This download has been blocked by your security zone policy

User Help for Mozilla Firefox
Locked
User avatar
kliu0x52
Posts: 569
Joined: October 18th, 2006, 2:23 pm
Location: .us
Contact:

Re: This download has been blocked by your security zone policy

Post by kliu0x52 »

First, I just want to cross-reference everyone to another earlier (and longer) thread about this--much of what's been said here had already been said before.
viewtopic.php?t=645496

VanillaMozilla wrote:Right, but some of these users are frustrated administrators of their own computers, and are experiencing difficulties in setting it up, beyond what has already been given. I would help but the restriction does not apply to any of my computers, as far as I know.

But that begs the question, how did things get so restricted in the first place? The default settings are rather permissive, so if the users are running into problems, then they or someone else with access to the system had, at some point in time, changed those settings.

As an aside, I note that the Windows security policy is not very tight if it has to rely on applications to enforce it.

Well, it's kinda hard to do otherwise without getting too draconian. This is why corporate IT administrators are picky about what apps they allow--if the app is uncooperative, then it probably would not be allowed.

Are the security zone settings also reachable from the Control Panel?

Yes, and that's how I normally access them, too (see teoli2003's post). These settings had always been intended to serve as system-wide settings (and had always been accessible from the system CP)--it's just that non-Microsoft apps have been slow to adopt them (but many do!).
My addons: NoRedirect | QuickDrag | URL Flipper | TabSubmit
Developers: Make sure to test your addons for RTL compatibility!
VanillaMozilla
Posts: 13808
Joined: November 7th, 2005, 11:26 am

Re: This download has been blocked by your security zone policy

Post by VanillaMozilla »

kliu0x52 wrote:But that begs the question, how did things get so restricted in the first place? ...they or someone else with access to the system had, at some point in time, changed those settings.

They probably restricted IE and buried it or deleted the shortcut. Then they can't find the system settings. There are SO many frikkin' settings on a computer. This is still a problem to commiserate over. The rants are way off the mark, though.

kliu wrote:
Vanilla wrote:As an aside, I note that the Windows security policy is not very tight if it has to rely on applications to enforce it.

Well, it's kinda hard to do otherwise without getting too draconian. This is why corporate IT administrators are picky about what apps they allow--if the app is uncooperative, then it probably would not be allowed.

That's the problem. Not allowing apps is draconian. They often just don't allow anything. You might as well not allow computing, which is basically what often happens. Better to target the restrictions carefully. Bill, you listening? Well, probably not. Oh, well.

Thanks for your and teoli's comments. My post is updated now.
Guest
Guest

Re: This download has been blocked by your security zone policy

Post by Guest »

So Firefox "obeys" a setting for IE, or Windows in general, whichever. It seems there are at least two problems with it:
1) The setting is only available if you've got IE7 installed. Asenine. Make FF3 usable only if you've also got IE7. Must download IE7.
2) The setting doesn't work for some users, even if they've already got IE7. The solution? Reinstall IE7. Must download IE7.

I have problem #2. My solution? Use IE7 or Safari. I can download and run .exe files all day long. But I am sure as hell not going to download IE7 to fix FF3. Anyone who thinks FF3 is doing a reasonable thing here with respect to 1) and 2) has no idea. And the stink of IE7.


[edit]I have edited your language as this is a family forum. LIMPET235.Mod.[/edit]
Please respect the rules. Thank you.
VanillaMozilla
Posts: 13808
Joined: November 7th, 2005, 11:26 am

Re: This download has been blocked by your security zone policy

Post by VanillaMozilla »

Guest wrote:1) The setting is only available if you've got IE7 installed. Asenine. Make FF3 usable only if you've also got IE7. Must download IE7.

Are you sure?
Start > Settings > Control Panel > Network and Internet Connections > Internet Options > Security
Guest
Guest

Re: This download has been blocked by your security zone policy

Post by Guest »

VanillaMozilla wrote:
Guest wrote:1) The setting is only available if you've got IE7 installed. Asenine. Make FF3 usable only if you've also got IE7. Must download IE7.

Are you sure?
Start > Settings > Control Panel > Network and Internet Connections > Internet Options > Security


Not sure. Other users in this forum were complaining about #1) and I was summarizing. I've already got IE7, like I said, and I've got problem #2. Meaning, I've got IE7, I've got the option, and it's set properly to "Prompt", and I can download and run .exe from IE7, Safari, and my previous FF2, but not FF3.

