OUR NETWORK:TiVo Community TechLore Explore3DTV DVRplayground Dijit Community See all... About UsAdvertiseContact Us

 
Learn about scoring Forum's Raw Score: 393020.0
January 7, 2012 05:35 AM

Categories: DD-WRT

Rating (0 votes)
  • 1
  • 2
  • 3
  • 4
  • 5
Rate This!

Member Avatar

efkawe

Member
Joined: 08/26/2011

Hello!

Now, I am using DD-WRT Kong Mod with my WNR3500L since a few days. I switched from Tomato, which is a vera good firmware, too. But I wanted to have some more features in the GUI and a better integration of SAMBA.

I saw the Proxy-section in the GUI and read about Privoxy. It really is an interesting theme to be able to do some more specified content filtering. I gave it a try but it did not really work for me.

First, I want to know what settings I have to do: There is an example window on the web: http://tips.desipro.de/__oneclick_uploads/2010/10/proxy.png

Is the list complete or do I have to add some more information for a standard setup.

The configuartion example in the picture means I have to enter proxy server settings for all web browsers. Or I have to enable transparent mode to filter any traffic. Is this correct?

The next question: Is there any GUI for Privoxy to do some settings (I am afriad, it is not)?

Perhaps, someone knows a good tutorial for Privoxy on a DD-WRT-Device.

Thanks!

Linksys WRT54GL (added SD-Card-support) DD-WRT Netgear WNR3500L Tomato Shibby (DD before) Languages: DE and ENG

Discussion:    Add a Comment | Comments 1-13 of 13 | Latest Comment

January 7, 2012 11:13 AM updated: January 7, 2012 11:16 AM

@efkawe

From my limited experience with Privoxy this is what I can tell you.

Your picture examples shows how to configure it with a "customer config".

I simply enabled it, left transparent mode off (had issues accessing my router's web interface eventhough privoxy was running.)

This configuration works "somewhat", I say somewhat because I was using OTRW Pixelserv script and it blocked ALL my ads. When I turned off Pixelserv and started using Privoxy, I started getting ads from some sites that I visit a lot like the DD-WRT site. Many others were effectively blocked.

About the CLIENT setup. All I had to do was go to Internet settings (Windows7) and configured my browser proxy to "Automatically detect proxy" and that did it.

I acknowledge and even agree to a large extent with Kong's comment about the dangers associated with depending on an external entity to feed your a hosts file that one day may be compromised and set you up to be suckered and sent to a malware / phishing site.

On the other hand, I think the folks at ( http://winhelp2002.mvps.org/hosts.txt ) that publish that famous hosts file would be quickly exposed by the many users of their list (especially the open source community).

So like most security-related decisions, you have to weigh your options and acceptable risk to attain a certain degree of security and ad blocking because we all know that 100% secure is ONLY achieved by pulling the network cable off the wall, and that would be another discussion :).

If Privoxy could block as much as Pixelserv, I would go all in. Now I just started testing both of them together and let's see how that goes.

@Kong - Do you have any feedback or perspective on using a hybrid approach.

I wonder if there some other check-and-balance validation of the Winhelp2000 hosts file that is used by Pixelserv.

January 7, 2012 3:45 PM updated: January 7, 2012 3:47 PM

@efkawe,

custom config is only needed if you want to use custom made rules, if you are fine with the default rules for adblocking you can disable custom config. If you want to use custom config you should first disable custom config, then log in through ssh and copy the default config under /tmp/privoxy.conf customize it e.g. by changing the paths to the action files to a location on and external media.

@zoomlink,

as I already described in a dd-wrt forum thread I don't like the mvps list, as the current scripts for reading this list have security flaws which I demonstrated, if someone hacks mvps he can redirect domain names to different ips.

January 8, 2012 3:02 AM

Tanks to you, Kong. Privoxy now works quite well "Out of the Box". I use transparency mode and a lot of advertisements and Facebook-Buttons are missing.

Later I will try some fine tuning and set up Privoxy to use my harddisk for config files etc.

