Privoxy - now in Chum
Privoxy is a non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. Privoxy has a flexible configuration and can be customized to suit individual needs and tastes.
Current version support HTTPS-Inspection (experimentally) which allows privoxy to also filter content requested through HTTPS.
- original software: https://www.privoxy.org/
- git repo for this build: https://gitlab.com/nephros/harbour-privoxy
NOTE: This isn't doing anything without some additional interaction. See gitlab README.md on what and how.
Updates will preserve the config in sailfish.action and config.sailfish. If you have edited them, check after an update and merge your changes from the *.rpmnew files.
BETA Feature:
Extensive adblocking including Element Hiding through AdBlock lists and the adblock2privoxy tool. See the README, and the -ab2p package.
Deprecation notice:
As the extra-lists package never produced very useful configurations, I will not be updating it. You can use the scripts from the old package to generate your own if you like them. But really use AB2P, it works.
Screenshots:
Category:
Application versions:
Changelog:
3.0.34-1.1.0
- upstream version bump
3.0.33-1.2 (a.k.a obs3-1.36.1)
- upstream version bump, see announce.txt
- sync config file w/ upstream
- slight improvements to CSS and sailfish.action
3.0.32-1.2.5 (a.k.a obs5-1.25.2)
NOTE we have switched to OBS for building. If Storeman doesn not show an update for you, you probably have to uninstall the old and reinstall the newer package.
You also may have to have chum enabled to get the dependecies.
- over to OBS/chum for building
- update dependencies to include chum variants
- bump mbedTLS dep
- harden systemd services
- tune systemd files so the daemon can start at boot
- sync config file w/ upstream
- update CA generation script for 4.x
3.0.32-1.2 (unreleased)
- sync config file w/ upstream
- update CA generation script for 4.x
3.0.32-1.1
- upstream version bump
- update and package ab2p package (untested)
3.0.31-1.4
- add OMP url to whitelist
- sync up default config file with upstream
- depend on explicit mbedtls and brotli versions
3.0.31-1.1
- bump version: 3.0.31-RELEASE
- security release, fixes two issues that slipped into 3.0.30, OVE-20210130-0001.OVE-20210128-0001.
3.0.30-1.5
- bump version: 3.0.30-RELEASE
- update ab2p task
- add configuraton to not break jolla store downloads
- tune cipher list for faster connestions
- revamp package groups
- add tools package
3.0.30-1.3
- bump source version
- fix systemd install locations
- improve housekeeping timer and service
- remove tmpfiles config in favour of housekeeping timer
- add ab2p.task examples
- add ab2p files as compressed tar file
- rename -extra-lists-ab2p package to -ab2p
- update README
3.0.30-0.2
- add brotli compression support
- use MbedTLS instead of OpenSSL
- add some more default options to sailfish.action
- tune config.sailfish for better(??) memory consumption
- better systemd service
- enable external filters
- enable pcre extended host patterns
- some improvememts to CSS
- deprecate extra-lists package
- add infrastructure for ab2p
- add python-based httpd and systemd files for ab2p
- update documentation
3.0.29-13
- add arm64, i486 build
3.0.29-12
- drop service pivileges to default user and inet group
- some improved restart handling in service script
- relax permissions on config files
- fix cleanup certs tmpfiles.d config
- extra-lists: update extra actions,
- extra-lists: use new (...)-ish updater script
- extra-lists: add fanboy-cookiemonster
- extra-lists: remove ab2p scripts
3.0.28-5
- Add Toggle Link and icon
Comments
nerd7473
Wed, 2023/01/25 - 20:11
Permalink
Launching privoxy through terminal states that libmbedtls.so.3 is not found
nephros
Thu, 2023/01/26 - 12:17
Permalink
Thanks for reporting - it should not have linked to mbedtls3 actually, I'll have to check my build setups.
nerd7473
Wed, 2023/01/25 - 20:06
Permalink
In systemctl the privoxy service mentioned in the Github does not exist...