A further issue with this bug: As Firefox is my default browser, downloads started by other programs (e.g. iTunes) fail with no message. So iTunes invokes Firefox to download the new iTunes version, FF3 blocks the download, and the download doesn't even appear in the Downloads window with the 'X' and the annoying message. Rather, nothing happens whatsoever. Great. Now Apple and every other vendor who does software updates by invoking the users default web browser are going to be taking a bunch of support calls.
VanillaMozilla
Posts: 13808
Joined: November 7th, 2005, 11:26 am

Re: This download has been blocked by your security zone policy

Post by VanillaMozilla »

Guest wrote:like I said, and I've got problem #2. Meaning, I've got IE7, I've got the option, and it's set properly to "Prompt", and I can download and run .exe from IE7, Safari, and my previous FF2, but not FF3.

Are you sure? Have you checked the system settings? A few billion people have Windows, and now a few tens of millions also have Firefox 3. If Firefox 3 really could not download files, I sort of think it would have been noticed about 12 months before release, and fixed 2 days later.

I have no way of checking this stuff, since I don't have your setup, but this wouldn't be the first time that IE settings applied only to IE, or the first time that users maybe made a little mistake, or users were foiled by security software, Windows updates, or dog on the keys. Could be a bug, I suppose, but maybe worth another check?
Guest
Guest

Re: This download has been blocked by your security zone policy

Post by Guest »

VanillaMozilla wrote:
Guest wrote:like I said, and I've got problem #2. Meaning, I've got IE7, I've got the option, and it's set properly to "Prompt", and I can download and run .exe from IE7, Safari, and my previous FF2, but not FF3.

Are you sure? Have you checked the system settings? A few billion people have Windows, and now a few tens of millions also have Firefox 3. If Firefox 3 really could not download files, I sort of think it would have been noticed about 12 months before release, and fixed 2 days later.

I have no way of checking this stuff, since I don't have your setup, but this wouldn't be the first time that IE settings applied only to IE, or the first time that users maybe made a little mistake, or users were foiled by security software, Windows updates, or dog on the keys. Could be a bug, I suppose, but maybe worth another check?


Do you want me to send you a screenshot of the damn thing? I've checked both the screen and the registry setting. Do you simply not believe me when I tell you repeatedly that I can download and run an executable from IE7 but not from FF3? Even the instructions that work for many, http://kb.mozillazine.org/Unable_to_sav ... _-_Windows, reference the fact that for some, a download / reinstall of IE7 is necessary to fix the problem. That is what I am complaining about, and I will not download IE7, again, and reinstall it, and of course reboot my computer, to make FF3 work. I'd rather get a hundred thousand paper cuts on my face, clean all the bathrooms in Grand Central Station with my tongue, and dive into a swimming pool filled with double-edged razor blades, than reinstall IE7. It is a shame that FF3 has hitched it's wagon to IE7 in such a way, and if it can't or won't be fixed, so be it. Webkit has been kicking Firefox's ass lately anyway, and will soon surpass it featurewise and then in user base, development tools, plugins etc. It is no skin off my back to demote Firefox to the same status as Opera - Just another browser to test on and make sure the basic stuff works; But for everyday browsing, too many issues to make it worth using.
teoli2003
Posts: 5091
Joined: November 10th, 2005, 2:54 am
Contact:

Re: This download has been blocked by your security zone policy

Post by teoli2003 »

I can download on my XP with IE6 installed at work (No IE7)... And I have the security zone control panel accessible via the system.

Maybe the security zone control panel is not included in Windows XP Home? Do you have Windows XP home?
VanillaMozilla
Posts: 13808
Joined: November 7th, 2005, 11:26 am

Re: This download has been blocked by your security zone policy

Post by VanillaMozilla »

Yeah, surely the Knowledge Base article must be wrong about IE7?
User avatar
trolly
Moderator
Posts: 39851
Joined: August 22nd, 2005, 7:25 am

Re: This download has been blocked by your security zone policy

Post by trolly »

This is not a firefox issue (anymore) so the better place would be Tech. But guest can not post there.
Should i move it anyway?
Think for yourself. Otherwise you have to believe what other people tell you.
A society based on individualism is an oxymoron. || Freedom is at first the freedom to starve.
Constitution says: One man, one vote. Supreme court says: One dollar, one vote.
User avatar
smsmith
Moderator
Posts: 19979
Joined: December 7th, 2004, 8:51 pm
Location: Indiana

Re: This download has been blocked by your security zone policy

Post by smsmith »

Guest wrote:Do you simply not believe me when I tell you repeatedly that I can download and run an executable from IE7 but not from FF3?

