Privoxy

I clicked on a bookmarked link and ended up on some domain parking
site.  So I'm wondering if it would be better to add a new block
section

{+block{Domain parking sites.}}
.sedoparking.com/           # http://www.sedoparking.com/www.inetcat.org
landing.addtrafficz.com/    #
http://landing.trafficz.com/index.php?domain=www.inetcat.org
.searchnut.com/\?domain     # http://www.searchnut.com/?domain=www.inetcat.org

or just add them to the
  {+block{Site-specific block pattern matches.}}
section in default.action

Lee

Bugs item #2472837, was opened at 2008-12-28 11:01
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=111118&aid=2472837&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: funct: blocking
Group: version 3.2
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: 2

Initial Comment:
ZE7SHe  <a href="http://mohwjzfiepta.com/">mohwjzfiepta</a>, [url=http://houmrpecmioh.com/]houmrpecmioh[/url], [link=http://yvkehiyodqqj.com/]yvkehiyodqqj[/link], http://joovlywzzdva.com/

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=111118&aid=2472837&group_id=11118

I think default.action and standard.action aren't the
greatest file names ever, as one could easily switch
their content and still argue that the names fit.

One could for example explain that pre-settings are
located in default.action because they are the default
values the user can chose from, while standard.action
contains the standard settings the developers consider
appropriate for everyone.

Therefore I'd like to delete the standard.action file
after moving the pre-settings over to the default.action
file.

While their content is different from a developer's
perspective, from a user's perspective it shouldn't
matter.

Also I intent to commit an updated version of Roland's
patch "[1563977] Global defaults in new file global.action"
https://sourceforge.net/tracker/index.php?func=detail&aid=1563977&group_id=11118&atid=311118
shortly. Once that's done, the users shouldn't have
to touch the default.action file anymore anyway.

Any objections?

Fabian

Feature Requests item #2353680, was opened at 2008-11-27 14:16
Message generated for change (Comment added) made by fabiankeil
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=2353680&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Configuration
Group: future
>Status: Pending
>Resolution: Works For Me
Priority: 5
Private: No
Submitted By: scientes (scientes)
>Assigned to: Fabian Keil (fabiankeil)
Summary: client-based toggling

Initial Comment:
it would be nice if you could allow any user to toggle privoxy on and off, but only for their ip address/hostname, maybe other option disallowed could be include in such a manner too.

----------------------------------------------------------------------

>Comment By: Fabian Keil (fabiankeil)
Date: 2008-12-26 10:46

Message:
This can already be done with the client-header-tagger action.
Did you already try it?

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2008-12-18 18:18

Message:
This can be done by creating an appropriate PAC file for the webbrowser. 
See http://en.wikipedia.org/wiki/Proxy_auto-config.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=2353680&group_id=11118

Feature Requests item #1842927, was opened at 2007-12-02 21:30
Message generated for change (Settings changed) made by fabiankeil
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=1842927&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
>Status: Pending
Resolution: None
Priority: 5
Private: No
Submitted By: Steven (smkolins)
Assigned to: Nobody/Anonymous (nobody)
Summary: can prixoy point to a pac file?

Initial Comment:
is it possible to have privoxy forward it's traffic through an ISP's pac file?

I'm on satellite internet (no dsl close enough and it's better than dial up) and for maximum performance they recommend a pac file for the proxy. So I'd like to keep privoxy inline and have the cleaned up code go to the ISP proxy (note filtering adverts will cut my FAP worries some too!)

I tried reading the result of the pac file but it seems there is some behind the scenes work somehow. The url they have us use is  wpad.wildblue.com/wpad.dat which makes it seem like 12.189.32.60:80  is what they want for the proxy in most circumstances but if I try to detect my FAP usage (sign in through https://signin.wildblue.net:8488/iar-interfaces/fapframe.html)  it always fails unless I actually use the url as the proxy config rather than the privoxy with or without the 12.189.32.60:80 forward.

On the other and I do think I see some boost if I use 12.189.32.60:80.

----------------------------------------------------------------------

Comment By: Lee (ler762)
Date: 2007-12-22 22:03

Message:
Logged In: YES 
user_id=1924122
Originator: NO

Did option 2 not work at all or was it just problems with
backoffice.wildblue.net?

Aside from needing to change
  forward   backoffice.wildblue.net .
to
  forward   *.backoffice.wildblue.net .
it seems like option 2 should have worked..


----------------------------------------------------------------------

Comment By: Steven (smkolins)
Date: 2007-12-20 01:05

Message:
Logged In: YES 
user_id=1439894
Originator: YES

could have sworn I commented on this and got an email about another
response too but...

of the options by gjmurphy, only option 1 worked.

Thanks!

----------------------------------------------------------------------

Comment By: Gerry Murphy (gjmurphy)
Date: 2007-12-15 13:05

Message:
Logged In: YES 
user_id=1890069
Originator: NO

You've got two options here;

1) configure privoxy to foward everything to the proxy of your choice:
edit the privoxy configuration file ("config.txt" for windows, otherwise
"config").  Then save your service providers .pac file locally and edit it,
change:
  var proxyhost = "12.189.32.60:80"; // Proxy host
to be:
  var proxyhost = "127.0.0.1:8118"; // privoxy host
(or whichever address:port your privoxy installation is running.)  Then
reconfigure you browser to use your local version of the .pac file
instead.

