Privoxy - now in Chum

Rating: 
5
Your rating: None Average: 5 (11 votes)

Privoxy is a non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. Privoxy has a flexible configuration and can be customized to suit individual needs and tastes.

Current version support HTTPS-Inspection (experimentally) which allows privoxy to also filter content requested through HTTPS.

NOTE: This isn't doing anything without some additional interaction. See gitlab README.md on what and how.

Updates will preserve the config in sailfish.action and config.sailfish. If you have edited them, check after an update and merge your changes from the *.rpmnew files.

 

BETA Feature:

Extensive adblocking including Element Hiding through AdBlock lists and the adblock2privoxy tool. See the README, and the -ab2p package.

Deprecation notice:

As the extra-lists package never produced very useful configurations, I will not be updating it. You can use the scripts from the old package to generate your own if you like them. But really use AB2P, it works.

Screenshots: 
Application versions: 
AttachmentSizeDate
File harbour-privoxy-3.0.28-5.armv7hl.rpm321.2 KB12/02/2020 - 22:00
File harbour-privoxy-extra-lists-2020.12.25-1.noarch.rpm876.55 KB26/12/2020 - 02:39
File harbour-privoxy-3.0.29-12.armv7hl.rpm357.16 KB27/12/2020 - 03:08
File harbour-privoxy-docs-3.0.29-12.noarch.rpm303.44 KB27/12/2020 - 03:08
File harbour-privoxy-extra-lists-2020.12.26-1.noarch.rpm700.9 KB27/12/2020 - 03:08
File harbour-privoxy-3.0.29-13.aarch64.rpm367.47 KB29/12/2020 - 00:05
File harbour-privoxy-3.0.29-13.i486.rpm372.03 KB29/12/2020 - 00:05
File harbour-privoxy-extra-lists-2021.01.06-2.noarch.rpm1.29 MB07/01/2021 - 04:40
File harbour-privoxy-httpd-1.1-2.noarch.rpm48.54 KB19/01/2021 - 22:10
File harbour-privoxy-extra-lists-ab2p-2021.01.19-1.noarch.rpm10.94 KB19/01/2021 - 22:10
File harbour-privoxy-docs-3.0.30-0.2git2ecae8.noarch.rpm335.81 KB19/01/2021 - 22:10
File harbour-privoxy-3.0.30-0.2git2ecae8.armv7hl.rpm376.75 KB19/01/2021 - 22:10
File harbour-privoxy-3.0.30-0.2git2ecae8.i486.rpm390.46 KB19/01/2021 - 22:10
File harbour-privoxy-3.0.30-0.2git2ecae8.aarch64.rpm385.2 KB19/01/2021 - 22:10
File harbour-privoxy-httpd-1.1-3.noarch.rpm71.15 KB21/01/2021 - 20:20
File harbour-privoxy-docs-3.0.30-1.3gitfa7a3c.noarch.rpm336.11 KB21/01/2021 - 20:20
File harbour-privoxy-ab2p-2021.01.21-1.noarch.rpm1.07 MB21/01/2021 - 20:20
File harbour-privoxy-3.0.30-1.3gitfa7a3c.i486.rpm392.52 KB21/01/2021 - 20:20
File harbour-privoxy-3.0.30-1.3gitfa7a3c.armv7hl.rpm378.81 KB21/01/2021 - 20:20
File harbour-privoxy-3.0.30-1.3gitfa7a3c.aarch64.rpm387.33 KB21/01/2021 - 20:20
File harbour-privoxy-tools-3.0.30-1.4gitfa7a3c.noarch.rpm51.57 KB21/01/2021 - 23:25
File harbour-privoxy-tools-3.0.30-1.5.noarch.rpm52.23 KB28/01/2021 - 21:17
File harbour-privoxy-docs-3.0.30-1.5.noarch.rpm336.78 KB28/01/2021 - 21:17
File harbour-privoxy-3.0.30-1.5.armv7hl.rpm377.95 KB28/01/2021 - 21:17
File harbour-privoxy-3.0.30-1.5.i486.rpm391.64 KB28/01/2021 - 21:17
File harbour-privoxy-3.0.30-1.5.aarch64.rpm386.63 KB28/01/2021 - 21:17
File harbour-privoxy-3.0.31-1.1.aarch64.rpm386.67 KB31/01/2021 - 22:00
File harbour-privoxy-3.0.31-1.1.armv7hl.rpm378.03 KB31/01/2021 - 22:00
File harbour-privoxy-3.0.31-1.1.i486.rpm391.88 KB31/01/2021 - 22:00
File harbour-privoxy-docs-3.0.31-1.1.noarch.rpm337.16 KB31/01/2021 - 22:00
