Privoxy

https://www.privoxy.org/user-manual/
Admin
Privoxy is a non-caching web proxy with advanced filtering capabilities for enhancing privacy,...
Tokens:45,432
Snippets:700
Trust Score:9.7
Update:6 months ago
Show doc for...
Tokens:
Raw
### Start Privoxy on Unix-like Systems

Source: https://www.privoxy.org/user-manual/startup.html

Example command to start Privoxy on generic Unix derivatives like Solaris or NetBSD. Specify the user and configuration file.

```bash
# /usr/sbin/privoxy --user privoxy /etc/privoxy/config
```

--------------------------------

### Start Privoxy on FreeBSD

Source: https://www.privoxy.org/user-manual/startup.html

Manually start the Privoxy service on FreeBSD. Ensure 'privoxy_enable='YES'' is in /etc/rc.conf to start on boot.

```bash
# service privoxy onestart
```

--------------------------------

### Build and Install Privoxy

Source: https://www.privoxy.org/user-manual/installation.html

Standard sequence of commands to configure, build, and install the software.

```bash
  autoheader
  autoconf
  ./configure      # (--help to see options)
  make             # (the make from GNU, sometimes called gmake)
  su               # Possibly required
  make -n install  # (to see where all the files will go)
  make -s install  # (to really install, -s to silence output)
```

--------------------------------

### Start Privoxy on Debian

Source: https://www.privoxy.org/user-manual/startup.html

Use this command to start the Privoxy service on Debian systems. Debian typically starts Privoxy on boot by default.

```bash
# /etc/init.d/privoxy start
```

--------------------------------

### Install Cygwin Utilities for Privoxy Build

Source: https://www.privoxy.org/user-manual/installation.html

List of Cygwin packages required for building Privoxy on Windows. Ensure these are selected during Cygwin setup.

```shell
Devel
    autoconf 2.5
    automake 1.15
    binutils
    cmake
    gcc-core
    gcc-g++
    git
    make
    mingw64-i686-gcc-core
    mingw64-i86-zlib
  Editors
    vim
  Libs
    libxslt: GNOME XSLT library (runtime)
  Net
    curl
    openssh
  Text
    docbook-dssl
    docbook-sgml31
    docbook-utils
    openjade
  Utils
    gnupg
  Web
    w3m
```

--------------------------------

### Install with Specific User/Group

Source: https://www.privoxy.org/user-manual/installation.html

Install Privoxy while specifying the system user and group for file ownership.

```bash
  make -s install  USER=privoxy GROUP=privoxy
```

--------------------------------

### Set Compiler Flags and Build

Source: https://www.privoxy.org/user-manual/installation.html

Example of setting environment variables for compiler and linker flags before running the configure script and building.

```bash
  $ export CFLAGS="-O2"              # set gcc optimization level
  $ export LDFLAGS="-Wl,--nxcompat"  # Enable DEP
  $ ./configure --host=i686-w64-mingw32 --enable-mingw32  --enable-zlib \
  >             --enable-static-linking --disable-pthread
  $ make                             # build Privoxy
```

--------------------------------

### Configure fast-redirects action

Source: https://www.privoxy.org/user-manual/actions-file.html

Example configuration for applying fast-redirects with different parameters to specific domains.

```text
{ +fast-redirects{simple-check} }
one.example.com

{ +fast-redirects{check-decoded-url} }
another.example.com/testing
```

--------------------------------

### Apply server-header-tagger

Source: https://www.privoxy.org/user-manual/actions-file.html

Use these examples to tag requests based on server headers, which can then control other actions.

```text
  # Tag every request with the content type declared by the server
  {+server-header-tagger{content-type}}
  /

  # If the response has a tag starting with 'image/' enable an external
  # filter that only applies to images.
  #
  # Note that the filter is not available by default, it's just a
  # `silly example`.
  {+external-filter{rotate-image} +force-text-mode}
  TAG:^image/
```