nephros
Tue, 2023/01/31 - 16:31
Permalink
Which service are you referring to? Privoxy ships between 1 and 7 systemd units depending on tools used.
nerd7473
Wed, 2023/01/25 - 19:53
Permalink
If you launch the browser through the terminal it should ignore the sailjail rules for Browser...
nephros
Thu, 2023/01/26 - 12:19
Permalink
True, but that shouldn't impact Privoxy either way.
nerd7473
Wed, 2023/01/25 - 19:51
Permalink
p.p with proxy Global Proxy not enabled is just redirected to the search engine...
nephros
Thu, 2023/01/26 - 12:18
Permalink
You will likely have to explicitly specify http://p.p, not just p.p
nerd7473
Wed, 2023/01/25 - 19:49
Permalink
That setting did not work and p.p has no redirection to the config
nephros
Thu, 2023/01/26 - 12:19
Permalink
Which setting are you referring to?
objectifnul
Tue, 2022/04/19 - 11:17
Permalink
Server not found
Browser can't find the server at www.p.p.
nephros
Tue, 2022/04/19 - 11:27
Permalink
The config address is either http://p.p (no www!), or http://config.privoxy.org
If something adds www automatically that's not ideal, probably needs to be turned off in the Browser/Mozilla settings. It think that should be
in about:config.
objectifnul
Thu, 2022/04/14 - 20:26
Permalink
No longer supported after upgrade to Sfos 4.4.0.58?
nephros
Fri, 2022/04/15 - 00:19
Permalink
I have indeed not tested on 4.4, can you be a little more specific on what isn't working?
poetaster
Fri, 2021/12/17 - 00:21
Permalink
I just wanted to say thanks. I've been running privoxy on my servers for many years and I never thought I'd have it on my phone. GREAT!
nephros
Fri, 2021/12/17 - 13:50
Permalink
My pleasure - me too :)
Next step would be for the community to share their recipes, whether they are useful in general, or for SFOS specifically.
rossholmes
Thu, 2021/03/04 - 12:35
Permalink
Thanks for the explanation. Yes, you are right - youtube-dl is the best current solution for this nasty situation..
rossholmes
Wed, 2021/03/03 - 13:41
Permalink
Since the v4 update the native Browser is quite usable. When trying to watch youtube screen gets stuck on the Ads, looks like privoxy trying to block them which is great, however it doesnt allow me to proceed to video itself. Have you got any advice for that?
nephros
Thu, 2021/03/04 - 11:51
Permalink
Yeah, I have noticed that myself.
I have tried various things to unblock YT but haven't succeeded yet.
A general strategy for nonworking sites is to:
### unblock youtube {\ -filter{FILTERNAME1} \ -filter{FILTERNAME2} \ -filter{FILTERNAME3} \ } YOUTUBE-URL-PATTERN1 YOUTUBE-URL-PATTERN2Of course FILTERNAME and YOUTUBE-URL-PATTERN in this example must be replaced by whatever you got from the analysis steps above.
Example to start out with:
{\ -block -filter \ -filter{google} \ } .youtube.* m.youtube.com/api/stats/qoe?event=streamingstats* googlevideo.com .googlevideo.comI have found it hard to impossible to both use youtube, AND block anything Google.
Personally I chose to block Google and not use Youtube in the Browser, and go with youtube-dl instead.
nephros
Mon, 2021/03/08 - 13:28
Permalink
Another workaround, not a solution, is redirecting YT links to invidious. I think this is what some Android apps and Browser extensions do as well.
You can look at the scripts here for more inspiration:
https://github.com/SimonBrazell/privacy-redirect/tree/master/src/assets/...
