Privoxy Custom Config - Revision history http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&action=history Revision history for this page on the wiki en MediaWiki 1.10.1 Thu, 28 Mar 2024 21:24:19 GMT Kernel-panic69: (remove direct download links) http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=56345&oldid=prev <p>(remove direct download links)</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 17:59, 4 November 2022</td> </tr> <tr><td colspan="2" align="left"><strong>Line 51:</strong></td> <td colspan="2" align="left"><strong>Line 51:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Immunicity ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Immunicity ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">'''NOTE: [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=333254 Immunicity.org is no longer in service (since 2014)<del style="color: red; font-weight: bold; text-decoration: none;">]. The PAC file is available [https://forum.dd-wrt.com/phpBB2/download.php?id=52450 here</del>].'''&lt;br&gt;</td><td>+</td><td style="background: #cfc; font-size: smaller;">'''NOTE: [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=333254 Immunicity.org is no longer in service (since 2014)].'''&lt;br&gt;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">See https://immunicity.org/ for a service-based approach; it provides a public HTTP proxy that permits access only to a predetermined list of blocked sites. The advantage is that we can use it to unblock torrent sites (or porn, if that's your thing) without needing an external proxy, a working copy of Tor, or whatever. </td><td> </td><td style="background: #eee; font-size: smaller;">See https://immunicity.org/ for a service-based approach; it provides a public HTTP proxy that permits access only to a predetermined list of blocked sites. The advantage is that we can use it to unblock torrent sites (or porn, if that's your thing) without needing an external proxy, a working copy of Tor, or whatever. </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2" align="left"><strong>Line 93:</strong></td> <td colspan="2" align="left"><strong>Line 93:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Which sites you should unblock is variable, country-specific, and not guaranteed, but there are published lists of sites that typically require a proxy. The following script uses the Immunicity URL list and generates output suitable for a Privoxy actions file.&lt;br&gt;</td><td> </td><td style="background: #eee; font-size: smaller;">Which sites you should unblock is variable, country-specific, and not guaranteed, but there are published lists of sites that typically require a proxy. The following script uses the Immunicity URL list and generates output suitable for a Privoxy actions file.&lt;br&gt;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">'''NOTE: [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=333254 Immunicity.org is no longer in service (since 2014)<del style="color: red; font-weight: bold; text-decoration: none;">]. The PAC file is available [https://forum.dd-wrt.com/phpBB2/download.php?id=52450 here</del>].'''</td><td>+</td><td style="background: #cfc; font-size: smaller;">'''NOTE: [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=333254 Immunicity.org is no longer in service (since 2014)].'''</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> #!/bin/sh</td><td> </td><td style="background: #eee; font-size: smaller;"> #!/bin/sh</td></tr> </table> Fri, 04 Nov 2022 17:59:55 GMT Kernel-panic69 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Kernel-panic69: (Add notes about Immunicity being unavailable since 2014, remove "edit" about unresponsive Immunicity server) http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=56344&oldid=prev <p>(Add notes about Immunicity being unavailable since 2014, remove &quot;edit&quot; about unresponsive Immunicity server)</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 15:14, 4 November 2022</td> </tr> <tr><td colspan="2" align="left"><strong>Line 51:</strong></td> <td colspan="2" align="left"><strong>Line 51:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Immunicity ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Immunicity ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">'''NOTE: [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=333254 Immunicity.org is no longer in service (since 2014)]. The PAC file is available [https://forum.dd-wrt.com/phpBB2/download.php?id=52450 here].'''&lt;br&gt;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">See https://immunicity.org/ for a service-based approach; it provides a public HTTP proxy that permits access only to a predetermined list of blocked sites. The advantage is that we can use it to unblock torrent sites (or porn, if that's your thing) without needing an external proxy, a working copy of Tor, or whatever. </td><td> </td><td style="background: #eee; font-size: smaller;">See https://immunicity.org/ for a service-based approach; it provides a public HTTP proxy that permits access only to a predetermined list of blocked sites. The advantage is that we can use it to unblock torrent sites (or porn, if that's your thing) without needing an external proxy, a working copy of Tor, or whatever. </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2" align="left"><strong>Line 63:</strong></td> <td colspan="2" align="left"><strong>Line 64:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Pipe that to /jffs/privoxy/immunicity.action and add an actionsfile line for it in the config file, after user.action.