2) edit your privoxy configuration file and add something link:
  forward   /      12.189.32.60:80
  forward   :443   .
  forward   192.168.*.* .
  forward   172.16.*.* .
  forward   172.17.*.* .
  forward   10.*.*.* .
  forward   backoffice.wildblue.net .

You'll need to tweak the above to match the .pac settings, see privoxy
documentation at:
  http://www.privoxy.org/3.0.7/user-manual/config.html#FORWARDING
for further information.


----------------------------------------------------------------------

Comment By: Steven (smkolins)
Date: 2007-12-15 12:47

Message:
Logged In: YES 
user_id=1439894
Originator: YES

I don't know why but you can see the pac file at
http://12.189.32.61/wpad.dat

I know they have multiple proxies - they had 12.189.32.39, 59, 60, 61 all
as places that seem to work as proxies (note the reference to Laredo in the
script - each of the many (25?) beams has their own name and perhaps their
own proxy path?)

----------------------------------------------------------------------

Comment By: Steven (smkolins)
Date: 2007-12-15 12:30

Message:
Logged In: YES 
user_id=1439894
Originator: YES

the line wrapping on that post wasn't too bad but the several lines
following 
"// determine if the proxy should be used" that end in "|| // destination
is" or similar have some few words on the next line that are in fact on the
same line.

So for example  || // destination is
WildBlue backoffice

should be 
 || // destination is WildBlue backoffice


----------------------------------------------------------------------

Comment By: Steven (smkolins)
Date: 2007-12-15 12:23

Message:
Logged In: YES 
user_id=1439894
Originator: YES

The url is http://wpad.wildblue.com/accelerated_pac_base.pac and I bet
it's blind to the outside world. The contents can also be read with
http://wpad.wildblue.com/wpad.dat

The contents of the file is:

//
// wpad.dat script FOR LAREDO - Proxy IP: 12.189.32.60
// 

var firstrun;                       // Flag to indicate if the browser was
just launched 
var unprovisioned = false           // Unprovisioned account flag
var proxyhost = "12.189.32.60:80"; // Proxy host
var myip = "";

function FindProxyForURL(url,host) { 
	if (myip != myIpAddress()) {
		firstrun = true;
	}
	myip = myIpAddress();	

	// If CPE has a private IP, verify if we are unprovisioned
	if (firstrun && isPrivateIp(myip)) {
		var ip = dnsResolve("www.wildblue.net");
		if (ip == "10.255.10.40") {
			// unprovisioned account
			unprovisioned = true;
		}
	}

	// If the CPE has a routable IP, the account is in provisioned state
	if (!isPrivateIp(myip)) unprovisioned = false; 
	firstrun = false;

	// determine if the proxy should be used
	if (dnsDomainIs(host, "backoffice.wildblue.net") || // destination is
WildBlue backoffice
	    isPrivateIp(host) ||                            // destination is in
the private IP domain
	    isPlainHostName(host) ||                        // destination is in
the local network
	    unprovisioned         ||                        // unprovisioned
account
	    myip == "127.0.0.1"   ||                        // no CPE IP, disable
proxy
	    url.substring(0, 6) == "https:"                 // destination is an
SSL site
	) {
		return "DIRECT";
	} else {
		return "PROXY " + proxyhost;
	}
}

function isPrivateIp(ip) {
	if (!ip.match(/^\d+\.\d+\.\d+\.\d+$/)) return false;

	if (isInNet(ip, "192.168.0.0", "255.255.0.0") ||
	    isInNet(ip, "172.16.0.0", "255.255.0.0") ||
	    isInNet(ip, "172.17.0.0", "255.255.0.0") ||
	    isInNet(ip, "10.0.0.0", "255.0.0.0"))
	return true;

	return false;
}

As I've said, I tried forward  /  12.189.32.60:80 in the privoxy config
file and I do see some improvement using their proxy - but I can't check my
account info unless I actually use their pac file as my proxy. I see in the
above splitting the directions things are sent but not where they are
sent.... I'd welcome some decoding and suggestions for coding in privoxy to
match.

----------------------------------------------------------------------

Comment By: Lee (ler762)
Date: 2007-12-09 23:06

Message:
Logged In: YES 
user_id=1924122
Originator: NO

> I'd welcome any idea how to "add the equivalent commands".

I get a non-existent domain when I do a
  nslookup  wpad.wildblue.com
so I can't take a look at wpad.dat

If you post the contents of the file maybe I can give you the equivalent
commands to put in your privoxy config.


> ... running the apparent result of the pac file does show some
> improvement but not everything on the ISP works whereas if you use the
pac
> file everything works.

It'd be helpful if you showed the commands you added to the privoxy config
& said which things that didn't work. Otherwise ... I can't even begin to
guess.

