[How-to] Adblock Plus filters right on router

[bilboSNB]

Three Months after Using Privoxy+Adblock Plus filters

Hi, I have been using Lonley Coders excellent host method and never tried the adblock method due to the supposed slowness however I recently upgraded from an n66u to ac68u oc'd to 1200MHz so hopefully it wont be too bad if I try it.

Does the vanilla version of privoxy block the android youtube app ads, how does it do this? This is the one thing the host method cant completely block?

 

[kvic]

Does the vanilla version of privoxy block the android youtube app ads, how does it do this? This is the one thing the host method cant completely block?

Time flies... lol. I retired Privoxy after a recent re-visit to my adblock playbook.

Lonelycoder's scripts are helpful to many users. But I'm not using his scripts. At the moment I use dnsmasq for blocking adserver domains. Also vastly expanded my block list. In order not to feed garbage into dnsmasq, I also apply filtering with a little bit of intelligence. After that it's my final block list.

I didn't recall seeing video ads in youtube. Maybe I didn't visit youtube often enough...do you have a sample link for me to try?

 

[bilboSNB]

Time flies... lol. I retired Privoxy after a recent re-visit to my adblock playbook.

Lonelycoder's scripts are helpful to many users. But I'm not using his scripts. At the moment I use dnsmasq for blocking adserver domains. Also vastly expanded my block list. In order not to feed garbage into dnsmasq, I also apply filtering with a little bit of intelligence. After that it's my final block list.

I didn't recall seeing video ads in youtube. Maybe I didn't visit youtube often enough...do you have a sample link for me to try?

There are no ads on youtube using an actual web browser, only if I use the android app, the adverts that play before what you want to watch and let you skip after five seconds, I don't have a url provide. I am presuming the ads get served from google direct hence no block.

 

[kvic]

the adverts that play before what you want to watch and let you skip after five seconds, I don't have a url provide.

That's what I was referring to too..

Thanks to your question! I got curious about it. I turned off adblock. Randomly played some clips on youtube. No ads. Google maybe put a few good tricks behind its algorithm..

Lucky or not. Eventually I found a reliable way to see ads. Pick any public playlist..e.g. those of Taylor Swift's songs. Start play from the first one. Then fast forward a few songs. In the third or fourth songs, here we see video ads! lol...it's repeatable on both PC & mobile youtube.

With my adblock turned on, I repeat the steps. Also tried a few new playlists. I don't see ads on both PC & mobile.

 

[WaVeR]

Hi ryzhov_al,

It seems that I'm using OpenDNS but the issue appeared on July

ARGS="--local-address=127.0.0.1:65053 --daemonize -R opendns"
#ARGS="--local-address=127.0.0.1:65053 --daemonize -R dnscrypt.eu-nl"

I'll change the resolver and check during the next reboot.

Should I change opendns to cisco or you'll update your package to include the new csv list?

Thanks for the feedback

Thanks ryzhov_al, I received the last update with the correct resolver names, also bash and lsof

 

[noor_ar]

These steps seem easy to follow. However , I am wondering if this would clash with Trendmicro protection and OpenDNS filtering ?

 

[shooter40sw]

@bilboSNB Please share your expierience between the to methods, I got the N66U, I use Lonycoders and works very nice, But I have some heavy lag on facebook, I look at the dnsmasq logs and whitelisted the sites there but it still lags really heavy, and some apps on the iPad also lags pretty bad, I have to disable the blocking to test, but I wanted to know you expierence between them.
Thanks

Hi, I have been using Lonley Coders excellent host method and never tried the adblock method due to the supposed slowness however I recently upgraded from an n66u to ac68u oc'd to 1200MHz so hopefully it wont be too bad if I try it.

Does the vanilla version of privoxy block the android youtube app ads, how does it do this? This is the one thing the host method cant completely block?

 

[spalife]

There are Pro's & Con's for both approaches.

I have been using the Privoxy + Ad block Plus filters on N66U for about a quarter without any issues.