</td><td> </td><td style="background: #eee; font-size: smaller;">Pipe that to /jffs/privoxy/immunicity.action and add an actionsfile line for it in the config file, after user.action.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">'''Edit:''' whilst I was successful in configuring Privoxy to route traffic to Immunicity, their proxy at gateway-eu2 churned for about five minutes before throwing a &quot;connection timed out&quot; error on several different sites. Doesn't seem usable at present, and I can see it becoming a victim of its own success when it does. Worth revisiting to check this wasn't just bad timing, but I'll stick to tor.</td><td colspan="2">&nbsp;</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== Tor SOCKS5 proxy ==</td><td> </td><td style="background: #eee; font-size: smaller;">== Tor SOCKS5 proxy ==</td></tr> <tr><td colspan="2" align="left"><strong>Line 93:</strong></td> <td colspan="2" align="left"><strong>Line 92:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Generate a list of torrent sites to unblock ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Generate a list of torrent sites to unblock ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">Which sites you should unblock is variable, country-specific, and not guaranteed, but there are published lists of sites that typically require a proxy. The following script uses the Immunicity URL list and generates output suitable for a Privoxy actions file.</td><td>+</td><td style="background: #cfc; font-size: smaller;">Which sites you should unblock is variable, country-specific, and not guaranteed, but there are published lists of sites that typically require a proxy. The following script uses the Immunicity URL list and generates output suitable for a Privoxy actions file.<ins style="color: red; font-weight: bold; text-decoration: none;">&lt;br&gt;</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">'''NOTE: [https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=333254 Immunicity.org is no longer in service (since 2014)]. The PAC file is available [https://forum.dd-wrt.com/phpBB2/download.php?id=52450 here].'''</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> #!/bin/sh</td><td> </td><td style="background: #eee; font-size: smaller;"> #!/bin/sh</td></tr> </table> Fri, 04 Nov 2022 15:14:56 GMT Kernel-panic69 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Stech17: /* OpenSSH / AutoSSH SOCKS5 proxy */ http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=54746&oldid=prev <p><span class="autocomment">OpenSSH / AutoSSH SOCKS5 proxy</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 00:10, 14 March 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 139:</strong></td> <td colspan="2" align="left"><strong>Line 139:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">As far as Privoxy is concerned, SOCKS5 is just a protocol, and we don't care how it is provided. The OpenSSH client is capable of creating a SOCKS5 proxy on demand with a one-line command, provided that you have a login on a suitable machine to proxy your connections through. Here, a 'suitable machine' might mean any of:</td><td> </td><td style="background: #eee; font-size: smaller;">As far as Privoxy is concerned, SOCKS5 is just a protocol, and we don't care how it is provided. The OpenSSH client is capable of creating a SOCKS5 proxy on demand with a one-line command, provided that you have a login on a suitable machine to proxy your connections through. Here, a 'suitable machine' might mean any of:</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* a virtual private server (VPS) in a datacentre of your choice</td><td>+</td><td style="background: #cfc; font-size: smaller;">* a virtual private server (VPS) in a datacentre of your choice <ins style="color: red; font-weight: bold; text-decoration: none;">([https://vpsserver.shop/ VPS hosting options here])</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* a physical server to which you have access</td><td> </td><td style="background: #eee; font-size: smaller;">* a physical server to which you have access</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* a remote router to which you have access</td><td> </td><td style="background: #eee; font-size: smaller;">* a remote router to which you have access</td></tr> <tr><td colspan="2" align="left"><strong>Line 147:</strong></td> <td colspan="2" align="left"><strong>Line 147:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Prerequisites ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Prerequisites ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* Privoxy running on DD-WRT with custom configuration as above</td><td>+</td><td style="background: #cfc; font-size: smaller;">* Privoxy running on DD-WRT with custom configuration as above </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* Suitable remote machine</td><td> </td><td style="background: #eee; font-size: smaller;">* Suitable remote machine</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">** with SSH access</td><td> </td><td style="background: #eee; font-size: smaller;">** with SSH access</td></tr> </table> Thu, 14 Mar 2019 00:10:24 GMT Stech17 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Ian5142: Added language header. http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=54601&oldid=prev <p>Added language header.