[privoxy-users] [ ijbswa-Support Requests-1685846 ] trustfile implementation - whitelist

[SourceForge.net <no...@so...>]

Support Requests item #1685846, was opened at 2007-03-22 05:35
Message generated for change (Comment added) made by hal9
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=211118&aid=1685846&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: configuration
Group: None
>Status: Pending
Priority: 5
Private: No
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: trustfile implementation - whitelist

Initial Comment:
I have a requirement for restricting access to an intranet. Effectively, I want to whitelist access to about 20 pages on this intranet and blacklist everything else. This is being done to allow certain information out to a group of semi trusted people, but not allow complete intranet access.

I have attempted to simulate this by using privoxy on my local PC and implementing the trustfile, which seemed like the right approach. 

The outcome I am looking for is that only the pages I want to be made available can be retrieved through a browser and navigating to anywhere else is blocked. Many of the pages I want to whitelist are parts of web sites (not complete sites), where I want to allow some but not all pages on the site. 
Attempts to access other pages would be returned with a custom 'page not found' error. However, that is not the effect I am getting.

Most everything I specified to be whitelisted by provoxy are being blocked - I'm wondering if that is because I am not specifying whole sites.  For example I enter 
~http://myinternaldomain.com/this-site/index.htm)
but that page is blocked by privoxy. 

If I comment out the trustfile, privoxy works very well. I'm using version 3.06 on Windows XP with firefox.

Any idea's anyone ?

Thanks in advance

mac...@ma...

----------------------------------------------------------------------

>Comment By: Hal Burgiss (hal9)
Date: 2007-03-22 07:02

Message:
Logged In: YES 
user_id=322640
Originator: NO

I believe the trustfile is going to work per domain and not per file/page.
I would try the block feature instead, which is much more flexible:

{+block}
/  #block everything

{-block}
# list specific unblock exceptions here
example.com/page1.html

There are ways around these blocks in a default installation. You can make
it much more tight by building from source and disabling certain features.
Also, I think Fabian has just put some new block related features into cvs
that can be enable through config file changes (rather than
compiling/rebuilding from source).

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=211118&aid=1685846&group_id=11118