X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=blobdiff_plain;f=doc%2Fsource%2Ffaq.sgml;h=127d9ce9a4f2f20cf4a4a5d0c40ee15cad815e2b;hp=088c9a7f48f437cc0fa410c809aa694c818d5a2b;hb=7a99a61ab1a3ce0401821aedcd06eba19a698b2a;hpb=e3aec93c3928a130ceeef67b78043da168568db7 diff --git a/doc/source/faq.sgml b/doc/source/faq.sgml index 088c9a7f..127d9ce9 100644 --- a/doc/source/faq.sgml +++ b/doc/source/faq.sgml @@ -8,10 +8,10 @@ - - - - + + + + @@ -27,9 +27,9 @@ This file belongs into ijbswa.sourceforge.net:/home/groups/i/ij/ijbswa/htdocs/ - $Id: faq.sgml,v 2.97 2013/11/07 14:42:02 fabiankeil Exp $ + $Id: faq.sgml,v 2.117 2016/03/04 13:21:33 fabiankeil Exp $ - Copyright (C) 2001-2009 Privoxy Developers http://www.privoxy.org/ + Copyright (C) 2001-2014 Privoxy Developers http://www.privoxy.org/ See LICENSE. Based partially on the Internet Junkbuster FAQ originally written by and @@ -73,12 +73,12 @@ - Copyright &my-copy; 2001-2011 by + Copyright &my-copy; 2001-2014 by Privoxy Developers -$Id: faq.sgml,v 2.97 2013/11/07 14:42:02 fabiankeil Exp $ +$Id: faq.sgml,v 2.117 2016/03/04 13:21:33 fabiankeil Exp $ Configuration - -What exactly is an <quote>actions</quote> file? + +What exactly is an <quote>actions</quote> file? &my-app; utilizes the concept of @@ -807,8 +796,8 @@ some of these actions. - -How are actions files configured? What is the easiest +<sect2 renderas="sect3" id="actconfig"> +<title>How are actions files configured? What is the easiest way to do this? @@ -993,8 +982,8 @@ with a browser? Does that not raise security issues? - -What is the <filename>default.filter</filename> file? What is a <quote>filter</quote>? + +What is the <filename>default.filter</filename> file? What is a <quote>filter</quote>? The default.filter file is where filters as supplied by the developers are defined. @@ -1112,8 +1101,8 @@ with a browser? Does that not raise security issues? - -Instead of ads, now I get a checkerboard pattern. I don't want to see anything. + +Instead of ads, now I get a checkerboard pattern. I don't want to see anything. The replacement for blocked images can be controlled with the set-image-blocker @@ -1135,8 +1124,8 @@ with a browser? Does that not raise security issues? - -Why would anybody want to see a checkerboard pattern? + +Why would anybody want to see a checkerboard pattern? Remember that telling which image is an ad and which isn't, is an educated guess. While we hope that the standard configuration @@ -1150,8 +1139,8 @@ with a browser? Does that not raise security issues? - -I see some images being replaced with text +<sect2 renderas="sect3" id="blockedbytext"> +<title>I see some images being replaced with text instead of the checkerboard image. Why and how do I get rid of this? This happens when the banners are not embedded in the HTML code of the @@ -1540,8 +1529,8 @@ the BLOCKED page? Miscellaneous - -How much does Privoxy slow my browsing down? This +<sect2 renderas="sect3" id="slowsme"> +<title>How much does Privoxy slow my browsing down? This has to add extra time to browsing. How much of an impact depends on many things, including the CPU of the host @@ -1631,6 +1620,13 @@ delays in page requests. What's wrong? hence it could not be intercepted, and you have accessed the real web site at config.privoxy.org. + + Note that config.privoxy.org resolves to a public IP address. + If you use config.privoxy.org as ping or traceroute target you will + reach the system on the Internet (Privoxy can't intercept ICMP requests). + If you want to ping the system Privoxy runs on, + you should use its IP address or local DNS name (if it has got one). + @@ -1714,8 +1710,8 @@ us help you. Your efforts are not wasted, and we do appreciate them. - -Can Privoxy guarantee I am anonymous? + +Can Privoxy guarantee I am anonymous? No. Your chances of remaining anonymous are improved, but unless you chain Privoxy with Tor @@ -1758,8 +1754,8 @@ us help you. Your efforts are not wasted, and we do appreciate them. - -A test site says I am not using a Proxy. + +A test