X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=blobdiff_plain;f=default.action.master;h=ae0ddbbf3598158d27184d876d91fd8ba318845d;hp=c4654dafdbac828f2887dc5fee3a407e5c6fd2e6;hb=5a08c9106649551a5b0b19c32053a8acd74d1754;hpb=87281ee7db8a5e66f1f37c9d3dd15cc58abe4628 diff --git a/default.action.master b/default.action.master index c4654daf..ae0ddbbf 100644 --- a/default.action.master +++ b/default.action.master @@ -11,7 +11,7 @@ # # File : $Source: /cvsroot/ijbswa/current/default.action.master,v $ # -# $Id: default.action.master,v 1.230 2011/01/24 18:16:33 fabiankeil Exp $ +# $Id: default.action.master,v 1.266 2012/12/14 10:14:51 fabiankeil Exp $ # # Requires : This version requires Privoxy v3.0.11 or later due to # syntax changes. @@ -545,7 +545,7 @@ for-privoxy-version=3.0.11 # These aliases define combinations of actions # that are useful for certain types of sites: # -fragile = -block -crunch-all-cookies -filter -fast-redirects -hide-referer -prevent-compression +fragile = -block -crunch-all-cookies -filter -fast-redirects -hide-referer shop = -crunch-all-cookies allow-popups # Your favourite blend of filters: @@ -701,6 +701,8 @@ countr*. #MASTER# REMARKS: We still like tor # URL = http://metrics.torproject.org/consensus-graphs.html metrics.torproject.org/ +# URL = http://linuxcounter.net/ +linuxcounter.net/ ############################################################################# # Generic block patterns by path: @@ -716,6 +718,9 @@ metrics.torproject.org/ /(.*/)?clicktrack /(.*/)?(full)?pop[-_]?(up|over|under|open(er)?)?s?(/|\.) /(.*/)?((flash)?pop|live(cnt|count(er)?)).*\.(js|php|cgi) +#MASTER# BLOCK-REFERRER: http://thequietus.com/articles/10512-jo-dunne-fuzzbox-dies +# Blocked URL = http://thequietus.com/openx/www/delivery/ck.php?n=ae777ee2&cb=INSERT_RANDOM_NUMBER_HERE +/openx/www/delivery/ ############################################################################# # Generic unblockers by path: @@ -728,6 +733,8 @@ metrics.torproject.org/ support./(.*/)?track # URL = http://repo.or.cz/r/vlc.git/objects/ad/1d316efd83157217fdf9b5d417dddca54bbf41 /.*\.git/objects/ +# URL = http://code.google.com/p/sm-ssc/wiki/Bugtracker?tm=3 +/.*Bugtracker ############################################################################# # Exceptions for academia and non-profits @@ -768,6 +775,160 @@ support./(.*/)?track # URL = http://support.apple.com/downloads/DL985/en_US/RemoteDesktopAdmin332.dmg /.*desktopadmin + +#---------------------------------------------------------------------------- +# Misc Web-bugs, JS and just plain Junk. Images here aren't normal images. +#---------------------------------------------------------------------------- +{+block{Might be a web-bug.} +handle-as-empty-document -handle-as-image} +#MASTER# REMARKS: signature for user tracking nytimes, cnn.com,latimes.com and many others. 10/06/06 +/b/ss/.+ +#MASTER# BLOCK-REFERRER: http://www.thesun.co.uk/article/0,,11071-10784,00.html +#MASTER# REMARKS: widespread hitbox signature 10/06/06 +/HG\?hc= +#MASTER# BLOCK-REFERRER: http://macaddict.com 10/06/06 +.visistat.com +#MASTER# REMARKS: See for user tracking. +#MASTER# REMARKS: There is a ssl.google-analytics as well. +.google-analytics./ +#MASTER# REMARKS: Below Moved here from -handle-as-image 10/16/06 ########## +#MASTER# BLOCK-REFERRER: http://forums2.gardenweb.com/forums/orchids/ 09/25/06 +#MASTER# REMARKS: Mostly JS and plain text stuff +.overture. +#MASTER# PROBLEM-URL: http://www.linuxtoday.com/ +#MASTER# REMARKS: /adi has HTML snipplets for use in IFRAMEs 10/15/06 +.doubleclick.net/adi +.doubleclick.net/(.