AWS Console assets from CDN are blocked because of low lms score about portmaster HOT 4 CLOSED

Hi @northys,

thanks for reporting that! We should probably either increase the LMS threshold or let the user configure it. That "tunnel" detection is very alpha anyway. We'll discuss a solution for that and I'll report back to you.

Until then, you should be able to workaround that by explicitly whitelisting the affected domains.
Add the following to the Endpoint Filter List setting (it's under Privacy Filter):

+ *.cloudfront.net.

See the Input Help next to the setting for more information.

from portmaster.

Until then, you should be able to workaround that by explicitly whitelisting the affected domains.
Add the following to the Endpoint Filter List setting (it's under Privacy Filter):

+ *.cloudfront.net.

I've tried to get cloudfront.net to allow list by whitelisting it using multiple syntaxes but it didn't work for me. Still the same error in log.

 Format:
	Permission:
		"+": permit
		"-": block
	Host Matching:
		IP, CIDR, Country Code, ASN, Filterlist, Network Scope, "*" for any
		Domains:
			"example.com": exact match
			".example.com": exact match + subdomains

Man page says it should be + .cloudfront.net but it also doesn't work.

from portmaster.

Hi @northys,

Thanks for reporting. Unfortunately the explicit whitelisting I mentioned didn't work for the LMS scoring. I just pushed #124 to fix that so the workaround can be applied.

from portmaster.

Fix released with v0.5.2. Please reopen, if this does not fix the issue for you. Additionally, this check can now be turned off via a feature flag, and the endpoint list override actually works.

from portmaster.