Pro's:
- Easier to deploy and maintain
- Not much memory foot print
- Well maintained block lists
- Works very well with selected mobile devices
(though I do see a bit of a lag of couple of seconds in iOS devices
then in Android devices when loading same page)
- Block lists can be updated easily when needed or
Update weekly or run through a cron job to automate the process
- ryzhov_al maintains the repository excellently and is around with a helping hand when things run into trouble
- Using web admin page you can turn on/off the privoxy filtering capabilities and also adapt to suit your needs i.e., cautious, medium or extra crispy finely baked aggressiveness

Con's:
- Initial Startup time for privoxy is high i.e., if you are a very sensitive advanced user it takes about a minute
- Some Adblock Plus filters do not get translated in to Privoxy action files properly especially if you use Fanboy filters for Adblock Plus
- Expect a bit of slowness in page loads of 5 odd seconds based on the complexity of the web page and the many resources it requests

Pick the horse for your course.
Both approaches work.

kvic has excellent intro and detailed instructions on how to use
dnsmasq with hosts blocking.

He is patient, persistent and passionate about the subject.
He throws everything but the kitchen sink (pun intended) to ad blocking.

Many a times I was tempted to try the other approach but was not able to allot time for the kvic approach but I do follow his posts which are very informative.

 

[bilboSNB]

I have not gotten around to trying the adblock privoxy method yet.
I did try with just a plain privoxy install and browsing was a lot slower and pages didn't always fully load.
I tried lonely coders advanced method + lighthttpd or whatever its called and also pixelserv but for me browsing was a lot slower than just the plain advanced version of lonelycoders I dont know why this was and couldn't really be bothered to investigate very far. I am presuming with the plain advanced lonely coders method 0.0.0.0 is an instant "no page here" where as the 192.168.0.1 webserver method takes a little time to serve the block webpage pixel or plain page.

 

[kvic]

There are Pro's & Con's for both approaches.

I have been using the Privoxy + Ad block Plus filters on N66U for about a quarter without any issues.

Pro's:
- Easier to deploy and maintain
- Not much memory foot print
- Well maintained block lists
- Works very well with selected mobile devices
(though I do see a bit of a lag of couple of seconds in iOS devices
then in Android devices when loading same page)
- Block lists can be updated easily when needed or
Update weekly or run through a cron job to automate the process
- ryzhov_al maintains the repository excellently and is around with a helping hand when things run into trouble
- Using web admin page you can turn on/off the privoxy filtering capabilities and also adapt to suit your needs i.e., cautious, medium or extra crispy finely baked aggressiveness

Con's:
- Initial Startup time for privoxy is high i.e., if you are a very sensitive advanced user it takes about a minute
- Some Adblock Plus filters do not get translated in to Privoxy action files properly especially if you use Fanboy filters for Adblock Plus
- Expect a bit of slowness in page loads of 5 odd seconds based on the complexity of the web page and the many resources it requests

Pick the horse for your course.
Both approaches work.

kvic has excellent intro and detailed instructions on how to use
dnsmasq with hosts blocking.

He is patient, persistent and passionate about the subject.
He throws everything but the kitchen sink (pun intended) to ad blocking.

Many a times I was tempted to try the other approach but was not able to allot time for the kvic approach but I do follow his posts which are very informative.

Privoxy is a sophisticated piece of software. I actually won't encourage you to abandon it as long as you're happy with it. If people only want one piece of adblock software for mobile devices, it's Privoxy (with your own filters+Adblock plus filters+other filters...) The config options, "buffer-limit" and "max-client-connections" help in limiting memory footprint.

I find Privoxy interesting when I start with empty actions and filters. In this form, it's simply a http proxy. By incrementally adding a few filters, people get to see the filters in action. It's fun and can be put to great use.

The other day I was digging into iOS 9's adblock for Safari. I think running adblock on phones is not the best Apple could have come up with. It makes phone increasingly a fat client. The history of PC (as a fat client) is repeating itself... I would assert running adblock on phones (regardless of the make of OS) is poor man's adblock. People using Privoxy are way more advanced and already years ahead of mainstream users.