*/)?adj/ +#MASTER# PROBLEM-URL: http://maps.yahoo.com/ +#MASTER# REMARKS: /AVE/iview has HTML snipplets for use in IFRAMEs 10/15/06 +view.atdmt.com/(.*/)?iview/ +#MASTER# REMARKS: Above Moved here from -handle-as-image 10/16/06 ########## +#MASTER# REMARKS: Generic, re: tracking.foxnews.com/HG? 10/01/06 +tracking. +#MASTER# BLOCK-REFERRER: http://netcraft.com and many others 10/22/06 +/(.*/)?adjs\.php\? +#MASTER# BLOCK-REFERRER: http://groups.yahoo.com/group/epdf/ 10/08/06 +.bc.yahoo.com/b\?P= +#MASTER# BLOCK-REFERRER: http://www.motherboard.cz 10/30/06 +x*.alexa.com +#MASTER# BLOCK-REFERRER: http://mplayernetwork.com 11/07/06 +#MASTER# BLOCK-REFERRER: http://eetimes.com 09/26/06 +/event.ng/ +# MASTER# BLOCK-REFERRER: http://www.play.com/PC/PCs/-/653/860/-/12068815/Asus-VK192S-19-Widescreen-LCD-Monitor-With-Webcam-White/Product.html +# Blocked URL = http://sd.play.com/eluminate?ci=90121638&st=1296424516858&vn1=4.3.1&ec=UTF-8&vn... +# Blocked URL = http://data.coremetrics.com/cm?ci=90121638&st=1296435164623&vn1=4.3.1&ec=UTF-8&vn... +/(eluminate|cm)\?[tc]i=\d+&st=\d+& +#MASTER# BLOCK-REFERRER: http://www.snapfiles.com/feedback/ 12/13/06 SF tracker +.snapfiles.net/rotation/.*\.asp +#MASTER# BLOCK-REFERRER: not provided. SF tracker #1616034 12/16/06 +#MASTER# COMMENT: JS pop-ups +spa.snap.com/ +#MASTER# BLOCK-REFERRER: http://www.gamefaqs.com/computer/doswin/game/914819.html 12/18/06 +#MASTER# COMMENT: user tracking, and run-away assorted 'junk' +#MASTER# BLOCK-REFERRER: http://formwood.com 2007-11-12 +.insitemetrics.com/ +#MASTER# COMMENT: user tracking, and assorted 'junk' +#MASTER# BLOCK-REFERRER: http://blogblog.com 2007-11-12 +.extreme-dm.com/ +#MASTER# COMMENT: user tracking, and assorted 'junk' +#MASTER# BLOCK-REFERRER: http://www.schillmania.com 2007-11-12 +stats.reinvigorate.net/ +#MASTER# COMMENT: user tracking, and assorted 'junk' +#MASTER# BLOCK-REFERRER: http://wordpress.com 2007-11-12 +.getclicky.com/ +#MASTER# COMMENT: user tracking, and assorted 'junk' +#MASTER# BLOCK-REFERRER: http://infoworld.com 2007-11-12 +.quantserve.com +# Blocked URL = http://media.adrevolver.com/adrevolver/trace?sip=123&cpy=123 +media.adrevolver.com/ +#MASTER# REMARKS: Actionsfile feedback item #2975895 2010-03-24 +# Blocked URL = http://static.chartbeat.com/js/chartbeat.js +.chartbeat.com/(.*/)?chartbeat\.js$ +# Blocked URL = http://js.adlink.net/js?lang=de&s=duesseldorf-international.de&z=home&d=1274103403564 +#MASTER# BLOCK-REFERRER: http://www.duesseldorf-international.de/ +js.adlink.net/ +# Blocked URL = nl.sitestat.com/rdw/rdw/s?www.nl.voertuigeigenaar.voertuigeigenaar&ns__t=1274099350343 +#MASTER# BLOCK-REFERRER: http://www.rdw.nl/nl/voertuigeigenaar/ +.sitestat.com/ +#MASTER# BLOCK-REFERRER: http://www.chip.de/artikel/c_artikelunterseite_10423683.html +# Blocked URL = http://pagead.googlesyndication.example.com/foo/bar/baz.js +pagead*.googlesyndication./.*\.js +#MASTER# BLOCK-REFERRER: http://www.pcmag.com/ 11/22/06 per SF Tracker # 1601148 +/js/slider\.js +#MASTER# BLOCK-REFERRER: http://floodle.net 2007-01-21 SF tracker +scripts.chitika.net/.