'',0,optimost.SLD());
		}
		return true;
	}
}

gator.com wasn't blocked either... which is very strange I know the module caught it before...

[AdamB]

weird.

did you remove it from the pass list you just added it to and reenable URL blocking?

if you go to 'gator.com' do you see a blockpage?

Sure did. I am seeing the same issues on my home Untangle build also.

[dmorris]

Sure did. I am seeing the same issues on my home Untangle build also.

I don't understand. Does this mean gator.com is or is not being blocked and is or is not displaying a blockpage?