site says I am not using a Proxy. Good! Actually, they are probably testing for some other kinds of proxies. Hiding yourself completely would require additional steps. @@ -1803,7 +1799,7 @@ us help you. Your efforts are not wasted, and we do appreciate them. - Since Privoxy 3.0.5, its + Privoxy's main configuration file is already prepared for Tor, if you are using a default Tor configuration and run it on the same @@ -1813,9 +1809,16 @@ us help you. Your efforts are not wasted, and we do appreciate them. -# forward-socks5 / 127.0.0.1:9050 . +# forward-socks5t / 127.0.0.1:9050 . + + Note that if you got Tor through one of the bundles, you may + have to change the port from 9050 to 9150 (or even another one). + For details, please check the documentation on the + Tor website. + + This is enough to reach the Internet, but additionally you might want to uncomment the following forward rules, to make sure your local network is still @@ -1864,8 +1867,8 @@ us help you. Your efforts are not wasted, and we do appreciate them. - -Might some things break because header information or +<sect2 renderas="sect3" id="sitebreak"> +<title>Might some things break because header information or content is being altered? @@ -1914,8 +1917,8 @@ content is being altered? - -Can Privoxy act as a <quote>caching</quote> proxy to +<sect2 renderas="sect3" id="caching"> +<title>Can Privoxy act as a <quote>caching</quote> proxy to speed up web browsing? No, it does not have this ability at all. You want something like @@ -1929,8 +1932,8 @@ speed up web browsing? - -What about as a firewall? Can Privoxy protect me? + +What about as a firewall? Can Privoxy protect me? Not in the way you mean, or in the way some firewall vendors claim they can. Privoxy can help protect your privacy, but can't @@ -1939,8 +1942,8 @@ speed up web browsing? - -I have large empty spaces / a checkerboard pattern now where +<sect2 renderas="sect3" id="wasted"> +<title>I have large empty spaces / a checkerboard pattern now where ads used to be. Why? It is technically possible to eliminate banners and ads in a way that frees @@ -1968,8 +1971,8 @@ ads used to be. Why? - -How can Privoxy filter Secure (HTTPS) URLs? + +How can Privoxy filter Secure (HTTPS) URLs? Since secure HTTP connections are encrypted SSL sessions between your browser and the secure site, and are meant to be reliably secure, @@ -2000,8 +2003,8 @@ ads used to be. Why? - -Privoxy runs as a <quote>server</quote>. How +<sect2 renderas="sect3" id="secure"> +<title>Privoxy runs as a <quote>server</quote>. How secure is it? Do I need to take any special precautions? On Unix-like systems, Privoxy can run as a non-privileged @@ -2089,7 +2092,7 @@ ads, but also its own internal CGI pages. What is a crunch? -Can Privoxy effect files that I download +<title>Can Privoxy affect files that I download from a webserver? FTP server? From the webserver's perspective, there is no difference between @@ -2242,11 +2245,11 @@ and related issues? Lately there have been reports of problems with some kind of - Privoxy versions that come preinstalled on some Netbooks. - Some of the problems described are inconsistent with the behaviour - of official Privoxy versions, which suggests that the preinstalled - software may contain vendor modifications that we don't know about - and thus can't debug. + "parental control" software based on Privoxy that came preinstalled on + certain ASUS Netbooks. + The problems described are inconsistent with the behaviour of official + Privoxy versions, which suggests that the preinstalled software may + contain vendor modifications that we don't know about and thus can't debug. Privoxy's license allows vendor @@ -2273,8 +2276,8 @@ and related issues? Troubleshooting - -I cannot connect to any websites. Or, I am getting +<sect2 renderas="sect3" id="refused"> +<title>I cannot connect to any websites. Or, I am getting <quote>connection refused</quote> message with every web page. Why? There are several possibilities: @@ -2315,8 +2318,8 @@ and related