*\.js +#MASTER# BLOCK-REFERRER: via Yahoo groups +#MASTER# REMARKS: Actionsfile tracker 1645513 2007-01-26 +.adinterax.com/.*\.js +#MASTER# BLOCK-REFERRER: http://dictionary.reference.com/search?q=privacy&db=* +#MASTER# REMARKS: Actionsfile tracker 1650798 2007-02-02 +# Blocked URL = http://partner.googleadservices.com/gampad/google_service.js +# Blocked URL = http://partner.googleadservices.com/gampad/google_ads.js +# Blocked URL = http://partner.googleadservices.com/gampad/slotdata.js?callback=_GA_googleAdData.setAdSlotAttributes&client=ca-gam-lexico +.googleadservices.com/gampad/.*\.js +# Blocked URL = http://richmedia.yimg.com/js/123/personnals_banners/PER_happy_sara1_4_425x600/ad.js?q=123 +/.*/ad\.js\? +# Blocked URL = http://i.cmpnet.com/shared/omniture/s_code_remote.js +#MASTER# BLOCK-REFERRER: http://www.informationweek.de/ +/.*omniture.*\.js +# Blocked URL = http://gadk.hit.gemius.pl/*/_1274097577014/rexdot.gif?l=30&id=..DlR.vCLZGB56RmfkYNSWZVLSqB3ueYOP.Oec5WWiv.h7&fr=1&fv=WIN%2010%2C0%2C45%2C2&tz=-120&href=http%3A//www.baadgalleri.dk/&ref=&screen=1440x900&col=32 +#MASTER# BLOCK-REFERRER: http://www.baadgalleri.dk/ +.gemius.pl/ +# Blocked URL = http://farm.plista.com/widgetdata.php?clientrev=12&domainid=4211&publickey=fdc5a7f9d15be004aa03fc4d&cb=PLISTA5_7ed57c93e0d17&requestID=5&5=widgetintegration%3A%02pictureads%03&6=pictureads%3A%1Cpictureid%1F%026716%03%1Eimgdim%1F%1Cx%1F547%1Ey%1F410%1D%1Ewidgetname%1F%02pictureads%03%1D +farm.plista.com/widgetdata.php +#MASTER# BLOCK-REFERRER: http://www.notebooksbilliger.de/lenovo+thinkpad+l420+business+notebook +# Blocked URL = http://ib.adnxs.com/bounce?%2Fseg%3Fadd%3D279412 +.adnxs.com/ +#MASTER# BLOCK-REFERRER: http://www.zoover.nl/ +# Blocked URL = http://service.maxymiser.net/cdn/zoover/js/mmcore.js +service.maxymiser.net/ +#MASTER# BLOCK-REFERRER: http://www.newyorker.com/reporting/2010/05/31/100531fa_fact_groopman +# Blocked URL = http://tcr.tynt.com/javascripts/Tracer.js?user=cT9yCKGeer3PWlab7jrHtB&s=62 +.tynt.com/ +# Blocked URL = http://pool.sanoma.adhese.com/tag/tag.js +pool.*.adhese.com/ +#MASTER# BLOCK-REFERRER: http://www.canon.nl/Search/index.asp +# Blocked URL = http://www.canon.nl/scripts/webtrends.js +/scripts/webtrends\.js +#MASTER# BLOCK-REFERRER: http://www.tradera.com/ +# Blocked URL = http://oskar.tradera.com/script.js +oskar.tradera.com/ + +{+block{Might be a web-bug.} -handle-as-empty-document +handle-as-image} +#MASTER# BLOCK-REFERRER: http://versiontracker.com and many others. 10/20/06 +/(.*/)?__utm.gif\? +#MASTER# BLOCK-REFERRER: http://washingpost.com and others 10/25/06 +/.*\.gif\?D=DM +#MASTER# BLOCK-REFERRER: http://www.washingtonpost.com/ +#stats.surfaid.ihost.com/(crc/)?images/(bounce/)?uc.GIF +#MASTER# BLOCK-REFERRER: http://www.ibm.com 10/09/06 +#MASTER# REMARKS: Similar hostname and paths appear in multiple locations. +# Blocked URL = http://stats.surfaid.ihost.com/crc/images/bounce/uc.GIF +# Blocked URL = http://stats.surfaid.ihost.com/rc/images/bounce/uc.GIF +stats./c?rc/.*/uc.gif +#MASTER# BLOCK-REFERRER: http://priceline.com 10/20/06 +#MASTER# REMARKS: User tracking, webbug stuff +/(.*/)?dcs.gif\?&?dcs +#MASTER# BLOCK-REFERRER: http://www.msnbc.com 10/07/06 +#MASTER# REMARKS: And MANY others. Webbug stuff. +/(.*/)?c(lear)?