</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 22:12, 4 January 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 1:</strong></td> <td colspan="2" align="left"><strong>Line 1:</strong></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">{{Languages|Privoxy_Custom_Config}}</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">This guide assumes that you are running a version of DD-WRT that has Privoxy included into the DD-WRT firmware; it does not cover installing Privoxy from Optware, although many of the same instructions might still be useful if you do.</td><td> </td><td style="background: #eee; font-size: smaller;">This guide assumes that you are running a version of DD-WRT that has Privoxy included into the DD-WRT firmware; it does not cover installing Privoxy from Optware, although many of the same instructions might still be useful if you do.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> </table> Fri, 04 Jan 2019 22:12:54 GMT Ian5142 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Ian5142: Added Advanced tutorials category. http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=54600&oldid=prev <p>Added Advanced tutorials category.</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 22:11, 4 January 2019</td> </tr> <tr><td colspan="2" align="left"><strong>Line 155:</strong></td> <td colspan="2" align="left"><strong>Line 155:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:R7000]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:R7000]]</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Category:Advanced_tutorials]]</td></tr> </table> Fri, 04 Jan 2019 22:11:53 GMT Ian5142 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Magick777 at 05:18, 21 February 2014 http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=46260&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 05:18, 21 February 2014</td> </tr> <tr><td colspan="2" align="left"><strong>Line 153:</strong></td> <td colspan="2" align="left"><strong>Line 153:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* OpenSSH client installed on DD-WRT via Optware (not the dropbear SSH client, it doesn't support SOCKS5)</td><td> </td><td style="background: #eee; font-size: smaller;">* OpenSSH client installed on DD-WRT via Optware (not the dropbear SSH client, it doesn't support SOCKS5)</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">** passwordless, key-based SSH login to your target machine</td><td> </td><td style="background: #eee; font-size: smaller;">** passwordless, key-based SSH login to your target machine</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Category:R7000]]</td></tr> </table> Fri, 21 Feb 2014 05:18:07 GMT Magick777 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Magick777 at 01:34, 19 February 2014 http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=46244&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 01:34, 19 February 2014</td> </tr> <tr><td colspan="2" align="left"><strong>Line 15:</strong></td> <td colspan="2" align="left"><strong>Line 15:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* now visit config.privoxy.org in your browser and you'll find &quot;Edit&quot; buttons next to the actions files </td><td> </td><td style="background: #eee; font-size: smaller;">* now visit config.privoxy.org in your browser and you'll find &quot;Edit&quot; buttons next to the actions files </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">== Add exception for a site blocked in error ==</td><td>+</td><td style="background: #cfc; font-size: smaller;">== Add <ins style="color: red; font-weight: bold; text-decoration: none;">an </ins>exception for a site blocked in error ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* edit user.actions </td><td> </td><td style="background: #eee; font-size: smaller;">* edit user.actions </td></tr> <tr><td colspan="2" align="left"><strong>Line 28:</strong></td> <td colspan="2" align="left"><strong>Line 28:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* add a suitable URL pattern to that section and voila, you're unblocked.</td><td> </td><td style="background: #eee; font-size: smaller;">* add a suitable URL pattern to that section and voila, you're unblocked.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">= Chaining Privoxy to other software =</td><td>+</td><td style="background: #cfc; font-size: smaller;">= Chaining Privoxy to other software <ins style="color: red; font-weight: bold; text-decoration: none;">/ services </ins>=</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">Privoxy supports selectively forwarding web traffic over HTTP or SOCKS proxy, which means you can use it to route some or all of your web traffic over Tor, and/or to a proxy server of your choice. This has a variety of possible uses, including</td><td>+</td><td style="background: #cfc; font-size: smaller;">Privoxy supports <ins style="color: red; font-weight: bold; text-decoration: none;">'''</ins>selectively<ins style="color: red; font-weight: bold; text-decoration: none;">''' </ins>forwarding web traffic over HTTP or SOCKS proxy, which means you can use it to route some or all of your web traffic over Tor, and/or to a proxy server of your choice. This has a variety of possible uses, including</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* <del style="color: red; font-weight: bold; text-decoration: none;">cacheing </del>HTTP GET requests to minimise bandwidth use</td><td>+</td><td style="background: #cfc; font-size: smaller;">* <ins style="color: red; font-weight: bold; text-decoration: none;">caching </ins>HTTP GET requests to minimise bandwidth use</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* circumventing the blocking of e.g. torrent websites by ISPs or governments</td><td> </td><td