X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=blobdiff_plain;f=doc%2Fsource%2Fprivoxy-man-page.sgml;h=556225faf26f80386bf3e4e5de9d3e85e631037a;hp=97c4c42a95c5156f5968910dd46c10663e142f19;hb=46ceb0f9570692b675c282dc9bdfffe5c2e5baaf;hpb=d12c46e2ec2bfc06ef6f5b0e710d21b1211088ec diff --git a/doc/source/privoxy-man-page.sgml b/doc/source/privoxy-man-page.sgml index 97c4c42a..556225fa 100644 --- a/doc/source/privoxy-man-page.sgml +++ b/doc/source/privoxy-man-page.sgml @@ -1,25 +1,21 @@ + - - - - + + + + - + + ]> - 2006-08-24 + 2012-11-08 - privoxy + privoxy 1 Privoxy &p-version; @@ -69,15 +66,17 @@ - + privoxy + + - - pidfile - user[.group] - - configfile + pidfile + hostname + user[.group] + + configfile @@ -90,21 +89,49 @@ options: - + + - --help + --chroot + + + Before changing to the user ID given in the --user option, chroot to + that user's home directory, i.e. make the kernel pretend to the + Privoxy process that the directory tree starts + there. If set up carefully, this can limit the impact of possible + vulnerabilities in Privoxy to the files contained in + that hierarchy. + + + + + + --config-test - Print brief usage info and exit. + Exit after loading the configuration files before binding to + the listen address. The exit code signals whether or not the + configuration files have been successfully loaded. + + + If the exit code is 1, at least one of the configuration files + is invalid, if it is 0, all the configuration files have been + successfully loaded (but may still contain errors that can + currently only be detected at run time). + + This option doesn't affect the log setting, combination with + "--no-daemon" is recommended if a configured log file shouldn't + be used. + - --version + --help - Print version info and exit. + Print brief usage info and exit. @@ -131,6 +158,17 @@ + + --pre-chroot-nslookup hostname + + + Initialize the resolver library using hostname + before chroot'ing. On some systems this reduces the number of files + that must be copied into the chroot tree. + + + + --user user[.group] @@ -146,26 +184,23 @@ + - --chroot - - - Before changing to the user ID given in the --user option, chroot to - that user's home directory, i.e. make the kernel pretend to the - Privoxy process that the directory tree starts - there. If set up carefully, this can limit the impact of possible - vulnerabilities in Privoxy to the files contained in - that hierarchy. - - + --version + + + Print version info and exit. + + + If the configfile is not specified on the command line, Privoxy will look for a file named - config in the current directory . If no - configfile is found, Privoxy will + config in the current directory. If no + configfile is found, Privoxy will fail to start. @@ -183,30 +218,27 @@ Installation and Usage - Browsers must be individually configured to use Privoxy as - a HTTP proxy. The default setting is for localhost, on port 8118 - (configurable in the main config file). To set the HTTP proxy in Netscape - and Mozilla, go through: Edit; - Preferences; Advanced; - Proxies; Manual Proxy Configuration; - View. - - - For Firefox, go through: Tools; + Browsers can either be individually configured to use + Privoxy as a HTTP proxy (recommended), + or Privoxy can be combined with a packet + filter to build an intercepting proxy + (see config). The default setting is for + localhost, on port 8118 (configurable in the main config file). To set the + HTTP proxy in Firefox, go through: Tools; Options; General; Connection Settings; - Manual Proxy Configuration. + Manual Proxy Configuration. - For Internet Explorer, go through: Tools; + For Internet Explorer, go through: Tools; Internet Properties; Connections; - LAN Settings. + LAN Settings. The Secure (SSL) Proxy should also be set to the same values, otherwise https: URLs will not be proxied. Note: Privoxy can only proxy HTTP and HTTPS traffic. Do not try it with FTP or other protocols. - HTTPS presents some limitations, and not all features will work with HTTPS + HTTPS presents some limitations, and not all features will work with HTTPS connections. @@ -221,182 +253,49 @@ Privoxy can be configured with the various configuration files. The default configuration files are: config, - default.filter, and - default.action. user.action should - be used for locally defined exceptions to the default rules of - default.action, and user.filter for - locally defined filters. These are well commented. On Unix - and Unix-like systems, these are located in - /etc/privoxy/ by default. + default.filter, default.action and + default.action. user.action should + be used for locally defined exceptions to the default rules in + match-all.action and default.action, + and user.filter for locally defined filters. These are + well commented. On Unix and Unix-like systems, these are located in + /etc/privoxy/ by default. - See the User Manual for a detailed - explanation of installation, general usage, all configuration options, new - features and notes on upgrading. + Privoxy uses the concept of actions + in order to manipulate the data stream between the browser and remote sites. + There are various actions available