File harbour-privoxy-tools-3.0.31-1.1.noarch.rpm52.31 KB31/01/2021 - 22:00
File harbour-privoxy-3.0.31-1.4.aarch64.rpm387.25 KB11/02/2021 - 12:00
File harbour-privoxy-3.0.31-1.4.armv7hl.rpm378.56 KB11/02/2021 - 12:00
File harbour-privoxy-3.0.31-1.4.i486.rpm392.45 KB11/02/2021 - 12:00
File harbour-privoxy-docs-3.0.31-1.4.noarch.rpm337.39 KB11/02/2021 - 12:00
File harbour-privoxy-tools-3.0.31-1.4.noarch.rpm52.5 KB11/02/2021 - 12:00
File harbour-privoxy-3.0.32-1.1.aarch64.rpm379.88 KB28/02/2021 - 12:48
File harbour-privoxy-3.0.32-1.1.armv7hl.rpm371.71 KB28/02/2021 - 12:48
File harbour-privoxy-3.0.32-1.1.i486.rpm385.69 KB28/02/2021 - 12:48
File harbour-privoxy-ab2p-2021.01.21-1.noarch.rpm1.1 MB28/02/2021 - 12:48
File harbour-privoxy-docs-3.0.32-1.1.noarch.rpm338.06 KB28/02/2021 - 12:48
File harbour-privoxy-httpd-1.1-3.noarch.rpm71.88 KB28/02/2021 - 12:48
File harbour-privoxy-tools-3.0.32-1.1.noarch.rpm53.03 KB28/02/2021 - 12:48
File harbour-privoxy-3.0.32obs5-1.25.2.jolla_.aarch64.rpm372.93 KB23/09/2021 - 16:13
File harbour-privoxy-3.0.32obs5-1.25.2.jolla_.armv7hl.rpm363.96 KB23/09/2021 - 16:13
File harbour-privoxy-3.0.32obs5-1.25.2.jolla_.i486.rpm378.95 KB23/09/2021 - 16:13
File harbour-privoxy-ab2p-3.0.32obs5-1.25.2.jolla_.noarch.rpm1.1 MB23/09/2021 - 16:13
File harbour-privoxy-docs-3.0.32obs5-1.25.2.jolla_.noarch.rpm339.2 KB23/09/2021 - 16:13
File harbour-privoxy-httpd-3.0.32obs5-1.25.2.jolla_.noarch.rpm72.95 KB23/09/2021 - 16:13
File harbour-privoxy-tools-3.0.32obs5-1.25.2.jolla_.noarch.rpm54.08 KB23/09/2021 - 16:13
File harbour-privoxy-3.0.33obs3-1.36.1.jolla_.aarch64.rpm376.31 KB13/12/2021 - 14:59
File harbour-privoxy-3.0.33obs3-1.36.1.jolla_.armv7hl.rpm367.11 KB13/12/2021 - 14:59
File harbour-privoxy-3.0.33obs3-1.36.1.jolla_.i486.rpm382.33 KB13/12/2021 - 14:59
File harbour-privoxy-ab2p-3.0.33obs3-1.36.1.jolla_.noarch.rpm1.1 MB13/12/2021 - 14:59
File harbour-privoxy-docs-3.0.33obs3-1.36.1.jolla_.noarch.rpm342.9 KB13/12/2021 - 14:59
File harbour-privoxy-httpd-3.0.33obs3-1.36.1.jolla_.noarch.rpm73.11 KB13/12/2021 - 14:59
File harbour-privoxy-tools-3.0.33obs3-1.36.1.jolla_.noarch.rpm55.31 KB13/12/2021 - 14:59
File harbour-privoxy-3.0.33obs3-1.1.2.jolla_.aarch64.rpm376.53 KB18/01/2023 - 22:31
File harbour-privoxy-3.0.33obs3-1.1.2.jolla_.armv7hl.rpm367.1 KB18/01/2023 - 22:31
File harbour-privoxy-3.0.33obs3-1.1.2.jolla_.i486.rpm382.36 KB18/01/2023 - 22:31
File harbour-privoxy-ab2p-3.0.33obs3-1.1.2.jolla_.noarch.rpm1.1 MB18/01/2023 - 22:31
File harbour-privoxy-docs-3.0.33obs3-1.1.2.jolla_.noarch.rpm342.86 KB18/01/2023 - 22:31
File harbour-privoxy-httpd-3.0.33obs3-1.1.2.jolla_.noarch.rpm73.07 KB18/01/2023 - 22:31
File harbour-privoxy-tools-3.0.33obs3-1.1.2.jolla_.noarch.rpm55.26 KB18/01/2023 - 22:31
File harbour-privoxy-ab2p-3.0.34obs3-1.1.1.jolla_.noarch.rpm1.1 MB06/02/2023 - 00:32
File harbour-privoxy-httpd-3.0.34obs3-1.1.1.jolla_.noarch.rpm67.01 KB06/02/2023 - 00:32
File harbour-privoxy-docs-3.0.34obs3-1.1.1.jolla_.noarch.rpm341.42 KB06/02/2023 - 00:32
File harbour-privoxy-tools-3.0.34obs3-1.1.1.jolla_.noarch.rpm51.31 KB06/02/2023 - 00:32
File harbour-privoxy-3.0.34obs3-1.1.1.jolla_.i486.rpm392.99 KB06/02/2023 - 00:32
File harbour-privoxy-3.0.34obs3-1.1.1.jolla_.armv7hl.rpm380.64 KB06/02/2023 - 00:32
File harbour-privoxy-3.0.34obs3-1.1.1.jolla_.aarch64.rpm395.22 KB06/02/2023 - 00:32
Changelog: 

