Yonke imikhiqizo Community Forum

Hi, unwanted site opens every first start of mozilla after PC has been reloaded.

the site is: „www.url-advertisement.org”

I've scaned with malwarebytes, did a refresh of mozilla browser

a website im using is trin to call an api with referer header and policy of "origin-when-cross-origin", but firefox overides it to "Same Origin Policy" with console msg: Referrer Policy: Less restricted policies, including ‘no-referrer-when-downgrade’, ‘origin-when-cross-origin’ and ‘unsafe-url’, will be ignored soon for the cross-site request

After a lot of search, i found that network.http.referer.disallowCrossSiteRelaxingDefault config setting should be set to false to allow any policy, but toggling between false or true has no affect. The request still fails with a cors error "Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at..."

Is there a way to make this work? Or a way to allow the request to have this referer policy.

I was tracing some network activity for an unrelated issue and noticed that when FF starts up it immediately makes multiple TCP connections to livejasmin.com. I have this site blocked by the Windows Firewall and have the host file direct it to 127.0.0.1 so nothing is actually going in or out, but why is FF doing this and how can I fix whatever was done to enable this happening?

I have cleared all cookies and cache, and disabled all addons, and even started in safe mode, but regardless of what I do the very 1st connections that FF makes are always to livejasmin.com, which is obviously not a legit place for FF to be doing any of its routine updates or optimization tasks. My home page is https://google.com and the livejasmin.com connections appear before the 1st attempt to connect to google so this is clearly something malicious that found a way to get into FF early in the startup process.

I have also run 2 different scans tools on the entire computer and both found nothing. I have reviewed all the running processes and do not see anything suspicious either. I do not see this issue with Chrome or Edge, just FF which is my primary browser. All browsers are updated to the latest version as well as the WIN10 OS.

I have also removed my profile and started FF up without the profile, and I noticed the livejasmin.com connections again while the FF "your profile cannot be found" error message popped up. When I had FF make a new profile and set it as the default the same connections to livejasmin.com were made when I restarted FF with the new profile. So it is not tied to my profile.

Why am I receiving repeated warnings from Malwarebytes about blocking every-day websites due to a "Trojan"? The sites include Gmail, Ancestry.com, Newspapers.com and others.

The report warnings are being generated by the Malwarebytes program on my PC. They are confusing to me. I am running Windows 11. The warnings are being logged by the Malwarebytes program in the "Web Protection" section of its "Detection History" web page. In every instance, the log reports are the same: in the URL identification column there is no identification of the URL, only repeated instances of "N/A"; the IP address is identical for all the warnings; the port is always "0"; the file column alternates from "C:\Program Files\Mozilla\Mozilla VPN\Mozilla VPN.exe" to "System" and back again to "C:\Program Files\Mozilla\Mozilla VPN\Mozilla VPN.exe"; in the final column of the log, the Date column, the warnings began last evening, Monday the 12th, at 6:50 p.m. and have now extended to to a total nine warnings.

Even as I was writing this communication, the Malwarebytes warning popped up on my screen, telling me that this website and this web page are blocked due to the presence of a Trojan.

Is my PC infected? The Malwarebytes "scan" reports no "detections." I am at a loss.

I've been looking at firewall logs for my client and router software firewalls. My 3rd party firewall flags repeated outgoing TCP packets to IP 34.149.100.209 as coming from Firefox and 'Restricted', although restricted is the firewall apps syntax. When I look at the router firewall on WAN it was seeing the same IP outgoing. These packets only originate when Firefox (latest version) opens. Perhaps there's nothing to worry about or it's there to poll for those who want to select a Google search engine? Anyway, I've added a rule in the router to block the IP, although I think Google use other IPs.

There is plenty of web discussion to REMOVE restricted from Firefox but I want to make sure 'Restricted' in my case means BLOCKED, is that possible or do I misunderstand what restricted means? Thanks

When I go into Settings, I see the following message at the top:

"Your browser is being managed by your organization."

I've never seen this before. Going into about:policies, this is what I see:

ImportEnterpriseRoots

It's the only one there. My searches have told me that this should only appear if you're not an admin and it's on a work computer. But I am the admin and my computer is a home one, not a work one so this message shouldn't be there. I have looked up around here to find out how to disable/remove this and I did the following:

I found and followed these solutions here: https://support.mozilla.org/en-US/questions/1434356 https://winaero.com/remove-your-browser-is-being-managed-by-your-organization-from-firefox/ https://www.minitool.com/news/firefox-your-browser-is-managed-by-your-organization.html

Where I made a backup of the Registry and went in to delete ImportEnterpriseRoots. I restarted Firefox afterwards, and when I checked it was removed. I restarted my computer just to be sure that it was removed, but upon restart the message appeared again and ImportEnterpriseRoots reappeared.

