Privoxy

Please note that this document is constantly evolving. This copy represents - the state at the release of version 3.0.7. + the state at the release of version 3.0.8. You can find the latest version of the this manual at

  debchange -v 3.0.7-beta-1 "New upstream version"

debchange -v 3.0.8-stable-1 "New upstream version"

Privoxy is based on Internet Junkbuster (tm).

Please note that this document is a work in progress. This copy represents - the state at the release of version 3.0.7. + the state at the release of version 3.0.8. You can find the latest version of the document at

1.9. Can Privoxy make mistakes? This does not sound very scientific.

1.10. Will I have to configure Privoxy before I can use it?

3.1. What exactly is an "actions"
3.3. How are actions files configured? What is the easiest way to do this?
3.4. There are several different "actions"
3.11. What is the default.filter
3.13. Instead of ads, now I get a checkerboard pattern. I don't want to see anything.
3.14. Why would anybody want to see a checkerboard pattern?
3.15. I see some images being replaced with text instead of the checkerboard image. Why and how do I get rid of this?

Privoxy is developed on:
+Man page of PRIVOXY + + PRIVOXY +Section: (1) Updated: 19 January 2008 Index + + + + NAME + +privoxy - Privacy Enhancing Proxy + + SYNOPSIS + + +privoxy [--help ] [--version ] [--no-daemon ] [--pidfile pidfile ] [--user user[.group] ] [--chroot ] [--pre-chroot-nslookup hostname ] [configfile ] + + + OPTIONS + + + +Privoxy may be invoked with the following command line +options: + + --help +Print brief usage info and exit. + --version +Print version info and exit. + --no-daemon +Don't become a daemon, i.e. don't fork and become process group +leader, don't detach from controlling tty, and do all logging there. + --pidfile pidfile +On startup, write the process ID to pidfile. +Delete the pidfile on exit. +Failure to create or delete the pidfile +is non-fatal. If no --pidfile option is given, no PID file will be used. + --user user[.group] +After (optionally) writing the PID file, assume the user ID of +user and the GID of +group, or, if the optional +group was not given, the default group of +user. Exit if the privileges are not +sufficient to do so. + --chroot +Before changing to the user ID given in the --user option, chroot to +that user's home directory, i.e. make the kernel pretend to the +Privoxy process that the directory tree starts +there. If set up carefully, this can limit the impact of possible +vulnerabilities in Privoxy to the files contained in +that hierarchy. + --pre-chroot-nslookup hostname +Initialize the resolver library using hostname +before chroot'ing. On some systems this reduces the number of files +that must be copied into the chroot tree. + + + +If the configfile is not specified on the command line, +Privoxy will look for a file named +config in the current directory . If no +configfile is found, Privoxy will +fail to start. + + DESCRIPTION + + + +Privoxy is a non-caching +web proxy +with advanced filtering capabilities for enhancing privacy, +modifying web page data, managing HTTP +cookies, +controlling access, and removing ads, banners, pop-ups and other obnoxious +Internet junk. Privoxy has a flexible configuration and can be +customized to suit individual needs and tastes. Privoxy has application for +both stand-alone systems and multi-user networks. + + +Privoxy is based on Internet Junkbuster (tm). + + INSTALLATION AND USAGE + + + +Browsers can either be individually configured to use +Privoxy as a HTTP proxy (recommended), +or Privoxy can be combined with a packet +filter to build an intercepting proxy +(see config). The default setting is for +localhost, on port 8118 (configurable in the main config file). To set the +HTTP proxy in Netscape and Mozilla, go through: Edit; +Preferences; Advanced; +Proxies; Manual Proxy Configuration; +View. + + +For Firefox, go through: Tools; +Options; General; +Connection Settings; +Manual Proxy Configuration. + + +For Internet Explorer, go through: Tools; +Internet Properties; Connections; +LAN Settings. + + +The Secure (SSL) Proxy should also be set to the same values, otherwise +https: URLs will not be proxied. Note: Privoxy can only +proxy HTTP and HTTPS traffic. Do not try it with FTP or other protocols. +HTTPS presents some limitations, and not all features will work with HTTPS +connections. + + +For other browsers, check the documentation. + + CONFIGURATION + + + +Privoxy can be configured with the various configuration +files. The default configuration files are: config, +default.filter, and +default.action. user.action should +be used for locally defined exceptions to the default rules of +default.action, and