Privoxy

Logged In: YES
user_id=649219

There is no such thing as a secure operating system, but
lets not get into advocacy wars right now.

One option is to open the Services console in the
Administrative Tools and on the Logon tab enter the username as

NT AUTHORITY\LocalService

and make sure the password and confirm password fields are
blank.

This will allow the service to run as the built in "local
service" account which has limited privileges and should not
be confused with the uber-powerful LocalSystem account.

Logged In: YES
user_id=249980

Oh, I'm convinced it's an insecure operating environment.
:-) I'll see what can be done about picking the user.
Right now, it doesn't start without user intervention, so
you have ample opportnity to veto choices we make.

Logged In: YES
user_id=649219

Any potential security issues can be reduced by making sure
that the user account the service runs as is only a "limited
user" (to use XP terms). For hardcore Windows 2000/2003
administrators, that means a user who is not a member of the
Power Users or Administrators group. :-)

Note: this will not eliminate the security risk associated
in running as a service, but the risk is no greater than is
already seen when running using the svrany utility.

If you are still not convinced of the need to run the
service as a normal user, just google for "Win32 shatter
attack". Although some efforts have been made to fix the
shatter attack vulnerability in the OS, it still makes sense
to run with the lowest privileges wherever possible.

Ian

Logged In: YES
user_id=249980

It's definitely the security-issue-bearing command-line
switch version.

Logged In: YES
user_id=523169

How exactly implemented is it? Has the GUI been stripped
out to a separate file (which has been strongly
recommended), or is it just that we now support some kind
of a cmdline switch that tells us to work as a service?
(and potentially present a security issue)

Logged In: YES
user_id=249980

Implemented in 3.0.4.

Logged In: NO

Privoxy works on WIN2003 as well!

Firstly, obtain the relevant instsrv.exe and srvany.exe files for your
operating system, as there does appear to be version differences.

I installed these files to j:\Reskit

I installed the Privoxy files to j:\Privoxy

I called my service "Privoxy Internet Proxy"

1. Use instsrv.exe to install service via a dos cmd box:

j:\reskit\instsrv.exe "Privoxy Internet Proxy" j:\reskit\srvany.exe

This creates a service with appropriate name that can be seen in the
Services list in Administrative Tools.

2. Run the registry editor:

a. Start | Run| Regedit

Navigate to the appropriate service

b. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Privoxy Internet
Service

Add a new key called Parameters

c. Edit | New | Key | "Parameters"

Add a new Value within the new key called "Application"

d. Edit | New | Value | "Application"

Right click this key and select Modify, then add your application path as
the string together with the full path to your config.txt file

e: Right Click Application | Modify | "j:\Privoxy\Privoxy.exe
j:\Privoxy\config.txt"

** NOTE: The above is all one line forming the string **
There is a simple SPACE between the two addresses.
If you do NOT enter this line correctly, either your service will fail to
start or you will NOT see the Privoxy Icon in the System Tray.

3, Test your implementation.

Go to your Service within Services

a. Administrative Tools | Services | Privoxy Internet Service

Right Click the service and test that you can stop and start the service.
You will see that the Privoxy Icon appears and disappears in the System
Tray at the bottom right as you stop and start the service.

Final check, reboot the system and check that the service starts
automatically.

Surf in safety!

wisiwig
-------

Logged In: YES
user_id=615012

I saw this tracker item, but was unable to download a good
copy of the patch. Could you please verify integrity of zip
files attached?

Logged In: YES
user_id=649219

Win32 patch submitted by me to run Privoxy (both GUI and
console) as a native NT service.

See http://sourceforge.net/tracker/index.php?
func=detail&aid=665979&group_id=11118&atid=311118

Logged In: YES
user_id=523169

this fix should do the tray icon trick:

http://sourceforge.net/tracker/index.php?
func=detail&aid=612272&group_id=11118&atid=311118

_Xoft(o)

Logged In: NO

I'd like to see built-in support for a service as well. But
if that's going to take a while, I've got a tip for the tray
icon. I had this same problem, because the tray doesn't
exist when the program starts up. All I did was call
Shell_NotifyIcon repeatedly until it returned True. This
was in VB, but I'm sure the same theory applies.

Logged In: YES
user_id=199289

Hal,

> Jon, please look at FAQ 3.13, and see if
> that is adequate.

Yep, that looks fine. Thanks!

Jon

Logged In: YES
user_id=322640

Jon, please look at FAQ 3.13 (yes, oes :) in CVS, and see if
that is adequate.

Logged In: YES
user_id=199289

Hi Hal,

The Windows version puts an icon in the "notification area"
of the Windows taskbar (by the clock). This allows you to
easily view the logs, and gives an option to toggle Privoxy
on or off.

This does not work if you run Privoxy as a service with
srvany. However, Privoxy is still usable - the Linux
version doesn't even have the option of an icon, and people
seem to manage ;-)

A FAQ would be good. You could even link to the two feature
requests, since they look like they'll be around for a while.

Kind regards,

Jon.

Logged In: YES
user_id=322640

Can someone explain a little more, and I'll add a FAQ, or
something to user-manual.

It looked clear-cut for a minute until I saw the post today
from Michael Davis where he says he is running as a service
under W2k, and wants an icon in taskbar???

http://sourceforge.net/tracker/?func=detail&atid=361118&aid=521837&group_id=11118

Logged In: YES
user_id=199289

Hi,

> Should we document this
Yes.

> and close the request
No. (But I just made it low priority).

> does any Win wizard (Jon?) have plans to support
> actual "service mode" in Privoxy itself?
Not me.

It's a valid feature request, it just doesn't look like it's
going to get done by any of the current contributors.
Volunteers or patches welcome!

Blue skies,

Jon

Logged In: YES
user_id=78811

Should we document this and close
the request or doen any Win wizard
(Jon?) have plans to support actual
"service mode" in Privoxy itself?

Logged In: NO

Here is the exact registry file that I merged to use srvany:

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\JunkBuster]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\JunkBuster\Parameters]
"Application"="C:\\home\\43921\\devl\\ijb_beta\\current\\junkbuster.exe"
"AppParameters"="config.txt"
"AppDirectory"="C:\\home\\43921\\devl\\ijb_beta\\current"


Good luck

Logged In: YES
user_id=364627

Mmnhh, where i'm supposed to set that, on the junkbstr.txt
file or in the registry as a service parameter ??

Could ya elaborate some more on this ?
Remember: i get junkbuster running (shows on task manager)
but it simply doesn't work. Running WinXP Pro.

Logged In: NO

I tried loading Junkbusters as a service w/ srvany.exe and everything works
fine.

The only "caveat" is that there is no systray icon. Since
servers start before
login (in NT anyway), there is no desktop and no systray to talk to.
However,
the proxy and filtering continue to work fine for me (YMMV).

Perhaps you did not set the default startup directory to the same directory
that
Junkbusters is running out of?

--
Rodney