3.0.34-1.1.0

  • upstream version bump

3.0.33-1.2 (a.k.a obs3-1.36.1)

  • upstream version bump, see announce.txt
  • sync config file w/ upstream
  • slight improvements to CSS and sailfish.action

3.0.32-1.2.5 (a.k.a obs5-1.25.2)

NOTE we have switched to OBS for building. If Storeman doesn not show an update for you, you probably have to uninstall the old and reinstall the newer package.

You also may have to have chum enabled to get the dependecies.

  • over to OBS/chum for building
  • update dependencies to include chum variants
  • bump mbedTLS dep
  • harden systemd services
  • tune systemd files so the daemon can start at boot
  • sync config file w/ upstream
  • update CA generation script for 4.x

3.0.32-1.2 (unreleased)

  • sync config file w/ upstream
  • update CA generation script for 4.x

3.0.32-1.1

  • upstream version bump
  • update and package ab2p package (untested)

 

3.0.31-1.4

  • add OMP url to whitelist
  • sync up default config file with upstream
  • depend on explicit mbedtls and brotli versions

3.0.31-1.1

  • bump version: 3.0.31-RELEASE
  • security release, fixes two issues that slipped into 3.0.30, OVE-20210130-0001.OVE-20210128-0001. 

3.0.30-1.5

  • bump version: 3.0.30-RELEASE
  • update ab2p task
  • add configuraton to not break jolla store downloads
  • tune cipher list for faster connestions
  • revamp package groups
  • add tools package

3.0.30-1.3

  • bump source version
  • fix systemd install locations
  • improve housekeeping timer and service
  • remove tmpfiles config in favour of housekeeping timer
  • add ab2p.task examples
  • add ab2p files as compressed tar file
  • rename -extra-lists-ab2p package to -ab2p
  • update README

3.0.30-0.2

  • add brotli compression support
  • use MbedTLS instead of OpenSSL
  • add some more default options to sailfish.action
  • tune config.sailfish for better(??) memory consumption
  • better systemd service
  • enable external filters
  • enable pcre extended host patterns
  • some improvememts to CSS
  • deprecate extra-lists package
  • add infrastructure for ab2p
  • add python-based httpd and systemd files for ab2p
  • update documentation

3.0.29-13

  • add arm64, i486 build

3.0.29-12

  • drop service pivileges to default user and inet group
  • some improved restart handling in service script
  • relax permissions on config files
  • fix cleanup certs tmpfiles.d config
  • extra-lists: update extra actions,
  • extra-lists: use new (...)-ish updater script
  • extra-lists: add fanboy-cookiemonster
  • extra-lists: remove ab2p scripts

3.0.28-5

  • Add Toggle Link and icon

 

Comments

Seven_of_nine's picture

Wonderful app! Thank you very much!