 

[test011]

any way to temporally turn off this with iptables command?
It would be handy when troubleshooting.

Is that possible to exclude some connections based on destination IP address?
One of messenger app I daily use uses port 80 (but not HTTP protocol) and does not work when the device is set to routed through privoxy. I got the whole range of its server IPs as destination.

I tried something like this and was unsuccessful. As you can see I am not very familiar with iptables. my privoxy filter is only one line and works as expected, so I think it's not the problem.

iptables -t nat -A OUTPUT --source [My Device IP] --destination [Messenger Server IP/mask] -p tcp -m tcp --dport 80 -j ACCEPT

I would appreciate any input.

--------------------------
I removed firewall-start entirely and set HTTP PROXY setting in Setting-WiFi on my iPhone fixed everything. Proxy server 192.168.1.1 and Port 3128. I wonder it's OK to use like this.

 

[Kendoka]

Hi, I'm trying to get this to work but I got these errors while running privoxy-blocklist_0.2.sh:

Processing https://easylist-downloads.adblockplus.org/easylist.txt ...

Downloading https://easylist-downloads.adblockplus.org/easylist.txt ...
.. downloading done.
cp: can't create '/opt/etc/privoxy/easylist.script.action': No such file or directory
cp: can't create '/opt/etc/privoxy/easylist.script.filter': No such file or directory
... https://easylist-downloads.adblockplus.org/easylist.txt installed successfully.

At first I thought everything installed correctly so I went on with the rest of the ad blocking setup but my phone (test device, the intended device is a chromecast) couldn't load any websites except those with https so I searched and found that the filters hadn't been downloaded and here I am. Any idea what would cause this?

 

[alexu112]

Hi guys,

I've decided to install privoxy along with entware on my ac56u (merlins firmware 378.56_2). The installation process gave me no errors, both privoxy and entware.
The problem is with privoxy that is blocking almost approximately all my web pages (they don't load at all, including the router page) when I add the desired ip to /firewall-start/ and reboot the router.
The funny thing is that some pages do load, and i'm quite sure those pages are not getting attention by the lists downloaded through privoxy-blocklist_0.2.sh. When deleting the firewall-start script and reboot, all goes back to normal.
Another thing is that the log file is completely missing and I have no ideea how to enable it.

Is there anything that I could do to make privoxy work on my router? Thanks.

 

[spalife]

Privoxy on the router is much better suited for filtering for few devices such as phones / tablets etc.,

It appears it is enabled for all traffic on your installation.

Do go through the Installation Instructions again on
how to assign static ip address to a device and
also iptables rules to be created.

As per how to set the log file,
you can set it through the config file found in your privoxy installation folder.

I intially enabled them but later turned it off as the file tends to get huge after use.

login through telnet / ssh
cd /opt/etc/privoxy

nano config
or
vi config

look for the debug levels section and remove the #
for what level of log output you need

For example::

# The available debug levels are:
#
# debug 1 # Log the destination for each request Privoxy let through. See also debug 1024.
# debug 2 # show each connection status
# debug 4 # show I/O status
# debug 8 # show header parsing
# debug 16 # log all data written to the network into the logfile
# debug 32 # debug force feature
# debug 64 # debug regular expression filters
# debug 128 # debug redirects
# debug 256 # debug GIF de-animation
# debug 512 # Common Log Format
## debug 1024 # Log the destination for requests Privoxy didn't let through, and the reason why.
# debug 2048 # CGI user interface
## debug 4096 # Startup banner and warnings.
## debug 8192 # Non-fatal errors


The log file will be created @
/opt/var/log/privoxy

For the issue of all web pages being blocked,
you can also trouble shoot but going to config.privoxy.org on your
privoxy enabled device and see what level you set privoxy to filter
traffic, i.e., Set to Cautious, Set to Medium, Set to Advanced etc.,

Also refer http://www.privoxy.org/faq/configuration.html

 

[WaVeR]

Hi Folks,

Since the Entware upgrade I have some issue with Privoxy.

