freedombox-privoxy

James Vasile [email protected]

Released under GPLv3 or later. Modifications to Privoxy are copyright 2012 James Vasile and are released under GNU General Public License, version 3 or later.

One thing many people seem to agree the FreedomBox should do is web filtering for privacy and ad-removal. Toward that end, this is a first draft version of a privoxy package for FreedomBox.

To use, you can do the usual

 cd freedombox-privoxy
 make
 sudo make install

Or if you are on a Debian system:

 cd freedombox-privoxy
 sudo apt-get build-dep privoxy
 sudo apt-get install logrotate docbook-website dpatch
 make deb
 sudo apt-get purge privoxy # yes, this is necessary the first time
 sudo dpkg -i Debian/*.deb
 sudo service freedombox-privoxy restart

If you want to see what I changed, look in Debian/freedombox-privacy*/debian/patches/9*.dpatch after doing the make deb. I'll get some binary packages up for x86 and Dream Plug soon.

This package differs from the standard Debian privoxy package in a few key ways.

• First (and most importantly) it doesn't just listen on localhost. The plan is eventually to control access to it via iptables, so by default it listens to the world. Be careful with that if your FreedomBox is reachable via public net.

• Second, I imported the https-everywhere ruleset as a privoxy action file and modified the privoxy binary to handle it.

• Third, I imported the easyprivacy ruleset from Ad-Block Plus as a privoxy action file. Easyprivacy is not included in ABP and most users are unaware that they can add it in. To me, that makes it a good candidate for inclusion here.

• Fourth, I started to pull in the easylist ruleset from ABP. It is impossible to fully duplicate easylist with a proxy because the proxy lacks information the browser uses to make more nuanced decisions about what to block. Scripted import of easylist might be buggy, and this needs more investigation.

• Fifth, I lowered the amount of filtering compared to the stock privoxy config (see the match-all.action file for details). I did this because unlike a proxy running on your local machine, a proxy that clients don't control should be a bit more careful about breaking sites. I'm trying to get down to a level where we don't break anything and then seeing how we build up from there.

If you are a privoxy user, please do give this package a test run and report any problems to:

 https://github.com/jvasile/freedombox-privoxy/issues

Further work will include writing a script to test all the https-everywhere rules and discard the ones that are broken.
As well as one to periodically check for new regexes. Anybody who wants to contribute to writing that is welcome to jump on in!

Dependencies

Privoxy

This package is based on privoxy, which is copyright (C) 2001 the SourceForge Privoxy team. http://www.privoxy.org/. Privoxy is released under GNU General Public License, version 2 or later.

Internet Junkbuster

Privoxy is in turn based on the Internet Junkbuster originally written by and copyright (C) 1997 Anonymous Coders and Junkbusters Corporation. http://www.junkbusters.com The Internet Junkbuster was released under the GNU General Public License, version 2 or later.

https-everywhere

This package downloads https-everywhere, which is released under GNU General Public License version 2 or later and has the following copyright information:

Copyright © 2010 Mike Perry [email protected] Peter Eckersley [email protected]

Incorporating code from NoScript, Copyright © 2004-2007 Giorgio Maone [email protected]

git2changelog

This package downloads git2changelog, which is copyright 2012 James Vasile and released under GNU General Public License version 3 or later.