--------------------------------

### Privoxy Blocking Rules for ad.doubleclick.net

Source: https://www.privoxy.org/user-manual/appendix.html

Demonstrates various ways to block domains starting with or containing 'ad' using Privoxy's block action. Includes an example of blocking and handling as an image.

```text
  { +block{Domains starts with "ad"} }
  ad*.
```

```text
  { +block{Domain contains "ad"} }
  .ad.
```

```text
  { +block{Doubleclick banner server} +handle-as-image }
  .[a-vx-z]*.doubleclick.net
```

--------------------------------

### Inspect URL Action Matches

Source: https://www.privoxy.org/user-manual/appendix.html

Example output from the Privoxy show-url-info page showing how default and user-defined actions apply to a specific domain.

```text
  Matches for http://www.google.com:

  In file: default.action [ View ] [ Edit ]

  {+change-x-forwarded-for{block}
   +deanimate-gifs {last}
   +fast-redirects {check-decoded-url}
   +filter {refresh-tags}
   +filter {img-reorder}
   +filter {banners-by-size}
   +filter {webbugs}
   +filter {jumping-windows}
   +hide-from-header {block}
   +hide-referrer {forge}
   +session-cookies-only
   +set-image-blocker {pattern} }
  /

  { -session-cookies-only }
  .google.com

  { -fast-redirects }
  .google.com

  In file: user.action [ View ] [ Edit ]
  (no matches in this file)
```

--------------------------------

### Apply server-header-filter

Source: https://www.privoxy.org/user-manual/actions-file.html

Use these examples to rewrite or remove server headers by applying defined filters.

```text
  {+server-header-filter{html-to-xml}}
  example.org/xml-instance-that-is-delivered-as-html

  {+server-header-filter{xml-to-html}}
  example.org/instance-that-is-delivered-as-xml-but-is-not
```

--------------------------------

### System User Configuration

Source: https://www.privoxy.org/user-manual/installation.html

Example entries for system password and group files to define a dedicated Privoxy user.

```text
  privoxy:*:7777:7777:privoxy proxy:/no/home:/no/shell
```

```text
  privoxy:*:7777:
```

--------------------------------

### Define block and image handling actions

Source: https://www.privoxy.org/user-manual/appendix.html

Example of a rule that blocks a path and treats the result as an image.

```Privoxy Configuration
  { +block{Path starts with "ads".} +handle-as-image }
  /ads
```

--------------------------------

### Force Text Mode Configuration

Source: https://www.privoxy.org/user-manual/actions-file.html

Example usage of the force-text-mode action to treat documents as text.

```text
+force-text-mode
```

--------------------------------

### Configure content-type-overwrite

Source: https://www.privoxy.org/user-manual/actions-file.html

Example showing how to force a specific content type for a site while defining exceptions for specific file patterns.

```Privoxy Configuration
# Check if www.example.net/ really uses valid XHTML
  { +content-type-overwrite{application/xml} }
  www.example.net/

  # but leave the content type unmodified if the URL looks like a style sheet
  {-content-type-overwrite}
  www.example.net/.*\.css$
  www.example.net/.*style
```

