Added back in man page

diff --git a/junkbuster-rh.spec b/junkbuster-rh.spec
index 90dd76c..dc80a2b 100644 (file)
--- a/junkbuster-rh.spec
+++ b/junkbuster-rh.spec
@@ -1,4 +1,4 @@
-# $Id: junkbuster-rh.spec,v 1.16 2001/09/24 20:56:23 hal9 Exp $
+# $Id: junkbuster-rh.spec,v 1.17 2001/10/10 18:59:28 hal9 Exp $

 #
 # Written by and Copyright (C) 2001 the SourceForge
 # IJBSWA team.  http://ijbswa.sourceforge.net
 #
 # Written by and Copyright (C) 2001 the SourceForge
 # IJBSWA team.  http://ijbswa.sourceforge.net


@@ -26,6 +26,9 @@
 # Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 #
 # $Log: junkbuster-rh.spec,v $
 # Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 #
 # $Log: junkbuster-rh.spec,v $

+# Revision 1.17  2001/10/10 18:59:28  hal9
+# Minor change for init script.
+#

 # Revision 1.16  2001/09/24 20:56:23  hal9
 # Minor changes.
 #
 # Revision 1.16  2001/09/24 20:56:23  hal9
 # Minor changes.
 #


@@ -80,7 +83,7 @@
 Summary: The Internet Junkbuster
 Vendor: http://ijbswa.sourceforge.net
 Name: junkbuster
 Summary: The Internet Junkbuster
 Vendor: http://ijbswa.sourceforge.net
 Name: junkbuster

-Version: 2.9.8
+Version: 2.9.9

 Release: 1
 Source0: http://www.waldherr.org/junkbuster/ijbswa.tar.gz
 Copyright: GPL
 Release: 1
 Source0: http://www.waldherr.org/junkbuster/ijbswa.tar.gz
 Copyright: GPL


@@ -119,11 +122,11 @@ mkdir -p ${RPM_BUILD_ROOT}%{_sbindir} \
          ${RPM_BUILD_ROOT}/var/log/junkbuster \
          ${RPM_BUILD_ROOT}%{ijbconf}/templates \
          ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d \
          ${RPM_BUILD_ROOT}/var/log/junkbuster \
          ${RPM_BUILD_ROOT}%{ijbconf}/templates \
          ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d \

-         ${RPM_BUILD_ROOT}%{_sysconfdir}/rc.d/init.d
+         ${RPM_BUILD_ROOT}%{_sysconfdir}/rc.d/init.d 

 
 install -s -m 744 junkbuster $RPM_BUILD_ROOT%{_sbindir}/junkbuster
 # Out temporarily
 
 install -s -m 744 junkbuster $RPM_BUILD_ROOT%{_sbindir}/junkbuster
 # Out temporarily

-#cp -f junkbuster.1 $RPM_BUILD_ROOT%{_mandir}/man8/junkbuster.8
+cp -f junkbuster.1 $RPM_BUILD_ROOT%{_mandir}/man8/junkbuster.8

 cp -f actionsfile $RPM_BUILD_ROOT%{ijbconf}/actionsfile
 cp -f re_filterfile $RPM_BUILD_ROOT%{ijbconf}/re_filterfile
 cp -f trust $RPM_BUILD_ROOT%{ijbconf}/trust
 cp -f actionsfile $RPM_BUILD_ROOT%{ijbconf}/actionsfile
 cp -f re_filterfile $RPM_BUILD_ROOT%{ijbconf}/re_filterfile
 cp -f trust $RPM_BUILD_ROOT%{ijbconf}/trust


@@ -182,8 +185,7 @@ rm -rf $RPM_BUILD_ROOT
 %attr(0744,junkbust,junkbust) %dir /var/log/junkbuster
 %config %{_sysconfdir}/logrotate.d/junkbuster
 %attr(0744,junkbust,junkbust)/usr/sbin/junkbuster
 %attr(0744,junkbust,junkbust) %dir /var/log/junkbuster
 %config %{_sysconfdir}/logrotate.d/junkbuster
 %attr(0744,junkbust,junkbust)/usr/sbin/junkbuster

-#temporarily out until it is updated.
-#%{_mandir}/man8/*
+%{_mandir}/man8/*

 %config %{_sysconfdir}/rc.d/init.d/junkbuster
 
 
 %config %{_sysconfdir}/rc.d/init.d/junkbuster
 
 

diff --git a/junkbuster.1 b/junkbuster.1
index d88294d..fe38636 100644 (file)
--- a/junkbuster.1
+++ b/junkbuster.1
@@ -1,4 +1,7 @@
-.TH JUNKBUSTER 1 "http://www.junkbusters.com/ht/en/ijb2.0man.html"\r
+.\" Revised man page 10/13/01\r
+.\" Hal Burgiss <hal@foobox.net for Junkbuster developers\r
+.TH JUNKBUSTER 1 "v2.9.9 (alpha) Date: 2001/10/14"\r
+\r

 .SH NAME\r
 \fBjunkbuster\fP\r
 - The\r
 .SH NAME\r
 \fBjunkbuster\fP\r
 - The\r


@@ -7,863 +10,254 @@ Proxy
 \s-2(TM)\s+2\r
 .SH SYNOPSIS\r
 \fBjunkbuster\fP\r
 \s-2(TM)\s+2\r
 .SH SYNOPSIS\r
 \fBjunkbuster\fP\r