----------------------------------------------------------------------

Comment By: Steven (smkolins)
Date: 2007-12-04 19:17

Message:
Logged In: YES 
user_id=1439894
Originator: YES

As I said, running the apparent result of the pac file does show some
improvement but not everything on the ISP works whereas if you use the pac
file everything works.

If it helps I did read the comments in the config file which has the same
info of the fine manual you pointed me to. I'd welcome any idea how to "add
the equivalent commands".

----------------------------------------------------------------------

Comment By: Lee (ler762)
Date: 2007-12-03 20:06

Message:
Logged In: YES 
user_id=1924122
Originator: NO

> can prixoy point to a pac file?

No

You'll have to download the .pac file and add the equivalent commands to
Privoxy's config file manually.

It'd be easier if you'd attached a copy of the pac file, but I'm guessing
that you want something like
forward  /  12.189.32.60:80

RTFM: http://www.privoxy.org/user-manual/config.html#FORWARDING
  (read the FINE manual :)

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=1842927&group_id=11118

Feature Requests item #1856448, was opened at 2007-12-22 17:17
Message generated for change (Comment added) made by fabiankeil
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=1856448&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Win32 integration
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Add "Edit User Filter"

Initial Comment:
For windows privoxy, in the "options" menu:
Change "Edit Filters" to "Edit Default Filters" & "Edit User Filters".

Better change is to create the options menu dynamically from the configuration file.

----------------------------------------------------------------------

>Comment By: Fabian Keil (fabiankeil)
Date: 2008-12-26 10:47

Message:
Patches are welcome ...

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=1856448&group_id=11118

Patches item #1595124, was opened at 2006-11-12 17:39
Message generated for change (Comment added) made by fabiankeil
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=311118&aid=1595124&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: new feature
Group: None
>Status: Pending
Resolution: None
Priority: 5
Private: No
Submitted By: Alexander Klimov (alserkli)
Assigned to: Fabian Keil (fabiankeil)
Summary: patch for skip-crunched option

Initial Comment:
This patch allows to disable logging of crunched requests. Although with "grep -v" this feature can be redundant on *nix, the absence of skip-crunched option complicates life of windows users.

Use "skip-crunched 1" configuration option to activate.

----------------------------------------------------------------------

>Comment By: Fabian Keil (fabiankeil)
Date: 2008-12-26 10:43

Message:
Crunches have their own log level now,
and the messages have been restructured
to look like this:
Dec 26 11:41:16.819 28416d40 Crunch: CGI Call:
http://config.privoxy.org/favicon.ico

----------------------------------------------------------------------

Comment By: Alexander Klimov (alserkli)
Date: 2006-11-14 17:11

Message:
Logged In: YES 
user_id=73476

Once a user sees ads in their browser, they goes to privoxy
GUI log and try to see what URLs were requested and were not
crunched. Without skip-crunched (and without "grep -v") it
is hard to see this, because the word "crunch!" is often out
of the window and requires horizontal scrolling.

It would be nice to be able to skip requests to the web
interface, although they are not that frustrating (they are
obvious from the left side of URL). I am not sure how often
a user wants to see only crunched URLs.

Probably, you are right about dividing requests into
categories and allocating bits in debug for them. I thought
about it, but was afraid of breaking backward compatibility
by touching debug.

I just realized that moving the crunch indicator to the left
may solve the usability issue. 

Btw, IMO it is a good idea to reorganize log in GUI: instead of

 Nov 14 18:39:00 Privoxy(000006ac) Request: ...

we can use

 # date
 <status> url

where date lines are inserted no more often than once a
minute and status is a single colored letter (e.g.,
C[runch],P[ass],I[nternal]). The log in GUI is not processed
by scripts and thus it should be optimized for browsing by a
human.

----------------------------------------------------------------------

Comment By: Fabian Keil (fabiankeil)
Date: 2006-11-14 15:40

Message:
Logged In: YES 
user_id=875547

How exactly does logging of crunched requests complicate
the life of windows users? And do you really want to
suppress all crunches or just some of them? 

Anyway, I don't think a "skip-crunched" option is a clean
solution.

If there is interest to skip crunches there is
probably also interest to only display crunches and
with your patch suggestion that's not possible.

Instead, we should divide the current request
logging into different categories, for example
in requests that are passed, requests that are blocked
and requests that are meant for the web interface.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=311118&aid=1595124&group_id=11118

Fabian Keil <fk@...> wrote:

> Fabian Keil <freebsd-listen@...> wrote:
> 
> > Fabian Keil <fk@...> wrote:
> > 
> > > Quoting http://www.spi-inc.org/:
> > > 
> > > | SPI is a non-profit organization which was founded
> > > | to help organizations develop and distribute open
> > > | hardware and software.
> > > 
> > > I propose we try to become an Associated Project of SPI with
> > > the goal to have a reliable and trusted third party to accept
> > > tax-deducible donations for us and to manage our "assets".
> > 
> > There were no objections so far, so lets get this going.
> > 
> > > To submit an application to become an associated project,
> > > we'd need a liason and a process to come up with one.
> > 
> > How about we ask for volunteers and have the project
> > administrators pick one who than acts as liason until
> > the project administrators chose another one?
> 
> Unless there are objections, I intend to submit an application
> next week with me as the first liason and with any project
> admin being able to change the liason at any time. I think
> that's the closed thing to "any admin can act as liason" that
> is currently possible.