Pages load much faster!

kan's picture

Privoxy crashes while default.action is enabled.

XperiaX, armv7hl, SFOS 4.4.0.72, Privoxy 3.0.34+obs3-1.1.1 from CHUM

Mar 17 22:29:49 Sailfish kernel: harbour-privoxy[26053]: unhandled level 3 translation fault (11) at 0x003d989c, esr
0x92000007
Mar 17 22:29:49 Sailfish kernel: pgd = ffffffc09ee24000
Mar 17 22:29:49 Sailfish kernel: [003d989c] *pgd=00000000acfd1003, *pmd=00000000ac8d6003, *pte=0000000000000000
Mar 17 22:29:49 Sailfish kernel: 
Mar 17 22:29:49 Sailfish kernel: CPU: 3 PID: 26053 Comm: harbour-privoxy Tainted: G        W    3.10.84 #1
Mar 17 22:29:49 Sailfish kernel: task: ffffffc07d830c40 ti: ffffffc04b724000 task.ti: ffffffc04b724000
Mar 17 22:29:49 Sailfish kernel: pc : [<00000000f6f1a070>] lr : [<0000000000000000>] pstate: 20010030
Mar 17 22:29:49 Sailfish kernel: sp : 00000000ffd282b0
Mar 17 22:29:49 Sailfish kernel: x12: 00000000003d9898
Mar 17 22:29:49 Sailfish kernel: x11: 000000000003b2f8 x10: 0000000000000024
Mar 17 22:29:49 Sailfish kernel: x9 : 0000000000000128 x8 : 000000000039b648
Mar 17 22:29:49 Sailfish kernel: x7 : 00000000f6fc859c x6 : 00000000f71c56f0
Mar 17 22:29:49 Sailfish kernel: x5 : 00000000f6fc85d0 x4 : 000000000039e5a0
Mar 17 22:29:49 Sailfish kernel: x3 : 0000000000198000 x2 : 0000000000000000
Mar 17 22:29:49 Sailfish kernel: x1 : 0000000000000120 x0 : 0000000000223008
Mar 17 22:29:49 Sailfish kernel: 
nephros's picture

Unfortunately I'm not equipped to debug this. Seems very low-level. All I can say is that on other armv7 devices I do not see this issue. Is it reproducable (i.e. after a reboot)?

nerd7473's picture

Launching privoxy through terminal states that libmbedtls.so.3 is not found

nephros's picture

Thanks for reporting - it should not have linked to mbedtls3 actually, I'll have to check my build setups.

nerd7473's picture

In systemctl the privoxy service mentioned in the Github does not exist...

nephros's picture

Which service are you referring to? Privoxy ships between 1 and 7 systemd units depending on tools used.

nerd7473's picture

If you launch the browser through the terminal it should ignore the sailjail rules for Browser...

nephros's picture

True, but that shouldn't impact Privoxy either way.

nerd7473's picture

p.p with proxy Global Proxy not enabled is just redirected to the search engine...

nephros's picture

You will likely have to explicitly specify http://p.p, not just p.p

nerd7473's picture

That setting did not work and p.p has no redirection to the config

nephros's picture

Which setting are you referring to?

objectifnul's picture

Server not found

Browser can't find the server at www.p.p.

nephros's picture

The config address is either http://p.p (no www!), or http://config.privoxy.org

If something adds www automatically that's not ideal, probably needs to be turned off in the Browser/Mozilla settings. It think that should be

browser.fixup.alternate.enabled

 in about:config.

objectifnul's picture

No longer supported after upgrade to Sfos 4.4.0.58?

nephros's picture

I have indeed not tested on 4.4, can you be a little more specific on what isn't working?

poetaster's picture

I just wanted to say thanks. I've been running privoxy on my servers for many years and I never thought I'd have it on my phone. GREAT!

nephros's picture

My pleasure - me too :)

Next step would be for the community to share their recipes, whether they are useful in general, or for SFOS specifically.

rossholmes's picture

Thanks for the explanation. Yes, you are right - youtube-dl is the best current solution for this nasty situation..

rossholmes's picture

Since the v4 update the native Browser is quite usable. When trying to watch youtube screen gets stuck on the Ads, looks like privoxy trying to block them which is great, however it doesnt allow me to proceed to video itself. Have you got any advice for that?

nephros's picture

Yeah, I have noticed that myself.

I have tried various things to unblock YT but haven't succeeded yet.