-\fI\&configfile\fP\r
-(Version 2.0 onwards)\r
+\fI\&[config_file] &\fP\r

 .br\r
 \fBjunkbstr.exe\fP\r
 .br\r
 \fBjunkbstr.exe\fP\r

-\fI\&configfile\fP\r
+\fI\&[config_file]\fP\r

 (Windows)\r
 .br\r
 (Windows)\r
 .br\r

-\fBjunkbuster\fP\r
-[-a]\r
-[-y]\r
-[-s]\r
-[-c]\r
-[-v]\r
-.br\r
-[-u user_agent]\r
-[-r referer]\r
-[-t from]\r
-.br\r
-[-b blockfile]\r
-[-j jarfile]\r
-[-l logfile]\r
-.br\r
-[-w NAME=VALUE]\r
-[-x Header_text]\r
-.br\r
-[-h [bind_host_address][:bind_port]]\r
-.br\r
-[-f forward_host[:port]]\r
-[-d N]\r
-.br\r
-[-g gw_protocol[:[gw_host][:gw_port]]]\r
-.br\r
-(Version 1.4 and earlier)\r
+.P\r
+If the configuration file is not specified on the command line,\r
+\fBJunkbuster\fP will look for a file named \fIconfig\fP in the \r
+current directory (except on Amiga where it will look for \r
+\fIAmiTCP:db/junkbuster/config\fP and Win32 where it will try \r
+\fIjunkbstr.txt\fP).\r
+\r
+\r

 .SH DESCRIPTION\r
 .SH DESCRIPTION\r

-\fBjunkbuster\fP\r
-is an instrumentable proxy that filters the \r
+\fBJunkbuster\fP\r
+is an instrumentable HTTP proxy that filters the \r

 \s-2HTTP\s0\r
 \s-2HTTP\s0\r

-stream between\r
+data stream between\r

 web servers and browsers.\r
 web servers and browsers.\r

-Its main purpose is to enhance privacy.\r
-.P\r
-Versions before 2.0 used command-line options;\r
-Versions from 2.0 onward use a configuration file.\r
-The following descriptions of the options first give the older\r
-command-line usage, then the new configfile line.\r
+\fBJunkbuster\fP can be used to protect privacy, manage cookies, filter web\r
+page content, manage access restrictions, and to remove such annoying Internet\r
+junk as ads, banners, and pop-ups. Or whatever other annoyances strike your\r
+fancy.\r
+\r
+.SH INSTALLATION AND USE\r
+Browsers must be configured to use \r
+\fBJunkbuster\fP\r
+(the default is localhost, \r
+port 8000).\r
+To set the \r
+\s-2HTTP\s0\r
+proxy in Netscape and Mozilla,\r
+go through:\r
+\fB\&Edit\fP;\r
+\fB\&Preferences\fP;\r
+\fB\&Advanced\fP;\r
+\fB\&Proxies\fP;\r
+\fB\&Manual Proxy Configuration\fP;\r
+\fB\&View\fP.\r

 .P\r
 .P\r

-In Versions 2.0.1 upwards on Windows,\r
-a start-up message is printed and the configuration is read from the file\r
-\fC\&junkbstr.ini\fP\r
-if it exists and no argument was given.\r
+For Internet Explorer,\r
+go through:\r
+\fB\&Tools\fP;\r
+\fB\&Internet Properties\fP;\r
+\fB\&Connections\fP;\r
+\fB\&LAN Settings\fP.\r

 .P\r
 .P\r

-All files except the configfile\r
-are checked for changes before each page is fetched,\r
-so they may edited without restarting the proxy.\r
-.SS OPTIONS\r
-.TP\r
-.\" anchor: o_b blockfile\r
-\fI-b blockfile\fP (Old) blockfile \fIblockfile\fP (New)\r
-Block\" ijbfaq.html#blocking\r
-requests to\r
-\s-2URL\s0s\r
-matching any pattern given in the lines of the\r
-\fI\&blockfile\fP.\r
+Set the HTTP proxy location for localhost, port 8000.\r

 The\r
 The\r

-\fBjunkbuster\fP\r
-instead returns status 202, indicating that the request has been accepted\r
-(though not completed),\r
-and a\r
-message identifying itself\" ijbfaq.html#show\r
-(though the browser may\r
-display only a broken image icon).\r
-(Versions before 2.0 returned an error 403 (Forbidden).)\r
-The syntax of a pattern is\r
-\fB\&[domain][:port][/path]\fP\r
-(the\r
-\fB\&http://\fP\r
-or\r
-\fB\&https://\fP\r
-protocol part is omitted).\r
-To decide if a pattern matches a target, the domains are compared first,\r
-then the paths. \r
-.P\r
-To compare the domains,\r
-the pattern domain and the target\r
-domain specified in the\r
-\s-2URL\s0\r
-are each broken into their components.\r
-(Components are separated by the\r
-\fC\&.\fP\r
-(period) character.)\r
-Next each of the target components\r
-is compared with the corresponding pattern component: last with last,\r
-next-to-last with next-to-last, and so on.\r
-(This is called\r
-\fIright-anchored\fP\r
-matching.)\r
-If all of the pattern components find their match in the target,\r
-then the domains are considered a match.\r
-Case is irrelevant when comparing domain components.\r
-.P\r
-A successfully\r
-matching pattern can be an anchored substring of a target, but\r
-not vice versa.\r
-Thus if a pattern doesn't specify a domain,\r
-it matches all domains.\r
-.\" anchor: wildcard\r
-Furthermore, when comparing two components,\r
-the components must either match in their entirety or up to a wildcard\r
-\fC\&* \fP\r
-(star character) in the pattern.  The wildcard feature\r
-implements only a "prefix" match capability ("abc*" vs. "abcdefg"),\r
-not suffix matching ("*efg" vs. "abcdefg") or\r
-infix matching ("abc*efg" vs. "abcdefg").\r
-The feature is restricted to the domain component;\r
-it is unrelated to the optional\r
-regular expression\r
-feature in the path\r
-(described below).\" ijbman.html#regex\r
-.P\r
-If a numeric port\r
-is specified in the pattern domain, then the target port must\r
-match as well.  The default port in a target is port 80.\r
-.P\r
-If the domain and port match,\r
-then the target\r
-\s-2URL\s0\r
-path is checked for\r
-a match against the path in the pattern.\r
-Paths are compared with a simple case-sensitive\r
-left-anchored substring comparison.\r
-Once again, the pattern can be an\r
-anchored substring of the target, but not vice versa.\r
-A path of\r
-\fC\&/\fP\r
-(slash) would match all paths.  Wildcards are not considered in\r
-path comparisons.\r
+Secure (SSL) Proxy\" ijbfaq.html#security\r
+should also be set to the same values,\r
+otherwise\r
+\fB\&https:\fP\r
+\s-2URL\s0s\r
+won't be proxied.\r
+\r
+.SH CONFIGURATION\r
+All \fBJunkbuster\fP configuration is done via the various configuarion \r
+files. The default configuration files are: \fIconfig\fP, \r
+\fIactionsfile\fP, and \fIre_filterfile\fP. These are well commented. \r
+On Unix and Unix-like systems, these are located in \fI/etc/junkbuster/\fP \r
+by default. On Windows and OS/2, these files are in the same directory \r
+as the \fBJunkbuster\fP executable. \r

