+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN""http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>Troubleshooting</TITLE
><META
NAME="GENERATOR"
-CONTENT="Modular DocBook HTML Stylesheet Version 1.76b+
-"><LINK
+CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REL="HOME"
TITLE="Privoxy Frequently Asked Questions"
HREF="index.html"><LINK
HREF="contact.html"><LINK
REL="STYLESHEET"
TYPE="text/css"
-HREF="../p_doc.css"></HEAD
+HREF="../p_doc.css"><META
+HTTP-EQUIV="Content-Type"
+CONTENT="text/html;
+charset=ISO-8859-1"></HEAD
><BODY
CLASS="SECT1"
BGCOLOR="#EEEEEE"
CLASS="SECT1"
><A
NAME="TROUBLE"
-></A
->5. Troubleshooting</H1
+>5. Troubleshooting</A
+></H1
><DIV
CLASS="SECT2"
><H3
CLASS="SECT2"
><A
-NAME="AEN1062"
-></A
+NAME="AEN1088"
>5.1. I cannot connect to any websites. Or, I am getting
<SPAN
CLASS="QUOTE"
>"connection refused"</SPAN
-> message with every web page. Why?</H3
+> message with every web page. Why?</A
+></H3
><P
> There are several possibilities:</P
><P
CLASS="APPLICATION"
>Privoxy</SPAN
> is installed correctly, has not crashed, and is indeed running.
- Look at <SPAN
+ Turn on <SPAN
CLASS="APPLICATION"
>Privoxy's</SPAN
-> logs to see what they say.</P
+> logging, and look at the logs to see what they say.</P
></LI
><LI
><P
CLASS="SECT2"
><A
NAME="ERROR503"
-></A
->5.2. Why am I getting a 503 Error (WSAECONNREFUSED) on every page?</H3
+>5.2. Why am I getting a 503 Error (WSAECONNREFUSED) on every page?</A
+></H3
><P
> More than likely this is a problem with your TCP/IP networking. ZoneAlarm has
been reported to cause this symptom -- even if not running! The solution is
><H3
CLASS="SECT2"
><A
-NAME="AEN1085"
-></A
+NAME="AEN1111"
>5.3. I just added a new rule, but the steenkin ad is
-still getting through. How?</H3
+still getting through. How?</A
+></H3
><P
> If the ad had been displayed before you added its URL, it will probably be
held in the browser's cache for some time, so it will be displayed without
find the correct URL by looking at <SPAN
CLASS="APPLICATION"
>Privoxy's</SPAN
-> logs.</P
+> logs
+ (you may need to enable logging in the main config file if its disabled).</P
><P
> Below is a slightly modified real-life log snippet that originates with one
requested URL: <TT
Request: example.betamarker.com/example.html
Request: www.lik-sang.com/Banners/bestsellers/skyscraper.php?likref=BSellers
Request: img.example.com/pb.png
-Request: www.google-analytics.com/urchin.js crunch!
-Request: www.advertising-department.com/ats/switch.ps.php?26856 crunch!
+Request: www.google-analytics.com/urchin.js crunch! (Blocked)
+Request: www.advertising-department.com/ats/switch.ps.php?26856 crunch! (Blocked)
Request: img.example.com/p.gif
-Request: www.popuptraffic.com/assign.php?l=example&mode=behind crunch!
-Request: www.popuptraffic.com/scripts/popup.php?hid=5c3cf&tmpl=PBa.tmpl crunch!
-Request: www.popuptraffic.com/assign.php?l=example crunch!
+Request: www.popuptraffic.com/assign.php?l=example&mode=behind crunch! (Blocked)
+Request: www.popuptraffic.com/scripts/popup.php?hid=5c3cf&tmpl=PBa.tmpl crunch! (Blocked)
+Request: www.popuptraffic.com/assign.php?l=example crunch! (Blocked)
Request: www.lik-sang.com/Banners/best_sellers/best_sellers.css
-Request: www.adtrak.net/adx.js crunch!
+Request: www.adtrak.net/adx.js crunch! (Blocked)
Request: img.example.com/hbg.gif
Request: img.example.com/example.jpg
Request: img.example.com/mt.png
Request: img.example.com/mm.png
Request: img.example.com/mb.png
-Request: www.popuptraffic.com/scripts/popup.php?hid=a71b91fa5&tmpl=Ua.tmp crunch!
+Request: www.popuptraffic.com/scripts/popup.php?hid=a71b91fa5&tmpl=Ua.tmp crunch! (Blocked)
Request: www.example.com/tracker.js
Request: www.lik-sang.com/Banners/best_sellers/lsi_head.gif
-Request: www.adtrak.net/adjs.php?n=020548130&what=zone:61 crunch!