\.gif\?. +#MASTER# BLOCK-REFERRER: http://www.investorguide.com 10/08/06 +#MASTER# BLOCK-REFERRER: http://foodnetwork.com, http://gardenweb.com 10/20/06 +#MASTER# REMARK: webbug type gif used in MANY places. +#MASTER# REMARK: Too many false positives +#/(.*/)?(clear|(trans_?1x|blank)?1).gif +#MASTER# REMARK: Let's try this way. +/(.*/)?(clear|blank|(trans_?|1x)?1).gif\?. +#MASTER# BLOCK-REFERRER: http://actorstheatre.org 11/02/06 +stats./.*\.gif\? +# Blocked URL = http://ad.yieldmanager.com/pixel?id=123456&t=2 +.yieldmanager.com/pixel\? +# Blocked URL = http://a.analytics.yahoo.com/p.pl?a=1000226660965&js=no +# Blocked URL = http://s.analytics.yahoo.com/fpc.pl?a=1000461640983&v=4.43&enc=utf-8&f=http%3A//www.zoover.nl/nederland/limburg/maasbracht/weer%23tabs&b=Het%20Weer%20in%20Maasbracht.%20Bekijk%20Weersverwachting%20van%20Maasbracht%20%7C%20Zoover%23tabs&flv=WIN%2010%2C0%2C45%2C2&d=Mon%2C%2017%20May%202010%2014%3A09%3A26%20UTC&n=-2&g=nl&h=Y&j=1440x900&k=32&l=true&ittidx=0&fpc=uP04C7j4%7ClaDQjglKaa%7Cfses1000461640983%3D%7CkbSSgv6Jaa%7CuP04C7j4%7Cfvis1000461640983%3DZj1odHRwJTNBLy93d3cuem9vdmVyLm5sLyZiPVpvb3ZlciUyMCU3QyUyMFZha2FudGllYmVvb3JkZWxpbmdlbiUyMHZvb3IlMjBlbiUyMGRvb3IlMjByZWl6aWdlcnM%3D%7C8sHTYo10oM%7C8sHTYo10oM%7C8sHTYo10oM%7CT%7C8sHTYo10oM%7C8sHTYo10oM +.analytics.yahoo.com +#MASTER# BLOCK-REFERRER: http://www.aktivist.pl/ +# Blocked URL = http://go.idmnet.bbelements.com/please/showit/46/1/1/1/?typkodu=img&keywords= +go.idmnet.bbelements.com/please/showit/ + ############################################################################# # Site-specific block patterns; ############################################################################# @@ -948,140 +1109,19 @@ fusion.adtoma.com/ # Blocked URL = http://atemda.com/ClickThrough.ashx?pId=9616&mId=14484&tId=634102151426089505&opS=1&admetac=mR3sJ3%2b9yleq%2bHowITh0hw%3d%3d #MASTER# BLOCK-REFERRER: http://www.startpagina.nl .atemda.com/ -#MASTER# Remark: 2o7.net and omtrdc.net are domains used by Omniture +#MASTER# Remark: 2o7.net, omtrdc.net and www91.intel.com are domains used by Omniture # Blocked URL = http://ciscosystemsinc.tt.omtrdc.net/m2/ciscosystemsinc/mbox/standard?mboxHost=www.cisco.com&mboxSession=12 .omtrdc.net/ - -#---------------------------------------------------------------------------- -# Misc Web-bugs, JS and just plain Junk. Images here aren't normal images. -#---------------------------------------------------------------------------- -{+block{Might be a web-bug.} +handle-as-empty-document -handle-as-image} -#MASTER# REMARKS: signature for user tracking nytimes, cnn.com,latimes.com and many others. 10/06/06 -/b/ss/.+ -#MASTER# BLOCK-REFERRER: http://www.thesun.co.uk/article/0,,11071-10784,00.html -#MASTER# REMARKS: widespread hitbox signature 10/06/06 -/HG\?hc= -#MASTER# BLOCK-REFERRER: http://macaddict.com 10/06/06 -.visistat.com -#MASTER# REMARKS: See for user tracking. -#MASTER# REMARKS: There is a ssl.google-analytics as well. -.google-analytics./ -#MASTER# REMARKS: Below Moved here from -handle-as-image 10/16/06 ########## -#MASTER# BLOCK-REFERRER: http://forums2.gardenweb.com/forums/orchids/ 09/25/06 -#MASTER# REMARKS: Mostly JS and plain text stuff -.overture. -#MASTER# PROBLEM-URL: http://www.linuxtoday.com/ -#MASTER# REMARKS: /adi has HTML snipplets for use in IFRAMEs 10/15/06 -.doubleclick.net/adi -.doubleclick.net/(.