From: hal9 Date: Sun, 14 Oct 2001 23:42:18 +0000 (+0000) Subject: Added back in man page X-Git-Tag: v_2_9_10~124 X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=commitdiff_plain;h=9da0d102e35ed0d06bf737372b00d5d39cf5888a Added back in man page --- diff --git a/junkbuster-rh.spec b/junkbuster-rh.spec index 90dd76c4..dc80a2b2 100644 --- a/junkbuster-rh.spec +++ b/junkbuster-rh.spec @@ -1,4 +1,4 @@ -# $Id: junkbuster-rh.spec,v 1.16 2001/09/24 20:56:23 hal9 Exp $ +# $Id: junkbuster-rh.spec,v 1.17 2001/10/10 18:59:28 hal9 Exp $ # # Written by and Copyright (C) 2001 the SourceForge # IJBSWA team. http://ijbswa.sourceforge.net @@ -26,6 +26,9 @@ # Temple Place - Suite 330, Boston, MA 02111-1307, USA. # # $Log: junkbuster-rh.spec,v $ +# Revision 1.17 2001/10/10 18:59:28 hal9 +# Minor change for init script. +# # Revision 1.16 2001/09/24 20:56:23 hal9 # Minor changes. # @@ -80,7 +83,7 @@ Summary: The Internet Junkbuster Vendor: http://ijbswa.sourceforge.net Name: junkbuster -Version: 2.9.8 +Version: 2.9.9 Release: 1 Source0: http://www.waldherr.org/junkbuster/ijbswa.tar.gz Copyright: GPL @@ -119,11 +122,11 @@ mkdir -p ${RPM_BUILD_ROOT}%{_sbindir} \ ${RPM_BUILD_ROOT}/var/log/junkbuster \ ${RPM_BUILD_ROOT}%{ijbconf}/templates \ ${RPM_BUILD_ROOT}%{_sysconfdir}/logrotate.d \ - ${RPM_BUILD_ROOT}%{_sysconfdir}/rc.d/init.d + ${RPM_BUILD_ROOT}%{_sysconfdir}/rc.d/init.d install -s -m 744 junkbuster $RPM_BUILD_ROOT%{_sbindir}/junkbuster # Out temporarily -#cp -f junkbuster.1 $RPM_BUILD_ROOT%{_mandir}/man8/junkbuster.8 +cp -f junkbuster.1 $RPM_BUILD_ROOT%{_mandir}/man8/junkbuster.8 cp -f actionsfile $RPM_BUILD_ROOT%{ijbconf}/actionsfile cp -f re_filterfile $RPM_BUILD_ROOT%{ijbconf}/re_filterfile cp -f trust $RPM_BUILD_ROOT%{ijbconf}/trust @@ -182,8 +185,7 @@ rm -rf $RPM_BUILD_ROOT %attr(0744,junkbust,junkbust) %dir /var/log/junkbuster %config %{_sysconfdir}/logrotate.d/junkbuster %attr(0744,junkbust,junkbust)/usr/sbin/junkbuster -#temporarily out until it is updated. -#%{_mandir}/man8/* +%{_mandir}/man8/* %config %{_sysconfdir}/rc.d/init.d/junkbuster diff --git a/junkbuster.1 b/junkbuster.1 index d88294da..fe38636d 100644 --- a/junkbuster.1 +++ b/junkbuster.1 @@ -1,4 +1,7 @@ -.TH JUNKBUSTER 1 "http://www.junkbusters.com/ht/en/ijb2.0man.html" +.\" Revised man page 10/13/01 +.\" Hal Burgiss \fP -character allows -server-bound\" ijbfaq.html#directional -cookies only; -a -\fC\&<\fP -allows only browser-bound cookies; -a -\fC\&~\fP -character stops cookies in -both directions.\" ijbfaq.html#crumble -Thus a cookiefile containing a single line with the two characters -\fC\&>*\fP -will pass on all cookies to servers but not give any new ones to the browser. -.TP -.\" anchor: o_j jarfile -\fI-j jarfile\fP (Old) jarfile \fIjarfile\fP (New) -All Set-cookie attempts by the server are -logged\" ijbfaq.html#jar -to -\fI\&jarfile\fP. -If no wafer is specified, -one containing a -canned notice\" ijbfaq.html#notice -(the -\fI\&vanilla wafer\fP) -is added as an alert to the server -unless the -suppress-vanilla-wafer\" ijbman.html#suppress-vanilla-wafer -option is invoked. -.TP -.\" anchor: o_v suppress-vanilla-wafer -\fI-v\fP (Old) suppress-vanilla-wafer \fI\fP (New) -Suppress the vanilla wafer. -.TP -.\" anchor: o_t from -\fI-t from\fP (Old) from \fIfrom\fP (New) -If the browser -discloses an email address\" ijbfaq.html#from -in the -\fB\&FROM\fP -header (most don't), -replace it with -\fI\&from.\fP -If -\fI\&from\fP -is set to -\fB\&.\fP -(the period character) -the -\fB\&FROM\fP -is passed to the server unchanged. -The default is to delete the -\fB\&FROM\fP -header. -.TP -.