--------------------------------

### Configure client-header-tagger for request filtering

Source: https://www.privoxy.org/user-manual/actions-file.html

Examples demonstrating how to tag requests based on User-Agent, Range headers, or client IP addresses to control subsequent actions.

```Privoxy Configuration
# Tag every request with the User-Agent header
  {+client-header-tagger{user-agent}}
  /

  # Tagging itself doesn't change the action
  # settings, sections with TAG patterns do:
  #
  # If it's a download agent, use a different forwarding proxy,
  # show the real User-Agent and make sure resume works.
  {+forward-override{forward-socks5 10.0.0.2:2222 .} \
   -hide-if-modified-since      \
   -overwrite-last-modified     \
   -hide-user-agent             \
   -filter                      \
   -deanimate-gifs              \
  }
  TAG:^User-Agent: NetBSD-ftp/
  TAG:^User-Agent: Novell ZYPP Installer
  TAG:^User-Agent: RPM APT-HTTP/
  TAG:^User-Agent: fetch libfetch/
  TAG:^User-Agent: Ubuntu APT-HTTP/
  TAG:^User-Agent: MPlayer/
```

```Privoxy Configuration
# Tag all requests with the Range header set
  {+client-header-tagger{range-requests}}
  /

  # Disable filtering for the tagged requests.
  #
  # With filtering enabled Privoxy would remove the Range headers
  # to be able to filter the whole response. The downside is that
  # it prevents clients from resuming downloads or skipping over
  # parts of multimedia files.
  {-filter -deanimate-gifs}
  TAG:^RANGE-REQUEST$
```

```Privoxy Configuration
# Tag all requests with the client IP address
  #
  # (Technically the client IP address isn't included in the
  # client headers but client-header taggers can set it anyway.
  # For details see the tagger in default.filter)
  {+client-header-tagger{client-ip-address}}
  /

  # Change forwarding settings for requests coming from address 10.0.0.1
  {+forward-override{forward-socks5 127.0.1.2:2222 .}}
  TAG:^IP-ADDRESS: 10\.0\.0\.1$
```

--------------------------------

### Configure User Manual Location

Source: https://www.privoxy.org/user-manual/config.html

Defines the URI for the locally installed or remote Privoxy user manual.

```text
  user-manual  /usr/share/doc/privoxy/user-manual
```

```text
  user-manual  http://example.com/privoxy/user-manual/
```

--------------------------------

### Configure forward rules

Source: https://www.privoxy.org/user-manual/config.html

Examples of routing traffic through parent proxies, including exclusions for specific ports or domains.

```text
  forward   /      parent-proxy.example.org:8080
  forward   :443   .
```

```text
  forward   /                  caching-proxy.isp.example.net:8000
  forward   .isp.example.net   .
```

```text
  forward   /                   [2001:DB8::1]:8000
```

```text
  forward  /                        parent-proxy.example.org:8000
  forward  ipv6-server.example.org  .
  forward  <[2-3][0-9a-f][0-9a-f][0-9a-f]:*>   .
```

--------------------------------

### Block Banners and Ads with Actions

Source: https://www.privoxy.org/user-manual/actions-file.html

This example demonstrates how to block banner ads and other image-based advertisements using Privoxy actions. It combines blocking with handling them as images and specifies URL patterns for blocking.

```privoxy
  { +`handle-as-image`  +`block{Banner ads.}` }
  # Block these as if they were images. Send no block page.
  banners.example.com
  media.example.com/.*banners
  .example.com/images/ads/
```

--------------------------------

### Configure NSIS Path for Windows Release Package

Source: https://www.privoxy.org/user-manual/installation.html

Example of how to set the path to the NSIS executable in the GNUmakefile for creating Windows release packages.

```makefile
# Path to NSIS
MAKENSIS = /<root-dir>/nsis/makensis.exe
```

--------------------------------

### Define a Content Filter

Source: https://www.privoxy.org/user-manual/filter-file.html

Example header line for a content filter named 'foo' that replaces text.

```text
  FILTER: foo Replace all "foo" with "bar"
```

--------------------------------

### Chain Privoxy with Squid for Local Proxying

Source: https://www.privoxy.org/user-manual/config.html

Configure Squid to use Privoxy as a parent proxy. This setup is recommended for local chaining and involves defining Privoxy as a cache peer and setting ACLs to control traffic flow.

```squid
# Define Privoxy as parent proxy (without ICP)
cache_peer 127.0.0.1 parent 8118 7 no-query

# Define ACL for protocol FTP
acl ftp proto FTP

# Do not forward FTP requests to Privoxy
always_direct allow ftp

# Forward all the rest to Privoxy
never_direct allow all
```