 .P\r
 .P\r

-For example, the target\r
-\s-2URL\s0\r
-.br\r
-.ti +0.25i\r
-\fB\&the.yellow-brick-road.com/TinMan/has_no_brain\fP\r
-.br\r
-would be matched (and blocked) by the following patterns\r
+The name and number of configuration files has changed from previous versions,\r
+and is subject to change as development progresses. In fact, the configuration\r
+itself is changed and much more sophisticated. See the user-manual for a brief\r
+explanation of all configuration options.\r
+\r
+\r
+.SH "SAMPLE CONFIGURATION"\r
+.PP\r
+A brief example of what an \fIactionsfile\fP configuration might look like:\r
+.PP\r
+.nf\r
+\r
+# Define a few useful custom aliases for later use\r
+{{alias}}\r
++no-cookies = +no-cookies-set +no-cookies-read\r
+-no-cookies = -no-cookies-set -no-cookies-read\r
++imageblock = +block +image\r
+\r
+## Default Policies (actions) ############################\r
+{ \\\r
+ -block \\\r
+ -downgrade \\\r
+ +fast-redirects \\\r
+ +filter \\\r
+ +no-compression \\\r
+ +hide-forwarded \\\r
+ +hide-from{block} \\\r
+ +hide-referer{forge} \\\r
+ -hide-user-agent \\\r
+ -image \\\r
+ +image-blocker{blank} \\\r
+ +no-cookies-read \\\r
+ +no-cookies-set \\\r
+ +no-popups \\\r
+ +vanilla-wafer \\\r
+}\r
+/\r
+\r
+# Now set exceptions to the above defined policies #######\r
+\r
+# Sites that DO need cookies\r
+{-no-cookies}\r
+ .redhat.com\r
+ .sun.com\r
+ .yahoo.com\r
+ .msdn.microsoft.com\r
+\r
+# This site requires cookies AND 'fast-redirects' on\r
+{-no-cookies -fast-redirects}\r
+ .nytimes.com\r
+\r
+# Add custom headers, and turn off filtering of page source\r
+{+add-header{X-Privacy: Yes please} #-add-header{*} \\\r
+ +add-header{X-User-Tracking: No thanks!} -filter}\r
+ privacy.net\r
+\r
+{+imageblock}\r
+ .adforce.imgis.com\r
+ .ad.preferences.com/image.*\r
+ .ads.web.aol.com\r
+ .ad-adex3.flycast.com\r
+ .ad.doubleclick.net\r
+ .ln.doubleclick.net\r
+ .ad.de.doubleclick.net\r
+ /.*/count\\.cgi\\?.*df=\r
+ 194.221.183.22[1-7]\r
+ a196.g.akamai.net/7/196/2670/000[12]/images.gmx.net/i4/images/.*/\r
+\r
+# Block any URLs that match these patterns\r
+{+block}\r
+ /.*/(.*[-_.])?ads?[0-9]?(/|[-_.].*|\\.(gif|jpe?g))\r
+ /.*/(.*[-_.])?count(er)?(\\.cgi|\\.dll|\\.exe|[?/])\r
+ /.*/(plain|live|rotate)[-_.]?ads?/\r
+ /.*/(sponsor)s?[0-9]?/\r
+ /.*/ad(server|stream|juggler)\\.(cgi|pl|dll|exe)\r
+ /.*/adbanners/\r
+ /.*/adv((er)?ts?|ertis(ing|ements?))?/\r
+ /.*/banners?/\r
+ /.*/popupads/\r
+ /.*/sponsor.*\\.gif\r
+ /.*/advert[0-9]+\\.jpg\r
+ /ad_images/\r
+ /.*/ads/\r
+ /images/.*/.*_anim\\.gif\r
+ /rotations/ \r
+ /.*(ms)?backoff(ice)?.*\\.(gif|jpe?g)\r
+ 195.63.104.*/(inbox|log|meld|folderlu|folderru|log(in|out)[lmr]u|)\r
+ .images.nytimes.com\r
+ .images.yahoo.com/adv/\r
+ /.*cnnstore\\.gif\r
+\r
+.fi\r
+.sp\r
+.PP\r
+See the comments in the configuration files themselves, or the user-manual \r
+for explanations of the above syntax.\r
+\r
+.SH "FILES"\r
+\fI/usr/sbin/junkbuster\fP\r