The SPI approved the application as resolution 2008.12.17.bg.1
and invited us to become an associated project which I accepted.
I didn't get a confirmation of the acceptance yet, but I expect
it soonish.

Fabian

Actionsfile feedback item #2466825, was opened at 2008-12-25 17:41
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=2466825&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: filter: ad-not-blocked
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Charles Maurer (maurerc)
Assigned to: Nobody/Anonymous (nobody)
Summary: Virus scams getting through

Initial Comment:
A link to <idestadult.info> brought up an anti-virus scam on <webnetworksecurity.com>.  Both domains ought to be blocked.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=2466825&group_id=11118

Patches item #1821902, was opened at 2007-10-29 02:42
Message generated for change (Comment added) made by ler762
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=311118&aid=1821902&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: new feature
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Lee (ler762)
Assigned to: Gerry Murphy (gjmurphy)
Summary: Windows: tray icon changes when Privoxy toggled off

Initial Comment:
in response to feature request 1818869 
Change the tray icon when Privoxy is toggled off

future enhancement: Privoxy still uses the green 'radar screen' icons when it's receiving traffic.  If Privoxy is acting as a transparent proxy it'd probably be better if it used red activity icons so better indicate that it's not filtering traffic.



$diff -c w32.rc.old w32.rc
*** w32.rc.old  Thu Aug 17 22:06:25 2006
--- w32.rc      Sat Oct 27 12:51:38 2007
***************
*** 178,183 ****
--- 178,184 ----
  IDI_ANIMATED7           ICON    DISCARDABLE     "icons/ico00007.ico"
  IDI_ANIMATED8           ICON    DISCARDABLE     "icons/ico00008.ico"
  IDI_IDLE                ICON    DISCARDABLE     "icons/privoxy.ico"
+ IDI_OFF                 ICON    DISCARDABLE     "icons/off.ico"

  #endif /* Neutral resources */



$diff -c w32.rc.old w32.rc
*** w32.rc.old  Thu Aug 17 22:06:25 2006
--- w32.rc      Sat Oct 27 12:51:38 2007
***************
*** 178,183 ****
--- 178,184 ----
  IDI_ANIMATED7           ICON    DISCARDABLE     "icons/ico00007.ico"
  IDI_ANIMATED8           ICON    DISCARDABLE     "icons/ico00008.ico"
  IDI_IDLE                ICON    DISCARDABLE     "icons/privoxy.ico"
+ IDI_OFF                 ICON    DISCARDABLE     "icons/off.ico"

  #endif /* Neutral resources */


/source/privoxy/current
$diff -c w32log.c.old w32log.c
*** w32log.c.old        Tue Jul 18 10:48:48 2006
--- w32log.c    Sat Oct 27 14:44:25 2007
***************
*** 347,352 ****
--- 347,353 ----
  static WNDPROC g_fnLogBox;
  static HICON g_hiconAnim[ANIM_FRAMES];
  static HICON g_hiconIdle;
+ static HICON g_hiconOff;
  static int g_nAnimFrame;
  static BOOL g_bClipPending = FALSE;
  static int g_nRichEditVersion = 0;
***************
*** 364,369 ****
--- 365,371 ----
  static void LogCreatePatternMatchingBuffers(void);
  static void LogDestroyPatternMatchingBuffers(void);
  static int LogPutStringNoMatch(const char *pszText, int style);
+ static void SetIdleIcon(void);


  /*********************************************************************
***************
*** 383,388 ****
--- 385,391 ----

     /* Load the icons */
     g_hiconIdle = LoadIcon(g_hInstance, MAKEINTRESOURCE(IDI_IDLE));
+    g_hiconOff  = LoadIcon(g_hInstance, MAKEINTRESOURCE(IDI_OFF));
     for (i = 0; i < ANIM_FRAMES; i++)
     {
        g_hiconAnim[i] = LoadIcon(g_hInstance, MAKEINTRESOURCE(IDI_ANIMATED1 + i));
***************
*** 425,430 ****
--- 428,434 ----
     TrayDeleteIcon(g_hwndTray, 1);
     DeleteObject(g_hiconApp);
     DeleteObject(g_hiconIdle);
+    DeleteObject(g_hiconOff);
     for (i = 0; i < ANIM_FRAMES; i++)
     {
        DeleteObject(g_hiconAnim[i]);
***************
*** 1139,1144 ****
--- 1143,1149 ----
           {
              log_error(LOG_LEVEL_INFO, "Now toggled OFF.");
           }
+          SetIdleIcon();
           break;
  #endif /* def FEATURE_TOGGLE */