--------------------------------

### Configure Options for Windows

Source: https://www.privoxy.org/user-manual/installation.html

Common configuration flags for building a native Windows application under Cygwin.

```bash
  --host=i686-w64-mingw32
  --enable-mingw32
  --enable-zlib
  --enable-static-linking
  --disable-pthread
  --with-brotli
  --with-mbedtls
```

--------------------------------

### Apply suppress-tag

Source: https://www.privoxy.org/user-manual/actions-file.html

Use this example to prevent specific tags from being added to a request.

```text
  # Suppress tag produced by range-requests client-header tagger for requests coming from address 10.0.0.1
  {+suppress-tag{RANGE-REQUEST}}
  TAG:^IP-ADDRESS: 10\.0\.0\.1$
```

--------------------------------

### Build tidy-html5 for Documentation

Source: https://www.privoxy.org/user-manual/installation.html

Steps to download, configure, and build the tidy-html5 software for generating documentation. Requires CMake and a Release build type.

```shell
cd <root-dir>
cd tidy-html5-x.y.z/build/cmake
cmake ../.. -DCMAKE_BUILD_TYPE=Release -DBUILD_SHARED_LIB:BOOL=OFF -DCMAKE_INSTALL_PREFIX=/usr/local
make && make install
```

--------------------------------

### Automated Build

Source: https://www.privoxy.org/user-manual/installation.html

Shortcut command to perform the initial build steps automatically.

```bash
  make
```

--------------------------------

### Privoxy Actions for http://www.example.net/adsl/HOWTO/

Source: https://www.privoxy.org/user-manual/appendix.html

This snippet details the actions applied to a specific URL that was causing issues (blank page). It includes a comprehensive list of rules from the default.action file and a specific rule for blocking paths containing 'ads'.

```text
  {-add-header
   -block
   +change-x-forwarded-for{block}
   -client-header-filter{hide-tor-exit-notation}
   -content-type-overwrite
   -crunch-client-header
   -crunch-if-none-match
   -crunch-incoming-cookies
   -crunch-outgoing-cookies
   -crunch-server-header
   +deanimate-gifs
   -downgrade-http-version
   +fast-redirects {check-decoded-url}
   -filter {js-events}
   -filter {content-cookies}
   -filter {all-popups}
   -filter {banners-by-link}
   -filter {tiny-textforms}
   -filter {frameset-borders}
   -filter {demoronizer}
   -filter {shockwave-flash}
   -filter {quicktime-kioskmode}
   -filter {fun}
   -filter {crude-parental}
   -filter {site-specifics}
   -filter {js-annoyances}
   -filter {html-annoyances}
   +filter {refresh-tags}
   -filter {unsolicited-popups}
   +filter {img-reorder}
   +filter {banners-by-size}
   +filter {webbugs}
   +filter {jumping-windows}
   -filter {google}
   -filter {yahoo}
   -filter {msn}
   -filter {blogspot}
   -filter {no-ping}
   -force-text-mode
   -handle-as-empty-document
   -handle-as-image
   -hide-accept-language
   -hide-content-disposition
   +hide-from-header{block}
   +hide-referer{forge}
   -hide-user-agent
   -overwrite-last-modified
   +prevent-compression
   -redirect
   -server-header-filter{xml-to-html}
   -server-header-filter{html-to-xml}
   +session-cookies-only
   +set-image-blocker{blank} }
  /
```

```text
  { +block{Path contains "ads".} +handle-as-image }
  /ads
```

--------------------------------

### Download Privoxy Source Code

Source: https://www.privoxy.org/user-manual/installation.html

Commands to create a directory and clone the Privoxy Git repository. This is the first step after setting up the build environment.

```shell
mkdir <root-dir>
cd <root-dir>
git clone https://www.privoxy.org/git/privoxy.git
```

--------------------------------

### Configure Configuration Directory

Source: https://www.privoxy.org/user-manual/config.html

Sets the base directory for Privoxy configuration files.

```text
confdir /etc/privoxy
```