\" anchor: o_r referer -\fI-r referer\fP (Old) referer \fIreferer\fP (New) -Whenever the browser discloses the -\s-2URL\s0 -that -led to\" ijbfaq.html#referer -the current request, -replace it with -\fI\&referer.\fP -If -\fI\&referer\fP -is set to -\fB\&.\fP -(period) -the -\s-2URL\s0 -is passed to the server unchanged. -In -Version 1.4 -and later, if referer is set to -\fB\&@\fP -(at) the -\s-2URL\s0 -is sent in cases where the cookiefile -specifies that a cookie would be sent. -(No way to send bogus referers selectively is provided.) -The default is to delete Referer. -.P -Version 2.0 also accepts the spelling -\fC\&referrer\fP, -which most dictionaries consider correct. -.TP -.\" anchor: o_u user-agent -\fI-u user-agent\fP (Old) user-agent \fIuser-agent\fP (New) -Information disclosed by the browser -about itself\" ijbfaq.html#agent -is replaced with the value -\fI\&user-agent.\fP -If -\fI\&user-agent\fP -is set to -\fB\&.\fP -(period) -the -\fB\&User-Agent\fP -header is passed to the server unchanged, -along with any -\fB\&UA\fP -headers produced by -\s-2MS-IE\s0 -(which would otherwise be deleted). -In -Version 1.4 -and later, if -\fI\&user-agent\fP -is set to -\fB\&@\fP -(at) these headers are sent unchanged in cases where the cookiefile -specifies that a cookie would be sent, -otherwise only default -\fB\&User-Agent\fP -header is sent. -That default -is Mozilla/3.0 (Netscape) -with an unremarkable -Macintosh\" ijbfaq.html#infer -configuration. -If used with a browser less advanced than Mozilla/3.0 or IE-3, the default -may encourage pages containing extensions that confuse the browser. -.TP -.\" anchor: o_h listen-address -\fI-h [host][:port]\fP (Old) listen-address \fI[host][:port]\fP (New) -If -\fI\&host\fP -is specified, -bind the -\fBjunkbuster\fP -to that -\s-2IP\s0 -address. -If a -\fI\&port\fP -is specified, use it. -The default -port -is 8000; -the default host is -\fC\&localhost\fP. -Before Version 2.0.2, -the default was to bind to all -\s-2IP\s0 -addresses -(\fB\&INADDR_ANY\fP); -but this has been restricted to -\fB\&localhost\fP -to avoid unintended security breaches. -(To open the proxy to all, use the line + Markus Breitenbach .br -.ti +0.25i -\fB\&listen-address :8000\fP + Thomas Steudten .br -in the configuration file.) -.TP -.\" anchor: o_f forwardfile -\fI-f forward_host[:port]\fP (Old) forwardfile \fIforwardfile\fP (New) -Version 1.X required all -\s-2HTTP\s0 -requests from the client to be forwarded to the same destination. -Version 2.0 takes its routing specification from a -\fI\&forwardfile\fP, -allowing selection of the proxy (a.k.a. forwarding host) and gateway -according to the -\s-2URL\s0. -Here is a typical line. + David Schmidt .br -.ft CW -.S 8 -.nf -.sp -* lpwa.com:8000 . . -.S -.ft -.fi -.sp - -.P -Each line contains four fields: -\fB\&target\fP, -\fB\&forward_to\fP, -\fB\&via_gateway_type\fP -and -\fB\&gateway\fP. -As usual, the -last\" ijbman.html#compare -\fB\&target\fP -domain that matches the requested -\s-2URL\s0 -wins, -and the -\fC\&*\fP -character alone matches any domain. -The target domain need not be a fully qualified -hostname; it can be a general domain such as -\fC\&com\fP -or -\fC\&co.uk\fP -or even just a port number. -.\" anchor: nose -For example, because -LPWA -does not handle -SSL,\" ijbfaq.html#encrypt -the line above will typically be followed by a line such as -.br -.ft CW -.S 8 -.nf -.sp -:443 . . . -.S -.ft -.fi -.sp - -to allow SSL transactions to proceed directly. -The cautious would also -add an entry in their blockfile to stop transactions -to port 443 for all but specified trusted sites. -.P -If the winning -\fB\&forward_to\fP -field is -\fC\&.