style="background: #eee; font-size: smaller;">* circumventing the blocking of e.g. torrent websites by ISPs or governments</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* providing access to Tor hidden services</td><td>+</td><td style="background: #cfc; font-size: smaller;">* providing <ins style="color: red; font-weight: bold; text-decoration: none;">network-wide </ins>access to Tor hidden services</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">* routing <del style="color: red; font-weight: bold; text-decoration: none;">specific </del>HTTP connections through a preferred country or jurisdiction</td><td>+</td><td style="background: #cfc; font-size: smaller;">* routing HTTP connections <ins style="color: red; font-weight: bold; text-decoration: none;">to location-sensitive services </ins>through a preferred country or jurisdiction</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== HTTP caching proxy ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Privoxy can be chained with any of squid, polipo, tinyproxy, etc. for the purpose of local HTTP caching, although how much use this is to the average user on a fast, unmetered broadband connection is rather questionable, particularly if the cache is running on an embedded device such as a router. It might save some bandwidth if you have a metered connection, or an environment with a lot of users. If you want to do this, it works as described in the [http://www.privoxy.org/user-manual/config.html#FORWARDING Privoxy manual] and nothing is particularly note-worthy about doing this on DD-WRT. If you have a use for it, it works.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">== <del style="color: red; font-weight: bold; text-decoration: none;">Local </del>HTTP proxy ==</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">When using a local caching proxy, it is logical to assume that you'll be using it for all sites and therefore configuring it statically in the Privoxy config file. The same applies if you are forced to use a proxy in order to gain access to the outside world. In all other situations (and for the rest of this guide), we will assume that the purpose of chaining some other proxy onto a filtering proxy such as Privoxy is to use it selectively, with such URLs as we may specify to Privoxy to forward. </ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">== Tor ==</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== <ins style="color: red; font-weight: bold; text-decoration: none;">Remote </ins>HTTP proxy ==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Using a remote HTTP proxy will route your traffic via an alternative connection. Free proxies are generally worth exactly what you pay for them, unfortunately, so whilst this can substitute for a VPN if you have a suitable proxy available, chances are this won't be useful unless you run a proxy server of your own, or have access to a reliable one.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">==<ins style="color: red; font-weight: bold; text-decoration: none;">= Immunicity ===</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">See https://immunicity.org/ for a service-based approach; it provides a public HTTP proxy that permits access only to a predetermined list of blocked sites. The advantage is that we can use it to unblock torrent sites (or porn, if that's your thing) without needing an external proxy, a working copy of </ins>Tor<ins style="color: red; font-weight: bold; text-decoration: none;">, or whatever. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">To configure Privoxy to work with it, we'll need to generate a Privoxy actions file from Immunicity's PAC file. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> #!/bin/sh</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> echo &quot;# Immunicity forwarding ruleset created on `date`&quot;</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> wget -q -O- http://clientconfig.immunicity.org/pacs/all.pac &gt; /tmp/immunicity.pac</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> PROXY=`cat /tmp/immunicity.pac | grep &quot;var proxyserver&quot; | cut -d \' -f 2`</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> echo &quot;{+forward-override{forward $PROXY}}&quot;</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> cat /tmp/immunicity.pac | egrep \&quot;.*\&quot;\,?$ | cut -d \&quot; -f 2 | sed -e s/www.//g | sed -e s/\*.//g | sort -u | sed -e s/^/./g</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Pipe that to /jffs/privoxy/immunicity.action and add an actionsfile line for it in the config file, after user.action.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">'''Edit:''' whilst I was successful in configuring Privoxy to route traffic to Immunicity, their proxy at gateway-eu2 churned for about five minutes before throwing a &quot;connection timed out&quot; error on several different sites. Doesn't seem usable at present, and I can see it becoming a victim of its own success when it does. Worth revisiting to check this wasn't just bad timing, but I'll stick to tor.