Crashplan/Code 42 is blocked by Malwarebytes privacy even when whitelisting

[MSinBoca]

Even when whitelisting the app and the ports that it uses Crashplan for Small Business Version 8.7.1.32 was still blocked and could not connect to its server unless I turn MB Privacy off. Crashplan for Small Business uses  ports 4244 and 4287 see 

https://support.code42.com/Small_Business/Get_Started/CrashPlan_for_Small_Business_requirements

 

 and the executable that I've whitelisted is : Code42Desktop.exe

Just wanted to let you know so that you could test if possible.

Does anyone have a workaround or more info, a fix, etc. or do we wait for a patch?

Edited November 5, 2021 by AdvancedSetup
disabled live hyperlink

[nikhils]

Hello @MSinBoca

Sorry that you are running into issues with MBPrivacy.

Can you please follow the following link and please get is the MBST logs.

https://support.malwarebytes.com/hc/en-us/articles/360039023453

Thank you,

[MSinBoca]

Here are the logs. Before collecting the logs I enabled MB Privacy and verified that Crashplan for Small Business could not connect. Hopefully the logs contain information about this.

If there’s anything else that I can do for you just let me know.

mbst-grab-results.zip

[nikhils]

Thank you for the logs @MSinBoca

The logs reflect that you have correctly added all the necessary bypasses with both the application and also ports.

I am trying to reproduce the issue .

Will keep you posted.

[nikhils]

Hello @MSinBoca

We have filed an engineering defect to look into this issue.

Will keep you posted .

Thank you.

[MSinBoca]

I think I fixed it.

Try the network addresses listed here:

https://support.code42.com/Administrator/Cloud/Planning_and_installing/IP_addresses_and_ports_used_by_the_Code42_platform#Firewall_access

See the section titled "Code42 IP addresses" for the list of addresses that I allowed. As you know, I also allowed ports 4285 and 4287.

Also, please consider adding the ability to define a CIDR mask when entering a network address, or range of addresses to allow.

I was only able to add each network address listed here. I guess that they all defaulted to \24 behind the scenes in the app? If so, this is a small security hole since it's more then necessary in some of the ranges. You'll see when you look at the page.

Please test and verify that this is a solution. 

Please let me know what your engineering team finds out.

 

[MSinBoca]

Here is the list of my exclusions for Code 42 / Crashplan:

[MSinBoca]

For anyone who reads this, no reply from MB support/engineering yet. But maybe there still is hope.

[Sobek]

Greetings @MSinBoca,

Development has heard your request for help, so keep hope alive. We're going to add CIDR support ASAP, which will solve your problem the correct way.

Will keep you posted. Thanks.

 

Edited December 6, 2021 by AdvancedSetup
Updated information

[MSinBoca]

Thanks for the update for the PC app. CIDR works fine.

However, I've had to uninstall the IPhone app because my SMTP server won't let me send email while it's on and there's no place to add an exclusion.

Is this something that you'll address in a later release or patch? If not then I guess I have to leave it off of my IPhone. 

My email domain is brighthouse.com

Thanks.

 

 

[mmeagan25]

@MSinBoca Regarding sending email while Privacy VPN is enabled on your iPhone, unfortunately there is not much we can do for that at the moment. We have a KB article here that provides some information and next steps if you'd like to review - https://support.malwarebytes.com/hc/en-us/articles/360047715693-Can-t-send-and-receive-emails-when-Malwarebytes-Privacy-is-on 

We are still researching adding additional features and adding a Bypass to the app is something that will be investigated but is not scheduled for some time out and I don't have an ETA to provide at the moment. 

I apologize for any inconvenience but please let me know if you have any further questions or if there is anything else I can do for you. Thank you!

[MSinBoca]

Thanks for the quick reply and the info. I will review the information you've provided.

[MSinBoca]

I have gmail accounts and accounts from my domain, brighthouse.com.

All of the accounts use ports 997 and 465.

Your link refers to port 25 which I don't use.

Just wanted you to know in case you can use the information.

[MSinBoca]

I've decided that at this time MB Privacy isn't for me. 

How can I unsubscribe to it?

I just paid the renewal, 30 something bucks, and would like a refund.

That would only be for Privacy, not for Malwarebytes Premium.

BTW this has nothing to do with support, there's just limitations in the product that don't make it efficient for me to spend an extra 30 bucks / yr on.

Thanks.

[gatortail]

Sorry to hear that.  You can open a support ticket at https://support.malwarebytes.com/hc/en-us/requests/new