-Request: www.adtrak.net/adjs.php?n=463594413&what=zone:58&source=Ua crunch!
+Request: www.adtrak.net/adjs.php?n=020548130&what=zone:61 crunch! (Blocked)
+Request: www.adtrak.net/adjs.php?n=463594413&what=zone:58&source=Ua crunch! (Blocked)
Request: www.lik-sang.com/Banners/best_sellers/bottomani.swf
-Request: mmm.elitemediagroup.net/install.php?allowpop=no&popupmincook=0&allowsp2=1 crunch!
+Request: mmm.elitemediagroup.net/install.php?allowpop=no&popupmincook=0&allowsp2=1 crunch! (Blocked)
Request: www.example.com/tracker.js?screen=1400x1050&win=962x693
-Request: www.adtrak.net/adlog.php?bannerid=1309&clientid=439&zoneid=61 crunch!
+Request: www.adtrak.net/adlog.php?bannerid=1309&clientid=439&zoneid=61 crunch! (Blocked)
Request: 66.70.21.80/scripts/click.php?hid=5c3cf599a9efd0320d26&si
Request: 66.70.21.80/img/pixel.gif
-Request: www.adtrak.net/adlog.php?bannerid=1309&clientid=439&zoneid=58&source=Ua&block=86400 crunch!
+Request: www.adtrak.net/adlog.php?bannerid=1309&clientid=439&zoneid=58&source=Ua&block=86400 crunch! (Blocked)
Request: 66.70.21.80/scripts/click.php?hid=a71b9f6504b0c5681fa5&si=Ua</PRE
></TD
></TR
CLASS="SECT2"
><A
NAME="BADSITE"
-></A
>5.4. One of my favorite sites does not work with Privoxy.
-What can I do?</H3
+What can I do?</A
+></H3
><P
> First verify that it is indeed a <SPAN
CLASS="APPLICATION"
HREF="http://config.privoxy.org/toggle"
TARGET="_top"
>http://config.privoxy.org/toggle</A
->,
+>
+ (the toggle feature may need to be enabled in the main
+ <TT
+CLASS="FILENAME"
+>config</TT
+>),
and then shift-reloading the problem page (i.e. holding down the shift key
while clicking reload. Alternatively, flush your browser's disk and memory
caches).</P
and paste the full URL of the page in question into the prompt. See which
actions are being applied to the URL, and which matches in which actions
files are responsible for that. It might be helpful also to look at your logs
- for this site too, to see what else might be happening. Many sites are
+ for this site too, to see what else might be happening (note: logging may need
+ to be enabled in the main config file). Many sites are
complex and require a number of related pages to help present their content.
Look at what else might be used by the page in question, and what of that
might be <SPAN
CLASS="SECT2"
><A
NAME="DUN"
-></A
>5.5. After installing Privoxy, I have to log in
-every time I start IE. What gives?</H3
+every time I start IE. What gives?</A
+></H3
><P
> This is a quirk that effects the installation of
<SPAN
CLASS="SECT2"
><A
NAME="FTP"
-></A
>5.6. I cannot connect to any FTP sites. Privoxy
- is blocking me.</H3
+ is blocking me.</A
+></H3
><P
> <SPAN
CLASS="APPLICATION"
><H3
CLASS="SECT2"
><A
-NAME="OSXIE"
-></A
->5.7. In Mac OSX, I can't configure Microsoft Internet Explorer to use
- Privoxy as the HTTP proxy.</H3
+NAME="MACOSXIE"
+>5.7. In Mac OS X, I can't configure Microsoft Internet Explorer to use
+ Privoxy as the HTTP proxy.</A
+></H3
><P
> Microsoft Internet Explorer (in versions like 5.1) respects system-wide
network settings. In order to change the HTTP proxy, open System
><H3
CLASS="SECT2"
><A
-NAME="OSXUNINSTALL"
-></A
->5.8. In Mac OSX, I dragged the Privoxy folder to the trash in order to
- uninstall it. Now the finder tells me I don't have sufficient privileges to
- empty the trash.</H3
+NAME="MACOSXUNINSTALL"
+>5.8. In Mac OS X, I dragged the Privoxy folder to the trash in order to
+ uninstall it. Now the finder tells me I don't have sufficient privileges to
+ empty the trash.</A
+></H3
+><P
+> Note: This ONLY applies to privoxy 3.0.6 and earlier.
