[privoxy-users] [ ijbswa-Support Requests-1622866 ] privoxy wants contact with perfora.net

[SourceForge.net <no...@so...>]

Support Requests item #1622866, was opened at 2006-12-27 05:15
Message generated for change (Comment added) made by roncross
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=211118&aid=1622866&group_id=11118

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Closed
Priority: 5
Private: No
Submitted By: rmosx (roncross)
Assigned to: Nobody/Anonymous (nobody)
Summary: privoxy wants contact with perfora.net

Initial Comment:
version of privoxy 3.06
Mac OS X 10.4.8
Safari browser.

I have a question.  Why is Privoxy connecting with perfora.net on start up?
What is Perfora.net?

Thanks
RLC

----------------------------------------------------------------------

>Comment By: rmosx (roncross)
Date: 2006-12-27 18:51

Message:
Logged In: YES 
user_id=1028611
Originator: YES

I meant to say, "When I disabled it, the widget wouldn't work"

----------------------------------------------------------------------

Comment By: rmosx (roncross)
Date: 2006-12-27 18:50

Message:
Logged In: YES 
user_id=1028611
Originator: YES

I found the offending application.  It is the wikipedia widget that I
downloaded off of Apple's website.  When I disabled it,  The widget would
work.  I looked into perfora.net and it appears to be a webmail of some
sort located at webmailer.perfora.net.  But yes you are correct, privoxy
has nothing to do with this. 

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2006-12-27 17:41

Message:
Logged In: NO 

"perfora.net" appears to be strongly associated with spam, phishing and/or
other net abuse:

http://groups.google.com/groups?scoring=d&q=perfora.net+group:*abuse*

Privoxy itself has nothing to do with it -- neither "perfora.net" or any
of its associated IP addresses appear in the privoxy source code.

I suspect some other program -- perhaps spyware/malware of some type -- on
your system is trying to connect to perfora.net

Did you compile privoxy yourself? If not, did you get the binary from a
trusted source? Is privoxy configured to allow connections from other
machines? If so, could some other machine be using your privoxy proxy to
connect to perfora.net?

----------------------------------------------------------------------

Comment By: Fabian Keil (fabiankeil)
Date: 2006-12-27 06:07

Message:
Logged In: YES 
user_id=875547
Originator: NO

As Hal already said, a Privoxy version build from
clean sources doesn't do this. Where did you get your
Privoxy binary?

Also what makes you think that Privoxy opens the connection
for itself and not for some other program that uses Privoxy
as proxy?

If you enable "debug 8" Privoxy will log the request
headers and maybe the User-Agent will help you to
find the offending client (if there is one).

----------------------------------------------------------------------

Comment By: Hal Burgiss (hal9)
Date: 2006-12-27 05:20

Message:
Logged In: YES 
user_id=322640
Originator: NO

Not a clue. The word 'perfora' does not appear in the original sources
from SF at all. 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=211118&aid=1622866&group_id=11118