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">== Tor SOCKS5 proxy ==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=== Prerequisites ===</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* Privoxy running on DD-WRT with custom configuration as above</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* Tor either running on DD-WRT via Optware or on another machine</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">** with an accessible SOCKS port</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">** if you want network-wide access to hidden services, with accessible DNS and Trans ports also (see below)</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=== Transparent proxying and Tor - a warning =</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">'''Warning:''' transparently routing your HTTP connections through Tor provides obfuscation but not full anonymity. Your connections to TCP port 80 will be proxied via the Tor network, where so configured, but any other connections that your systems might make will not. For many users this is adequate, e.g. if you're just using Tor to get around website blocking, but it is not as secure as the dedicated Tor bundle. If that is a serious concern to you, read the Tor documentation on the subject (and don't rely on transparent proxying).</td><td> </td><td style="background: #eee; font-size: smaller;">'''Warning:''' transparently routing your HTTP connections through Tor provides obfuscation but not full anonymity. Your connections to TCP port 80 will be proxied via the Tor network, where so configured, but any other connections that your systems might make will not. For many users this is adequate, e.g. if you're just using Tor to get around website blocking, but it is not as secure as the dedicated Tor bundle. If that is a serious concern to you, read the Tor documentation on the subject (and don't rely on transparent proxying).</td></tr> <tr><td colspan="2" align="left"><strong>Line 48:</strong></td> <td colspan="2" align="left"><strong>Line 81:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Unblock torrent sites and the like ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Unblock torrent sites and the like ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">We assume that you have Tor set up on your router (or another <del style="color: red; font-weight: bold; text-decoration: none;">local </del>machine), and exposing a SOCKS proxy on 127.0.0.1:9050. You'll want to configure a Privoxy rule in user.action for selective forwarding to Tor. From the config.privoxy.org interface, edit user.actions, scroll to the end of the file, and add a new section below. Select &quot;enable&quot; for the forward-override match, and in the textbox, enter &quot;forward-socks5 127.0.0.1:9050&quot;. Then add the sites that you want to route via Tor. </td><td>+</td><td style="background: #cfc; font-size: smaller;">We assume that you have Tor set up on your router (or another machine), and <ins style="color: red; font-weight: bold; text-decoration: none;">are </ins>exposing a SOCKS proxy on 127.0.0.1:9050. You'll want to configure a Privoxy rule in user.action for selective forwarding to Tor. From the config.privoxy.org interface, edit user.actions, scroll to the end of the file, and add a new section below. Select &quot;enable&quot; for the forward-override match, and in the textbox, enter &quot;forward-socks5 127.0.0.1:9050&quot;. Then add the sites that you want to route via Tor. </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">If you'd rather work at command line, edit /jffs/privoxy/user.action and add a section at the end that reads</td><td> </td><td style="background: #eee; font-size: smaller;">If you'd rather work at command line, edit /jffs/privoxy/user.action and add a section at the end that reads</td></tr> <tr><td colspan="2" align="left"><strong>Line 55:</strong></td> <td colspan="2" align="left"><strong>Line 88:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> thepiratebay.se</td><td> </td><td style="background: #eee; font-size: smaller;"> thepiratebay.se</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">and so on. This will circumvent basic web filtering by passing your connections to the listed sites off to Tor.</td><td> </td><td style="background: #eee; font-size: smaller;">and so on. This will circumvent basic web filtering by passing your connections to the listed sites off to Tor.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">=== Generate a list of torrent sites to unblock ===</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Which sites you should unblock is variable, country-specific, and not guaranteed, but there are published lists of sites that typically require a proxy. The following script uses the Immunicity URL list and generates output suitable for a Privoxy actions file.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"> #!/bin/sh</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"> echo &quot;# Immunicity forwarding ruleset created on `date`&quot;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"> wget -q -O- http://clientconfig.immunicity.org/pacs/all.pac &gt; /tmp/immunicity.pac</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"> echo &quot;{+forward-override{forward-socks5 127.0.0.1:9050 .}}&quot;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"> cat /tmp/immunicity.pac | egrep \&quot;.*\&quot;\,?$ | cut -d \&quot; -f 2 | sed -e s/www.//g | sed -e s/\*.//g | sort -u | sed -e s/^/./g</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Pipe that to /jffs/privoxy/tor.action and include the relevant actionsfile line in your Privoxy config after the user.actions file. You are not recommended to automate generating this file unless you want it to break, just to use it as a starting point.