 .br\r
 .br\r

-.ti +0.25i\r
-\fB\&yellow-brick-road.com\fP\r
+\fI/etc/junkbuster/config\fP\r

 .br\r
 .br\r

-and\r
+\fI/etc/junkbuster/actionsfile\fP\r

 .br\r
 .br\r

-.ti +0.25i\r
-\fB\&Yellow*.COM\fP\r
+\fI/etc/junkbuster/re_filterfile\fP\r

 .br\r
 .br\r

-and\r
+\fI/var/log/junkbuster/logfile\fP\r
+\r
+.P\r
+Various other files should be included, but may vary depending on platform.\r
+More documentation should be included in the local documentation directory,\r
+though is not complete at this time.\r
+\r
+.SH NOTES\r
+This is a development version of \fBJunkbuster\fP. All features are not \r
+complete.\r
+\r
+.SH BUGS\r
+Yes. HTTP/1.1 support is only partially implemented. See the user-manual for \r
+how and where to report bugs.\r
+\r
+.SH SEE ALSO\r
+http://ijbswa.sourceforge.net/\r

 .br\r
 .br\r

-.ti +0.25i\r
-\fB\&/TinM\fP\r
+http://sourceforge.net/projects/ijbswa\r

 .br\r
 .br\r

-but not\r
+http://www.waldherr.org/junkbuster/\" waldherr.org#\r

 .br\r
 .br\r

-.ti +0.25i\r
-\fB\&follow.the.yellow-brick-road.com\fP\r
+http://www.junkbusters.com/ht/en/cookies.html\" cookies.html#\r

 .br\r
 .br\r

-or\r
+http://ijbswa.sourceforge.net/config/\r

 .br\r
 .br\r

-.ti +0.25i\r
-\fB\&/tinman\fP\r
+http://privacy.net/analyze/\r

 .br\r
 .br\r

-.P\r
-Comments in a blockfile start with a\r
-\fB\&#\fP\r
-(hash) character and end at a new line.\r
-Blank lines are also ignored.\r
-.P\r
-Lines beginning with a\r
-\fC\&~\fP\r
-(tilde) character are taken to be\r
-exceptions:\" ijbfaq.html#exceptions\r
-a\r
-\s-2URL\s0\r
-blocked by previous patterns that matches the rest of\r
-the line is let through. (The last match wins.)\r
-.P\r
-Patterns\r
-may contain\r
-\s-2POSIX\s0\r
-regular expressions\" ijbfaq.html#regex\r
-provided the\r
-\fBjunkbuster\fP\r
-was compiled with this option\r
-(the default in Version 2.0 on).\r
-The idiom\r
-\fC\&/*.*/ad\fP\r
-can then be used\r
-to match any\r
-\s-2URL\s0\r
-containing\r
-\fC\&/ad\fP\r
-(such as\r
-\fC\&http://nomatterwhere.com/images/advert/g3487.gif\fP\r
-for example).\r
-These expressions\r
-don't work\" ijbman.html#substring\r
-in the domain part.\r
-.P\r
-In version 1.3 and later\r
-the blockfile and cookiefile are checked for changes before each request.\r
-.TP\r
-tinygif \fIN\fP\r
-Set appearance of blocked GIFs. You can select one of the following\r
-values:\r
+http://www.squid-cache.org/\r
+\r
+.SH DEVELOPMENT TEAM\r

 .br\r
 .br\r

+ Stefan Waldherr \r

 .br\r
 .br\r

-\h'-\w"0 = "u'0 = Show a ``broken icon'' in the browser\r
+ Andreas Oesterhelt \r