When visiting a website, it's so slow and I have a lot of logs regarding "2aab0310 Error: Unable to take any additional connections: No such file or directory"

2015-11-20 19:12:45.708 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-20 19:12:45.946 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-20 19:12:48.726 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-20 19:12:51.859 2d06c500 Actions: +change-x-forwarded-for{block} +client-header-tagger{css-requests} +client-header-tagger{image-requests} +hide-from-header{block} +set-image-blocker{pattern}

Here's my config:

confdir /opt/etc/privoxy
logdir /opt/var/log
filterfile default.filter
logfile privoxy
actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.
actionsfile default.action   # Main actions file
actionsfile liste_ar+liste_fr+easylist.script.action
actionsfile easylistgermany.script.action
actionsfile easylistitaly.script.action
actionsfile fanboy-adblock.script.action
actionsfile advblock.script.action
actionsfile easyprivacy.script.action
actionsfile fanboy-annoyance.script.action
actionsfile malwaredomains_full.script.action
actionsfile spam404scamlist.script.action
actionsfile liste_fr.script.action
actionsfile Liste_AR.script.action
actionsfile obtrusive.script.action
actionsfile antiadblockfilters.script.action
actionsfile user.action
filterfile liste_ar+liste_fr+easylist.script.filter
filterfile easylistgermany.script.filter
filterfile easylistitaly.script.filter
filterfile fanboy-adblock.script.filter
filterfile advblock.script.filter
filterfile easyprivacy.script.filter
filterfile fanboy-annoyance.script.filter
filterfile malwaredomains_full.script.filter
filterfile spam404scamlist.script.filter
filterfile liste_fr.script.filter
filterfile Liste_AR.script.filter
filterfile obtrusive.script.filter
filterfile antiadblockfilters.script.filter
filterfile user.filter
listen-address  0.0.0.0:3128
#forward / 127.0.0.1:8123
toggle  1
enable-compression 1
compression-level 6
#enable-remote-toggle 0
enable-remote-toggle 1
enable-remote-http-toggle  0
enable-edit-actions 0
enforce-blocks 1
buffer-limit 4096
forwarded-connect-retries  0
accept-intercepted-requests 1
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 200
socket-timeout 200
permit-access  127.0.0.1 192.168.10.0/24 10.8.0.1/24
#debug     1 # Log the destination for each request Privoxy let through. See also debug 1024.
#debug     2 # show each connection status
#debug     4 # show I/O status
#debug     8 # show header parsing
#debug    16 # log all data written to the network
#debug    32 # debug force feature
#debug    64 # debug regular expression filters
#debug   128 # debug redirects
#debug   256 # debug GIF de-animation
#debug   512 # Common Log Format
##debug 32768 # log all data read from the network
debug  1024 # Log the destination for requests Privoxy didn't let through, and the reason why.
debug  4096 # Startup banner and warnings.
debug  8192 # Non-fatal errors
debug 65536 # Log the applying actions
#admin-address privoxy-admin@example.com
#proxy-info-url http://www.example.com/proxy-service.html
max-client-connections 1024

The init script:

#!/bin/sh
echo 309210 > /proc/sys/fs/file-max
ulimit -s 4096

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

. /opt/etc/init.d/rc.func

The change I have done :
max-client-connections 1024

echo 309210 > /proc/sys/fs/file-max
ulimit -s 4096


Privoxy Version:

Package: privoxy
Version: 3.0.23-3a
Depends: libc, libssp, libpcre, libpthread, zlib
Status: install user installed
Section: net
Architecture: mipselsf
Maintainer: christian.schoenebeck@gmail.com
MD5Sum: 39ae8b04ac7dec793a1eb763c7979262
Size: 185158
Filename: privoxy_3.0.23-3a_mipselsf.ipk
Conffiles:
/opt/etc/privoxy/user.action 8893ca56324166f3425c2273a8cee6ad20
/opt/etc/privoxy/user.filter a76ce78a8ba85e53e0009ff6d837b0a95d
/opt/etc/privoxy/user.trust ac5fe40269e16715d6cb0464a0de8a092a
Source: feeds/packages/net/privoxy
Description: Privoxy WEB Proxy - Homepage: www.privoxy.org
Installed-Time: 1447440102

Any idea regarding this issue?