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">'''Take note that, whilst tor can enable access to sites blocked by ISPs and governments, the use of it for bittorrent data traffic, streaming, p2p filesharing etc. is discouraged, both ideologically and technically speaking. Accessing your blocked .torrent files is fine, but please do not configure your p2p clients (including bittorrent) to use tor. See e.g. http://wiki.vuze.com/w/Tor_HowTo for some guidelines. '''</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Transparent access to .onion sites ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Transparent access to .onion sites ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">See https://grepular.com/Transparent_Access_to_Tor_Hidden_Services for the general idea. <del style="color: red; font-weight: bold; text-decoration: none;">More to follow </del>on <del style="color: red; font-weight: bold; text-decoration: none;">making </del>it <del style="color: red; font-weight: bold; text-decoration: none;">work with </del>DD-WRT.</td><td>+</td><td style="background: #cfc; font-size: smaller;">See https://grepular.com/Transparent_Access_to_Tor_Hidden_Services for the general idea. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==== Configure (fake) DNS for Tor ====</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">As per the article, you'll want Tor operating a DNSPort </ins>on <ins style="color: red; font-weight: bold; text-decoration: none;">e.g. localhost port 5300, and you'll want your local DNS server, presumably dnsmasq, resolving the queries for .onion by handing them off to Tor's DNS, which will return an IPv4 address in 10.x.x.x. Proceed exactly as per the article, but to configure dnsmasq, add</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> server=/onion/127.0.0.1#5300</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">into the dnsmasq options field of the DD-WRT GUI. You will also need to disable NoDNSRebind.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">==== Configure transparent forwarding to Tor ====</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">We used a SOCKS connection to Tor for regular domains (where we get a valid IP address), but for hidden services, we need to intercept the browser's attempt to connect to our 10.x.x.x address and feed that connection back into Tor via a transparent proxy port. Tor will resolve our IPv4 address back to the hidden service we requested and route our connection there. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> iptables -t nat -A OUTPUT -p tcp -d 10.192.0.0/11 -j REDIRECT --to-port 9040</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">should do the trick for connections coming through Privoxy. You should now be able to enter an .onion URL into your browser, have </ins>it <ins style="color: red; font-weight: bold; text-decoration: none;">resolve to a 10.x.x.x address and connect through Tor to the hidden service. You might also want to add a </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;"> iptables -t nat -A PREROUTING -p tcp -d 10.192.0.0/11 -j REDIRECT --to-port 9040</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">which will take care of non-Privoxy connections to hidden services, useful if you want to connect to e.g. IRC from something other than the router. You'll probably want to make these rules permanent by adding them to your firewall startup commands in </ins>DD-WRT.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=== Geographical restrictions on Tor exit nodes ===</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">It is possible to restrict the exit nodes that Tor will use, such that your client circuits will always finish in e.g. the UK or the USA. This is useful if you need to access something where geographical restrictions apply. </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">'''Take note that whilst you can restrict your Tor exit nodes to a specific country, you should generally not do so for the purpose of accessing streaming media services, i.e. Netflix, YouTube or other gratuitously high-bandwidth applications. See http://tor.stackexchange.com/questions/733/can-i-exit-from-a-specific-country-or-node for relevant considerations, as well as for how to make the relevant settings if appropriate.''' </ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">If what you want to do is precisely to route connections through a specific country for multimedia or file-sharing applications, e.g. BBC iPlayer or Netflix, then please consider buying a VPN service or using a virtual server. This is not normally an appropriate usage of Tor, and you won't get great performance either.</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">== OpenSSH / AutoSSH SOCKS5 proxy ==</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">As far as Privoxy is concerned, SOCKS5 is just a protocol, and we don't care how it is provided. The OpenSSH client is capable of creating a SOCKS5 proxy on demand with a one-line command, provided that you have a login on a suitable machine to proxy your connections through. Here, a 'suitable machine' might mean any of:</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* a virtual private server (VPS) in a datacentre of your choice</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* a physical server to which you have access</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* a remote router to which you have access</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* a phone or mobile device that supports an SSH server</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* a Unix/Linux shell account (subject to forwarding being allowed, which is relatively uncommon)</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">&#160;</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">=== Prerequisites ===</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">== </del>SSH <del style="color: red; font-weight: bold; text-decoration: none;">==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* Privoxy running on DD-WRT with custom configuration as above</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* Suitable remote machine</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">** with </ins>SSH <ins style="color: red; font-weight: bold; text-decoration: none;">access</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">** with TCP forwarding</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">** with access to the hosts that you intend to connect to</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">** with permission (I strongly suggest)</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">* OpenSSH client installed on DD-WRT via Optware (not the dropbear SSH client, it doesn't support SOCKS5)</ins></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">** passwordless, key-based SSH login to your target machine</ins></td></tr> </table> Wed, 19 Feb 2014 01:34:40 GMT Magick777 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Magick777: /* Tor */ http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=46242&oldid=prev <p><span class="autocomment">Tor</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 18:33, 18 February 2014</td> </tr> <tr><td colspan="2" align="left"><strong>Line 42:</strong></td> <td colspan="2" align="left"><strong>Line 42:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== Tor ==</td><td> </td><td style="background: #eee; font-size: smaller;">== Tor ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">'''Warning:''' transparently routing connections through Tor <del style="color: red; font-weight: bold; text-decoration: none;">'''</del>provides obfuscation<del style="color: red; font-weight: bold; text-decoration: none;">, </del>not anonymity''<del style="color: red; font-weight: bold; text-decoration: none;">' </del></td><td>+</td><td style="background: #cfc; font-size: smaller;">'''Warning:''' transparently routing <ins style="color: red; font-weight: bold; text-decoration: none;">your HTTP </ins>connections through Tor provides obfuscation <ins style="color: red; font-weight: bold; text-decoration: none;">but </ins>not <ins style="color: red; font-weight: bold; text-decoration: none;">full </ins>anonymity<ins style="color: red; font-weight: bold; text-decoration: none;">. Your connections to TCP port 80 will be proxied via the Tor network, where so configured, but any other connections that your systems might make will not. For many users this is adequate, e.g. if you</ins>'<ins style="color: red; font-weight: bold; text-decoration: none;">re just using Tor to get around website blocking, but it is not as secure as the dedicated Tor bundle. If that is a serious concern to you, read the Tor documentation on the subject (and don</ins>'<ins style="color: red; font-weight: bold; text-decoration: none;">t rely on transparent proxying).</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">With that said, there are (at least) two useful things you can do with Tor chained to Privoxy:</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">=== Unblock torrent sites and the like ===</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">We assume that you have Tor set up on your router (or another local machine), and exposing a SOCKS proxy on 127.0.0.1:9050. You'll want to configure a Privoxy rule in user.action for selective forwarding to Tor. From the config.privoxy.org interface, edit user.actions, scroll to the end of the file, and add a new section below. Select &quot;enable&quot; for the forward-override match, and in the textbox, enter &quot;forward-socks5 127.0.0.1:9050&quot;. Then add the sites that you want to route via Tor. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">If you'd rather work at command line, edit /jffs/privoxy/user.action and add a section at the end that reads</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"> +forward-override{forward-socks5 127.0.0.1:9050 .}</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"> torrentz.eu</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"> thepiratebay.se</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">and so on. This will circumvent basic web filtering by passing your connections to the listed sites off to Tor.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">=== Transparent access to .onion sites ===</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">See https://grepular.com/Transparent_Access_to_Tor_Hidden_Services for the general idea. More to follow on making it work with DD-WRT.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== SSH ==</td><td> </td><td style="background: #eee; font-size: smaller;">== SSH ==</td></tr> </table> Tue, 18 Feb 2014 18:33:29 GMT Magick777 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Magick777 at 17:52, 18 February 2014 http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=46241&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 17:52, 18 February 2014</td> </tr> <tr><td colspan="2" align="left"><strong>Line 1:</strong></td> <td colspan="2" align="left"><strong>Line 1:</strong></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">This guide assumes that you are running a version of DD-WRT <del style="color: red; font-weight: bold; text-decoration: none;">with </del>Privoxy included into the DD-WRT firmware; it does not cover installing Privoxy from Optware although many of the same instructions might still <del style="color: red; font-weight: bold; text-decoration: none;">apply</del>.