A general strategy for nonworking sites is to:

  1. Use the web interface to  "See which rules apply and why"
  2. enable logging for blocked requests
  3. view the log
  4. Add rules to the `user.action` file which unbreak the site, something like this:
### unblock youtube
{\
-filter{FILTERNAME1} \
-filter{FILTERNAME2} \
-filter{FILTERNAME3} \
}
YOUTUBE-URL-PATTERN1
YOUTUBE-URL-PATTERN2

Of course FILTERNAME and YOUTUBE-URL-PATTERN in this example must be replaced by whatever you got from the analysis steps above.

Example to start out with:

{\
-block -filter \
-filter{google} \
}
.youtube.*
m.youtube.com/api/stats/qoe?event=streamingstats*
googlevideo.com
.googlevideo.com

I have found it hard to impossible to both use youtube, AND block anything Google.
Personally I chose to block Google and not use Youtube in the Browser, and go with youtube-dl instead.

nephros's picture

Another workaround, not a solution, is redirecting YT links to invidious. I think this is what some Android apps and Browser extensions do as well.

You can look at the scripts here for more inspiration:

https://github.com/SimonBrazell/privacy-redirect/tree/master/src/assets/...

So, for YT specifically:

  1. EIther host your own invidious instance, or select a public one from the list at https://docs.invidious.io/Invidious-Instances.md
  2. Define an alias for redirection, note that you have to replace your.invidious.server with a valid name:
    youtube-redirect = \
      +redirect{s@^(http|https)://[^/]*/watch\?(.*)@$1://your.invidious.server/watch\?$2\&thin_mode=true\&quality=medium\&dark_mode=true\&quality=medium\&dark_mode=true\&controls=1@} \
      -hide-referrer
    
  3. And then use that alias in a rule:
    {youtube-redirect}
    *.youtube.com/watch
    *.youtube.*/watch
    m.youtube.com
    youtube.com
    img.youtube.com
    www.youtube.com
    youtu.be
    s.ytimg.com
    music.youtube.com
    

This does not work if you click a link from e.g. a list of search results on YT, but it works if you ”open in new tab”.

nephros's picture

Of course, the pragmatic solution to the problem would be to disable privoxy through the web interface for watching videos, and enabling it again after ;)

nephros's picture

Usually no, you don't need to do anything as long as it's running on 127.0.0.1/loopback and not some other interface.
Slow loading pages can have several reasons, most unrelated to privoxy. My blind guess no. 1 would be DNS, followed by perhaps a transparent proxy used by your cell provider, or maybe IPv6 things. Very wild guesses all.
The easiest way to blame/unblame privoxy is to disable it from the web interface. if page loading gets faster, it's something in the config/rules. If not, the problem is somewhere else.
For debugging you can look at enabling debug options 2 and 4, or even 16 and the log file.

That being said, certain blocking rules *can* make page loading slow, but that should appear independently of your network connection. Unless of course your wifi uplink is wayyy faster than mobile.

rossholmes's picture

Thanks, my problem is not related to Privoxy I can confirm. I am able to replicate the same issue with Privoxy disabled. Appreciate all the hints above - at least I know now how to troubleshoot

rossholmes's picture

I just realised that my Browser wouldn't load any pages when I am on mobile data with Privoxy enabled. Do I need to adjust something when disconnecting from WiFi and connecting to mobile data? When WiFi on Browser works as expected.

Edit: there is internet when running on mobile data, but the Browser loading the pages very slow - not fully sure if its connected to Privoxy at all...

rossholmes's picture

Nice one, thanks! I've copied all uncompressed files from extra/ab2p/ab2p.tar
xz github folder to relevant folder /usr/share/harbour-privoxy/files/extra/ab2p... And I'm trying to add the action and filter entries to config file, but I got stuck as I have two of it: 1called config and other is called config.sailfish. Which one do I need to edit, please? Cheers

Edit: uncommented the ab2p entries at sailfish.config but the privoxy service stopped operating. I must do something very wrong

nephros's picture

Ok, I checked both the tar in master on gihub and the one in harbour-privoxy-ab2p-2021.01.21-1.noarch.rpm (which should be the same), and the contents are error-free.

It must be something else, probably a typo or something in the config.

rossholmes's picture

Thanks for the support. I might have found the cause of my problem. It's my noobish knowledge of unix systems. I didn't decompressed the tar file thoroughly.

Pages