So, for YT specifically:
youtube-redirect = \ +redirect{s@^(http|https)://[^/]*/watch\?(.*)@$1://your.invidious.server/watch\?$2\&thin_mode=true\&quality=medium\&dark_mode=true\&quality=medium\&dark_mode=true\&controls=1@} \ -hide-referrer{youtube-redirect} *.youtube.com/watch *.youtube.*/watch m.youtube.com youtube.com img.youtube.com www.youtube.com youtu.be s.ytimg.com music.youtube.comThis does not work if you click a link from e.g. a list of search results on YT, but it works if you ”open in new tab”.
nephros
Wed, 2021/03/03 - 20:32
Permalink
Of course, the pragmatic solution to the problem would be to disable privoxy through the web interface for watching videos, and enabling it again after ;)
nephros
Sun, 2021/02/21 - 20:32
Permalink
Usually no, you don't need to do anything as long as it's running on 127.0.0.1/loopback and not some other interface.
Slow loading pages can have several reasons, most unrelated to privoxy. My blind guess no. 1 would be DNS, followed by perhaps a transparent proxy used by your cell provider, or maybe IPv6 things. Very wild guesses all.
The easiest way to blame/unblame privoxy is to disable it from the web interface. if page loading gets faster, it's something in the config/rules. If not, the problem is somewhere else.
For debugging you can look at enabling debug options 2 and 4, or even 16 and the log file.
That being said, certain blocking rules *can* make page loading slow, but that should appear independently of your network connection. Unless of course your wifi uplink is wayyy faster than mobile.
rossholmes
Sun, 2021/02/21 - 22:03
Permalink
Thanks, my problem is not related to Privoxy I can confirm. I am able to replicate the same issue with Privoxy disabled. Appreciate all the hints above - at least I know now how to troubleshoot
rossholmes
Sun, 2021/02/21 - 16:51
Permalink
I just realised that my Browser wouldn't load any pages when I am on mobile data with Privoxy enabled. Do I need to adjust something when disconnecting from WiFi and connecting to mobile data? When WiFi on Browser works as expected.
Edit: there is internet when running on mobile data, but the Browser loading the pages very slow - not fully sure if its connected to Privoxy at all...
rossholmes
Tue, 2021/01/26 - 23:19
Permalink
Nice one, thanks! I've copied all uncompressed files from extra/ab2p/ab2p.tar
xz github folder to relevant folder /usr/share/harbour-privoxy/files/extra/ab2p... And I'm trying to add the action and filter entries to config file, but I got stuck as I have two of it: 1called config and other is called config.sailfish. Which one do I need to edit, please? Cheers
Edit: uncommented the ab2p entries at sailfish.config but the privoxy service stopped operating. I must do something very wrong
nephros
Wed, 2021/01/27 - 17:11
Permalink
Ok, I checked both the tar in master on gihub and the one in harbour-privoxy-ab2p-2021.01.21-1.noarch.rpm (which should be the same), and the contents are error-free.
It must be something else, probably a typo or something in the config.
rossholmes
Wed, 2021/01/27 - 23:20
Permalink
Thanks for the support. I might have found the cause of my problem. It's my noobish knowledge of unix systems. I didn't decompressed the tar file thoroughly.
nephros
Wed, 2021/01/27 - 16:51
Permalink
Hi,
Yes, config.sailfish is the correct one.
If the service stops and doesn't come up again, there is something wrong in the config files. Probably an illegal entry in the ab2p files, or in the config.sailfish file. Did you enable the "filterfile" directives as well?
Please run:
Which will tell you where it fails.
OR, enable the 'logfile' option in config.sailfish and check /var/log/harbour-privoxy/logfile.
Note that privoxy watches all its files and will reload them whenever they change. So don't save incompletely edited files!
rossholmes
Mon, 2021/01/18 - 23:18
Permalink
Works as a charm. Guidance war clear and helpful. Thanks!!
nephros
Wed, 2021/01/20 - 02:26
Permalink
You're welcome and thanks for the feedback. I just uploaded 3.0.30 which has several improvements (I think), most importantly possibility to use converted AdBlock lists through ab2b which works much better than the previous converter script. But you have to make the files yourself.
I have updated the docs on how.
Pages