</td><td>+</td><td style="background: #cfc; font-size: smaller;">This guide assumes that you are running a version of DD-WRT <ins style="color: red; font-weight: bold; text-decoration: none;">that has </ins>Privoxy included into the DD-WRT firmware; it does not cover installing Privoxy from Optware<ins style="color: red; font-weight: bold; text-decoration: none;">, </ins>although many of the same instructions might still <ins style="color: red; font-weight: bold; text-decoration: none;">be useful if you do</ins>.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">= Privoxy basic configuration =</td><td> </td><td style="background: #eee; font-size: smaller;">= Privoxy basic configuration =</td></tr> <tr><td colspan="2" align="left"><strong>Line 5:</strong></td> <td colspan="2" align="left"><strong>Line 5:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== Set up custom config for DD-WRT's built-in privoxy ==</td><td> </td><td style="background: #eee; font-size: smaller;">== Set up custom config for DD-WRT's built-in privoxy ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">In order to customise Privoxy's configuration files, you will need to</td><td>+</td><td style="background: #cfc; font-size: smaller;">In order <ins style="color: red; font-weight: bold; text-decoration: none;">to be able </ins>to customise Privoxy's configuration files, you will need to</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* set up read/write storage i.e. JFFS2 or USB </td><td> </td><td style="background: #eee; font-size: smaller;">* set up read/write storage i.e. JFFS2 or USB </td></tr> <tr><td colspan="2" align="left"><strong>Line 27:</strong></td> <td colspan="2" align="left"><strong>Line 27:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">-prevent-compression </td><td> </td><td style="background: #eee; font-size: smaller;">-prevent-compression </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* add a suitable URL pattern to that section and voila, you're unblocked.</td><td> </td><td style="background: #eee; font-size: smaller;">* add a suitable URL pattern to that section and voila, you're unblocked.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">= Chaining Privoxy to other software =</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Privoxy supports selectively forwarding web traffic over HTTP or SOCKS proxy, which means you can use it to route some or all of your web traffic over Tor, and/or to a proxy server of your choice. This has a variety of possible uses, including</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* cacheing HTTP GET requests to minimise bandwidth use</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* circumventing the blocking of e.g. torrent websites by ISPs or governments</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* providing access to Tor hidden services</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* routing specific HTTP connections through a preferred country or jurisdiction</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== Local HTTP proxy ==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== Tor ==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">'''Warning:''' transparently routing connections through Tor '''provides obfuscation, not anonymity''' </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== SSH ==</td></tr> </table> Tue, 18 Feb 2014 17:52:52 GMT Magick777 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config Magick777: New page: This guide assumes that you are running a version of DD-WRT with Privoxy included into the DD-WRT firmware; it does not cover installing Privoxy from Optware although many of the same inst... http://wiki.dd-wrt.com/wiki/index.php?title=Privoxy_Custom_Config&diff=46240&oldid=prev <p>New page: This guide assumes that you are running a version of DD-WRT with Privoxy included into the DD-WRT firmware; it does not cover installing Privoxy from Optware although many of the same inst...</p> <p><b>New page</b></p><div>This guide assumes that you are running a version of DD-WRT with Privoxy included into the DD-WRT firmware; it does not cover installing Privoxy from Optware although many of the same instructions might still apply.<br /> <br /> = Privoxy basic configuration =<br /> <br /> == Set up custom config for DD-WRT's built-in privoxy ==<br /> <br /> In order to customise Privoxy's configuration files, you will need to<br /> <br /> * set up read/write storage i.e. JFFS2 or USB <br /> * enable custom privoxy config (in GUI) <br /> * paste contents of /tmp/privoxy.conf into custom config window in GUI <br /> * turn on enable-edit-actions <br /> * adjust the config to use /jffs/privoxy as confdir <br /> * copy any relevant files from old confdir to new confdir <br /> * now visit config.privoxy.org in your browser and you'll find &quot;Edit&quot; buttons next to the actions files <br /> <br /> == Add exception for a site blocked in error ==<br /> <br /> * edit user.actions <br /> * scroll down until you find a ruleset that starts with: <br /> -block, <br /> -crunch-incoming-cookies, <br /> -crunch-outgoing-cookies, <br /> -fast-redirects, <br /> -filter, <br /> -hide-referrer, <br /> -prevent-compression <br /> * add a suitable URL pattern to that section and voila, you're unblocked.</div> Tue, 18 Feb 2014 17:21:29 GMT Magick777 http://wiki.dd-wrt.com/wiki/index.php/Talk:Privoxy_Custom_Config