user.filter for +locally defined filters. These are well commented. On Unix +and Unix-like systems, these are located in +/etc/privoxy/ by default. + + +Privoxy uses the concept of actions +in order to manipulate the data stream between the browser and remote sites. +There are various actions available with specific functions for such things +as blocking web sites, managing cookies, etc. These actions can be invoked +individually or combined, and used against individual URLs, or groups of URLs +that can be defined using wildcards and regular expressions. The result is +that the user has greatly enhanced control and freedom. + + +The actions list (ad blocks, etc) can also be configured with your +web browser at http://config.privoxy.org/ +(assuming the configuration allows it). +Privoxy's configuration parameters can also be viewed at +the same page. In addition, Privoxy can be toggled on/off. +This is an internal page, and does not require Internet access. + + +See the User Manual for a detailed +explanation of installation, general usage, all configuration options, new +features and notes on upgrading. + + SAMPLE CONFIGURATION + + + +A brief example of what a simple default.action +configuration might look like: + + + # Define a few useful custom aliases for later use + {{alias}} + + # Useful aliases that combine more than one action + +crunch-cookies = +crunch-incoming-cookies +crunch-outgoing-cookies + -crunch-cookies = -crunch-incoming-cookies -crunch-outgoing-cookies + +block-as-image = +block +handle-as-image + + # Fragile sites should have the minimum changes + fragile = -block -deanimate-gifs -fast-redirects -filter \ + -hide-referer -prevent-cookies -kill-popups + + ## Turn some actions on ################################ + ## NOTE: Actions are off by default, unless explictily turned on + ## otherwise with the '+' operator. + +{ \ ++deanimate-gifs{last} \ ++filter{refresh-tags} \ ++filter{img-reorder} \ ++filter{banners-by-size} \ ++filter{webbugs} \ ++filter{jumping-windows} \ ++filter{ie-exploits} \ ++hide-forwarded-for-headers \ ++hide-from-header{block} \ ++hide-referrer{conditional-block} \ ++session-cookies-only \ ++set-image-blocker{pattern} \ +} +/ # '/' Match all URL patterns + + + # Block all URLs that match these patterns + { +block } + ad. + ad[sv]. + .ads. + banner?. + /.count(er)?\.(pl\|cgi\|exe\|dll\|asp\|php[34]?) + .hitbox.com + media./.(ads\|banner) + + # Block, and treat these URL patterns as if they were 'images'. + # We would expect these to be ads. + { +block-as-image } + .ad.doubleclick.net + .a[0-9].yimg.com/(?:(?!/i/).)$ + ad..doubleclick.net + + # Make exceptions for these harmless ones that would be + # caught by our +block patterns just above. + { -block } + adsl. + adobe. + advice. + .downloads. + # uploads or downloads + /.loads + + + + +Then for a user.action, we would put local, +narrowly defined exceptions: + + + # Re-define aliases as needed here + {{alias}} + + # Useful aliases + -crunch-cookies = -crunch-incoming-cookies -crunch-outgoing-cookies + + # Set personal exceptions to the policies in default.action ####### + + # Sites where we want persistent cookies, so allow all* cookies + { -crunch-cookies -session-cookies-only } + .redhat.com + .sun.com + .msdn.microsoft.com + + # These sites break easily. Use our "fragile" alias here. + { fragile } + .forbes.com + mybank.example.com + + # Replace example.com's style sheet with one of my choosing + { +redirect{http://localhost/css-replacements/example.com.css} } + .example.com/stylesheet.css + + + + +See the comments in the configuration files themselves, or the +User Manual +for full explanations of the above syntax, and other Privoxy +configuration options. + + FILES + + + + + /usr/sbin/privoxy + /etc/privoxy/config + /etc/privoxy/default.action + /etc/privoxy/standard.action + /etc/privoxy/user.action + /etc/privoxy/default.filter + /etc/privoxy/user.filter + /etc/privoxy/trust + /etc/privoxy/templates/* + /var/log/privoxy/logfile + + + + +Various other files should be included, but may vary depending on platform +and build configuration. Additional documentation should be included in the local +documentation directory. + + SIGNALS + + + +Privoxy terminates on the SIGINT, +SIGTERM and SIGABRT signals. Log +rotation scripts may cause a re-opening of the logfile by sending a +SIGHUP to Privoxy. Note that unlike +other daemons, Privoxy does not need to be made aware of +config file changes by SIGHUP -- it will detect them +automatically. + + NOTES + + + +Please see the User Manual on how to contact the +developers, for feature requests, reporting problems, and other questions. + + SEE ALSO + + + +Other references and sites of interest to Privoxy +users: + + + +http://www.privoxy.org/, +the