\fP -(the dot character) the proxy connects -directly to the server given in the -\s-2URL\s0, -otherwise it forwards to the host and port number specified. -The default port is 8000. -The -\fC\&via_gateway_type\fP -and -\fC\&gateway\fP -fields also use a dot to indicate no gateway protocol. -The gateway protocols are explained -below.\" ijbman.html#o_g -.P -The example line above in a forwardfile alone -would send everything through port 8000 at -\fC\&lpwa.com\fP -with no gateway protocol, -and is equivalent to the old -\fC\&-f lpwa.com:8000\fP -with no -\fC\&-g\fP -option. -For more information see the example file provided with the distribution. -.P -Configure with care: no loop detection is performed. -When setting up chains of proxies that might loop back, try adding -Squid.\" ijbman.html#squid -.TP -.\" anchor: o_g -\fI-g gw_protocol[:[gw_host][:gw_port]]\fP (Old) -Use -\fI\&gw_protocol\fP -as the gateway protocol. -This option was introduced in Version 1.4, -but was folded into the -forwardfile\" ijbman.html#forwardfile -option in Version 2.0. -The default is to use no gateway protocol; -this may be explicitly specified as -\fB\&direct\fP -on the command line -or the dot character in the forwardfile. -The -\fC\&SOCKS4\fP -protocol may be specified as -\fB\&socks\fP -or -\fB\&socks4\fP. -The -\fC\&SOCKS4A\fP -protocol is specified as -\fB\&socks4a\fP. -The -\fC\&SOCKS5\fP -protocol is not currently supported. -The default -\s-2SOCKS\s0 -\fI\&gw_port\fP -is 1080. -.P -The user's browser should -\fInot\fP -be -configured\" ijbfaq.html#socks -to use -\fC\&SOCKS\fP; -the proxy conducts the negotiations, not the browser. -.P -The user identification capabilities of -\fC\&SOCKS4\fP -are deliberately not used; -the user is always identified to the -\fC\&SOCKS\fP -server as -\fC\&userid=anonymous\fP. -If the server's policy is to reject requests from -\fC\&anonymous\fP, -the proxy will not work. -Use a -debug\" ijbman.html#o_d -value of 3 -to see the status returned by the server. -.TP -.\" anchor: o_d debug -\fI-d N\fP (Old) debug \fIN\fP (New) -Set debug mode. -The most common value is 1, -to -pinpoint\" ijbfaq.html#pinpoint -offensive -\s-2URL\s0s, -so they can be added to the blockfile. -The value of -\fB\&N\fP -is a bitwise -logical-\s-2OR\s0 -of the following values: + Haroon Rafique .br + Jorg Strohmayer .br -\h'-\w"1 = "u'1 = URLs (show each URL requested by the browser); + Shamim Mohamed .br -\h'-\w"2 = "u'2 = Connections (show each connection to or from the proxy); + Sarantis Paskalis .br -\h'-\w"4 = "u'4 = I/O (log I/O errors); + Gabriel L. Somlo .br -\h'-\w"8 = "u'8 = Headers (as each header is scanned, show the header and what is done to it); + John Venvertloh .br -\h'-\w"16 = "u'16 = Log everything (including debugging traces and the contents of the pages). -.\" anchor: or -Multiple -\fB\&debug\fP -lines are permitted; they are logical OR-ed together. -.P -Because most browsers send several requests in parallel -the debugging output may appear intermingled, so the -single-threaded\" ijbman.html#single-threaded -option is recommended when using -debug\" ijbman.html#debug -with -\fB\&N\fP -greater than 1. -.TP -.\" anchor: o_y add-forwarded-header -\fI-y\fP (Old) add-forwarded-header \fI\fP (New) -Add -\fB\&X-Forwarded-For\fP -headers to the server-bound -\s-2HTTP\s0 -stream -indicating the client -\s-2IP\s0 -address -to the server,\" ijbfaq.html#detect -in the new style of -Squid 1.1.4.