--------------------------------

### Define External Filter: rotate-image

Source: https://www.privoxy.org/user-manual/filter-file.html

An external filter that rotates an image by 180 degrees using the 'convert' command. This is an example of image manipulation.

```shell
EXTERNAL-FILTER: rotate-image Rotate an image by 180 degree. Test filter with limited value.
/usr/local/bin/convert - -rotate 180 -
```

--------------------------------

### Standard GNU Autotools Build Process

Source: https://www.privoxy.org/user-manual/installation.html

The standard sequence of commands for building software using GNU Autotools.

```bash
  autoheader              # creates config.h.in
  autoconf                # uses config.h.in to create the configure shell script
  ./configure [options]   # creates GNUmakefile
  make        [options]   # builds the program
```

--------------------------------

### Define External Filter: cat

Source: https://www.privoxy.org/user-manual/filter-file.html

A simple external filter that passes content through without modification using the 'cat' command. This serves as a basic example.

```text
EXTERNAL-FILTER: cat Pointless example filter that doesn't actually modify the content
/bin/cat
```

--------------------------------

### Mark URLs as Images with handle-as-image

Source: https://www.privoxy.org/user-manual/actions-file.html

Use `handle-as-image` to mark URLs as images. This is useful in conjunction with the `block` action to replace blocked banner ads with images instead of HTML pages.

```privoxy
{+handle-as-image}
/жами.*
.(gif|jpg|jpeg|png|bmp|ico)$
```

```privoxy
{+block{Nasty banners.} +handle-as-image}
nasty-banner-server.example.com/junk.cgi\?output=trash
```

--------------------------------

### Block Specific Ads by URL Pattern

Source: https://www.privoxy.org/user-manual/actions-file.html

Use the '+block' action to block specific ads by matching their URLs. This example blocks GIF ads from a specified path.

```text
{ +block{Nasty ads.} }
www.example.com/nasty-ads/sponsor\.gif
another.example.net/more/junk/here/
```

--------------------------------

### Build Static MBED-TLS Libraries for Windows

Source: https://www.privoxy.org/user-manual/installation.html

Builds static MBED-TLS libraries for a Windows platform using a cross-compiler. Sets environment variables for the build process.

```shell
export WINDOWS_BUILD=1
#  build for a Windows platform

unset DEBUG

export CC=i686-w64-mingw32-gcc
export LD=i686-w64-mingw32-gcc
export CFLAGS="-O2 -fstack-protector-strong -D_FORTIFY_SOURCE=2"
export LDFLAGS="${LDFLAGS} -fstack-protector-strong"

make lib
#  build the libraries
```

--------------------------------

### Build Privoxy Executable

Source: https://www.privoxy.org/user-manual/installation.html

Commands to build only the Privoxy executable within the root directory.

```bash
  cd <root-dir>/privoxy
  ./windows/MYconfigure && make
```

--------------------------------

### Configure Security Features

Source: https://www.privoxy.org/user-manual/installation.html

Build an executable with restricted features to prevent proxy bypass or configuration tampering.

```bash
  ./configure  --disable-toggle  --disable-editor  --disable-force
```

--------------------------------

### Redirect Blocked Images to a Specific URL

Source: https://www.privoxy.org/user-manual/actions-file.html

This snippet configures Privoxy to redirect blocked images to a specified URL. This example redirects to a FreeBSD daemon GIF. Ensure the URL is accessible.

```plaintext
+set-image-blocker{http://www.freebsd.org/gifs/dae_up3.gif}
```

--------------------------------

### Set Temporary Tag Lifetime in Privoxy

Source: https://www.privoxy.org/user-manual/config.html

Configure `client-tag-lifetime` to specify how long a temporarily enabled tag remains active. The default is 60 seconds. This example sets it to 3 minutes (180 seconds).

```config
client-tag-lifetime 180
```