Privoxy Home page. + +http://www.privoxy.org/faq/, +the Privoxy FAQ. + +http://sourceforge.net/projects/ijbswa/, +the Project Page for Privoxy on +SourceForge. + +http://config.privoxy.org/, +the web-based user interface. Privoxy must be +running for this to work. Shortcut: http://p.p/ + +http://sourceforge.net/tracker/?group_id=11118&atid=460288, to submit ``misses'' and other +configuration related suggestions to the developers. + +http://www.junkbusters.com/ht/en/cookies.html, +an explanation how cookies are used to track web users. + +http://www.junkbusters.com/ijb.html, +the original Internet Junkbuster. + +http://privacy.net/, a useful site +to check what information about you is leaked while you browse the web. + +http://www.squid-cache.org/, a popular +caching proxy, which is often used together with Privoxy. + +http://www.pps.jussieu.fr/~jch/software/polipo/, +Polipo is a caching proxy with advanced features +like pipelining, multiplexing and caching of partial instances. In many setups +it can be used as Squid replacement. + +http://tor.eff.org/, +Tor can help anonymize web browsing, +web publishing, instant messaging, IRC, SSH, and other applications. + +http://www.privoxy.org/developer-manual/, +the Privoxy developer manual. + + DEVELOPMENT TEAM + + + + Fabian Keil, lead developer + David Schmidt, developer + + Hal Burgiss + Roland Rosenfeld + Jörg Strohmayer + + + + COPYRIGHT AND LICENSE + + + COPYRIGHT + + + +Copyright (C) 2001-2007 by Privoxy Developers <ijbswa-developers@lists.sourceforge.net> + + +Some source code is based on code Copyright (C) 1997 by Anonymous Coders +and Junkbusters, Inc. and licensed under the GNU General Public +License. + + LICENSE + + + +Privoxy is free software; you can +redistribute it and/or modify it under the terms of the +GNU General Public +License, version 2, as published by the Free Software Foundation. + + +This program is distributed in the hope that it will be useful, but WITHOUT +ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or +FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for +more details, which is available from the Free Software Foundation, Inc, +51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA + + +You should have received a copy of the GNU General Public License +along with this program; if not, write to the Free Software +Foundation, Inc. 51 Franklin Street, Fifth Floor +Boston, MA 02110-1301 +USA + + + + Index + + NAME + SYNOPSIS + OPTIONS + DESCRIPTION + INSTALLATION AND USAGE + CONFIGURATION + SAMPLE CONFIGURATION + FILES + SIGNALS + NOTES + SEE ALSO + DEVELOPMENT TEAM + COPYRIGHT AND LICENSE + + COPYRIGHT + LICENSE + + + +This document was created by +man2html, +using the manual pages. +Time: 14:48:33 GMT, January 19, 2008 + + diff --git a/doc/webserver/privoxy-index.html b/doc/webserver/privoxy-index.html index 71f14a8b..607d0e30 100644 --- a/doc/webserver/privoxy-index.html +++ b/doc/webserver/privoxy-index.html @@ -76,7 +76,7 @@ NAME="AEN2" > Project Index Page v3.0.7 Project Index Page v3.0.8	Privoxy 3.0.7 User Manual
8.1. Finding the Right Mix 8.2. How to Edit 8.4.1. The Domain Pattern matches any domain that ENDS in - `matches any domain with first-level domain .example.comcom` + and second-level domain `example`. + For example `www.example.com`, + `example.com` and `foo.bar.baz.example.com`. + Note that it wouldn't match if the second-level domain was `another-example`. www. +> (It also matches the domain + `www` but most of the time that doesn't matter.) 8.4.2. The Path Pattern 8.5.39. Summary 8.7.1. default.action 8.7.2. user.action	Privoxy 3.0.7 User Manual
14.2. Privoxy's Internal Pages Short cuts. Turn off, then on:	Privoxy 3.0.7 User Manual
Effect if unset: Logging is disabled unless `--no-daemon` mode is used. +> No logfile is written. Many users will never look at it, however, and it's a privacy risk - if third parties can get access to it. It is therefore disabled by - default in Depending on the debug options below, the logfile may be a privacy risk + if third parties can get access to it. As most users will never look + at it, Privoxy 3.0.7 and later. - 3.0.7 and later only log fatal + errors by default. + For troubleshooting purposes, you will have to explicitly enable it. - Please don't file any support requests without trying to reproduce - the problem with logging enabled first. Once you read the log messages, - you may even be able to solve the problem on your own. +> For most troubleshooting purposes, you will have to change that, + please refer to the debugging section for details. Your logfile will grow indefinitely, and you will probably want to @@ -1408,17 +1404,7 @@ CLASS="VARIABLELIST" >Specifies: Key values that determine what information gets logged to the - logfile. +> Key values that determine what information gets logged. Default value: 12289 (i.e.: URLs plus informational and warning messages) 0 (i.e.: only fatal errors (that cause Privoxy to exit) are logged) Effect if unset: Nothing gets logged. +> Default value is used (see above).	