issues? - -I just added a new rule, but the steenkin ad is +<sect2 renderas="sect3" id="flushit"> +<title>I just added a new rule, but the steenkin ad is still getting through. How? If the ad had been displayed before you added its URL, it will probably be @@ -2398,8 +2401,8 @@ Request: 66.70.21.80/scripts/click.php?hid=a71b9f6504b0c5681fa5&si=Ua - -One of my favorite sites does not work with Privoxy. +<sect2 renderas="sect3" id="badsite"> +<title>One of my favorite sites does not work with Privoxy. What can I do? @@ -2469,7 +2472,7 @@ What can I do? every time I start IE. What gives? - This is a quirk that effects the installation of + This is a quirk that affects the installation of Privoxy, in conjunction with Internet Explorer and Internet Connection Sharing on Windows 2000 and Windows XP. The symptoms may appear to be corrupted or invalid DUN settings, or passwords. @@ -2695,11 +2698,24 @@ Why? Pages with UTF-8 fonts are garbled. - This is caused by the demoronizer filter. You should either - upgrade Privoxy, or at least upgrade to the most - recent default.action file available from SourceForge. - Or you can simply disable the demoronizer filter. + This may be the result of an overly aggressive filter. The filters that + are enabled in the default configuration aren't expected to cause problems + like this. If you enabled the demoronizer filter, please + try temporarily disabling it. + + + If that doesn't help, temporarily disable all filters to see if another + filter could be the culprit. If the problem disappears, enable the filters + one by one, until the problem reappears and the offending filter is found. + + + Once the problem-causing filter is known, it can be fixed or disabled. + + + Upgrading Privoxy, or going to the most recent + default.action file available from SourceForge + might be worth a try, too. @@ -2709,13 +2725,11 @@ Why? is used? - This may also be caused by the demoronizer filter, - in conjunction with a web server that is misreporting the content type. Binary - files are exempted from Privoxy's filtering - (unless the web server by mistake says the file is something else). Either - upgrade Privoxy, or go to the most recent - default.action file available from SourceForge. + This may also be caused by an (overly aggressive + filter in conjunction with a web server that is misreporting the content + type. By default binary files are exempted from + Privoxy's filtering + (unless the web server by mistake says the file is something else). @@ -2938,6 +2952,42 @@ browsing has slowed to a crawl. What gives? + +What are tainted sockets and how do I prevent them? + + &my-app; marks sockets as tainted when it can't use them to + serve additional requests. + This does not necessarily mean that something went wrong and + information about tainted sockets is only logged if connection + debugging is enabled (debug 2). + + + For example server sockets that were used for CONNECT requests + (which are used to tunnel https:// requests) are considered tainted + once the client closed its connection to &my-app;. + Technically &my-app; could keep the connection to the server open, + but the server would not accept requests that do not belong to the + previous TLS/SSL session (and the client may even have terminated + the session). + + + Server sockets are also marked tainted when a client requests a + resource, but closes the connection before &my-app; has completely + received (and forwarded) the resource to the client. + In this case the server would (probably) accept additional requests, + but &my-app; could not get the response without completely reading + the leftovers from the previous response. + + + These are just two examples, there are currently a bit more than + 25 scenarios in which a socket is considered tainted. + + + While sockets can also be marked tainted as a result of a technical + problem that may be worth fixing, the problem will be explicitly + logged as error. + + @@ -2994,10 +3044,7 @@ browsing has slowed to a crawl. What gives? --> -