\" ijbman.html#squid -If you want the traditional -\fC\&HTTP_FORWARDED\fP -response header, add it manually with the --x\" ijbman.html#o_x -option. -.TP -.\" anchor: o_x add-header -\fI-x HeaderText\fP (Old) add-header \fIHeaderText\fP (New) -Add the -\fI\&HeaderText\fP -verbatim to requests to the server. -Typical uses include -adding old-style forwarding notices such as -\fB\&Forwarded: by http://pro-privacy-isp.net\fP -and reinstating the -\fB\&Proxy-Connection: Keep-Alive\fP -header -(which the -\fBjunkbuster\fP -deletes so as -not\" ijbfaq.html#detect -to reveal its existence). -No checking is done for correctness or plausibility, -so it can be used to throw any old trash into the server-bound -\s-2HTTP\s0 -stream. -Please don't litter. -.TP -.\" anchor: o_s single-threaded -\fI-s\fP (Old) single-threaded \fI\fP (New) -Doesn't -\fB\&fork()\fP -a separate process -(or create a separate thread) -to handle each connection. -Useful when debugging to keep the process single threaded. -.TP -.\" anchor: o_l logfile -\fI-l logfile\fP (Old) logfile \fIlogfile\fP (New) -Write all debugging data into -\fI\&logfile.\fP -The default -\fI\&logfile\fP -is the standard output. -.TP -.\" anchor: o_acl aclfile -aclfile \fIaclfile\fP (New) -Unless this option is used, the proxy talks to anyone who can connect to it, -and everyone who can has equal permissions on where they can go. -An access file allows restrictions to be placed on these two policies, -by distinguishing some -\fIsource\fP -\s-2IP\s0 -addresses and/or -some -\fIdestination\fP -addresses. -(If a -forwarder or a gateway\" ijbman.html#forwardfile -is being used, its address is considered the destination address, -not the ultimate -\s-2IP\s0 -address of the -\s-2URL\s0 -requested.) + Hal Burgiss + + +.SH COPYRIGHT AND GPL +Orginally written by, and copyrighted by, the Anonymous Coders and Junkbusters +Corporation. .P -Each line of the access file begins with -either the word -\fB\&permit\fP -or -\fB\&deny\fP -followed by source and (optionally) destination addresses -to be matched against those of the -\s-2HTTP\s0 -request. -The last matching line specifies the result: if it was a -\fB\&deny\fP -line or if no line matched, -the request will be refused. +This program is free software; you can redistribute it and/or modify +it under the terms of the GNU General Public License as published by +the Free Software Foundation; either version 2 of the License, or +(at your option) any later version. .P -A source or destination -can be specified as a single numeric -\s-2IP\s0 -address, -or with a hostname, provided that the host's name -can be resolved to a numeric address: this cannot be used to block all -\fB\&.mil \fP -domains for example, -because there is no single address associated with that domain name. -Either form may be followed by a slash and an integer -\fB\&N\fP, -specifying a subnet mask of -\fB\&N\fP -bits. -For example, -\fB\&permit 207.153.200.72/24\fP -matches the entire Class-C subnet from -207.153.200.0 -through 207.153.200.255. -(A netmask of 255.255.255.0 corresponds to 24 bits of -ones in the netmask, as with -\fC\&*_MASKLEN=24\fP.) -A value of 16 would be used for a Class-B subnet. -A value of zero for -\fB\&N\fP -in the subnet mask length will cause any address to match; -this can be used to express a default rule. -For more information see the example file provided with the distribution. +This program is distributed in the hope that it will be useful, +but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for more details. .P -If you like these access controls -you should probably have -firewall;\" ijbfaq.html#firewall -they are not intended to replace one. -.TP -.