 .br\r
 .br\r

-\h'-\w"1 = "u'1 = Show a one pixel transparent GIF\r
+ Jon Foster \r

 .br\r
 .br\r

-\h'-\w"2 = "u'2 = Show a GIF with the word ``JUNKBUSTER''\r
-.TP\r
-popupfile \fI\&popup\fP\r
-Sets the name of the popupfile. If uncommented, the popupfile\r
-controls on which sites Javascript popup windows are disabled.\r
-.TP\r
-.\" anchor: o_w wafer\r
-\fI-w NAME=VALUE\fP (Old) wafer \fINAME=VALUE\fP (New)\r
-Specifies a pair to be sent as a cookie with every request\r
-to the server.\" ijbfaq.html#wafers\r
-(Such boring cookies are called\r
-\fI\&wafers\fP.)\r
-This option may be called more than once to generate multiple wafers.\r
-The original\r
-Netscape specification\r
-prohibited\r
-semi-colons, commas and white space;\r
-these characters will be\r
-\s-2URL\s0-encoded\r
-if used in wafers.\r
-The Path and Domain attributes are not currently supported.\r
-.TP\r
-.\" anchor: o_c cookiefile\r
-\fI-c cookiefile\fP (Old) cookiefile \fIcookiefile\fP (New)\r
-Enforce the cookie management policy specified in the\r
-\fI\&cookiefile.\fP\r
-.\" anchor: java\r
-If this option is not used all cookies are silently crunched,\r
-so that users who never want cookies aren't bothered by browsers\r
-asking whether each cookie should be accepted.\r
-However, cookies can\r
-still get through\" ijbfaq.html#breakthrough\r
-via\r
-JavaScript\" links.html#javascript\r
-and\r
-\s-2SSL\s0,\r
-so alerts should be left on.\r
-.P\r
-In Version 1.2 and later\r
-this option must be followed by a\r
-filename\" ijbfaq.html#crumble\r
-containing instructions on which sites are allowed to\r
-receive and set cookies.\r
-.\" anchor: drop\r
-By default cookies are dropped in both the browser's request\r
-and the server's response, unless the\r
-\s-2URL\s0\r
-requested matches an entry in the\r
-\fI\&cookiefile\fP.\r
-The matching algorithm is the same as for the blockfile.\r
-A leading\r
-\fC\&>\fP\r
-character allows\r
-server-bound\" ijbfaq.html#directional\r
-cookies only;\r
-a\r
-\fC\&<\fP\r
-allows only browser-bound cookies;\r
-a\r
-\fC\&~\fP\r
-character stops cookies in\r
-both directions.\" ijbfaq.html#crumble\r
-Thus a cookiefile containing a single line with the two characters\r
-\fC\&>*\fP\r
-will pass on all cookies to servers but not give any new ones to the browser.\r
-.TP\r
-.\" anchor: o_j jarfile\r
-\fI-j jarfile\fP (Old) jarfile \fIjarfile\fP (New)\r
-All Set-cookie attempts by the server are\r
-logged\" ijbfaq.html#jar\r
-to\r
-\fI\&jarfile\fP.\r
-If no wafer is specified,\r
-one containing a\r
-canned notice\" ijbfaq.html#notice\r
-(the \r
-\fI\&vanilla wafer\fP)\r
-is added as an alert to the server\r
-unless the\r
-suppress-vanilla-wafer\" ijbman.html#suppress-vanilla-wafer\r
-option is invoked.\r
-.TP\r
-.\" anchor: o_v suppress-vanilla-wafer\r
-\fI-v\fP (Old) suppress-vanilla-wafer \fI\fP (New)\r
-Suppress the vanilla wafer.\r
-.TP\r
-.\" anchor: o_t from\r
-\fI-t from\fP (Old) from \fIfrom\fP (New)\r
-If the browser\r
-discloses an email address\" ijbfaq.html#from\r
-in the\r
-\fB\&FROM\fP\r
-header (most don't),\r
-replace it with\r
-\fI\&from.\fP\r
-If\r
-\fI\&from\fP\r
-is set to\r
-\fB\&.\fP\r
-(the period character)\r
-the\r
-\fB\&FROM\fP\r
-is passed to the server unchanged.\r
-The default is to delete the\r
-\fB\&FROM\fP\r
-header.\r
-.TP\r
-.\" anchor: o_r referer\r
-\fI-r referer\fP (Old) referer \fIreferer\fP (New)\r
-Whenever the browser discloses the\r
-\s-2URL\s0\r
-that\r
-led to\" ijbfaq.html#referer\r
-the current request,\r
-replace it with\r
-\fI\&referer.\fP\r
-If\r
-\fI\&referer\fP\r
-is set to\r
-\fB\&.\fP\r
-(period)\r
-the \r
-\s-2URL\s0\r
-is passed to the server unchanged.\r
-In \r
-Version 1.4\r
-and later, if referer is set to \r
-\fB\&@\fP\r
-(at) the\r
-\s-2URL\s0\r
-is sent in cases where the cookiefile\r
-specifies that a cookie would be sent.\r
-(No way to send bogus referers selectively is provided.)\r
-The default is to delete Referer.\r
-.P\r
-Version 2.0 also accepts the spelling\r
-\fC\&referrer\fP,\r
-which most dictionaries consider correct.\r
-.TP\r
-.\" anchor: o_u user-agent\r
-\fI-u user-agent\fP (Old) user-agent \fIuser-agent\fP (New)\r
-Information disclosed by the browser\r
-about itself\" ijbfaq.html#agent\r
-is replaced with the value\r
-\fI\&user-agent.\fP\r
-If\r
-\fI\&user-agent\fP\r
-is set to\r
-\fB\&.\fP\r
-(period)\r
-the\r
-\fB\&User-Agent\fP\r
-header is passed to the server unchanged,\r
-along with any\r
-\fB\&UA\fP\r
-headers produced by\r
-\s-2MS-IE\s0\r
-(which would otherwise be deleted).\r
-In \r
-Version 1.4\r
-and later, if\r
-\fI\&user-agent\fP\r
-is set to\r
-\fB\&@\fP\r
-(at) these headers are sent unchanged in cases where the cookiefile\r
-specifies that a cookie would be sent,\r
-otherwise only default\r
-\fB\&User-Agent\fP\r
-header is sent.\r
-That default\r
-is Mozilla/3.0 (Netscape)\r
-with an unremarkable\r
-Macintosh\" ijbfaq.html#infer\r
-configuration.\r
-If used with a browser less advanced than Mozilla/3.0 or IE-3, the default\r
-may encourage pages containing extensions that confuse the browser.\r
-.TP\r
-.\" anchor: o_h listen-address\r
-\fI-h [host][:port]\fP (Old) listen-address \fI[host][:port]\fP (New)\r
-If\r
-\fI\&host\fP\r
-is specified,\r
-bind the\r
-\fBjunkbuster\fP\r
-to that\r
-\s-2IP\s0\r
-address.\r
-If a\r
-\fI\&port\fP\r
-is specified, use it.\r
-The default\r
-port\r
-is 8000;\r
-the default host is\r
-\fC\&localhost\fP.\r
-Before Version 2.0.2,\r
-the default was to bind to all \r
-\s-2IP\s0\r
-addresses\r
-(\fB\&INADDR_ANY\fP);\r
-but this has been restricted to\r
-\fB\&localhost\fP\r
-to avoid unintended security breaches.\r
-(To open the proxy to all, use the line\r
+ Markus Breitenbach\r