+ </P
><P
> Just dragging the <SPAN
CLASS="APPLICATION"
>Privoxy</SPAN
> folder to the trash is
- not enough to delete it. <SPAN
+ not enough to delete it. <SPAN
CLASS="APPLICATION"
>Privoxy</SPAN
> supplies an
CLASS="APPLICATION"
>uninstall.command</SPAN
> file that takes care of
- these details. Open the trash, drag the <SPAN
+ these details. Open the trash, drag the <SPAN
CLASS="APPLICATION"
>uninstall.command</SPAN
>
- file out of the trash and double-click on it. You will be prompted for
+ file out of the trash and double-click on it. You will be prompted for
confirmation and the administration password.
</P
><P
><H3
CLASS="SECT2"
><A
-NAME="OSXIMAGES"
-></A
->5.9. In Mac OSX Panther (10.3), images often fail to load and/or I
+NAME="MACOSXIMAGES"
+>5.9. In Mac OS X Panther (10.3), images often fail to load and/or I
experience random delays in page loading. I'm using
<TT
CLASS="LITERAL"
>localhost</TT
-> as my browser's proxy setting.</H3
+> as my browser's proxy setting.</A
+></H3
><P
-> We believe this is due to an IPv6-related bug in OSX, but don't fully
+> We believe this is due to an IPv6-related bug in Mac OS X, but don't fully
understand the issue yet. In any case, changing the proxy setting to
<TT
CLASS="LITERAL"
CLASS="SECT2"
><A
NAME="BLANKPAGE"
-></A
>5.10. I get a completely blank page at one site. <SPAN
CLASS="QUOTE"
>"View Source"</SPAN
CLASS="MARKUP"
><html><body></body></html></SPAN
>. Without
- Privoxy the page loads fine.</H3
+ Privoxy the page loads fine.</A
+></H3
><P
> Chances are that the site suffers from a bug in
<A
CLASS="SECT2"
><A
NAME="NOHOSTNAME"
-></A
>5.11. My logs show many <SPAN
CLASS="QUOTE"
>"Unable to get my own hostname"</SPAN
> lines.
-Why?</H3
+Why?</A
+></H3
><P
> <SPAN
CLASS="APPLICATION"
><P
> This can be caused by a problem with the local <TT
CLASS="FILENAME"
->HOSTS</TT
+>hosts</TT
>
file. If this file has been changed from the original, try reverting it to
see if that helps. Make sure whatever name(s) are used for the local system,
that they resolve both ways.</P
+><P
+> You should also be able to work around the problem with the
+ <A
+HREF="../user-manual/config.html#HOSTNAME"
+TARGET="_top"
+>hostname option</A
+>.</P
></DIV
><DIV
CLASS="SECT2"
CLASS="SECT2"
><A
NAME="INUSE"
-></A
>5.12. When I try to launch Privoxy, I get an
error message <SPAN
CLASS="QUOTE"
>"port 8118 is already in use"</SPAN
> (or similar wording).
-Why?</H3
+Why?</A
+></H3
><P
> Port 8118 is <SPAN
CLASS="APPLICATION"
CLASS="SECT2"
><A
NAME="DEMORONIZER"
-></A
->5.13. Pages with UTF-8 fonts are garbled.</H3
+>5.13. Pages with UTF-8 fonts are garbled.</A
+></H3
><P
> This is caused by the <SPAN
CLASS="QUOTE"
CLASS="SECT2"
><A
NAME="DEMORONIZER2"
-></A
>5.14. Why are binary files (such as images) corrupted when Privoxy
- is used?</H3
+ is used?</A
+></H3
><P
> This may also be caused by the <SPAN
CLASS="QUOTE"
>"demoronizer"</SPAN
> filter,
- in conjunction with a web server that is misreporting a file type. Binary
+ in conjunction with a web server that is misreporting the content type. Binary
files are exempted from <SPAN
CLASS="APPLICATION"
>Privoxy's</SPAN
CLASS="SECT2"
><A
NAME="DEMORONIZER3"
-></A
>5.15. What is the <SPAN
CLASS="QUOTE"
>"demoronizer"</SPAN
-> and why is it there?</H3
+> and why is it there?</A
+></H3
><P
> The original demoronizer was a Perl script that cleaned up HTML pages which
were created with certain Microsoft products. MS has used proprietary extensions
>.</P
><P
> On the other hand, if you use non-Microsoft products, and you occasionally
- notice wierd characters on pages, you might want to try it.</P
+ notice weird characters on pages, you might want to try it.</P
></DIV
><DIV
CLASS="SECT2"
CLASS="SECT2"
><A
NAME="WINDOWOPEN"
-></A
>5.16. Why do I keep seeing <SPAN
CLASS="QUOTE"
>"PrivoxyWindowOpen()"</SPAN
-> in raw source code?</H3
+> in raw source code?</A
+></H3
><P
> <SPAN
CLASS="APPLICATION"
CLASS="SECT2"
><A
NAME="DNSERRORS"
-></A
>5.17. I am getting too many DNS errors like <SPAN
CLASS="QUOTE"
>"404 No Such Domain"</SPAN
>. Why
- can't Privoxy do this better?</H3
+ can't Privoxy do this better?</A