***************
*** 1251,1257 ****

        case TIMER_ANIMSTOP_ID:
           g_nAnimFrame = 0;
!          TraySetIcon(g_hwndTray, 1, g_hiconIdle);
           KillTimer(g_hwndLogFrame, TIMER_ANIM_ID);
           KillTimer(g_hwndLogFrame, TIMER_ANIMSTOP_ID);
           break;
--- 1256,1262 ----

        case TIMER_ANIMSTOP_ID:
           g_nAnimFrame = 0;
!          SetIdleIcon();
           KillTimer(g_hwndLogFrame, TIMER_ANIM_ID);
           KillTimer(g_hwndLogFrame, TIMER_ANIMSTOP_ID);
           break;
***************
*** 1271,1276 ****
--- 1276,1305 ----

  }

+ /*********************************************************************
+  *
+  * Function    :  SetIdleIcon
+  *
+  * Description :  Sets the tray icon to either idle or off
+  *
+  * Parameters  :  none
+  *
+  * Returns     :  N/A
+  *
+  *********************************************************************/
+ void SetIdleIcon()
+ {
+ #ifdef FEATURE_TOGGLE
+          if (!global_toggle_state)
+          {
+             TraySetIcon(g_hwndTray, 1, g_hiconOff);
+             /* log_error(LOG_LEVEL_INFO, "Privoxy OFF icon selected."); */
+          }
+          else
+ #endif /* def FEATURE_TOGGLE */
+          TraySetIcon(g_hwndTray, 1, g_hiconIdle);
+ }
+

  /*********************************************************************
   *




$diff -c w32res.h.old w32res.h
*** w32res.h.old        Tue Jul 18 10:48:48 2006
--- w32res.h    Sat Oct 27 13:01:57 2007
***************
*** 140,145 ****
--- 140,146 ----
  #define IDI_ANIMATED6                     206
  #define IDI_ANIMATED7                     207
  #define IDI_ANIMATED8                     208
+ #define IDI_OFF                           209

  #define ID_TOGGLE_SHOWWINDOW              4000
  #define ID_HELP_ABOUT                     4001


(attached file off.ico goes in the current/icons directory)


----------------------------------------------------------------------

>Comment By: Lee (ler762)
Date: 2008-12-23 21:00

Message:
Updated patch for current source code.  Should I apply the patch to CVS?

File Added: toggle-tray-icon.txt

----------------------------------------------------------------------

Comment By: Lee (ler762)
Date: 2007-11-05 06:57

Message:
Logged In: YES 
user_id=1924122
Originator: YES

Same patch as before, but this time shown as a unified diff.

See the attached zip file for possible icons.  It's got the original
off.ico along with and two greyed out icons - one with a red circle+slash
and another with a red X.

Rename whichever icon you like to "off.ico", put it in the current/icons
directory & rebuild.



$diff -u w32.rc.old w32.rc
--- w32.rc.old  2006-08-17 22:06:25.000000000 -0400
+++ w32.rc      2007-10-27 12:51:38.751500000 -0400
@@ -178,6 +178,7 @@
 IDI_ANIMATED7           ICON    DISCARDABLE     "icons/ico00007.ico"
 IDI_ANIMATED8           ICON    DISCARDABLE     "icons/ico00008.ico"
 IDI_IDLE                ICON    DISCARDABLE     "icons/privoxy.ico"
+IDI_OFF                 ICON    DISCARDABLE     "icons/off.ico"

 #endif /* Neutral resources */



$diff -u w32res.h.old w32res.h
--- w32res.h.old        2006-07-18 10:48:48.000000000 -0400
+++ w32res.h    2007-10-27 13:01:57.985875000 -0400
@@ -140,6 +140,7 @@
 #define IDI_ANIMATED6                     206
 #define IDI_ANIMATED7                     207
 #define IDI_ANIMATED8                     208
+#define IDI_OFF                           209

 #define ID_TOGGLE_SHOWWINDOW              4000
 #define ID_HELP_ABOUT                     4001



$diff -u w32log.c.old w32log.c
--- w32log.c.old        2006-07-18 10:48:48.000000000 -0400
+++ w32log.c    2007-10-27 14:44:25.235875000 -0400
@@ -347,6 +347,7 @@
 static WNDPROC g_fnLogBox;
 static HICON g_hiconAnim[ANIM_FRAMES];
 static HICON g_hiconIdle;
+static HICON g_hiconOff;
 static int g_nAnimFrame;
 static BOOL g_bClipPending = FALSE;
 static int g_nRichEditVersion = 0;
@@ -364,6 +365,7 @@
 static void LogCreatePatternMatchingBuffers(void);
 static void LogDestroyPatternMatchingBuffers(void);
 static int LogPutStringNoMatch(const char *pszText, int style);
+static void SetIdleIcon(void);


 /*********************************************************************
@@ -383,6 +385,7 @@