I then checked out these solutions: https://support.mozilla.org/en-US/kb/how-disable-enterprise-roots-preference https://support.mozilla.org/eu/questions/1313379

Where I go to about:config the "security.certerrors.mitm.auto_enable_enterprise_roots" can be disabled, but the "security.enterprise_roots.enabled" is grayed out and I can't disable it at all. The solution above mentions that this can be caused by your anti virus. I tried disabling "https scanning" and "QUIC/http3" under Norton's Safe Web option, but this did nothing. I'm planning on removing Norton soon once my sub runs out and I know Norton is doing this to Firefox, so I'm concerned that if I don't remove this when I do an uninstall it will screw up Firefox or my computer. I've tried asking the Norton forums and they only offered the solutions above that I tried and they didn't work at all.

How do I remove the "Your browser is being managed by your organization." message and ImportEnterpriseRoots from Firefox if these solutions don't work?

On some websites, such as scratch.mit.edu, the fonts have been displaying as Burbank Big (a font i recently downloaded) instead of the regular font. This happens on other websites that don't use Helvetica Niue as well, so i'm stumped. I checked the styles panel in inspector and it showed the correct names, but when i hovered my cursor over it, it showed a preview of Burbank Big instead. What do i do to fix this?

Since your last upgrade, I have been able to get into any sites using CloudFlare security. Prior to that I had no problems at all. I have tried closing extensions and or clearing cookies. I especially want access to my banking account. How can I disable whatever was added to effect CloudFlare? CloudFlare either continues to cycle, or gives an error message.

I am trying to connect with my utility provider online. When I try to log in, I give my name and password. It comes up with a CAPTCHA screen. I click on the items but I just keep getting another screen. After a dozen screens it says CAPTCHA will time out in 2 minutes.

Does anyone have any ideas what could be blocking it?

Pandora tries to start, but it bounces from artist to artist without playing. Never had this happen before. Pandora suggests there is an overzealous ad blocker at work. Can you help?

I got the following message while trying to access this website https://nubecomun.yanapak.org/ The connection has timed out:

The server at nubecomun.yanapak.org is taking too long to respond.

   The site could be temporarily unavailable or too busy. Try again in a few moments.
   If you are unable to load any pages, check your computer’s network connection.
   If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the web.

How can I allow Firefox to access the site?

Hi,

I'm having an issue with Firefox (on CachyOS, but i'm pretty sure that is not relevant) when I try to hit domain with PORT number.

To be clear, I have a "service" I am locally hosting on a more widely available "domain.com" (those are examples of course...) I am using this typology to still be able to generate Let's Encrypt certs for domains (that I own) not accessible outside my network for those sub-domains, and am using therefore Pi-hole to serve the few IPs of my few "service123.domain.com"

When I use a Chromium based browser (or FF ESR v128) the only DNS query is for "https://service.domain.com:8000" is "service.domain.com" (as seen on pihole queries and in FF-ESR/Chromium DNS cache), whereas FF 135 there is first a "service.domain.com" (righfully answered by my local DNS), and then a second query "_8000._https.service.domain.com" is sent, but my pihole doesn't seem to recognize (and shouldn't have to interpret anything concerning ports), so it sends it to upstream DNS (which are unable to answer)

I have disabled DoH, and every extensions. So I am really lost on what as changed in FF that would explain this, or if it's a pihole config problem (weirdly only affecting FF 135+ ...)

Feel free to ask anything, I may have omitted important info. Thanks in advance

commenting on Facebook results in a scroll down with every letter typed (default gboard) , which makes it almost impossible to comment, it becomes frustrating at times and i can only comment on posta which have a few comments because the scrolling down is blocked by the lower end of page

Hi. I did a clean install of Windows 11 yesterday. I reinstalled Firefox with the TreeStyletabs addon. I had saved the old sessionstore files so I thought it would be easy to get my tabs back.

Two things happens.

1) If I copy over a sessionstore.jsonlz4 to the profilefolder, it gets overwritten byt FireFox when I start the browser. 2) If I don't do that and instead click History and then Restore Previous Session Firefox will use the previousjsonlz4 and restore my tabs . But I have to do it everytime I start Firefox. It does 'remember' what I did.

How can I fix this?