+></H3
><P
> There are potentially several factors here. First of all, the DNS resolution
is done by the underlying operating system -- not
>Privoxy</SPAN
>
merely initiates the process and hands it off, and then later reports
- whatever the outcome was. And tries to give a coherent message if there seems
+ whatever the outcome was and tries to give a coherent message if there seems
to be a problem. In some cases, this might otherwise be mitigated by the
browser itself which might try some work-arounds and alternate approaches (e.g
adding <SPAN
CLASS="QUOTE"
>"www."</SPAN
-> to the URL). In other cases, if
- <SPAN
+> to the URL).</P
+><P
+> In other cases, if <SPAN
CLASS="APPLICATION"
>Privoxy</SPAN
-> is being chained with another proxy, this
- could complicate the issue, and cause undue
+> is being chained
+ with another proxy, this could complicate the issue, and cause undue
delays and timeouts. In the case of a <SPAN
CLASS="QUOTE"
>"socks4a"</SPAN
> which is reporting whatever problem occurred
downstream, and not the root cause of the error.</P
><P
-> In any case, newer versions include various improvements to help
+> In any case, versions newer than 3.0.3 include various improvements to help
<SPAN
CLASS="APPLICATION"
>Privoxy</SPAN
CLASS="SECT2"
><A
NAME="ALLCPU"
-></A
>5.18. At one site Privoxy just hangs, and starts taking
- all CPU. Why is this?</H3
+ all CPU. Why is this?</A
+></H3
><P
> This is probably a manifestation of the <SPAN
CLASS="QUOTE"
>Privoxy's</SPAN
> page filtering
mechanism is trying to match against absurdly long strings and this becomes
- very CPU-intensive, taking a long, long time to complete. Until a better
- solution comes along, disable filtering on these pages, particularly the
- <TT
+ very CPU-intensive, taking a long, long time to complete.</P
+><P
+> Until a better solution comes along, disable filtering on these pages,
+ particularly the <TT
CLASS="LITERAL"
>js-annoyances</TT
-> and <TT
+> and
+ <TT
CLASS="LITERAL"
>unsolicited-popups</TT
->
- filters.</P
+> filters. If you run into this problem
+ with a recent <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+> version, please send a problem report.</P
></DIV
><DIV
CLASS="SECT2"
CLASS="SECT2"
><A
NAME="SLOWCRAWL"
-></A
>5.19. I just installed Privoxy, and all my
-browsing has slowed to a crawl. What gives?</H3
+browsing has slowed to a crawl. What gives?</A
+></H3
><P
> This should not happen, and for the overwhelming number of users world-wide,
it does not happen. I would suspect some inadvertent interaction of software
components such as anti-virus software, spyware protectors, personal
firewalls or similar components. Try disabling (or uninstalling) these one
- at a time and see if that helps.</P
+ at a time and see if that helps. Either way, if you are using a
+ recent <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+> version, please report the problem.</P
></DIV
><DIV
CLASS="SECT2"
CLASS="SECT2"
><A
NAME="PREVENTCOMP"
-></A
->5.20. Why do my filters work on some sites but not on others?</H3
+>5.20. Why do my filters work on some sites but not on others?</A
+></H3
><P
> It's probably due to compression. It is a common practice for web servers to
send their content <SPAN
then let the browser <SPAN
CLASS="QUOTE"
>"uncompress"</SPAN
-> them. <SPAN
+> them. When compiled with zlib support
+ <SPAN
CLASS="APPLICATION"
>Privoxy</SPAN
-> does not (yet)
- support compression. But we can force the web server to bend to our will ;-)
- So for filtering, make sure you have <A
+> can decompress content before filtering, otherwise you may want to enable
+<A
HREF="../user-manual/actions-file.html#PREVENT-COMPRESSION"
TARGET="_top"
>prevent-compression</A
+>.</P
+><P
+> As of <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+> 3.0.9, zlib support is enabled in the default builds.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><H3
+CLASS="SECT2"
+><A
+NAME="SSL-WARNINGS"
+>5.21. On some HTTPS sites my browser warns me about unauthenticated content,
+ the URL bar doesn't get highlighted and the lock symbol appears to be broken.
