X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=blobdiff_plain;f=privoxy.1;h=302ded9efe43cb5b28ccf3b32e81cee643f8a0df;hp=f8c4a7dd74660d80d8de4145fbebd8bbb00f312f;hb=d08efb68329798242aa848d30b50fc58254b1aaf;hpb=2a54f6932e62a48ca46b2fd0b5d721108c2506b9 diff --git a/privoxy.1 b/privoxy.1 index f8c4a7dd..302ded9e 100644 --- a/privoxy.1 +++ b/privoxy.1 @@ -3,35 +3,35 @@ .\" .\" Please send any bug reports, improvements, comments, patches, .\" etc. to Steve Cheng . -.TH "PRIVOXY" "1" "03 October 2006" "Privoxy 3.0.6 UNRELEASED" "" +.TH "PRIVOXY" "1" "15 January 2009" "Privoxy 3.0.11 UNRELEASED" "" .SH NAME privoxy \- Privacy Enhancing Proxy .SH SYNOPSIS -\fBprivoxy\fR [\fB--help\fR ] [\fB--version\fR ] [\fB--no-daemon\fR ] [\fB--pidfile \fIpidfile\fB\fR ] [\fB--user \fIuser[.group]\fB\fR ] [\fB--chroot\fR ] [\fB\fIconfigfile\fB\fR ] +\fBprivoxy\fR [\fB\-\-help\fR ] [\fB\-\-version\fR ] [\fB\-\-no-daemon\fR ] [\fB\-\-pidfile \fIpidfile\fB\fR ] [\fB\-\-user \fIuser[.group]\fB\fR ] [\fB\-\-chroot\fR ] [\fB\-\-pre-chroot-nslookup \fIhostname\fB\fR ] [\fB\fIconfigfile\fB\fR ] .SH "OPTIONS" .PP \fBPrivoxy\fR may be invoked with the following command line options: .TP -\fB--help\fR +\fB\-\-help\fR Print brief usage info and exit. .TP -\fB--version\fR +\fB\-\-version\fR Print version info and exit. .TP -\fB--no-daemon\fR +\fB\-\-no-daemon\fR Don't become a daemon, i.e. don't fork and become process group leader, don't detach from controlling tty, and do all logging there. .TP -\fB--pidfile \fIpidfile\fB\fR +\fB\-\-pidfile \fIpidfile\fB\fR On startup, write the process ID to \fIpidfile\fR. Delete the \fIpidfile\fR on exit. Failure to create or delete the \fIpidfile\fR -is non-fatal. If no \fB--pidfile\fR option is given, no PID file will be used. +is non-fatal. If no \fB\-\-pidfile\fR option is given, no PID file will be used. .TP -\fB--user \fIuser[.group]\fB\fR +\fB\-\-user \fIuser[.group]\fB\fR After (optionally) writing the PID file, assume the user ID of \fIuser\fR and the GID of \fIgroup\fR, or, if the optional @@ -39,13 +39,18 @@ After (optionally) writing the PID file, assume the user ID of \fIuser\fR. Exit if the privileges are not sufficient to do so. .TP -\fB--chroot\fR -Before changing to the user ID given in the --user option, chroot to +\fB\-\-chroot\fR +Before changing to the user ID given in the \-\-user option, chroot to that user's home directory, i.e. make the kernel pretend to the \fBPrivoxy\fR process that the directory tree starts there. If set up carefully, this can limit the impact of possible vulnerabilities in \fBPrivoxy\fR to the files contained in that hierarchy. +.TP +\fB\-\-pre-chroot-nslookup \fIhostname\fB\fR +Initialize the resolver library using \fIhostname\fR +before chroot'ing. On some systems this reduces the number of files +that must be copied into the chroot tree. .PP If the \fIconfigfile\fR is not specified on the command line, \fBPrivoxy\fR will look for a file named @@ -54,23 +59,26 @@ If the \fIconfigfile\fR is not specified on the command line, fail to start. .SH "DESCRIPTION" .PP -Privoxy is a +Privoxy is a non-caching web proxy -with advanced filtering capabilities for protecting -privacy, modifying web page data, managing +with advanced filtering capabilities for enhancing privacy, +modifying web page data, managing HTTP cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious -Internet junk. Privoxy has a very flexible configuration and can be +Internet junk. Privoxy has a flexible configuration and can be customized to suit individual needs and tastes. Privoxy has application for both stand-alone systems and multi-user networks. .PP Privoxy is based on Internet Junkbuster (tm). .SH "INSTALLATION AND USAGE" .PP -Browsers must be individually configured to use \fBPrivoxy\fR as -a HTTP proxy. The default setting