Thanks in advance

-----
Solved by changing the value of: enforce-blocks from 1 to 0
---
Not completly solved,

Still receiving these errors:
015-11-21 11:23:08.760 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-21 11:23:09.867 2aab0310 Error: Unable to take any additional connections: No such file or directory

 

[spalife]

Hi Folks,

Since the Entware upgrade I have some issue with Privoxy.

When visiting a website, it's so slow and I have a lot of logs regarding "2aab0310 Error: Unable to take any additional connections: No such file or directory"

2015-11-20 19:12:45.708 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-20 19:12:45.946 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-20 19:12:48.726 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-20 19:12:51.859 2d06c500 Actions: +change-x-forwarded-for{block} +client-header-tagger{css-requests} +client-header-tagger{image-requests} +hide-from-header{block} +set-image-blocker{pattern}

Here's my config:

confdir /opt/etc/privoxy
logdir /opt/var/log
filterfile default.filter
logfile privoxy
actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.
actionsfile default.action   # Main actions file
actionsfile liste_ar+liste_fr+easylist.script.action
actionsfile easylistgermany.script.action
actionsfile easylistitaly.script.action
actionsfile fanboy-adblock.script.action
actionsfile advblock.script.action
actionsfile easyprivacy.script.action
actionsfile fanboy-annoyance.script.action
actionsfile malwaredomains_full.script.action
actionsfile spam404scamlist.script.action
actionsfile liste_fr.script.action
actionsfile Liste_AR.script.action
actionsfile obtrusive.script.action
actionsfile antiadblockfilters.script.action
actionsfile user.action
filterfile liste_ar+liste_fr+easylist.script.filter
filterfile easylistgermany.script.filter
filterfile easylistitaly.script.filter
filterfile fanboy-adblock.script.filter
filterfile advblock.script.filter
filterfile easyprivacy.script.filter
filterfile fanboy-annoyance.script.filter
filterfile malwaredomains_full.script.filter
filterfile spam404scamlist.script.filter
filterfile liste_fr.script.filter
filterfile Liste_AR.script.filter
filterfile obtrusive.script.filter
filterfile antiadblockfilters.script.filter
filterfile user.filter
listen-address  0.0.0.0:3128
#forward / 127.0.0.1:8123
toggle  1
enable-compression 1
compression-level 6
#enable-remote-toggle 0
enable-remote-toggle 1
enable-remote-http-toggle  0
enable-edit-actions 0
enforce-blocks 1
buffer-limit 4096
forwarded-connect-retries  0
accept-intercepted-requests 1
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 200
socket-timeout 200
permit-access  127.0.0.1 192.168.10.0/24 10.8.0.1/24
#debug     1 # Log the destination for each request Privoxy let through. See also debug 1024.
#debug     2 # show each connection status
#debug     4 # show I/O status
#debug     8 # show header parsing
#debug    16 # log all data written to the network
#debug    32 # debug force feature
#debug    64 # debug regular expression filters
#debug   128 # debug redirects
#debug   256 # debug GIF de-animation
#debug   512 # Common Log Format
##debug 32768 # log all data read from the network
debug  1024 # Log the destination for requests Privoxy didn't let through, and the reason why.
debug  4096 # Startup banner and warnings.
debug  8192 # Non-fatal errors
debug 65536 # Log the applying actions
#admin-address privoxy-admin@example.com
#proxy-info-url http://www.example.com/proxy-service.html
max-client-connections 1024

The init script:

#!/bin/sh
echo 309210 > /proc/sys/fs/file-max
ulimit -s 4096

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

. /opt/etc/init.d/rc.func

The change I have done :
max-client-connections 1024

echo 309210 > /proc/sys/fs/file-max
ulimit -s 4096


Privoxy Version:

Package: privoxy
Version: 3.0.23-3a
Depends: libc, libssp, libpcre, libpthread, zlib
Status: install user installed
Section: net
Architecture: mipselsf
Maintainer: christian.schoenebeck@gmail.com
MD5Sum: 39ae8b04ac7dec793a1eb763c7979262
Size: 185158
Filename: privoxy_3.0.23-3a_mipselsf.ipk
Conffiles:
/opt/etc/privoxy/user.action 8893ca56324166f3425c2273a8cee6ad20
/opt/etc/privoxy/user.filter a76ce78a8ba85e53e0009ff6d837b0a95d
/opt/etc/privoxy/user.trust ac5fe40269e16715d6cb0464a0de8a092a
Source: feeds/packages/net/privoxy
Description: Privoxy WEB Proxy - Homepage: www.privoxy.org
Installed-Time: 1447440102

Any idea regarding this issue?

Thanks in advance

-----
Solved by changing the value of: enforce-blocks from 1 to 0
---
Not completly solved,

Still receiving these errors:
015-11-21 11:23:08.760 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-21 11:23:09.867 2aab0310 Error: Unable to take any additional connections: No such file or directory

Have you tried Troubleshooting with just the default privoxy filters ?
i.e., removing your custom filters and actions ?

It will narrow down your issues why the pages are loading slow and running out of max file descriptors or configuration issue

 

[WaVeR]

Have you tried Troubleshooting with just the default privoxy filters ?
i.e., removing your custom filters and actions ?

It will narrow down your issues why the pages are loading slow and running out of max file descriptors or configuration issue

Hi Spalife,

I disabled all the rules as suggested and kept only the default one.

Unfortunately the error is still present

2015-11-28 09:12:13.414 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:13.415 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:13.421 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:23.122 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:33.212 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:43.284 2aab0310 Error: Unable to take any additional connections: No such file or directory

Any other suggestion?

 

[kreutpet]

Hi ,

try to get privoxy running on my AC66U

I followed the instructions on Wiki
It seems that the privoxy is enabled on the router but I do get an ERR_CONNECTION_REFUSED error on my tablet.
I do not get any log message on privoxy log when I try to access a webpage from my tablet.
Do I need to configure the proxy on my tablet?


Here the log file from my router

2015-11-29 11:05:17.836 2aab0000 Info: exiting by signal 15 .. bye
2015-11-29 11:05:17.949 2aab0000 Info: Privoxy version 3.0.23
2015-11-29 11:05:17.949 2aab0000 Info: Program name: privoxy
2015-11-29 11:05:17.950 2aab0000 Info: Loading filter file: /opt/etc/privoxy/default.filter
2015-11-29 11:05:17.951 2aab0000 Re-Filter: Reading in filter "js-annoyances" ("Get rid of particularly annoying JavaScript abuse.")

...


2015-11-29 11:09:26.467 2aab0000 Re-Filter: Adding re_filter job 's@^X-Privoxy-Control:.*@@i' to filter privoxy-control succeeded.
2015-11-29 11:09:26.467 2aab0000 Info: Loading actions file: /opt/etc/privoxy/match-all.action
2015-11-29 11:09:26.469 2aab0000 Info: Loading actions file: /opt/etc/privoxy/default.action
2015-11-29 11:09:26.522 2aab0000 Connect: Initialized 100 socket slots.
2015-11-29 11:09:26.522 2aab0000 Info: Listening on port 8118 on IP address 127.0.0.1
2015-11-29 11:09:26.523 2aab0000 Connect: Listening for new connections ...