+ What's going on?</A
+></H3
+><P
+> Probably the browser is requesting ads through HTTPS and <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
>
- turned ON! </P
+ is blocking the requests. Privoxy's error messages are delivered
+ unencrypted and while it's obvious for the browser that the HTTPS
+ request is already blocked by the proxy, some warn about unauthenticated
+ content anyway.</P
+><P
+> To work around the problem you can redirect those requests to an invalid
+ local address instead of blocking them. While the redirects aren't
+ encrypted either, many browsers don't care. They simply follow the
+ redirect, fail to reach a server and display an error message instead
+ of the ad.</P
+><P
+> To do that, enable logging to figure out which requests get blocked by
+ <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+> and add the hosts (no path patterns) to a section like this:</P
+><P
+><TABLE
+BORDER="0"
+BGCOLOR="#E0E0E0"
+WIDTH="100%"
+><TR
+><TD
+><PRE
+CLASS="SCREEN"
+>{+redirect{http://127.0.0.1:0/} -block -limit-connect}
+.ivwbox.de:443/</PRE
+></TD
+></TR
+></TABLE
+></P
+><P
+> Additionally you have to configure your browser to contact
+ <SPAN
+CLASS="QUOTE"
+>"127.0.0.1:0"</SPAN
+> directly (instead of through <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+>).</P
+><P
+> To add a proxy exception in <SPAN
+CLASS="APPLICATION"
+>Mozilla Firefox</SPAN
+>
+ open the <SPAN
+CLASS="QUOTE"
+>"Preferences"</SPAN
+>, click the <SPAN
+CLASS="QUOTE"
+>"Settings"</SPAN
+>
+ button located on the <SPAN
+CLASS="QUOTE"
+>"Network"</SPAN
+> tab in the <SPAN
+CLASS="QUOTE"
+>"Advanced"</SPAN
+>
+ section, and add <SPAN
+CLASS="QUOTE"
+>"127.0.0.1:0"</SPAN
+> in the <SPAN
+CLASS="QUOTE"
+>"No Proxy for:"</SPAN
+>
+ field.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><H3
+CLASS="SECT2"
+><A
+NAME="SE-LINUX"
+>5.22. I get selinux error messages. How can I fix this?</A
+></H3
+><P
+> Please report the problem to the creator of your selinux policies.</P
+><P
+> The problem is that some selinux policy writers aren't familiar
+ with the application they are trying to <SPAN
+CLASS="QUOTE"
+>"secure"</SPAN
+> and
+ thus create policies that make no sense.</P
+><P
+> In <SPAN
+CLASS="APPLICATION"
+>Privoxy's</SPAN
+> case the problem usually
+ is that the policy only allows outgoing connections for certain
+ destination ports (e.g. 80 and 443). While this may cover the
+ standard ports, websites occasionally use other ports as well.
+ This isn't a security problem and therefore <SPAN
+CLASS="APPLICATION"
+>Privoxy's</SPAN
+>
+ default configuration doesn't block these requests.</P
+><P
+> If you really want to block these ports (and don't be able
+ to load websites that don't use standard ports), you should
+ configure Privoxy to block these ports as well, so it doesn't
+ trigger the selinux warnings.</P
+></DIV
+><DIV
+CLASS="SECT2"
+><H3
+CLASS="SECT2"
+><A
+NAME="GENTOO-RICERS"
+>5.23. I compiled <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+> with Gentoo's portage and it appears to be very slow. Why?</A
+></H3
+><P
+> Probably you unintentionally compiled <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+> without threading support
+ in which case requests have to be serialized and only one can be served
+ at the same time.</P
+><P
+> Check your <SPAN
+CLASS="QUOTE"
+>"USE"</SPAN
+> flags and make sure they include
+ <SPAN
+CLASS="QUOTE"
+>"threads"</SPAN
+>. If they don't, add the flag and rebuild <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+>.</P
+><P
+> If you compiled <SPAN
+CLASS="APPLICATION"
+>Privoxy</SPAN
+> with threading support (on POSIX-based systems),
+ the <SPAN
+CLASS="QUOTE"
+>"Conditional #defines"</SPAN
+> section on <A
+HREF="http://config.privoxy.org/show-status"
+TARGET="_top"
+>http://config.privoxy.org/show-status</A
+>
+ will list <SPAN
+CLASS="QUOTE"
+>"FEATURE_PTHREAD"</SPAN
+> as <SPAN
+CLASS="QUOTE"
+>"enabled"</SPAN
+>. </P
></DIV
></DIV
><DIV
projects / privoxy.git / blobdiff