This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
fuss:privoxy [2017/02/22 18:30] – external edit 127.0.0.1 | fuss:privoxy [2022/04/19 08:28] (current) – external edit 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
+ | ====== Enable Intercept Proxy Requests ====== | ||
+ | Add, the following to privoxy' | ||
+ | |||
+ | < | ||
+ | accept-intercepted-requests 1 | ||
+ | </ | ||
+ | |||
+ | then, you can redirect traffic to '' | ||
+ | |||
+ | <code bash> | ||
+ | iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT 8118 | ||
+ | </ | ||
+ | |||
+ | ====== Speed Tweaks ====== | ||
+ | |||
+ | '' | ||
+ | |||
+ | Thus, disable all filters: | ||
+ | < | ||
+ | ## Privoxy is slow, disable filters. | ||
+ | # | ||
+ | #filterfile default.filter | ||
+ | # | ||
+ | </ | ||
+ | |||
+ | ====== Forwarding ====== | ||
+ | |||
+ | One of the best uses for '' | ||
+ | < | ||
+ | ## Forward everything that does not match to polipo | ||
+ | ## for content filtering and fast fetching of websites. | ||
+ | forward / | ||
+ | |||
+ | ## Browse the .onion network by sending any requests | ||
+ | ## to URLs that end in .onion to the tor proxy. | ||
+ | forward-socks4a .onion | ||
+ | |||
+ | ## Get around ISP censorship and redirect traffic to | ||
+ | ## censored websites through tor. | ||
+ | forward-socks4a .thepiratebay.sx | ||
+ | |||
+ | ## Fetching local websites (from a local apache server) | ||
+ | ## directly, without sending the request through either | ||
+ | ## polipo or tor - development websites should not be cached. | ||
+ | forward mypage.com | ||
+ | |||
+ | </ | ||
+ | |||
+ | ====== Anonymity / Censoring Headers ====== | ||
+ | |||
+ | In the privoxy main configuration file ''/ | ||
+ | < | ||
+ | actionsfile match-all.action | ||
+ | </ | ||
+ | |||
+ | Open the default actions file ''/ | ||
+ | < | ||
+ | { \ | ||
+ | +change-x-forwarded-for{block} \ | ||
+ | +hide-from-header{block} \ | ||
+ | +hide-referrer{conditional-block} \ | ||
+ | +hide-accept-language{en-us} \ | ||
+ | +hide-if-modified-since{-60} \ | ||
+ | +overwrite-last-modified{randomize} \ | ||
+ | +crunch-if-none-match \ | ||
+ | +session-cookies-only \ | ||
+ | +fast-redirects{check-decoded-url} \ | ||
+ | +hide-user-agent{Mozilla/ | ||
+ | } | ||
+ | / # Match all URLs | ||
+ | </ | ||
+ | |||
+ | For a list of user-agent strings, you can try the [[http:// | ||
+ | |||
+ | //Do not pick a user-agent string of a browser that has less capabilities than the sites you browse.// | ||
+ | ====== Redirect Google Search to Bing Search ====== | ||
+ | |||
+ | First enable the user-filter by editing ''/ | ||
+ | < | ||
+ | actionsfile user.action | ||
+ | </ | ||
+ | |||
+ | Then edit ''/ | ||
+ | < | ||
+ | # Redirect Google Search to Bing Search | ||
+ | {+redirect{s@^http:// | ||
+ | www.google.*/ | ||
+ | |||
+ | # Redirect Google Image Search to Bing Image Search | ||
+ | {+redirect{s@^http:// | ||
+ | images.google.*/ | ||
+ | </ | ||
+ | |||
+ | The regex '' | ||
+ | |||
+ | Another option is: | ||
+ | < | ||
+ | # Redirect Google to Bing (URL) | ||
+ | {+redirect{http:// | ||
+ | www.google.* | ||
+ | </ | ||
+ | |||
+ | ====== Split Configuration for Clearnet and Multiple Deep-Web Services ====== | ||
+ | |||
+ | In order to configure privoxy to allow you to browse both clearnet and the deep web, the following configuration should do the trick: | ||
+ | |||
+ | < | ||
+ | forward-socks4a | ||
+ | forward-socks4a | ||
+ | forward-socks4a | ||
+ | </ | ||
+ | |||
+ | * the first line forwards everything through a tor proxy with the hostname '' | ||
+ | * the second line forwards requests for '' | ||
+ | * the third line forwards requests for '' | ||
+ | |||
+ | It is also possible to change the configuration in order to use the same tor instance for both clearnet and '' | ||
+ | |||
+ | ====== Testing ====== | ||
+ | |||
+ | Given the configuration from the previous section; to reiterate: | ||
+ | < | ||
+ | forward-socks4a | ||
+ | forward-socks4a | ||
+ | forward-socks4a | ||
+ | </ | ||
+ | |||
+ | the following must be verified: | ||
+ | * Browsing clearnet should go through the '' | ||
+ | * All darknet links should go through the '' | ||
+ | * All links to the i2p darknet should go through the '' | ||
+ | |||
+ | With this configuration in place, no websites should be accessed directly but only via the configured upstream proxies. |