 .br\r
 .br\r

-.ti +0.25i\r
-\fB\&listen-address :8000\fP\r
+ Thomas Steudten\r

 .br\r
 .br\r

-in the configuration file.)\r
-.TP\r
-.\" anchor: o_f forwardfile\r
-\fI-f forward_host[:port]\fP (Old) forwardfile \fIforwardfile\fP (New)\r
-Version 1.X required all\r
-\s-2HTTP\s0\r
-requests from the client to be forwarded to the same destination.\r
-Version 2.0 takes its routing specification from a\r
-\fI\&forwardfile\fP,\r
-allowing selection of the proxy (a.k.a. forwarding host) and gateway\r
-according to the\r
-\s-2URL\s0.\r
-Here is a typical line.\r
+ David Schmidt\r

 .br\r
 .br\r

-.ft CW\r
-.S 8\r
-.nf\r
-.sp\r
-*         lpwa.com:8000      .      .\r
-.S\r
-.ft\r
-.fi\r
-.sp\r
-\r
-.P\r
-Each line contains four fields:\r
-\fB\&target\fP,\r
-\fB\&forward_to\fP,\r
-\fB\&via_gateway_type\fP\r
-and\r
-\fB\&gateway\fP.\r
-As usual, the\r
-last\" ijbman.html#compare\r
-\fB\&target\fP\r
-domain that matches the requested\r
-\s-2URL\s0\r
-wins,\r
-and the\r
-\fC\&*\fP\r
-character alone matches any domain.\r
-The target domain need not be a fully qualified\r
-hostname; it can be a general domain such as\r
-\fC\&com\fP\r
-or\r
-\fC\&co.uk\fP\r
-or even just a port number.\r
-.\" anchor: nose\r
-For example, because\r
-<a href="http://lpwa.com">LPWA</a>\r
-does not handle\r
-SSL,\" ijbfaq.html#encrypt\r
-the line above will typically be followed by a line such as\r
-.br\r
-.ft CW\r
-.S 8\r
-.nf\r
-.sp\r
-:443  .      .      .\r
-.S\r
-.ft\r
-.fi\r
-.sp\r
-\r
-to allow SSL transactions to proceed directly.\r
-The cautious would also\r
-add an entry in their blockfile to stop transactions\r
-to port 443 for all but specified trusted sites.\r
-.P\r
-If the winning\r
-\fB\&forward_to\fP\r
-field is\r
-\fC\&.\fP\r
-(the dot character) the proxy connects \r
-directly to the server given in the\r
-\s-2URL\s0,\r
-otherwise it forwards to the host and port number specified.\r
-The default port is 8000.\r
-The\r
-\fC\&via_gateway_type\fP\r
-and\r
-\fC\&gateway\fP\r
-fields also use a dot to indicate no gateway protocol.\r
-The gateway protocols are explained\r
-below.\" ijbman.html#o_g\r
-.P\r
-The example line above in a forwardfile alone\r
-would send everything through port 8000 at\r
-\fC\&lpwa.com\fP\r
-with no gateway protocol,\r
-and is equivalent to the old\r
-\fC\&-f lpwa.com:8000\fP\r
-with no\r
-\fC\&-g\fP\r
-option.\r
-For more information see the example file provided with the distribution.\r
-.P\r
-Configure with care: no loop detection is performed.\r
-When setting up chains of proxies that might loop back, try adding\r
-Squid.\" ijbman.html#squid\r
-.TP\r
-.\" anchor: o_g \r
-\fI-g gw_protocol[:[gw_host][:gw_port]]\fP (Old) \r
-Use\r
-\fI\&gw_protocol\fP\r
-as the gateway protocol.\r
-This option was introduced in Version 1.4,\r
-but was folded into the\r
-forwardfile\" ijbman.html#forwardfile\r
-option in Version 2.0.\r
-The default is to use no gateway protocol;\r
-this may be explicitly specified as\r
-\fB\&direct\fP\r
-on the command line\r
-or the dot character in the forwardfile.\r
-The\r
-\fC\&SOCKS4\fP\r
-protocol may be specified as\r
-\fB\&socks\fP\r
-or\r
-\fB\&socks4\fP.\r
-The\r
-\fC\&SOCKS4A\fP\r
-protocol is specified as\r
-\fB\&socks4a\fP.\r
-The\r
-\fC\&SOCKS5\fP\r
-protocol is not currently supported.\r
-The default\r
-\s-2SOCKS\s0\r
-\fI\&gw_port\fP\r
-is 1080.\r
-.P\r
-The user's browser should\r
-\fInot\fP\r
-be\r
-configured\" ijbfaq.html#socks\r
-to use\r
-\fC\&SOCKS\fP;\r
-the proxy conducts the negotiations, not the browser.\r
-.P\r
-The user identification capabilities of\r
-\fC\&SOCKS4\fP\r
-are deliberately not used;\r
-the user is always identified to the\r
-\fC\&SOCKS\fP\r
-server as\r
-\fC\&userid=anonymous\fP.\r
-If the server's policy is to reject requests from\r
-\fC\&anonymous\fP,\r
-the proxy will not work.\r
-Use a\r
-debug\" ijbman.html#o_d\r
-value of 3\r
-to see the status returned by the server.\r
-.TP\r
-.\" anchor: o_d debug\r
-\fI-d N\fP (Old) debug \fIN\fP (New)\r
-Set debug mode.\r
-The most common value is 1,\r
-to\r
-pinpoint\" ijbfaq.html#pinpoint\r
-offensive\r
-\s-2URL\s0s,\r
-so they can be added to the blockfile.\r
-The value of\r
-\fB\&N\fP\r
-is a bitwise\r
-logical-\s-2OR\s0\r
-of the following values:\r
+ Haroon Rafique\r