--------------------------------

### Define External Filter: cat2 (Shell Script)

Source: https://www.privoxy.org/user-manual/filter-file.html

An example of an external filter implemented as a POSIX shell script. It reads lines from STDIN and echoes them to STDOUT. Semicolons are required due to line breaks not being passed to the shell.

```shell
EXTERNAL-FILTER: cat2 Pointless example filter that despite its name may actually modify the content
while read line; \
  do \
    echo "$line"; \
  done
```

--------------------------------

### Enable Content Compression

Source: https://www.privoxy.org/user-manual/config.html

Enables compression of buffered content before delivery to the client, provided the client supports it. This is mainly useful if Privoxy and the client are on different systems. Compression is only supported if Privoxy was compiled with FEATURE_COMPRESSION.

```config
enable-compression 1
```

--------------------------------

### Allow Blocking/Redirecting Privoxy CGI Requests

Source: https://www.privoxy.org/user-manual/config.html

Enable the blocking or redirection of requests to Privoxy's CGI pages. Use with caution, as it can impact the web interface and debugging, but may be useful for fine-grained access control in multi-user setups.

```privoxy
allow-cgi-request-crunching 1
```

--------------------------------

### Configure tolerate-pipelining

Source: https://www.privoxy.org/user-manual/config.html

Allows Privoxy to process multiple pipelined requests from a client connection.

```text
tolerate-pipelining 1
```

--------------------------------

### Default Actions for All URLs in Privoxy

Source: https://www.privoxy.org/user-manual/actions-file.html

Configure default actions that apply to all URLs by using the '/' pattern in the `match-all.action` file. This section sets the baseline browsing experience, with actions enabled using a '+' prefix and disabled using a '-' prefix. Long lines can be split using line continuation.

```privoxy
{ \
   +change-x-forwarded-for{block} \
   +hide-from-header{block} \
   +set-image-blocker{pattern} \
}
/ # Match all URLs
```

--------------------------------

### Clone Development Source

Source: https://www.privoxy.org/user-manual/installation.html

Retrieve the latest development version of Privoxy from the Git repository.

```bash
  cd <root-dir>
  git clone https://www.privoxy.org/git/privoxy.git
```

--------------------------------

### Configure Privoxy for HTTPS Inspection

Source: https://www.privoxy.org/user-manual/howto.html

Specify the CA directory, certificate, key, password, certificate directory, and trusted CAs file in the Privoxy configuration.

```ini
ca-directory /etc/privoxy/CA # read-only
ca-cert-file privoxy.crt     # in ca-directory
ca-key-file privoxy.pem      # in ca-directory
ca-password passphrasefromabove
certificate-directory /var/lib/privoxy/certs
trusted-cas-file /etc/ssl/certs/ca-certificates.crt
```

--------------------------------

### Build Static Brotli Libraries for Windows

Source: https://www.privoxy.org/user-manual/installation.html

Builds static Brotli libraries for a Windows i686-w64-mingw32 target using autotools and GCC. Configures for static linking and specifies host and prefix.

```shell
./bootstrap
#  to create the GNU autotools files

autoconf

export CFLAGS="-O2 -fstack-protector-strong -D_FORTIFY_SOURCE=2"
export LDFLAGS="${LDFLAGS} -fstack-protector-strong"

./configure  --host=i686-w64-mingw32 \
               --prefix=/usr/local/i686-w64-mingw32 \
               --enable-static   \
               --disable-shared  \
               --with-gnu-ld     \
               --disable-silent-rules \
    && make
```

--------------------------------

### Define Client Tags in Privoxy Config

Source: https://www.privoxy.org/user-manual/howto.html

Define a tag name and description for a client-tag in the Privoxy configuration file. This sets up the tags that can be dynamically enabled or disabled.

```config
client-specific-tag tor Use Tor anonymous proxy
client-specific-tag https-inspection Enable https-inspection
```