*/)?adj/ -#MASTER# PROBLEM-URL: http://maps.yahoo.com/ -#MASTER# REMARKS: /AVE/iview has HTML snipplets for use in IFRAMEs 10/15/06 -view.atdmt.com/(.*/)?iview/ -#MASTER# REMARKS: Above Moved here from -handle-as-image 10/16/06 ########## -#MASTER# REMARKS: Generic, re: tracking.foxnews.com/HG? 10/01/06 -tracking. -#MASTER# BLOCK-REFERRER: http://netcraft.com and many others 10/22/06 -/(.*/)?adjs\.php\? -#MASTER# BLOCK-REFERRER: http://groups.yahoo.com/group/epdf/ 10/08/06 -.bc.yahoo.com/b\?P= -#MASTER# BLOCK-REFERRER: http://www.motherboard.cz 10/30/06 -x*.alexa.com -#MASTER# BLOCK-REFERRER: http://mplayernetwork.com 11/07/06 -#MASTER# BLOCK-REFERRER: http://eetimes.com 09/26/06 -/event.ng/ -#MASTER# BLOCK-REFERRER: http://www.homedepot.com/ 11/08/06 -#MASTER# BLOCK-REFERRER: http://www.williams-sonoma.com/ 11/08/06 -/cm\?[tc] -#MASTER# BLOCK-REFERRER: http://www.snapfiles.com/feedback/ 12/13/06 SF tracker -.snapfiles.net/rotation/.*\.asp -#MASTER# BLOCK-REFERRER: not provided. SF tracker #1616034 12/16/06 -#MASTER# COMMENT: JS pop-ups -spa.snap.com/ -#MASTER# BLOCK-REFERRER: http://www.gamefaqs.com/computer/doswin/game/914819.html 12/18/06 -#MASTER# COMMENT: user tracking, and run-away assorted 'junk' -#MASTER# BLOCK-REFERRER: http://formwood.com 2007-11-12 -.insitemetrics.com/ -#MASTER# COMMENT: user tracking, and assorted 'junk' -#MASTER# BLOCK-REFERRER: http://blogblog.com 2007-11-12 -.extreme-dm.com/ -#MASTER# COMMENT: user tracking, and assorted 'junk' -#MASTER# BLOCK-REFERRER: http://www.schillmania.com 2007-11-12 -stats.reinvigorate.net/ -#MASTER# COMMENT: user tracking, and assorted 'junk' -#MASTER# BLOCK-REFERRER: http://wordpress.com 2007-11-12 -.getclicky.com/ -#MASTER# COMMENT: user tracking, and assorted 'junk' -#MASTER# BLOCK-REFERRER: http://infoworld.com 2007-11-12 -.quantserve.com -# Blocked URL = http://media.adrevolver.com/adrevolver/trace?sip=123&cpy=123 -media.adrevolver.com/ -#MASTER# REMARKS: Actionsfile feedback item #2975895 2010-03-24 -# Blocked URL = http://static.chartbeat.com/js/chartbeat.js -.chartbeat.com/(.*/)?chartbeat\.js$ -# Blocked URL = http://js.adlink.net/js?lang=de&s=duesseldorf-international.de&z=home&d=1274103403564 -#MASTER# BLOCK-REFERRER: http://www.duesseldorf-international.de/ -js.adlink.net/ -# Blocked URL = nl.sitestat.com/rdw/rdw/s?www.nl.voertuigeigenaar.voertuigeigenaar&ns__t=1274099350343 -#MASTER# BLOCK-REFERRER: http://www.rdw.nl/nl/voertuigeigenaar/ -.sitestat.com/ -#MASTER# BLOCK-REFERRER: http://www.chip.de/artikel/c_artikelunterseite_10423683.html -# Blocked URL = http://pagead.googlesyndication.example.com/foo/bar/baz.js -pagead*.googlesyndication./.*\.js -#MASTER# BLOCK-REFERRER: http://www.pcmag.com/ 11/22/06 per SF Tracker # 1601148 -/js/slider\.js -#MASTER# BLOCK-REFERRER: http://floodle.net 2007-01-21 SF tracker -scripts.chitika.net/.*\.js -#MASTER# BLOCK-REFERRER: via Yahoo groups -#MASTER# REMARKS: Actionsfile tracker 1645513 2007-01-26 -.adinterax.com/.*\.js -#MASTER# BLOCK-REFERRER: http://dictionary.reference.com/search?q=privacy&db=* -#MASTER# REMARKS: Actionsfile tracker 1650798 2007-02-02 -# Blocked URL = http://partner.googleadservices.com/gampad/google_service.js -# Blocked URL = http://partner.googleadservices.com/gampad/google_ads.js -# Blocked URL = http://partner.googleadservices.com/gampad/slotdata.js?callback=_GA_googleAdData.setAdSlotAttributes&client=ca-gam-lexico -.googleadservices.com/gampad/.