X-Git-Url: http://www.privoxy.org/gitweb/?a=blobdiff_plain;f=doc%2Fsource%2Ffaq.sgml;h=9de4fde4a1e62ce307f42a78b916598b8a0d7910;hb=d00eab1f0e37803066de23235ec7737cc964f2c1;hp=49dc82c347328d6c5e93a0e712ba3eb6e767a37b;hpb=b6eb803479b021093fc609b6205a7ace767f4ff7;p=privoxy.git diff --git a/doc/source/faq.sgml b/doc/source/faq.sgml index 49dc82c3..9de4fde4 100644 --- a/doc/source/faq.sgml +++ b/doc/source/faq.sgml @@ -8,7 +8,7 @@ - + @@ -21,15 +21,11 @@ Privoxy"> ]> - Copyright &my-copy; 2001-2014 by - Privoxy Developers + Copyright &my-copy; 2001-2018 by + Privoxy Developers -$Id: faq.sgml,v 2.119 2016/03/17 10:18:57 fabiankeil Exp $ - @@ -135,14 +129,11 @@ Hal. Please note that this document is a work in progress. This copy represents the state at the release of version &p-version;. You can find the latest version of the document at http://www.privoxy.org/faq/. + url="https://www.privoxy.org/faq/">https://www.privoxy.org/faq/. Please see the Contact section if you want to contact the developers. - - - @@ -478,8 +469,8 @@ warranty? Registration? So first thing, subscribe to the Privoxy Users - or the Privoxy + url="https://lists.privoxy.org/mailman/listinfo/privoxy-users">Privoxy Users + or the Privoxy Developers mailing list, join the discussion, help out other users, provide general feedback or report problems you noticed. @@ -494,7 +485,7 @@ warranty? Registration? While it is partly out of date, it's still worth reading. - Our TODO list + Our TODO list may be of interest to you as well. Please let us know if you want to work on one of the items listed. @@ -503,7 +494,7 @@ warranty? Registration? + + @@ -638,7 +683,6 @@ special I have to do now? details. You should also flush your browser's memory and disk cache to get rid of any cached junk items, and remove any stored cookies. - @@ -701,9 +745,9 @@ All the ads are there. What's wrong? Privoxy is not running at all. Check the log file. For instructions on starting Privoxy and browser configuration, - see the chapter + see the chapter on starting Privoxy in the - User Manual. + User Manual. @@ -716,9 +760,9 @@ Privoxy is running and being used. First, make sure that Privoxy is really running and being used by visiting http://p.p/. You should see the Privoxy main page. If not, see - the chapter + the chapter on starting Privoxy in the - User Manual. + User Manual. @@ -837,8 +881,8 @@ the differences? If you wish to receive an email notification whenever we release updates of Privoxy or the actions file, subscribe - to our announce mailing list, ijbswa-announce@lists.sourceforge.net. + url="https://lists.privoxy.org/mailman/listinfo/privoxy-announce">subscribe + to our announce mailing list, privoxy-announce@lists.privoxy.org. @@ -887,12 +931,10 @@ the differences? for them in the user.action file. An example for yahoo might look like: - # Allow all cookies for Yahoo login: # { -crunch-incoming-cookies -crunch-outgoing-cookies -session-cookies-only } .login.yahoo.com - These kinds of sites are often quite complex and heavy with Javascript and @@ -901,13 +943,11 @@ the differences? url="../user-manual/actions-file.html#ALIASES">alias just for such sticky situations: - # Gmail is a _fragile_ site: # { fragile } # Gmail is ... mail.google.com - Be sure to flush your browser's caches whenever making these kinds of changes, just to make sure the changes take. @@ -1036,7 +1076,7 @@ with a browser? Does that not raise security issues? If you intend to develop your own filters, you might want to have a look at Privoxy-Filter-Test. + url="https://www.fabiankeil.de/sourcecode/pft/">Privoxy-Filter-Test. @@ -1058,10 +1098,8 @@ with a browser? Does that not raise security issues? should look like: - listen-address 192.168.1.1:8118 - Save the file, and restart Privoxy. Configure @@ -1073,10 +1111,8 @@ with a browser? Does that not raise security issues? all available interfaces: - listen-address :8118 - And then use Privoxy's @@ -1172,7 +1208,7 @@ on Win2K/NT/XP? Windows service - functionality. See + functionality. See the User Manual for details on how to install and configure Privoxy as a service. @@ -1349,11 +1385,9 @@ and thus avoid individual browser configuration? To disable all cookie actions, so that cookies are allowed unrestricted, both in and out, for example.com: - { -crunch-incoming-cookies -crunch-outgoing-cookies -session-cookies-only -filter{content-cookies} } .example.com - Place the above in user.action. Note that some of these may be off by default anyway, so this might be redundant, but there is no harm @@ -1444,16 +1478,13 @@ and thus avoid individual browser configuration? can very easily over-ride all blocking with the following very simple rule in your user.action: - # Unblock everybody, everywhere { -block } / # UN-Block *all* URLs - Or even a more comprehensive reversing of various ad related actions: - # Unblock everybody, everywhere, and turn off appropriate filtering, etc { -block \ @@ -1462,7 +1493,6 @@ and thus avoid individual browser configuration? allow-popups \ } / # UN-Block *all* URLs and allow ads - This last action in this compound statement, allow-popups, is an during upgrades. You can, however, create completely new templates, place them in another directory and specify the alternate path in the main config. For details, have a look at the templdir option. + url="../user-manual/config.html#TEMPLDIR">templdir option. @@ -1503,10 +1533,8 @@ the BLOCKED page? available as compile-time options. You should configure the sources as follows: - ./configure --disable-toggle --disable-editor --disable-force - This will create an executable with hard-coded security features so that &my-app; does not allow easy bypassing of blocked sites, or changing the @@ -1807,11 +1835,9 @@ us help you. Your efforts are not wasted, and we do appreciate them. forwarding section and uncomment the line: - # forward-socks5t / 127.0.0.1:9050 . - - + Note that if you got Tor through one of the bundles, you may have to change the port from 9050 to 9150 (or even another one). @@ -1824,13 +1850,11 @@ us help you. Your efforts are not wasted, and we do appreciate them. uncomment the following forward rules, to make sure your local network is still reachable through Privoxy: - # forward 192.168.