    /* Load the icons */
    g_hiconIdle = LoadIcon(g_hInstance, MAKEINTRESOURCE(IDI_IDLE));
+   g_hiconOff  = LoadIcon(g_hInstance, MAKEINTRESOURCE(IDI_OFF));
    for (i = 0; i < ANIM_FRAMES; i++)
    {
       g_hiconAnim[i] = LoadIcon(g_hInstance,
MAKEINTRESOURCE(IDI_ANIMATED1 + i));
@@ -425,6 +428,7 @@
    TrayDeleteIcon(g_hwndTray, 1);
    DeleteObject(g_hiconApp);
    DeleteObject(g_hiconIdle);
+   DeleteObject(g_hiconOff);
    for (i = 0; i < ANIM_FRAMES; i++)
    {
       DeleteObject(g_hiconAnim[i]);
@@ -1139,6 +1143,7 @@
          {
             log_error(LOG_LEVEL_INFO, "Now toggled OFF.");
          }
+         SetIdleIcon();
          break;
 #endif /* def FEATURE_TOGGLE */

@@ -1251,7 +1256,7 @@

       case TIMER_ANIMSTOP_ID:
          g_nAnimFrame = 0;
-         TraySetIcon(g_hwndTray, 1, g_hiconIdle);
+         SetIdleIcon();
          KillTimer(g_hwndLogFrame, TIMER_ANIM_ID);
          KillTimer(g_hwndLogFrame, TIMER_ANIMSTOP_ID);
          break;
@@ -1271,6 +1276,30 @@

 }

+/*********************************************************************
+ *
+ * Function    :  SetIdleIcon
+ *
+ * Description :  Sets the tray icon to either idle or off
+ *
+ * Parameters  :  none
+ *
+ * Returns     :  N/A
+ *
+ *********************************************************************/
+void SetIdleIcon()
+{
+#ifdef FEATURE_TOGGLE
+         if (!global_toggle_state)
+         {
+            TraySetIcon(g_hwndTray, 1, g_hiconOff);
+            /* log_error(LOG_LEVEL_INFO, "Privoxy OFF icon selected.");
*/
+         }
+         else
+#endif /* def FEATURE_TOGGLE */
+         TraySetIcon(g_hwndTray, 1, g_hiconIdle);
+}
+

 /*********************************************************************
  *

File Added: privoxyIcons.zip

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=311118&aid=1821902&group_id=11118

Patches item #2462626, was opened at 2008-12-23 20:54
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=311118&aid=2462626&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Lee (ler762)
Assigned to: Nobody/Anonymous (nobody)
Summary: cache Privoxy blocked pages

Initial Comment:
Would it be worthwhile to allow caching of web pages that Privoxy blocks?

I made this change back when I was looking at the problem report of Privoxy breaking the "secure lock" on Firefox (https://sourceforge.net/tracker/index.php?func=detail&aid=1943422&group_id=11118&atid=111118) and never backed it out.  I don't know how much good it does, but it doesn't seem to hurt any.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=311118&aid=2462626&group_id=11118

Feature Requests item #2224655, was opened at 2008-11-05 09:29
Message generated for change (Comment added) made by fabiankeil
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=2224655&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: funct: other
Group: None
>Status: Pending
>Resolution: Works For Me
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
>Assigned to: Fabian Keil (fabiankeil)
Summary: Redirect with all parameter

Initial Comment:
hope can redirect with all paramater(post,cookies,dll). or just replace the domain with another name or ip.

----------------------------------------------------------------------

>Comment By: Fabian Keil (fabiankeil)
Date: 2008-12-22 17:23

Message:
The request destination can be rewritten using:
http://config.privoxy.org/user-manual/actions-file.html#CLIENT-HEADER-FILTER

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=2224655&group_id=11118

Feature Requests item #2241365, was opened at 2008-11-08 12:15
Message generated for change (Settings changed) made by fabiankeil
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=2241365&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: funct: content modification
Group: None
>Status: Pending
Resolution: None
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: Want to deliberately resize images to 1x1 when blocking

Initial Comment:
I've come across a web site that is having problems with hackers breaking the site by deliberately uploading oversized avatar files, which push text out of view sideways out of a non-scrollable frame.

The easiest solution that I can find would be to force image size to 1x1 or simply delete image size when the image is +block +set-image-blocker = Send a 1x1 transparent GIF.

I'd try to use a filter to do this, but so far can't work out the syntax enough to write the filter. Adding a sub-option to the "Send a 1x1 transparent GIF" to re-write or remove image size seems to be the best solution that I can see.

----------------------------------------------------------------------

Comment By: Lee (ler762)
Date: 2008-11-08 19:30

Message:
I'd just tell the browser not to load any images.  But it is an interesting
problem, so I gave it a go..

  code ripped from the banners-by-link filter in default.filter:

#################################################################################
#
# block-image-by-link: Block images from specified sites.
#
#################################################################################
FILTER: block-image-by-link Block images from specified sites.

s@...]*(?:\
   adlog\.pl/      |\
   ads\.yimg\.com/ |\
   atwola\.com/    |\
   doubleclick\.    \
  )[^>\1]*)\1[^>]*>\
 @<img src="http://config.privoxy.org/send-banner?type=blank"\
  border="0" title="Killed $2" height="1" width="1">@sigxU

Adjust the site list to include the site(s) hosting the oversized avatar
files & you'll need something like

{ +filter{block-image-by-link} }
.haxx0red.site.com/

in your user.action

Hope this helps,
Lee


----------------------------------------------------------------------

Comment By: Hal Burgiss (hal9)
Date: 2008-11-08 13:33

Message:
Please consider this is as observations and suggestions ...

