Forum Discussion
Sashaank
Jun 14, 2022Copper Contributor
MDE alerts with "Network traffic proxy redirector detected"
Hello all, In our SOC, we've been seeing alerts on MDE for Mozilla Firefox with a combination of "Network traffic proxy redirector detected" and "Connection to a custom network indicator" to doma...
Bobbers
Jun 21, 2022Copper Contributor
My organization also started getting these recently, always Firefox, always alongside a trigger for a network event like a custom network indicator.
I think it's related to this - https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_loopback-connection
If accurate this is going to be a useless detection for Firefox. Has anyone seen this trigger on any other browsers?
I think it's related to this - https://support.mozilla.org/en-US/kb/how-stop-firefox-making-automatic-connections#w_loopback-connection
If accurate this is going to be a useless detection for Firefox. Has anyone seen this trigger on any other browsers?
JG-Burke
Jun 22, 2022Brass Contributor
Thanks Bobbers
Loopback connection
A loopback connection (to IP address 127.0.0.1) can be made by Firefox on non-Unix machines. In this case the browser is communicating with itself as expected, and it is not recommended that this communication be blocked. See bug 100154 for more information.
Loopback connection
A loopback connection (to IP address 127.0.0.1) can be made by Firefox on non-Unix machines. In this case the browser is communicating with itself as expected, and it is not recommended that this communication be blocked. See bug 100154 for more information.