Ips attacks

Joined
Jul 12, 2011
Messages
16
Reaction score
0
Points
1
i ran a quick search and i couldnt find anything that could help me out here, i have a macbook mid 2010 and i have osx lion, but sometimes i get an error message in my browser .

Blocked because of IPS attack


An attack was detected, originating from your system. Please contact the system administrator.

i get this in both mac osx and in my windows 7 virtual machine in parallels, but a reboot of the mac fixes it. im wondering if this is a virus, im on my schools wifi most of the time, but the it department is somewhat of a joke, as in i can bypass most of their blocks... just wondering what my next step is to fix it.

Thanks

TBG
 
Joined
May 14, 2009
Messages
2,052
Reaction score
136
Points
63
Location
Near Whitehorse, Yukon
Your Mac's Specs
2012 MBP i7 2.7 GHz 15" Matte - 16 GB RAM - 120 GB Intel SSD - 500 GB DataDoubler Mac OS 10.9
Can we get a screenshot of this? I've never heard of this before and am curious…
 
OP
That Baker Guy
Joined
Jul 12, 2011
Messages
16
Reaction score
0
Points
1
this wasnt taken from my screen but i found it on google images and its the exact same thing that comes up in my browser. clicky
 
Joined
Jan 29, 2009
Messages
1,272
Reaction score
67
Points
48
Location
South Carolina
Your Mac's Specs
-->
Do you have a router that is running IPS (intrusion prevention system)? If so, it could be coming from that. IPS can be found in Cisco small business products.

You can look here for reference.
 
OP
That Baker Guy
Joined
Jul 12, 2011
Messages
16
Reaction score
0
Points
1
Do you have a router that is running IPS (intrusion prevention system)? If so, it could be coming from that. IPS can be found in Cisco small business products.

You can look here for reference.

yes, heres the setup i deal with, ill try to explain it, sorry for the length

on campus wifi is controlled by the it department and its the same all over campus, the it deparment doesnt have alot of support for osx. but when i use my laptop on campus wifi you have to log in using an email address just to get throught the authentication, but when i try to connect to it in osx, the authentication screen wont load, UNLESS i remove the the "https://" from the url then i hit refresh and the authentication comes up. now once i have gotten past the authentication i am able to view any unsecure website, such as xda forums, endgadget, woot, but i cannot view any https secured websites such as facebook twitter. so i get on my virtual machine and get on those secure websites using windows 7.

in my dorm i have a router plugged into the ethernet in the wall, that im not supposed to have, but i have it named the same name as the admin network so they dont suspect anything, anyways its a cisco router and my room mates connect to it and dont have any problems just me. its a very low end router, but it allows me to have my own network that allows peer to peer sharing so i can play stuff from my mac on my xbox. because the school network doesn't allow computers to see each other.
 
Joined
Nov 8, 2010
Messages
967
Reaction score
4
Points
18
Location
Indiana
Your Mac's Specs
Main-11" Air, iPhone 6+, iPad Mini 3, Hi-Fi Extras- Too many to count
Try using a Proxy and see if that works.
 
OP
That Baker Guy
Joined
Jul 12, 2011
Messages
16
Reaction score
0
Points
1
thats just it i cant use a proxy on osx, atleast i dont know of one, my school has all proxies blocked, as well as stupid stuff, such as porn, torrent sites, and fail blog... i have a proxy i can use on windows, ultrasurf, but i dont have on i can run on osx to get past the security.
 
OP
That Baker Guy
Joined
Jul 12, 2011
Messages
16
Reaction score
0
Points
1
Use this site New FRESH Proxies | Google Groups and see if any of the newest ones work.

okay, i tried this, but, in order to access this link i had to use my ultrasurf proxy which runs on my computer, in the parallels vm. once i ran this i was able to access facebook and other https websites on my osx. with my proxy running on windows. but once i turned off my proxy and tried using the one on link, all of those proxies are blocked by my dang school.
 

vansmith

Senior Member
Joined
Oct 19, 2008
Messages
19,924
Reaction score
559
Points
113
Location
Queensland
Your Mac's Specs
Mini (2014, 2018, 2020), MBA (2020), iPad Pro (2018), iPhone 13 Pro Max, Watch (S6)
The fact that you're sidestepping the secure http login (the https) might be part of the problem here. I'm actually surprised that they let you login using an unsecured method if they've bothered to setup https.

Given that IPS works to stop intruders, it's possible something is coming from your school network that isn't caused by you or has in the past. If that's the case, the issue is out of your hands. Does this happen to anyone else?
 
OP
That Baker Guy
Joined
Jul 12, 2011
Messages
16
Reaction score
0
Points
1
ips attacks only occur when im connected to the network i have setup in my dorm. and its only happened twice. a reboot and the notifications go away. but now the https problems is common accross all macs, that i have encountered on campus wifi.when you connect to campus wifi you are greeted with this screen here, once you accept you login with an email, and it doesnt even have to be a real one... [email protected] works as an email....
ScreenShot2012-02-23at103538AM.png


once you do that you are in to go anywhere thats not blocked. i have a router set up in my room to bypass this screen because its annoying and serves no purpose. and i can access any https websites, now when i connect to campus wifi https websites dont load. they time out, but when i run a proxy, ultra surf, on my windows 7 vm, i can access all https websites on osx.

once i disconnect from campus wifi and connect back to mine, i have to reboot it in order to access the https websites on my network, but if reboot and connect to campus, i still cant acces https websites, and i know this is a problem with all macs on campus.
 

Shop Amazon


Shop for your Apple, Mac, iPhone and other computer products on Amazon.
We are a participant in the Amazon Services LLC Associates Program, an affiliate program designed to provide a means for us to earn fees by linking to Amazon and affiliated sites.
Top