I’ve reported it as a false positive, but in the mean time I’d like to whitelist it but I’ve been unable to find a way to do this within the Network Shield.
All of the links you’ve posted seem to indicate I’m correct in my opinion that this is a false positive, which was never in doubt.
There is no black-/whitelist.
But you can add it to the exclusion list.
If you could advise me how I go about adding this to the exclusion list I’d be grateful.
The network shield does not appear to have a Exclusion list section (the other shields have an Exclusions option under where it says Main Settings).
The Exclusions setting on the far left (below Virus chest and above password) appears to accept File names or Paths only AND states “Note: Exclusions specified here will apply only to on-demand scans (manual and scheduled scans)” so it not relevant to my situation.
The Exclusions setting on the far left (below Virus chest and above password) appears to accept File names or Paths only AND states "Note: Exclusions specified here will apply only to on-demand scans (manual and scheduled scans)" so it not relevant to my situation.
Hi, bootcss.com was not blocked, ever. I am able to visit http://cdn.bootcss.com/knockout/3.2.0/knockout-min.js with my shields on without any warning. It might be the case that the IP that bootcss.com resolves to is blocked, but I cannot see it in our stats. Does the problem persist? What IP does the domain resolve to on the machine that triggers the warning?
I’m unable to verify if the issue persists today. The device in question is a laptop and is working at home today.
I have however used a different device on the same LAN and gotten what cdn.bootcss.com resolve to today. This could of course be different to what it resolved to yesterday.
Note 1. The site using OpenDNS name servers.
Note 2. The site is geographically in Leicester, United Kingdom.
Note 3. cdn.bootcss.com resolves to 112.117.218.120 when I checked from a different network, on a different ISP and using different name servers, but still in the UK.
Hi,
112.117.218.120 was indeed blocked until yesterday 9pm CET, so it very well might be the cause of this. Please update us if the problem persists :-)!
Honza
Thank you for taking the time to response and thanks for confirming the cause of the issue.
Out of interest, is there any way in future I can whitelist or exclude an IP address from being blocked by the Network Shield, either by configuring Avast on the individuals on the workstations or (preferably) by using SOA?
Thanks to everyone who has taken the time to response.
polonus, I’ve been aware of Virus Total and its ability to scan submitted files against multiple Anti Virus programs but I was unaware they also had a IP reputation service. Thanks for info!
HonzaZ, based on my experiences in the past few days I believe you are correct, there is no way to exclude a domain / IP address other than to temporarily disable the network shield.