debug 1 # show each GET/POST/CONNECT request +> debug 1 # log each request destination (and the crunch reason if Privoxy intercepted the request) debug 2 # show each connection status debug 4 # show I/O status debug 8 # show header parsing @@ -1487,16 +1476,28 @@ CLASS="LITERAL" CLASS="emphasis" >1, 4096 and 8192 are highly recommended1, 4096 and 8192 are recommended - so that you will notice when things go wrong. The other levels are probably - only of interest if you are hunting down a specific problem. They can produce - a hell of an output (especially 16). + so that you will notice when things go wrong. The other levels are + probably only of interest if you are hunting down a specific problem. + They can produce a hell of an output (especially 16). If you want to use CLF (Common Log Format), you should set Privoxy used to ship with the debug levels recommended above enabled by + default, but due to privacy concerns 3.0.7 and later are configured to + only log fatal errors. + If you are used to the more verbose settings, simply enable the debug lines + below again. + If you want to use pure CLF (Common Log Format), you should set "debug 512""... [too long, truncated]". Please don't file any support requests without trying to reproduce + the problem with increased debug level first. Once you read the log + messages, you may even be able to solve the problem on your own. +	Privoxy 3.0.7 User Manual
6.1. Controlling Privoxy with Your Web Browser Privoxy Menu
▪ Documentation @@ -272,9 +272,7 @@ CLASS="FILENAME" Privoxy executable. The name - and number of configuration files has changed from previous versions, and is - subject to change as development progresses. executable. The installed defaults provide a reasonable starting point, though some settings may be aggressive by some standards. For the time being, the @@ -453,14 +451,6 @@ CLASS="EMPHASIS" >old listening address. While under development, the configuration content is subject to change. - The below documentation may not be accurate by the time you read this. - Also, what constitutes a "default" setting, may change, so - please check all your configuration files on important issues.	Privoxy 3.0.7 User Manual
	Privoxy 3.0.7 User Manual
12.1. License	Privoxy 3.0.7 User Manual
9.1. Filter File Tutorial Privoxy 3.0.7 User ManualPrivoxy 3.0.8 User ManualPrivoxy 3.0.7 User ManualPrivoxy 3.0.8 User Manual $Id: user-manual.sgml,v 2.49 2007/12/06 18:21:55 fabiankeil Exp $ $Id: user-manual.sgml,v 2.52 2008/01/17 01:49:51 hal9 Exp $ 6.1. Controlling Privoxy with Your Web Browser 8.1. Finding the Right Mix 8.2. How to Edit 8.4.1. The Domain Pattern 8.4.2. The Path Pattern 8.5.39. Summary 8.7.1. default.action 8.7.2. user.action 9.1. Filter File Tutorial 12.1. License 14.2. Privoxy's Internal Pages	Privoxy 3.0.7 User Manual
RPMs can be installed with `rpm -Uvh privoxy-3.0.7-1.rpm`rpm -Uvh privoxy-3.0.8-1.rpm, and will use `If you have problems with failed dependencies, try rebuilding the SRC RPM: rpm --rebuild privoxy-3.0.7-1.src.rpmrpm --rebuild privoxy-3.0.8-1.src.rpm`. This will use your locally installed libraries and RPM version. , the documentation is in `/usr/share/doc/privoxy-3.0.7`/usr/share/doc/privoxy-3.0.8 and the Log directory is in	tar xzvf privoxy-3.0.7-beta-src* [.tgz or .tar.gz] - cd privoxy-3.0.7-beta tar xzvf privoxy-3.0.8-src* [.tgz or .tar.gz] + cd privoxy-3.0.8

4.16. Privoxy runs as a "server"5.1. I cannot connect to any websites. Or, I am getting 5.3. I just added a new rule, but the steenkin ad is still getting through. How? Privoxy - Home PagePrivoxy - Home PagePrivoxy - Home Page

5.1. I cannot connect to any websites. Or, I am getting 5.3. I just added a new rule, but the steenkin ad is still getting through. How? Privoxy - Home PagePrivoxy - Home Page

NAME

SYNOPSIS

OPTIONS

DESCRIPTION

INSTALLATION AND USAGE

CONFIGURATION

SAMPLE CONFIGURATION

FILES

SIGNALS

NOTES

SEE ALSO

DEVELOPMENT TEAM

COPYRIGHT AND LICENSE

COPYRIGHT

LICENSE

Index

Project Index Page v3.0.7

Privoxy Menu

4.16. Privoxy runs as a "server"
5.1. I cannot connect to any websites. Or, I am getting
5.3. I just added a new rule, but the steenkin ad is still getting through. How?
Privoxy - Home PagePrivoxy - Home Page
Privoxy - Home Page

5.1. I cannot connect to any websites. Or, I am getting
5.3. I just added a new rule, but the steenkin ad is still getting through. How?
Privoxy - Home PagePrivoxy - Home Page