--------------------------------

### Configure redirect action

Source: https://www.privoxy.org/user-manual/actions-file.html

Redirect requests to specific URLs or use pcrs regex patterns to rewrite request URLs.

```Privoxy Configuration
  # Replace example.com's style sheet with another one
  { +redirect{http://localhost/css-replacements/example.com.css} }
  example.com/stylesheet\.css

  # Create a short, easy to remember nickname for a favorite site
  # (relies on the browser to accept and forward invalid URLs to Privoxy)
  { +redirect{https://www.privoxy.org/user-manual/actions-file.html} }
  a

  # Always use the expanded view for Undeadly.org articles
  # (Note the $ at the end of the URL pattern to make sure
  # the request for the rewritten URL isn't redirected as well)
  {+redirect{s@$@&mode=expanded@}}
  undeadly.org/cgi\?action=article&sid=\d*$

  # Redirect Google search requests to MSN
  {+redirect{s@^http://[^/]*/search\?q=([^&]*).*@http://search.msn.com/results.aspx?q=$1@}}
  .google.com/search

  # Redirect MSN search requests to Yahoo
  {+redirect{s@^http://[^/]*/results\.aspx\?q=([^&]*).*@http://search.yahoo.com/search?p=$1@}}
  search.msn.com//results\.aspx\?q=

  # Redirect http://example.com/&bla=fasel&toChange=foo (and any other value but "bar")
  # to       http://example.com/&bla=fasel&toChange=bar
  #
  # The URL pattern makes sure that the following request isn't redirected again.
  {+redirect{s@toChange=[^&]+@toChange=bar@}}
  example.com/.*toChange=(?!bar)

  # Add a shortcut to look up illumos bugs
  {+redirect{s@^http://i([0-9]+)/.*@https://www.illumos.org/issues/$1@}}
  # Redirected URL = http://i4974/
  # Redirect Destination = https://www.illumos.org/issues/4974
  i[0-9][0-9][0-9][0-9]*/

  # Redirect requests for the old Tor Hidden Service of the Privoxy website to the new one
  {+redirect{s@^http://jvauzb4sb3bwlsnc.onion/@http://privoxy5wtwbtk4wwyrdbg6oxeghvhghghmokcx2iawydkqmaztfbbid.onion/@}}
  jvauzb4sb3bwlsnc.onion/

  # Redirect remote requests for this manual
  # to the local version delivered by Privoxy
  {+redirect{s@^http://www@http://config@}}
  www.privoxy.org/user-manual/
```

--------------------------------

### Unpack Source Tarball

Source: https://www.privoxy.org/user-manual/installation.html

Extract the Privoxy source code from a tarball and enter the directory.

```bash
  tar xzvf privoxy-4.1.0-stable-src.tar.gz
  cd privoxy-4.1.0-stable
```

--------------------------------

### Build Static PCRE2 Libraries for Windows

Source: https://www.privoxy.org/user-manual/installation.html

Builds static PCRE2 libraries for a Windows i686-w64-mingw32 target using GCC. Includes specific CFLAGS, LDFLAGS, and CPPFLAGS for security and static linking.

```shell
export CFLAGS="-O2 -fstack-protector-strong -D_FORTIFY_SOURCE=2"
export LDFLAGS="-fstack-protector-strong"
export CPPFLAGS="-DPCRE2_STATIC"

./configure  --host=i686-w64-mingw32 \
               --prefix=/usr/local/i686-w64-mingw32 \
               --enable-jit \
               --enable-newline-is-anycrlf \
               --with-gnu-ld \
               --enable-static --disable-shared \
    &&  make
```

--------------------------------

### Multi-value action syntax

Source: https://www.privoxy.org/user-manual/actions-file.html

Syntax for actions that accumulate multiple parameters.

```text
  +`_name_`{`_param_`}   # enable action and add `_param_` to the list of parameters
  -`_name_`{`_param_`}   # remove the parameter `_param_` from the list of parameters
                 # If it was the last one left, disable the action.
  `_-name_`          # disable this action completely and remove all parameters from the list
```