\" anchor: o_tf trustfile -trustfile \fItrustfile\fP (New) -This feature is experimental, has not been fully documented and is -very subject to change. -The goal is for parents to be able to choose a page or site whose -links they regard suitable for their -young children\" ijbfaq.html#children -and for the proxy to allow access only to sites mentioned there. -To do this the proxy examines the -referer\" ijbman.html#o_r -variable on each page request to check they resulted from -a click on the ``trusted referer'' site: if so the referred site -is added to a list of trusted sites, so that the child can -then move around that site. -There are several uncertainties in this scheme that experience may be -able to iron out; check back in the months ahead. -.TP -.\" anchor: o_ti trust_info_url -trust_info_url \fItrust_info_url\fP (New) -When access is denied due to lack of a trusted referer, this -\s-2URL\s0 -is displayed with a message pointing the user to it for further information. -.TP -.\" anchor: o_hc hide-console -hide-console \fI\fP (New) -In the Windows version only, instructs the program -to disconnect from and hide the command console after starting. -.TP -.\" anchor: o_a -\fI-a\fP (Old) -(Obsolete) Accept the server's -\fB\&Set-cookie\fP -headers, passing them through to the browser. -.\" anchor: obsolete -This option was removed in Version 1.2 -and replaced by an improvement to the --c\" ijbman.html#o_c -option. -.LE -.SH INSTALLATION AND USE -Browsers must be told where to find the -\fBjunkbuster\fP -(e.g. -\fB\&localhost\fP -port 8000). -To set the -\s-2HTTP\s0 -proxy in Netscape 3.0, -go through: -\fB\&Options\fP; -\fB\&Network Preferences\fP; -\fB\&Proxies\fP; -\fB\&Manual Proxy Configuration\fP; -\fB\&View\fP. -See the -\s-2FAQ\s0 -for other browsers. -The -Security Proxy\" ijbfaq.html#security -should also be set to the same values, -otherwise -\fB\&shttp:\fP -\s-2URL\s0s -won't work. +You should have received a copy of the GNU General Public License +along with this program; if not, write to the Free Software +Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA .P -Note the limitations -explained in the -\s-2FAQ\s0. -.SH CHECKING OPTIONS -To allow users to -check\" ijbfaq.html#show -that a -\fBjunkbuster\fP -is running and how it is configured, -it intercepts requests for any -\s-2URL\s0 -ending in -\fB\&/show-proxy-args\fP -and blocks it, -returning instead returns information on its -version number and -current configuration -including the contents of its blockfile. -To get an explicit warning that no -\fBjunkbuster\fP -intervened if the proxy was not configured, -it's best to point it to a -\s-2URL\s0 -that does this, such as -http://internet.junkbuster.com/cgi-bin/show-proxy-args -on Junkbusters's website. -.SH SEE ALSO -http://www.waldherr.org/junkbuster/\" waldherr.org# -.br -http://www.junkbusters.com/ht/en/ijbfaq.html\" ijbfaq.html# -.br -http://www.junkbusters.com/ht/en/cookies.html\" cookies.html# -.br -http://internet.junkbuster.com/cgi-bin/show-proxy-args -.br -http://www.cis.ohio-state.edu/htbin/rfc/rfc2109.html -.br -http://squid.nlanr.net/Squid/ -.br -http://www-math.uni-paderborn.de/~axel/ -.SH COPYRIGHT AND GPL -Written and copyright by the Anonymous Coders and Junkbusters Corporation -and made available under the -GNU General Public License (GPL).\" gpl.html# -This software comes with -NO WARRANTY.\" gpl.html#nowarr Internet Junkbuster Proxy is a