with specific functions for such things + as blocking web sites, managing cookies, etc. These actions can be invoked + individually or combined, and used against individual URLs, or groups of URLs + that can be defined using wildcards and regular expressions. The result is + that the user has greatly enhanced control and freedom. The actions list (ad blocks, etc) can also be configured with your - web browser at http://config.privoxy.org/. + web browser at http://config.privoxy.org/ + (assuming the configuration allows it). Privoxy's configuration parameters can also be viewed at the same page. In addition, Privoxy can be toggled on/off. This is an internal page, and does not require Internet access. - - - - -Sample Configuration - A brief example of what a simple default.action - configuration might look like: - - - - # Define a few useful custom aliases for later use - {{alias}} - - # Useful aliases - +crunch-cookies = +crunch-incoming-cookies +crunch-outgoing-cookies - -crunch-cookies = -crunch-incoming-cookies -crunch-outgoing-cookies - +imageblock = +block +handle-as-image - - # Fragile sites should have the minimum changes - fragile = -block -deanimate-gifs -fast-redirects -filter \ - -hide-referer -prevent-cookies -kill-popups - - ## Turn some actions on ################################ - ## NOTE: Actions are off by default, unless explictily turned on - ## otherwise with the '+' operator. - -{ \ --add-header \ --block \ --content-type-overwrite \ --crunch-client-header \ --crunch-if-none-match \ --crunch-outgoing-cookies \ --crunch-incoming-cookies \ --crunch-server-header \ -+deanimate-gifs{last} \ --downgrade-http-version \ --fast-redirects \ -+filter{js-annoyances} \ --filter{js-events} \ -+filter{html-annoyances} \ --filter{content-cookies} \ -+filter{refresh-tags} \ -+filter{unsolicited-popups} \ --filter{all-popups} \ -+filter{img-reorder} \ -+filter{banners-by-size} \ --filter{banners-by-link} \ -+filter{webbugs} \ --filter{tiny-textforms} \ -+filter{jumping-windows} \ --filter{frameset-borders} \ --filter{demoronizer} \ --filter{shockwave-flash} \ --filter{quicktime-kioskmode} \ --filter{fun} \ --filter{crude-parental} \ -+filter{ie-exploits} \ --filter{site-specifics} \ --filter-client-headers \ --filter-server-headers \ --force-text-mode \ --handle-as-empty-document --handle-as-image \ --hide-accept-language \ --hide-content-disposition \ --hide-if-modified-since \ -+hide-forwarded-for-headers \ -+hide-from-header{block} \ -+hide-referrer{forge} \ --hide-user-agent \ --inspect-jpegs \ --kill-popups \ --limit-connect \ --overwrite-last-modified \ --redirect \ -+prevent-compression \ --send-vanilla-wafer \ --send-wafer \ -+session-cookies-only \ -+set-image-blocker{pattern} \ --treat-forbidden-connects-like-blocks \ -} -/ # '/' Match *all* URL patterns - - - # Block, and treat these URL patterns as if they were 'images'. - # We would expect these to be ads. - {+imageblock} - .ad.doubleclick.net - .a[0-9].yimg.com/(?:(?!/i/).)*$ - ad.*.doubleclick.net - - # Block any URLs that match these patterns - {+block} - ad*. - .*ads. - banner?. - /.*count(er)?\.(pl|cgi|exe|dll|asp|php[34]?) - .hitbox.com - - # Make exceptions for these harmless ones that would be - # caught by our +block patterns just above. - {-block} - adsl. - advice. - .*downloads. - - - - - Then for a user.action, we would put local, - narrowly defined exceptions: - - - - # Re-define aliases as needed here - {{alias}} - - # Useful aliases - -crunch-cookies = -crunch-incoming-cookies -crunch-outgoing-cookies - - # Set personal exceptions to the policies in default.action ####### - - # Sites where we want persistant cookies, so allow *all* cookies - {-crunch-cookies -session-cookies-only} - .redhat.com - .sun.com - .msdn.microsoft.com - - # This site breaks easily. - {-block -fast-redirects} - .forbes.com - - - - - See the comments in the configuration files themselves, or the - User Manual - for full explanations of the above syntax, and other Privoxy - configuration options. + See the User Manual for a detailed + explanation of installation, general usage, all configuration options, new + features and notes on upgrading. - + Files - + /usr/sbin/privoxy /etc/privoxy/config + /etc/privoxy/match-all.action /etc/privoxy/default.action - /etc/privoxy/standard.action /etc/privoxy/user.action /etc/privoxy/default.filter /etc/privoxy/user.filter @@ -418,13 +317,14 @@ Signals - Privoxy terminates on the SIGINT, - SIGTERM and SIGABRT signals. Log - rotation scripts may cause a re-opening of the logfile by sending a + Privoxy terminates on the SIGINT + and SIGTERM signals. Log + rotation scripts may cause a re-opening of the logfile by sending a SIGHUP to Privoxy. Note that unlike other daemons, Privoxy does not need to be made aware of config file changes by SIGHUP -- it will detect them - automatically. + automatically. Signals other than the ones listed above aren't explicitly + handled and result in the default action defined by the operating system. @@ -433,7 +333,7 @@ Notes - This is a &p-status; version of Privoxy. Not + This is a &p-status; version of Privoxy. Not all features are well tested. ]]>