To resize all images using Privoxy as is, is going to take a filter and of
course regular expressions. IF, the image markup is consistent, this might
not be too bad. We have some image tackling filters now and you should look
at those (if you haven't). This tends to get into regular expression hell
because of variations in syntax, and even where someone might use broken or
invalid syntax which a browser might be able to deal with, but is not
friendly to regular expressions and you wind up with a broken page. That is
why I think consistency might be helpful here.

Your idea of using the block and set-image-blocker actions sounds
reasonable to me, and is the approach I would try first, assuming the image
urls are consistently referenced. 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=2241365&group_id=11118

Actionsfile feedback item #2328556, was opened at 2008-11-22 20:08
Message generated for change (Comment added) made by ler762
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=2328556&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: david bonde (david-bo)
Assigned to: Nobody/Anonymous (nobody)
Summary: Not blocked

Initial Comment:
At http://www.idg.se/2.1085/1.194121/ryska-hackare-snodde-min-laxa

the following flash should be blocked 

http://adtech.panthercustomer.com/apps/35/Ad2090531St3Sz16Sq2184983V0Id2/tavling_336X280_2.swf?targetTAG=_blank&clickTarget=_blank&pathTAG=http%3A//adtech.panthercustomer.com/apps/35/Ad2090531St3Sz16Sq2184983V0Id2/&closeTAG=javascript%3AcloseAdLayer1040300%28%29&openTAG=javascript%3AopenAdLayer1040300%28%29&expandTAG=javascript%3Aexpand1040300%28%29&collapseTAG=javascript%3Acollapse1040300%28%29&clicktarget=_blank&clickTarget=_blank&clickTARGET=_blank&CURRENTDOMAIN=www.idg.se

----------------------------------------------------------------------

Comment By: Lee (ler762)
Date: 2008-12-22 15:58

Message:
They're both blocked for me.

What do you get when you paste the URL into
http://config.privoxy.org/show-url-info

I get
In file: default.action View
{+change-x-forwarded-for {block}
+hide-from-header {block}
+set-image-blocker {pattern} }
/
{-filter
+handle-as-image }
/.*\.(gif|jpe?g|png|bmp|ico)($|\?)
{+block {Host matches generic block pattern.} }
ad*.



----------------------------------------------------------------------

Comment By: david bonde (david-bo)
Date: 2008-11-22 20:10

Message:
Add this picture as well

http://adtech.panthercustomer.com/apps/501/Ad1684981St3Sz16Sq2124275V0Id1/IT24_V47_ASTRAKAN.gif

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=460288&aid=2328556&group_id=11118

Feature Requests item #2456129, was opened at 2008-12-21 11:15
Message generated for change (Comment added) made by hal9
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=2456129&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Configuration
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Rustam Abdullaev (rustamabd)
Assigned to: Nobody/Anonymous (nobody)
Summary: Add automatic updates for default actions

Initial Comment:
As time goes, more and more ads begin to slip through, requiring periodic updating of the filters and/or actions configuration.
Lets setup a mechanism with which users could stay up to date with the latest filters, and also improve the process for submitting filter updates to some kind of central repository (maybe something like a wiki?)



----------------------------------------------------------------------

>Comment By: Hal Burgiss (hal9)
Date: 2008-12-21 11:39

Message:
They can always be submitted to the actionsfile feedback tracker. We don't
get very many submissions there, really. I would suspect part of the
problem its just too much trouble.

I would agree we should have a smarter update system for this kind of
thing. I'd like to see a way to take the adblock filters and adapt them to
privoxy. Let them do the work of maintaining lists.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=2456129&group_id=11118

Feature Requests item #620124, was opened at 2002-10-08 10:45
Message generated for change (Comment added) made by rustamabd
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=620124&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: funct: header disclosure
Group: version 3.2
Status: Open
Resolution: None
Priority: 6
Private: No
Submitted By: Andreas Oesterhelt (oes)
Assigned to: Nobody/Anonymous (nobody)
Summary: NTLM authentication support

Initial Comment:
Short term: Suppress attempts at NTLM authentication
Long term: Support it.

Guy's original comment in a support request:

Date: 2002-09-18 00:18
Sender: nobody
Logged In: NO 

Since this problem is happening at a company, here's
what is 
probably happening:

The company proxy is prompting for 
authentication using a list of allowable methods - one
of which
is
NTLM.  NTLM is a Microsoft-specific method that
authenticates 
TCP Connections.  All other published HTTP methods
authorize a 
Request instead of the Connection over which it 
occurs.

When given a choice of authentication methods a 
browser is supposed to pick the strongest method it can
handle.  
Only Internet Explorer can handle NTLM and in your case
that's 
what it has chosen to use.  Netscape works in your case
because
it
doesn't handle NTLM so its choice of the strongest
method is
one of
the others listed, perhaps Basic authentication.