--------------------------------

### Configure ca-key-file

Source: https://www.privoxy.org/user-manual/config.html

Specifies the CA key file used to sign generated certificates.

```text
ca-key-file cakey.pem
```

--------------------------------

### Image Handling Configuration

Source: https://www.privoxy.org/user-manual/actions-file.html

Defines URL patterns to be treated as images, ensuring they are handled correctly if blocked.

```text
  ##########################################################################
  # Images:
  ##########################################################################

  # Define which file types will be treated as images, in case they get
  # blocked further down this file:
  #
  { +handle-as-image }
  /.*\.(gif|jpe?g|png|bmp|ico)$
```

--------------------------------

### Set Permissions for Privoxy Certificate Directory

Source: https://www.privoxy.org/user-manual/howto.html

Configure the certificate directory to be readable only by the privoxy user. This directory stores dynamically created webserver keys and certificates.

```bash
chown privoxy /var/lib/privoxy/certs
chmod 700 /var/lib/privoxy/certs
```

--------------------------------

### Configure Privoxy Debug Levels

Source: https://www.privoxy.org/user-manual/config.html

List of available debug levels for logging specific Privoxy activities. Multiple levels can be enabled by adding values or using multiple lines.

```text
  debug     1 # Log the destination for each request. See also debug 1024.
  debug     2 # show each connection status
  debug     4 # show tagging-related messages
  debug     8 # show header parsing
  debug    16 # log all data written to the network
  debug    32 # debug force feature
  debug    64 # debug regular expression filters
  debug   128 # debug redirects
  debug   256 # debug GIF de-animation
  debug   512 # Common Log Format
  debug  1024 # Log the destination for requests Privoxy didn't let through, and the reason why.
  debug  2048 # CGI user interface
  debug  4096 # Startup banner and warnings.
  debug  8192 # Non-fatal errors
  debug 32768 # log all data read from the network
  debug 65536 # Log the applying actions
```

--------------------------------

### Verify HTTPS Inspection Configuration Output

Source: https://www.privoxy.org/user-manual/howto.html

Check the output of the configure script to confirm that a supported TLS library has been detected for HTTPS inspection.

```text
  configure: Detected OpenSSL. Enabling https inspection.
  configure: Detected mbedTLS. Enabling https inspection.
  configure: Detected wolfSSL. Enabling https inspection.
```

--------------------------------

### Parameterized action syntax

Source: https://www.privoxy.org/user-manual/actions-file.html

Syntax for enabling parameterized actions with specific values.

```text
  +`_name_`{`_param_`}  # enable action and set parameter to `_param_`,
               # overwriting parameter from previous match if necessary
  -`_name_`         # disable action. The parameter can be omitted
```

--------------------------------

### Set Permissions for Privoxy Private Key

Source: https://www.privoxy.org/user-manual/howto.html

Ensure the private key file is only accessible by the user running Privoxy. This is a critical security step.

```bash
chmod 600 privoxy.pem
chown privoxy privoxy.pem
```

--------------------------------

### Configure split-large-forms

Source: https://www.privoxy.org/user-manual/config.html

Enables splitting of large CGI forms to accommodate clients with limited URL length support.

```text
split-large-forms 1
```

--------------------------------

### Generate Privoxy CA Private Key and Certificate

Source: https://www.privoxy.org/user-manual/howto.html

Use openssl to create a private key and a self-signed CA certificate for HTTPS inspection. A 10-year validity is shown, adjust as needed for security and operational requirements.

```bash
openssl req -new -x509 -extensions v3_ca -keyout privoxy.pem -out privoxy.crt -days 3650
```

--------------------------------

### Enable https-inspection action

Source: https://www.privoxy.org/user-manual/actions-file.html

Enables decryption and filtering of encrypted traffic. Requires prior configuration of HTTPS inspection directives in the main config file.

```text
{+https-inspection}
  www.example.com
```
Tokens:
Raw