Here my config file

#
# original configuration file used by privoxy
# this is no longer supported by this package
# it's converted and moved to uci configuration
# please look at /etc/config/privoxy
#
confdir /opt/etc/privoxy
logdir /opt/var/log
logfile privoxy.log
filterfile default.filter
actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.
actionsfile default.action   # Main actions file
#actionsfile user.action      # User customizations
listen-address  127.0.0.1:8118
toggle  1
enable-remote-toggle  1
enable-remote-http-toggle  0
enable-edit-actions 1
enforce-blocks 0
buffer-limit 4096
forwarded-connect-retries  0
accept-intercepted-requests 0
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 300
socket-timeout 300
permit-access  192.168.1.0/24
max-client-connections 256

debug     1 # Log the destination for each request Privoxy let through. See also debug 1024.
debug     2 # show each connection status
debug     4 # show I/O status
debug     8 # show header parsing
debug     1 # Log the destination for each request Privoxy let through. See also debug 1024.
debug     2 # show each connection status
debug     4 # show I/O status
debug     8 # show header parsing
debug    16 # log all data written to the network
debug    32 # debug force feature
debug    64 # debug regular expression filters
debug   128 # debug redirects
debug   256 # debug GIF de-animation
debug   512 # Common Log Format
debug  1024 # Log the destination for requests Privoxy didn't let through, and the reason why.
debug  2048 # CGI user interface
debug  4096 # Startup banner and warnings.
debug  8192 # Non-fatal errors
debug 32768 # log all data read from the network
debug 65536 # Log the applying actions

#admin-address privoxy-admin@example.com
#proxy-info-url http://www.example.com/proxy-service.html

Thx

 

[sadfasdf]

Just wanted to let everyone know I got this working rather well on my Asus RT-N66R.

Flashed it with Merlin firmware 378.56.2
Formatted a usb flash drive as ext3
Followed the guide for installing entware and privoxy on said flash drive
Tested privoxy by configuring a computer to use it as a proxy
Compared "proxy" MSN vs "Normal" MSN, verified most if not all ads were gone.

My intended Target: Amazon Fire TV
Issue: Proxy settings cannot be set or changed or seen on the Amazon Fire TV
Resolution: Use IPTables to force any web traffic from the Amazon Fire TV through the proxy

Connect via ssh or telnet to your router, and issue the following code to apply the forced-proxy immediately:

iptables -t nat -A PREROUTING --source 192.168.1.13 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

You can then use either DHCP reservations or simply assign a static IP (.13 as seen in the code above)

Questions:
Will the proxy, or the IPTable settings affect the rest of my network?
No, the proxy and IPTables will not affect any other computer on the network, ONLY the device with the .13

Do Hulu, Netflix, TwitchTV, Pandora and Amazon (ie the Fire TV apps) still work?
As of this morning, they all worked fine, no advertisements. Hulu however shows the Ads timer and a black screen and waits the amount of time it would have taken to play the ads. I don't know how to get around that yet.

How do you keep the adblock definitions updated?
Cronjob runs privoxy-blocklist_0.2.sh every morning. Super easy to google and set up.

 

[spalife]

Hi Spalife,

I disabled all the rules as suggested and kept only the default one.

Unfortunately the error is still present

2015-11-28 09:12:13.414 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:13.415 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:13.421 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:23.122 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:33.212 2aab0310 Error: Unable to take any additional connections: No such file or directory
2015-11-28 09:12:43.284 2aab0310 Error: Unable to take any additional connections: No such file or directory

Any other suggestion?

Not sure whether the below changes will work for you....
(as they are currently in my working privoxy configuration...
just a suggestion, you can always revert back if it does not work)

my S24privoxy start file looks like below
#!/bin/sh

ENABLED=yes
PROCS=privoxy
ARGS="/opt/etc/privoxy/config"
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

ulimit -s 2048
ulimit -n 2048
. /opt/etc/init.d/rc.func


you can try running the S24privoxy from shell and see if things work out for you

and few configuration suggestions for the /opt/etc/privoxy/config file

enable-compression 1 -> change to 0
compression-level 6
enforce-blocks 1 -> change to 0

keep-alive-timeout 200 -> change to 300
socket-timeout 200 -> change to 300