 .br\r
 .br\r

+ Jorg Strohmayer\r

 .br\r
 .br\r

-\h'-\w"1 = "u'1 = URLs (show each URL requested by the browser);\r
+ Shamim Mohamed\r

 .br\r
 .br\r

-\h'-\w"2 = "u'2 = Connections (show each connection to or from the proxy);\r
+ Sarantis Paskalis\r

 .br\r
 .br\r

-\h'-\w"4 = "u'4 = I/O (log I/O errors);\r
+ Gabriel L. Somlo\r

 .br\r
 .br\r

-\h'-\w"8 = "u'8 = Headers (as each header is scanned, show the header and what is done to it);\r
+ John Venvertloh\r

 .br\r
 .br\r

-\h'-\w"16 = "u'16 = Log everything (including debugging traces and the contents of the pages).\r
-.\" anchor: or\r
-Multiple\r
-\fB\&debug\fP\r
-lines are permitted; they are logical OR-ed together.\r
-.P\r
-Because most browsers send several requests in parallel\r
-the debugging output may appear intermingled, so the\r
-single-threaded\" ijbman.html#single-threaded\r
-option is recommended when using\r
-debug\" ijbman.html#debug\r
-with\r
-\fB\&N\fP\r
-greater than 1.\r
-.TP\r
-.\" anchor: o_y add-forwarded-header\r
-\fI-y\fP (Old) add-forwarded-header \fI\fP (New)\r
-Add \r
-\fB\&X-Forwarded-For\fP\r
-headers to the server-bound \r
-\s-2HTTP\s0\r
-stream\r
-indicating the client \r
-\s-2IP\s0\r
-address\r
-to the server,\" ijbfaq.html#detect\r
-in the new style of\r
-Squid 1.1.4.\" ijbman.html#squid\r
-If you want the traditional\r
-\fC\&HTTP_FORWARDED\fP\r
-response header, add it manually with the\r
--x\" ijbman.html#o_x\r
-option.\r
-.TP\r
-.\" anchor: o_x add-header\r
-\fI-x HeaderText\fP (Old) add-header \fIHeaderText\fP (New)\r
-Add the\r
-\fI\&HeaderText\fP\r
-verbatim to requests to the server.\r
-Typical uses include\r
-adding old-style forwarding notices such as\r
-\fB\&Forwarded: by http://pro-privacy-isp.net\fP\r
-and reinstating the\r
-\fB\&Proxy-Connection: Keep-Alive\fP\r
-header\r
-(which the\r
-\fBjunkbuster\fP\r
-deletes so as\r
-not\" ijbfaq.html#detect\r
-to reveal its existence).\r
-No checking is done for correctness or plausibility,\r
-so it can be used to throw any old trash into the server-bound \r
-\s-2HTTP\s0\r
-stream.\r
-Please don't litter.\r
-.TP\r
-.\" anchor: o_s single-threaded\r
-\fI-s\fP (Old) single-threaded \fI\fP (New)\r
-Doesn't\r
-\fB\&fork()\fP\r
-a separate process\r
-(or create a separate thread)\r
-to handle each connection.\r
-Useful when debugging to keep the process single threaded.\r
-.TP\r
-.\" anchor: o_l logfile\r
-\fI-l logfile\fP (Old) logfile \fIlogfile\fP (New)\r
-Write all debugging data into\r
-\fI\&logfile.\fP\r
-The default\r
-\fI\&logfile\fP\r
-is the standard output.\r
-.TP\r
-.\" anchor: o_acl aclfile\r
-aclfile \fIaclfile\fP (New)\r
-Unless this option is used, the proxy talks to anyone who can connect to it,\r
-and everyone who can has equal permissions on where they can go.\r
-An access file allows restrictions to be placed on these two policies,\r
-by distinguishing some\r
-\fIsource\fP\r
-\s-2IP\s0\r
-addresses and/or\r
-some\r
-\fIdestination\fP\r
-addresses.\r
-(If a\r
-forwarder or a gateway\" ijbman.html#forwardfile\r
-is being used, its address is considered the destination address,\r
-not the ultimate\r
-\s-2IP\s0\r
-address of the\r
-\s-2URL\s0\r
-requested.)\r
+ Hal Burgiss\r
+\r
+\r
+.SH COPYRIGHT AND GPL\r
+Orginally written by, and copyrighted by, the Anonymous Coders and Junkbusters\r
+Corporation. \r

 .P\r
 .P\r

-Each line of the access file begins with\r
-either the word\r
-\fB\&permit\fP\r
-or\r
-\fB\&deny\fP\r
-followed by source and (optionally) destination addresses \r
-to be matched against those of the\r
-\s-2HTTP\s0\r
-request.\r
-The last matching line specifies the result: if it was a\r
-\fB\&deny\fP\r
-line or if no line matched,\r
-the request will be refused.\r
+This program is free software; you can redistribute it and/or modify\r
+it under the terms of the GNU General Public License as published by\r
+the Free Software Foundation; either version 2 of the License, or\r
+(at your option) any later version.\r