Privoxy 
does not handle NTLM authentication.  There's not many
proxies 
or filtering tools that do.  NTLM requrires tricky
coding to
track &
manage the process of authorizing the connection over
which the 
browser request(s) will be communicated.

One possible fix 
is for Privoxy to remove the NTLM authorization header
option 
when there are other options listed in a response.  If
NTLM is
the
only authorization method listed in a response then
Privoxy could
issue a warning about non-availability of access.  Both
the Proxy-
Authenticate and WWW-Authenticate headers would have to be 
programmed because it may be either an upline proxy or
a server 
which is issuing the auth request - either 401 or 407
codes.
It may be
possible for Privoxy to handle NTLM in some future 
version.

Companies often use NTLM for authorization 
because it is connection-oriented.  NTLM can enhance an
intra-
net's firewall defenses.  Also, Microsoft has other
hooks available
in its server-based IIS and proxy to validate NTLM
users using a 
server's domain security facilities. 

NTLM takes several 
traversals over the connection and so its use is often
limited
to a
LAN becaue of its (in)efficiency and because other
things can 
happen in the wide-open internet that can have a
detrimental 
impact on it - NTLM is better within a completely
controlled 
environment.

It would be quite helpful if you could enable 
Privoxy logging of the headers sent by your upline
proxy using
both
Netscape and IE.  For security reasons, use an invalid
Id/Pwd
when
you are logging.  Post them here or send them to a
developer via 
private Email.  Without that kind of information this
request
can not
be addressed.

(Guy)

----------------------------------------------------------------------

Comment By: Rustam Abdullaev (rustamabd)
Date: 2008-12-21 17:33

Message:
Wow, I'd LOVE to have Privoxy support NTLM for intranets (at least in
pass-thru mode). Right now as a workaround I have proxy disabled in IE, and
only use privoxy with other browsers.

----------------------------------------------------------------------

Comment By: anatoly techtonik (techtonik)
Date: 2008-03-11 17:11

Message:
Logged In: YES 
user_id=669020
Originator: NO

+1

----------------------------------------------------------------------

Comment By: Andreas Oesterhelt (oes)
Date: 2003-01-24 15:03

Message:
Logged In: YES 
user_id=78811

Joining with FR  525848:

Comment By: Nobody/Anonymous (nobody)  
Date:  2002-03-05 08:21

Some Servers by Microsoft require Authentication but
do not accept anything else than their proprietary
NTLM authentication. It would be desirable for some
cases to have this in Junkbuster. Dmitry Rozmanov
already programmed such a Proxy in Python, but a tight
integration in IJB would be nice.

http://www.geocities.com/rozmanov/ntlm/

Here's what I suggest:
Upon discovery of a site that requires NTLM
authentication, IJB modifies the headers and requires
from the client basic (unen crypted) authentication.
With these credentials, it then authenticates to the
site using NTLM.

I suppose that the implementation of such a behaviour
should be easily done.

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2002-10-09 09:30

Message:
Logged In: NO 

The word-wrap on the original posting above looks horrible.  This might
end up the same way.

Here's some NTLM info.  See also FR# 525848.

The applicable technique for Privoxy will be knowing when a connection
MUST be kept persistent & reused during 
the 6-steps of NTLM connection authentication.  See section "Keeping
the connection alive" in the 1st link below.  
NOT important (not desirable) to try to decypher the encryption.  Also
important that the resulting connection (when 
authorized) remain dedicated to the original client, perhaps by blind
tunneling after step 6.

NTLM Authentication Scheme for HTTP
http://bugzilla.mozilla.org/attachment.cgi?id=53556&action=view
(same) http://www.innovation.ch/java/ntlm.html

Various info, including some sample headers in there someplace:
http://bugzilla.mozilla.org/show_bug.cgi?id=23679
http://bugzilla.mozilla.org/show_bug.cgi?id=45747

Re: Squid
http://squid.sourceforge.net/ntlm/
http://squid.sourceforge.net/ntlm/client_proxy_protocol.html

A package that hacks NTLM into Basic auth, in Python:
http://www.geocities.com/rozmanov/ntlm/

===============

I would suggest first just stripping "WWW-Authenticate: NTLM"
header IF there is any other authentication header 
present.  That circumvents NTLM which the proxy (and perhaps the client
browser) wouldn't support.  If there is no 
other authentication offered, then perhaps a 40x error ... or just ignore
& authentication will probably fail and an 
error issued by the upline server.

Full NTLM support requires strict management of connections, persistence,
etc.  Since NTLM is more intrAnet and 
rarely used for internet, full support may not be worthwhile in the near
term.  Filtering of your own company's 
intrAnet servers may not be appropriate anyway.

Note also that some M$ products, such as InterDev, will REFUSE to
cooperate with NTLM authentication when the 
product is configured for (ANY) proxy.  Apparently since M$ knows of some
deficiencies in the scheme, their 
software sometimes forbids even their own M$ proxy from using NTLM.  That
makes sense since NTLM is a 
Connection authorization mechanism -- and the existence of any
intermediate proxy violates the assumption of a 
direct connection.

(Guy)

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=361118&aid=620124&group_id=11118