is for localhost, on port 8118 -(configurable in the main config file). To set the HTTP proxy in Netscape -and Mozilla, go through: \fBEdit\fR; +Browsers can either be individually configured to use +\fBPrivoxy\fR as a HTTP proxy (recommended), +or \fBPrivoxy\fR can be combined with a packet +filter to build an intercepting proxy +(see \fIconfig\fR). The default setting is for +localhost, on port 8118 (configurable in the main config file). To set the +HTTP proxy in Netscape and Mozilla, go through: \fBEdit\fR; \fBPreferences\fR; \fBAdvanced\fR; \fBProxies\fR; \fBManual Proxy Configuration\fR; \fBView\fR. @@ -112,7 +120,8 @@ that can be defined using wildcards and regular expressions. The result is that the user has greatly enhanced control and freedom. .PP The actions list (ad blocks, etc) can also be configured with your -web browser at http://config.privoxy.org/. +web browser at http://config.privoxy.org/ +(assuming the configuration allows it). \fBPrivoxy's\fR configuration parameters can also be viewed at the same page. In addition, \fBPrivoxy\fR can be toggled on/off. This is an internal page, and does not require Internet access. @@ -131,79 +140,30 @@ configuration might look like: # Useful aliases that combine more than one action +crunch-cookies = +crunch-incoming-cookies +crunch-outgoing-cookies - -crunch-cookies = -crunch-incoming-cookies -crunch-outgoing-cookies + \-crunch-cookies = \-crunch-incoming-cookies \-crunch-outgoing-cookies +block-as-image = +block +handle-as-image # Fragile sites should have the minimum changes - fragile = -block -deanimate-gifs -fast-redirects -filter \\ - -hide-referer -prevent-cookies -kill-popups + fragile = \-block \-deanimate-gifs \-fast-redirects \-filter \\ + \-hide-referer \-prevent-cookies ## Turn some actions on ################################ ## NOTE: Actions are off by default, unless explictily turned on ## otherwise with the '+' operator. { \\ --add-header \\ --block \\ --content-type-overwrite \\ --crunch-client-header \\ --crunch-if-none-match \\ --crunch-outgoing-cookies \\ --crunch-incoming-cookies \\ --crunch-server-header \\ ++change-x-forwarded-for{block} \\ +deanimate-gifs{last} \\ --downgrade-http-version \\ --fast-redirects \\ --filter{js-annoyances} \\ --filter{js-events} \\ --filter{html-annoyances} \\ --filter{content-cookies} \\ +filter{refresh-tags} \\ --filter{unsolicited-popups} \\ --filter{all-popups} \\ --filter{img-reorder} \\ --filter{banners-by-size} \\ --filter{banners-by-link} \\ ++filter{img-reorder} \\ ++filter{banners-by-size} \\ +filter{webbugs} \\ --filter{tiny-textforms} \\ +filter{jumping-windows} \\ --filter{frameset-borders} \\ --filter{demoronizer} \\ --filter{shockwave-flash} \\ --filter{quicktime-kioskmode} \\ --filter{fun} \\ --filter{crude-parental} \\ +filter{ie-exploits} \\ --filter{site-specifics} \\ --filter{google} \\ --filter{yahoo} \\ --filter{msn} \\ --filter{blogspot} \\ --filter{xml-to-html} \\ --filter{html-to-xml} \\ --filter-client-headers \\ --filter-server-headers \\ --force-text-mode \\ --handle-as-empty-document --handle-as-image \\ --hide-accept-language \\ --hide-content-disposition \\ --hide-if-modified-since \\ -+hide-forwarded-for-headers \\ +hide-from-header{block} \\ -+hide-referrer{forge} \\ --hide-user-agent \\ --inspect-jpegs \\ --kill-popups \\ --limit-connect \\ --overwrite-last-modified \\ --redirect \\ -+prevent-compression \\ --send-vanilla-wafer \\ --send-wafer \\ ++hide-referrer{conditional-block} \\ +session-cookies-only \\ +set-image-blocker{pattern} \\ --treat-forbidden-connects-like-blocks \\ } / # '/' Match *all* URL patterns @@ -227,7 +187,7 @@ configuration might look like: # Make exceptions for these harmless ones that would be # caught by our +block patterns just above. - { -block } + { \-block } adsl. adobe. advice. @@ -244,24 +204,24 @@ narrowly defined exceptions: {{alias}} # Useful aliases - -crunch-cookies = -crunch-incoming-cookies -crunch-outgoing-cookies + \-crunch-cookies = \-crunch-incoming-cookies \-crunch-outgoing-cookies # Set personal exceptions to the policies in default.action ####### # Sites where we want persistent cookies, so allow *all* cookies - { -crunch-cookies -session-cookies-only } + { \-crunch-cookies \-session-cookies-only } .redhat.com .sun.com .msdn.microsoft.com - # These sites breaks easily. Use our "fragile" alias here. + # These sites break easily. Use our "fragile" alias here. { fragile } .forbes.com mybank.example.com # Replace example.com's style sheet with one of my choosing { +redirect{http://localhost/css-replacements/example.com.css} } - example.com/stylesheet.css + .example.com/stylesheet.css .fi .PP See the comments in the configuration files themselves, or the @@ -275,7 +235,6 @@ configuration options. \fI/usr/sbin/privoxy\fR \fI/etc/privoxy/config\fR \fI/etc/privoxy/default.action\fR - \fI/etc/privoxy/standard.action\fR \fI/etc/privoxy/user.action\fR \fI/etc/privoxy/default.filter\fR \fI/etc/privoxy/user.filter\fR @@ -323,7 +282,7 @@ http://config.privoxy.org/, the web-based user interface. \fBPrivoxy\fR must be running for this to work. Shortcut: http://p.p/ -http://sourceforge.net/tracker/?group_id=11118&atid=460288, to submit ``misses'' and other +https://sourceforge.net/tracker/?group_id=11118&atid=460288, to submit ``misses'' and other configuration related suggestions to the developers. http://www.junkbusters.com/ht/en/cookies.html, @@ -335,10 +294,15 @@ the original Internet Junkbuster. http://privacy.net/, a useful site to check what information about you is leaked while you browse the web. -http://www.squid-cache.org/, a very popular +http://www.squid-cache.org/, a popular caching proxy, which is often used together with \fBPrivoxy\fR. -http://tor.eff.org/, +http://www.pps.jussieu.fr/~jch/software/polipo/, +\fBPolipo\fR is a caching proxy with advanced features +like pipelining, multiplexing and caching of partial instances. In many setups +it can be used as \fBSquid\fR replacement. + +https://www.torproject.org/, \fBTor\fR can help anonymize web browsing, web publishing, instant messaging, IRC, SSH, and other applications. @@ -347,18 +311,20 @@ the \fBPrivoxy\fR developer manual. .SH "DEVELOPMENT TEAM" .nf - Fabian Keil, developer + Fabian Keil, lead developer David Schmidt, developer Hal Burgiss - Ian Cummings - Félix Rauch + Mark Miller + Gerry Murphy + Lee Rian Roland Rosenfeld + J\[:o]rg Strohmayer .fi .SH "COPYRIGHT AND LICENSE" .SS "COPYRIGHT" .PP -Copyright (C) 2001 - 2006 by Privoxy Developers +Copyright (C) 2001-2009 by Privoxy Developers .PP Some source code is based on code Copyright (C) 1997 by Anonymous Coders and Junkbusters, Inc. and licensed under the \fIGNU General Public @@ -367,17 +333,14 @@ License\fR. .PP \fBPrivoxy\fR is free software; you can redistribute it and/or modify it under the terms of the -\fIGNU General Public -License\fR, version 2, as published by the Free Software Foundation. +\fIGNU General Public License\fR, version 2, +as published by the Free Software Foundation. .PP This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or -FITNESS FOR A PARTICULAR PURPOSE. See the -\fIGNU General Public License\fR for -more details, which is available from the Free Software Foundation, Inc, -51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA +FITNESS FOR A PARTICULAR PURPOSE. See the \fIGNU General Public License\fR for details. .PP -You should have received a copy of the \fIGNU General Public License\fR +You should have received a copy of the \fIGNU GPL\fR along with this program; if not, write to the Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor Boston, MA 02110-1301