*\.js -# Blocked URL = http://richmedia.yimg.com/js/123/personnals_banners/PER_happy_sara1_4_425x600/ad.js?q=123 -/.*/ad\.js\? -# Blocked URL = http://i.cmpnet.com/shared/omniture/s_code_remote.js -#MASTER# BLOCK-REFERRER: http://www.informationweek.de/ -/.*omniture.*\.js -# Blocked URL = http://gadk.hit.gemius.pl/*/_1274097577014/rexdot.gif?l=30&id=..DlR.vCLZGB56RmfkYNSWZVLSqB3ueYOP.Oec5WWiv.h7&fr=1&fv=WIN%2010%2C0%2C45%2C2&tz=-120&href=http%3A//www.baadgalleri.dk/&ref=&screen=1440x900&col=32 -#MASTER# BLOCK-REFERRER: http://www.baadgalleri.dk/ -.gemius.pl/ - - -{+block{Might be a web-bug.} -handle-as-empty-document +handle-as-image} -#MASTER# BLOCK-REFERRER: http://versiontracker.com and many others. 10/20/06 -/(.*/)?__utm.gif\? -#MASTER# BLOCK-REFERRER: http://washingpost.com and others 10/25/06 -/.*\.gif\?D=DM -#MASTER# BLOCK-REFERRER: http://www.washingtonpost.com/ -#stats.surfaid.ihost.com/(crc/)?images/(bounce/)?uc.GIF -#MASTER# BLOCK-REFERRER: http://www.ibm.com 10/09/06 -#MASTER# REMARKS: Similar hostname and paths appear in multiple locations. -# Blocked URL = http://stats.surfaid.ihost.com/crc/images/bounce/uc.GIF -# Blocked URL = http://stats.surfaid.ihost.com/rc/images/bounce/uc.GIF -stats./c?rc/.*/uc.gif -#MASTER# BLOCK-REFERRER: http://priceline.com 10/20/06 -#MASTER# REMARKS: User tracking, webbug stuff -/(.*/)?dcs.gif\?&?dcs -#MASTER# BLOCK-REFERRER: http://www.msnbc.com 10/07/06 -#MASTER# REMARKS: And MANY others. Webbug stuff. -/(.*/)?c(lear)?\.gif\?. -#MASTER# BLOCK-REFERRER: http://www.investorguide.com 10/08/06 -#MASTER# BLOCK-REFERRER: http://foodnetwork.com, http://gardenweb.com 10/20/06 -#MASTER# REMARK: webbug type gif used in MANY places. -#MASTER# REMARK: Too many false positives -#/(.*/)?(clear|(trans_?1x|blank)?1).gif -#MASTER# REMARK: Let's try this way. -/(.*/)?(clear|blank|(trans_?|1x)?1).gif\?. -#MASTER# BLOCK-REFERRER: http://actorstheatre.org 11/02/06 -stats./.*\.gif\? -# Blocked URL = http://ad.yieldmanager.com/pixel?id=123456&t=2 -.yieldmanager.com/pixel\? -# Blocked URL = http://a.analytics.yahoo.com/p.pl?a=1000226660965&js=no -# Blocked URL = http://s.analytics.yahoo.com/fpc.pl?a=1000461640983&v=4.43&enc=utf-8&f=http%3A//www.zoover.nl/nederland/limburg/maasbracht/weer%23tabs&b=Het%20Weer%20in%20Maasbracht.%20Bekijk%20Weersverwachting%20van%20Maasbracht%20%7C%20Zoover%23tabs&flv=WIN%2010%2C0%2C45%2C2&d=Mon%2C%2017%20May%202010%2014%3A09%3A26%20UTC&n=-2&g=nl&h=Y&j=1440x900&k=32&l=true&ittidx=0&fpc=uP04C7j4%7ClaDQjglKaa%7Cfses1000461640983%3D%7CkbSSgv6Jaa%7CuP04C7j4%7Cfvis1000461640983%3DZj1odHRwJTNBLy93d3cuem9vdmVyLm5sLyZiPVpvb3ZlciUyMCU3QyUyMFZha2FudGllYmVvb3JkZWxpbmdlbiUyMHZvb3IlMjBlbiUyMGRvb3IlMjByZWl6aWdlcnM%3D%7C8sHTYo10oM%7C8sHTYo10oM%7C8sHTYo10oM%7CT%7C8sHTYo10oM%7C8sHTYo10oM -.analytics.yahoo.com +# Blocked URL = http://www91.intel.com/b/ss/intelcorp,intelcorpdc/...ONDataProvider.aspx%3FDownloadType%3DDrivers&ot=A&AQE=1 +www91.intel.com/ +#MASTER# BLOCK-REFERRER: http://www.sport.pl/pilka/1,65080,10189388,Premier_League__Angielskie_media__Szaleni_United_zniszczyli.html +# Blocked URL = http://reklamy.sfd.pl/sportpl.ashx?clickTag=http://gazeta.hit.gemius.pl/hitredir/id=ApuVHydwkYW81VSL0PZYqnXoDosBucMur1zZqGEAJa7.X7/stparam=sifgmrnlfi/url=http://reklamy.sfd.pl/sportpl_redirect.ashx +reklamy.sfd.pl/ +#MASTER# BLOCK-REFERRER: http://lwn.net/Articles/478657/ +# Blocked URL = http://rotation.linuxnewmedia.com/www/delivery/avw.php?zoneid=26&n=aa584766 +rotation.linuxnewmedia.com/ +# Blocked URL = http://de17a.com/a/33039/26891.swf +de17a.com/ #---------------------------------------------------------------------------- # JavaScripts and Texts for ad and popup generation @@ -1305,6 +1345,15 @@ hstse.tradedoubler.com/.*\.swf www.zdnetasia.com/.*/sponsor/.*\.gif$ # Blocked URL = http://pagead2.googlesyndication.com/pagead/imgad?id=CPjtipDs9taquQEQoAEYwgQyCIvo2PNnQywb .googlesyndication.com/.*/imgad\? +#MASTER# BLOCK-REFERRER: http://textsfromlastnight.com/texts/page:19 +# Blocked URL = http://optimize.indieclick.com/www/delivery/avw.php?zoneid=337501&cb=4147152&n=a530d6f1 +#MASTER# BLOCK-REFERRER: http://textsfromlastnight.com/texts/page:19 +optimize.indieclick.com/ +# Blocked URL = http://optimized-by.rubiconproject.com/a/8327/13451/26301-2.img +optimized-by.rubiconproject.com/ +# Blocked URL = http://g.adspeed.net/ad.php?do=html&zid=14678&wd=728&ht=90&target=_top +#MASTER# BLOCK-REFERRER: http://seclists.org/fulldisclosure/2012/Aug/4 +g.adspeed.net/ #---------------------------------------------------------------------------- # Cross-site user tracking @@ -1405,6 +1454,11 @@ sb.scorecardresearch.com/ #MASTER# BLOCK-REFERRER: http://sourceforge.net/projects/ijbswa/ # Blocked URL = http://b.collective-media.net/seg/cm/cm_aa_gn1 b.collective-media.net/ +#MASTER# BLOCK-REFERRER: http://www.spiegel.de/ +# Blocked URL = http://spiegel.ivwbox.de/cgi-bin/ivw/CP/1001;/home/c-18/be-PB64-aG9tZXBhZ2UvY2VudGVy/szwprofil-1001 +#MASTER# BLOCK-REFERRER: http://www.heise.de/ +# Blocked URL = http://heise.ivwbox.de/2004/01/survey.js + .ivwbox.de/ #---------------------------------------------------------------------------- # Specific counters (see above for generic patterns) @@ -1789,6 +1843,27 @@ include.ebaystatic.com/.*omniture.*\.js #MASTER# REMARKS:Actionsfile feedback item #2974204 2010-03-21 # URL = http://adesklets.sourceforge.net/ adesklets.sourceforge.net/ +#MASTER# REMARKS: Mostly-french political blog +# URL = http://adassier.wordpress.com/ +adassier.wordpress.com/ +# URL = http://adassier.files.wordpress.com/2010/05/road-to-economic-recovery2.jpg?w=630&h=451 +adassier.files.wordpress.com +# URL = http://adainitiative.org/about-us/ +adainitiative.org/ +# URL = http://adjamblog.wordpress.com/ +adjamblog.wordpress.com/ +# URL = http://adjamblog.files.wordpress.com/2011/12/cropped-terra.jpg +adjamblog.files.wordpress.com/ +# URL = http://www.urbandictionary.com/popular.php?character=C +.urbandictionary.com/popular +# URL = http://websupport.wdc.com/sfclickcount.asp?s1=2&s2=1&s3=2&s4=6&lang=en&url=https%3A%2F%2Fwesterndigital.secure.force.com%2F%3Flang%3Den +websupport.wdc.com/ +#MASTER# UNBLOCK-REFERRER: http://www.bbc.co.uk/programmes/b01mnyzd +# URL = http://static.bbci.co.uk/radio/player/popup.js +.bbci.co.uk/radio/ +#MASTER# UNBLOCK-REFERRER: http://conradelektronik.m13.mailplus.nl/genericservice/code/servlet/React?encId=xSgAxBFNnFrne8j&actId=357685&command=openhtml +# URL = http://content.conrad.se/newsletter/banners/OFFER_750987_exk.jpg +.conrad.se/newsletter/banners/ ############################################################################# @@ -1867,7 +1942,6 @@ i.cnn.net/cnn/.