Re: [privoxy-users] Apple Server firewall rules for Privoxy

[Lee <le...@gm...>]

On 8/27/11, Chris Pragman <cpr...@ve...> wrote:
> DNS is already configured and working on the server. All clients already use
> the server for DNS.  Privoxy is able to make outgoing connections fine.
>
> What I need guidance on if configuring the apple firewall for port 8118.  I
> have choices like UDP, TCP,etc that need to be specified when opening a port
> in the firewall.

Allowing incoming TCP connections to port 8118.

If the firewall allows logging blocked connections you could use the
log to see what needs to be opened.

Regards,
Lee



> On Aug 27, 2011, at 6:59 AM, Fabian Keil <fk...@fa...> wrote:
>
>> Christopher Pragman <cpr...@ve...> wrote:
>>
>>> I've got a Mac 10.6 server that is providing Privoxy filtering for our
>>> whole office.  All clients in the office have their web proxy settings
>>> pointing to the server address 8118.  Privoxy on the server is set to
>>> listen on port 8118.  All was working fine for almost a year, until I
>>> got more paranoid about security and turned the Apple FireWall on for
>>> the server.  Once I turned on the firewall (managed thru Server Admin),
>>> the users couldn't surf the web anymore.
>>
>> Do they get a Privoxy error page?
>> Do you get any error messages in the log after you enabled
>> logging as described at:
>> http://www.privoxy.org/user-manual/contact.html#CONTACT-BUGS ?
>>
>>> I'm looking for what the server's firewall settings should be to accept
>>> incoming privoxy data from the clients.  It looks to me like the 8118
>>> port is already open, but it's not working, so I must be doing something
>>> wrong. Any suggestions?
>>
>> Allowing incoming connections on 8118 is a first step, but you'll also
>> have
>> to permit Privoxy to make outgoing connections. Depending on how Privoxy
>> is
>> configured, you'll additionally may have to permit DNS traffic.
>>
>> Fabian
>
> ------------------------------------------------------------------------------
> EMC VNX: the world's simplest storage, starting under $10K
> The only unified storage solution that offers unified management
> Up to 160% more powerful than alternatives and 25% more efficient.
> Guaranteed. http://p.sf.net/sfu/emc-vnx-dev2dev
> _______________________________________________
> Ijbswa-users mailing list
> Ijb...@li...
> https://lists.sourceforge.net/lists/listinfo/ijbswa-users
>