 .P\r
 .P\r

-A source or destination\r
-can be specified as a single numeric\r
-\s-2IP\s0\r
-address,\r
-or with a hostname, provided that the host's name\r
-can be resolved to a numeric address: this cannot be used to block all\r
-\fB\&.mil \fP\r
-domains for example,\r
-because there is no single address associated with that domain name.\r
-Either form may be followed by a slash and an integer\r
-\fB\&N\fP,\r
-specifying a subnet mask of\r
-\fB\&N\fP\r
-bits.\r
-For example,\r
-\fB\&permit 207.153.200.72/24\fP\r
-matches the entire Class-C subnet from\r
-207.153.200.0\r
-through 207.153.200.255.\r
-(A netmask of 255.255.255.0 corresponds to 24 bits of\r
-ones in the netmask, as with\r
-\fC\&*_MASKLEN=24\fP.)\r
-A value of 16 would be used for a Class-B subnet.\r
-A value of zero for\r
-\fB\&N\fP\r
-in the subnet mask length will cause any address to match;\r
-this can be used to express a default rule.\r
-For more information see the example file provided with the distribution.\r
+This program is distributed in the hope that it will be useful,\r
+but WITHOUT ANY WARRANTY; without even the implied warranty of\r
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\r
+GNU General Public License for more details.\r

 .P\r
 .P\r

-If you like these access controls\r
-you should probably have\r
-firewall;\" ijbfaq.html#firewall\r
-they are not intended to replace one.\r
-.TP\r
-.\" anchor: o_tf trustfile\r
-trustfile \fItrustfile\fP (New)\r
-This feature is experimental, has not been fully documented and is\r
-very subject to change.\r
-The goal is for parents to be able to choose a page or site whose\r
-links they regard suitable for their\r
-young children\" ijbfaq.html#children\r
-and for the proxy to allow access only to sites mentioned there.\r
-To do this the proxy examines the\r
-referer\" ijbman.html#o_r\r
-variable on each page request to check they resulted from\r
-a click on the ``trusted referer'' site: if so the referred site\r
-is added to a list of trusted sites, so that the child can\r
-then move around that site.\r
-There are several uncertainties in this scheme that experience may be\r
-able to iron out; check back in the months ahead.\r
-.TP\r
-.\" anchor: o_ti trust_info_url\r
-trust_info_url \fItrust_info_url\fP (New)\r
-When access is denied due to lack of a trusted referer, this\r
-\s-2URL\s0\r
-is displayed with a message pointing the user to it for further information.\r
-.TP\r
-.\" anchor: o_hc hide-console\r
-hide-console \fI\fP (New)\r
-In the Windows version only, instructs the program\r
-to disconnect from and hide the command console after starting.\r
-.TP\r
-.\" anchor: o_a \r
-\fI-a\fP (Old) \r
-(Obsolete) Accept the server's\r
-\fB\&Set-cookie\fP\r
-headers, passing them through to the browser.\r
-.\" anchor: obsolete\r
-This option was removed in Version 1.2\r
-and replaced by an improvement to the\r
--c\" ijbman.html#o_c\r
-option.\r
-.LE\r
-.SH INSTALLATION AND USE\r
-Browsers must be told where to find the\r
-\fBjunkbuster\fP\r
-(e.g.\r
-\fB\&localhost\fP\r
-port 8000).\r
-To set the \r
-\s-2HTTP\s0\r
-proxy in Netscape 3.0,\r
-go through:\r
-\fB\&Options\fP;\r
-\fB\&Network Preferences\fP;\r
-\fB\&Proxies\fP;\r
-\fB\&Manual Proxy Configuration\fP;\r
-\fB\&View\fP.\r
-See the\r
-\s-2FAQ\s0\r
-for other browsers.\r
-The\r
-Security Proxy\" ijbfaq.html#security\r
-should also be set to the same values,\r
-otherwise\r
-\fB\&shttp:\fP\r
-\s-2URL\s0s\r
-won't work.\r
+You should have received a copy of the GNU General Public License\r
+along with this program; if not, write to the Free Software\r
+Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA\r

 .P\r
 .P\r

-Note the limitations\r
-explained in the\r
-\s-2FAQ\s0.\r
-.SH CHECKING OPTIONS\r
-To allow users to\r
-check\" ijbfaq.html#show\r
-that a\r
-\fBjunkbuster\fP\r
-is running and how it is configured,\r
-it intercepts requests for any\r
-\s-2URL\s0\r
-ending in\r
-\fB\&/show-proxy-args\fP\r
-and blocks it,\r
-returning instead returns information on its\r
-version number and\r
-current configuration\r
-including the contents of its blockfile.\r
-To get an explicit warning that no\r
-\fBjunkbuster\fP\r
-intervened if the proxy was not configured,\r
-it's best to point it to a\r
-\s-2URL\s0\r
-that does this, such as\r
-http://internet.junkbuster.com/cgi-bin/show-proxy-args\r
-on Junkbusters's website.\r
-.SH SEE ALSO\r
-http://www.waldherr.org/junkbuster/\" waldherr.org#\r
-.br\r
-http://www.junkbusters.com/ht/en/ijbfaq.html\" ijbfaq.html#\r
-.br\r
-http://www.junkbusters.com/ht/en/cookies.html\" cookies.html#\r
-.br\r
-http://internet.junkbuster.com/cgi-bin/show-proxy-args\r
-.br\r
-http://www.cis.ohio-state.edu/htbin/rfc/rfc2109.html\r
-.br\r
-http://squid.nlanr.net/Squid/\r
-.br\r
-http://www-math.uni-paderborn.de/~axel/\r
-.SH COPYRIGHT AND GPL\r
-Written and copyright by the Anonymous Coders and Junkbusters Corporation\r
-and made available under the\r
-GNU General Public License (GPL).\" gpl.html#\r
-This software comes with\r
-NO WARRANTY.\" gpl.html#nowarr\r

 Internet Junkbuster\r
 Proxy\r
 is a\r
 Internet Junkbuster\r
 Proxy\r
 is a\r