*/clickability/button #---------------------------------------------------------------------------- # Sometimes (i.e. often!) fast-redirects catches things by mistake #---------------------------------------------------------------------------- -#MASTER# REMARKS: This section NOT checked 10/13/06 HB {-fast-redirects} # Sticky Actions = -fast-redirects www.ukc.ac.uk/cgi-bin/wac\.cgi\? @@ -1955,6 +2029,14 @@ view.samurajdata.se/ps\.php\?url= .youtube.com/swf/.*swf= # URL = http://redbot.org/?uri=http%3A//apache.org/ .redbot.org/ +# URL = http://webcache.googleusercontent.com/custom?hl=en&domains=library.gnome.org&sitesearch=library.gnome.org&q=cache:8yGDJ1YpefcJ:http://library.gnome.org/devel//gtk/2.20/GtkLabel.html+gtk_label_set_text+escape&ct=clnk +webcache.googleusercontent.com/ +# URL = http://webcache.googleusercontent.com/search?q=cache:kZYcDFibjHcJ:https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Private_Information+inurl:https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Private_Information&hl=en&strip=1 +.googleusercontent.com/.*=cache: +# URL = http://maps.googleapis.com/maps/api/js/AuthenticationService.Authenticate?1shttp%3A%2F%2Fwww.wunderground.com%2Fcgi-bin%2Ffindweather%2FgetForecast%3Fbrand%3Dwxmap%26query%3D42.649601%2C-88.298500%26zoom%3D8%26theprefset%3D531051599999WS%26theprefvalue%3DME0041&2sgme-weatherunderground&3swxmap&5e1&callback=_xdc_._9er073&token=129358 +.googleapis.com/ +# URL = http://www.google.com.au/sorry/?continue=http://www.google.com.au/search%3Fhl%3Den%26tbo%3Dd%26output%3Dsearch%26sclient%3Dpsy-ab%26q%3Dnew%2Bcars%26btnG%3D +.google./sorry/\?continue?= {+redirect{s@.*url=@http://@} -block} # Sticky Actions = +redirect -block @@ -2041,7 +2123,9 @@ javascript.internet.com javascriptkit.com .xulplanet.com .perl.com/language/newdocs +# URL = http://svnweb.freebsd.org/base/head/cddl/contrib/opensolaris/lib/libzfs/common/libzfs_dataset.c?revision=238391&view=markup .freebsd.org +# URL = http://fxr.watson.org/fxr/source/geom/geom_event.c .watson.org .netbsd.org .openbsd.org @@ -2112,6 +2196,8 @@ javabog.dk/ijk/ .couchsurfing.com/ # URL = http://www.couchsurfing.org/mapsurf.html .couchsurfing.org/ +# URL = http://www.thinkgeek.com/tshirts-apparel/unisex/generic/ +.thinkgeek.com/ {-filter{banners-by-link}} # Sticky Actions = -filter{banners-by-link} @@ -2275,6 +2361,11 @@ www.skweezer.net/bloglines # Redirected URL = http://www.awin1.com/cread.php?awinmid=2891&awinaffid=43305&clickref=&p=http://www.groupon.co.uk/ # Redirect Destination = http://www.groupon.co.uk/ .awin1.com/.*=http:// +# Redirected URL = http://tr.anp.se/track?t=c&mid=1132291&uid=328397249&&&http:%2F%2Fwww%2Eresume%2Ese%2F%2Fnyheter%2F2011%2F03%2F31%2Fexpressen%2Dkampanjen%2Danmald%2F +# Redirect Destination = http://www.resume.se//nyheter/2011/03/31/expressen-kampanjen-anmald/ +# Redirected URL = http://tr.anp.se/track?t=c&mid=1129528&uid=328397249&&&http:%2F%2Fwww%2Eresume%2Ese%2F%2Fnyheter%2F2011%2F03%2F29%2Fanstalt%2Dforbjod%2Dskurk%2F +# Redirect Destination = http://www.resume.se//nyheter/2011/03/29/anstalt-forbjod-skurk/ +tr.anp.se/ {+block{Looks like an anti-leech trigger URL.}} #MASTER# COMMENTS: This section not checked 10/17/06 HB. Still out there?