Do you mean that in IE7, you click a download link for an EXE file, and you can "Run" the file without saving it, but you cannot do that in Firefox 3? In Firefox, you MUST download the file, and then explicitly run the file by double clicking it. You cannot run it the same as in IE. Without an extension, that is...

If you mean something else, my apologies. I've never had the "Can't download a file" problem.
Give a man a fish, and he eats for a day. Teach a man to fish, and he eats for a lifetime.
I like poetry, long walks on the beach and poking dead things with a stick.
Please do not PM me for personal support. Keep posts here in the Forums instead and we all learn.
hrdubwd
Posts: 15
Joined: November 5th, 2007, 6:23 pm

Re: This download has been blocked by your security zone policy

Post by hrdubwd »

This is absurd. Just look at the confusion ... there is no consistency in the nature of the problems.
I have been through it all again:
I have two machines, side by side - same Internet connection through a switch - both XP Pro, SP2, fully patched, both IE6, both FF3. One works, the other does not. I have compared all the Internet Options, and the one that works is either the same or MORE conservative than the other. Something is corrupted somewhere. I simply cannot download anything unless the source is explicitly added to the Trusted sites list (tedious, but at least a feasible solution). The trouble is, I have no idea what else such a designation allows - I want to be able to decide what I download and from where, item by item. I think I am more reliable in that regard than Bill's spawn.
Can anybody say where in the Registry the relevant "Security Zone Policy" is defined? Resetting the machine that does not work to Low in Internet Options | Security has no effect. Neither does restoring defaults under the Advanced tab.
What exactly is FF3 looking at? Is there nobody reading this that knows what is being done at that level? (Regmon gives no clue) I would have thought that a conscious decision has been made somewhere to implement this 'feature' and this requires a specific line of code or two. Please, whoever you are - help us out here.
And for the record, I am admin on both machines and nobody else - I mean, nobody else at all - uses or has ever used either machine.
I regret that remarks about how software ought to be consistent do not fit here, machine policy or not, when there is no control available, and no explicit explanation of the cause, and the no doubt more-knowledgeable-than-me folks on this list haven't a clue either.
aairv
Guest

Re: This download has been blocked by your security zone policy

Post by aairv »

I have the same problem, but Safari seems to still be able to download files, so I guess that could work as a temporary solution
wamnet
Guest

Re: This download has been blocked by your security zone policy

Post by wamnet »

Yea.. this is an issue... too many people use IE only for system updates and otherwise have IE5-7 locked down. In fact, i have IE so locked down, it's useless for doing anything but collecting porn.

This is a serious limitation to FF3 - I reverted. I'm not opening my boxes' IE just to use Firefox for downloading datasheets. Google's group for Mozilla has people stating the same thing as I.
VanillaMozilla
Posts: 13808
Joined: November 7th, 2005, 11:26 am

Re: This download has been blocked by your security zone policy

Post by VanillaMozilla »

hrdubwd wrote:I simply cannot download anything unless the source is explicitly added to the Trusted sites list (tedious, but at least a feasible solution).

...Can anybody say where in the Registry the relevant "Security Zone Policy" is defined? Resetting the machine that does not work to Low in Internet Options | Security has no effect. Neither does restoring defaults under the Advanced tab.
What exactly is FF3 looking at? Is there nobody reading this that knows what is being done at that level? (Regmon gives no clue) I would have thought that a conscious decision has been made somewhere to implement this 'feature' and this requires a specific line of code or two. Please, whoever you are - help us out here.


I believe this is a fair statement of your predicament. Sorry, I'm presently unable to troubleshoot this for you. I believe a bug number was listed somewhere in this thread for the decision to conform to the policy. The patch will be posted there. You could contact the guy who wrote the patch.

If you are one of the ones who had IE7 installed, I can tell you that IE7 beta was implicated previously in thorough messing up IE. It may be that there is a Microsoft bug in the uninstallation, and that has messed up Web browsing. Sorry, that's not much of a clue.
Locked