Linksys WRT54GL (added SD-Card-support) DD-WRT Netgear WNR3500L Tomato Shibby (DD before) Languages: DE and ENG

January 10, 2012 8:39 AM

Maybe it is a bug, maybe it is an error of the user (i. e. of me):

Probably filters defined in the filter-section are without any influence if Privoxy is working in transparency mode. I will have to check again an make any comment on it, later.

Linksys WRT54GL (added SD-Card-support) DD-WRT Netgear WNR3500L Tomato Shibby (DD before) Languages: DE and ENG

January 10, 2012 5:57 PM

@efkawe

What are you referring to when you say 'Maybe it is a bug...'

January 11, 2012 2:09 AM

Now, I refer to my router's setup and gained experience in daily use. As I said, I did blocked some webpages on the Acces-Restrictons-tab by defining a rule and I incidentally visited a link to one of these pages and the page opend. This always happens, when Privoxy is activated. If Privoxy does not work (and all other settings stay identically), the defined pages will be blocked properly.

Did I do some wrong settings or is it a more general problem? As fare as I know filtering of Access Restriction works based on DNS-Services and Provoxy works in a different manner (action- and filter-files). Are requests, which come from Privoxy, are not influeced by thge setings of the DNS-based blocking? This would be the bug (or not if this behaviour is wanted by the programmer).

Now. it is not really a serious problem to me. I will take some time and edit Privoxy's action-files so the pages will be blocked as I want them to be.

Linksys WRT54GL (added SD-Card-support) DD-WRT Netgear WNR3500L Tomato Shibby (DD before) Languages: DE and ENG

January 11, 2012 10:44 AM

@efkawe,

the access restriction filter that is implemented in dd-wrt checks traffic from wan-lan, once ypu use privoxy, the traffic goes from wan-router router-client, thus the rule will not match and the traffic is not beeing checked. Thus you would have to either add another iptable rule or customize privoxy rules.

January 11, 2012 11:58 AM

Thanks for confirming my assuption (i tried to express a post or two ago).

Linksys WRT54GL (added SD-Card-support) DD-WRT Netgear WNR3500L Tomato Shibby (DD before) Languages: DE and ENG

January 12, 2012 5:16 AM

Now, I try to modify privoxy.conf in /tmp for some time. But somehow it does not work for me: If I reboot edited Information gets lost.
I tried to do modification in the custom configuration window (e.g. changeing directories, editable-setting,...) but there is no influence except of privoxy does not work at all.
Defining my custom action rules was possible by mounting a diretory from an USB-disk to /etc/privoxy ...
Is there a way to modify privoxy.conf permanently?

January 12, 2012 4:48 PM updated: January 12, 2012 4:58 PM

@Charly,

You should not modify the conf in /tmp as this is generated automatically, you have to use the webif to add the contents for /tmp/privoxy.conf just enable Custom Configuration and paste the contents into the text box.

Once you have done that you can check, if it was saved correctly by running command:

nvram get privoxy_conf

then check if privoxy is running:

ps | grep privoxy

and check if the /tmp/privoxy.conf contains the correct entries:

cat /tmp/privoxy.conf

March 15, 2012 12:07 AM updated: March 30, 2012 10:39 AM

Kong said: @efkawe, the access restriction filter that is implemented in dd-wrt checks traffic from wan-lan, once ypu use privoxy, the traffic goes from wan-router router-client, thus the rule will not match and the traffic is not beeing checked. Thus you would have to either add another iptable rule or customize privoxy rules.

Hi Kong, I have setup a E3000 router with Kong Build 18010 with Privoxy enabled. Proivoxy is setup as transparent. I have Access Restrictions setup for the children's devices but with Privoxy enabled the access restrictions don't work.

Can you provide iptable examples that allows Access Resitrictions and Privoxy to work together?

TIA!

March 30, 2012 10:40 AM

Bump....

April 6, 2012 10:33 AM

Transparent mode=no restrictions.

Discussion:    Add a Comment | Back to Top | Comments 1-13 of 13 | Latest Comment

Add Your Reply

(will not be displayed)

Email me when comments are added to this thread

 
 

Please log in or register to participate in this community!

Log In

Remember

Not a member? Sign up!

Did you forget your password?

You can also log in using OpenID.

close this window
close this window