*.*/ . # forward 10.*.*.*/ . # forward 127.*.*.*/ . - - + Unencrypted connections to systems in these address ranges will be as (un)secure as the local network is, but the alternative is @@ -1844,11 +1868,9 @@ us help you. Your efforts are not wasted, and we do appreciate them. network by using their names, you will need additional exceptions that look like this: - # forward localhost/ . - - + Save the modified configuration file and open http://config.privoxy.org/show-status @@ -2003,6 +2025,20 @@ ads used to be. Why? + +Does Privoxy support HTTP/2? + + Privoxy currently doesn't parse HTTP/2 but applications + can tunnel HTTP/2 through Privoxy if Privoxy is configured + to allow CONNECT requests (default) which are also used + for HTTPS. + + + Adding HTTP/2 support is on the TODO list but currently + nobody is known to work on it. + + + Privoxy runs as a <quote>server</quote>. How secure is it? Do I need to take any special precautions? @@ -2075,7 +2111,7 @@ out of the picture? My logs show Privoxy <quote>crunches</quote> ads, but also its own internal CGI pages. What is a <quote>crunch</quote>? - A crunch simply means Privoxy intercepted + A crunch means Privoxy intercepted something, nothing more. Often this is indeed ads or banners, but Privoxy uses the same mechanism for trapping requests for its own internal pages. For instance, a request for @@ -2179,14 +2215,12 @@ altered it! Yikes, what is wrong! your hosts list is neglected by Privoxy's configuration, consider adding your list to your user.action file: - { +block } www.ad.example1.com ad.example2.com ads.galore.example.com etc.example.com - @@ -2282,7 +2316,6 @@ and related issues? There are several possibilities: - Privoxy is not running. Solution: verify @@ -2302,7 +2335,6 @@ and related issues? try disabling or removing the firewall as a simple test. - @@ -2355,7 +2387,6 @@ still getting through. How? our job a little easier. &my-app; has crunched (meaning caught and BLOCKED) quite a few items in this example, but perhaps missed a few as well. - - Despite 12 out of 32 requests being blocked, the page looked, and seemed to behave perfectly normal (minus some ads, of course). @@ -2618,37 +2648,6 @@ every time I start IE. What gives? - - - -I get a completely blank page at one site. <quote>View Source</quote> - shows only: <markup><![CDATA[<html><body></body></html>]]></markup>. Without - Privoxy the page loads fine. - - Chances are that the site suffers from a bug in - PHP, - which results in empty pages being sent if the client explicitly requests - an uncompressed page, like Privoxy does. - This bug has been fixed in PHP 4.2.3. - - - To find out if this is in fact the source of the problem, try adding - the site to a -prevent-compression section in - user.action: - - - # Make exceptions for ill-behaved sites: - # - {-prevent-compression} - .example.com - - If that works, you may also want to report the problem to the - site's webmasters, telling them to use zlib.output_compression - instead of ob_gzhandler in their PHP applications (workaround) - or upgrade to PHP 4.2.3 or later (fix). - - - My logs show many <quote>Unable to get my own hostname</quote> lines. Why? @@ -2884,14 +2883,12 @@ browsing has slowed to a crawl. What gives? To do that, enable logging to figure out which requests get blocked by &my-app; and add the hosts (no path patterns) to a section like this: - - Additionally you have to configure your browser to contact 127.0.0.1:0 directly (instead of through &my-app;). @@ -2989,6 +2986,68 @@ browsing has slowed to a crawl. What gives? + +After adding my custom filters, &my-app; crashes when visitting certain websites + + This can happen if your custom filters require more memory than &my-app; + is allowed to use. + Usually the problem is that the operating system enforces a stack size limit + that isn't sufficient. + + + Unless the problem occurs with the filters available in the default configuration, + this is not considered a Privoxy bug. + + + To prevent the crashes you can rewrite your filter to use less resources, + increase the relevant memory limit or recompile pcre to use less stack space. + For details please see the + pcrestack man page + and the documentation of your operating system. + + + + +What to do if editing the config file of privoxy is access denied? + + Your userid probably isn't allowed to edit the file. + + On Windows you can use the windows equivalent of sudo: + + runas /user:administrator "notepad \privoxy\config.txt" + + + or fix the file permissions: + +C:\Privoxy>icacls config.txt +config.txt BUILTIN\Administrators:(I)(F) + NT AUTHORITY\SYSTEM:(I)(F) + BUILTIN\Users:(I)(RX) + NT AUTHORITY\Authenticated Users:(I)(M) + +Successfully processed 1 files; Failed processing 0 files + +C:\Privoxy>icacls config.txt /grant Lee:F +processed file: config.txt +Successfully processed 1 files; Failed processing 0 files + +C:\Privoxy>icacls config.txt +config.txt I3668\Lee:(F) + BUILTIN\Administrators:(I)(F) + NT AUTHORITY\SYSTEM:(I)(F) + BUILTIN\Users:(I)(RX) + NT AUTHORITY\Authenticated Users:(I)(M) + +Successfully processed 1 files; Failed processing 0 files + +C:\Privoxy> + + + or try to point-n-click your way through adjusting the file + permissions in windows explorer. + + +