1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
2 "http://www.w3.org/TR/html4/loose.dtd">
6 <title>Troubleshooting</title>
7 <meta name="GENERATOR" content=
8 "Modular DocBook HTML Stylesheet Version 1.79">
9 <link rel="HOME" title="Privoxy Frequently Asked Questions" href=
11 <link rel="PREVIOUS" title="Miscellaneous" href="misc.html">
12 <link rel="NEXT" title=
13 "Contacting the developers, Bug Reporting and Feature Requests" href=
15 <link rel="STYLESHEET" type="text/css" href="../p_doc.css">
16 <meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
19 <body class="SECT1" bgcolor="#EEEEEE" text="#000000" link="#0000FF" vlink=
20 "#840084" alink="#0000FF">
21 <div class="NAVHEADER">
22 <table summary="Header navigation table" width="100%" border="0"
23 cellpadding="0" cellspacing="0">
25 <th colspan="3" align="center">Privoxy Frequently Asked
30 <td width="10%" align="left" valign="bottom"><a href="misc.html"
31 accesskey="P">Prev</a></td>
33 <td width="80%" align="center" valign="bottom"></td>
35 <td width="10%" align="right" valign="bottom"><a href="contact.html"
36 accesskey="N">Next</a></td>
39 <hr align="left" width="100%">
43 <h1 class="SECT1"><a name="TROUBLE" id="TROUBLE">5.
44 Troubleshooting</a></h1>
47 <h3 class="SECT2"><a name="AEN1086" id="AEN1086">5.1. I cannot connect
48 to any websites. Or, I am getting <span class="QUOTE">"connection
49 refused"</span> message with every web page. Why?</a></h3>
51 <p>There are several possibilities:</p>
55 <p><span class="APPLICATION">Privoxy</span> is not running.
56 Solution: verify that <span class="APPLICATION">Privoxy</span> is
57 installed correctly, has not crashed, and is indeed running. Turn
58 on <span class="APPLICATION">Privoxy's</span> logging, and look at
59 the logs to see what they say.</p>
63 <p>Or your browser is configured for a different port than what
64 <span class="APPLICATION">Privoxy</span> is using. Solution: verify
65 that <span class="APPLICATION">Privoxy</span> and your browser are
66 set to the same port (<tt class="LITERAL">listen-address</tt>).</p>
70 <p>Or if using a forwarding rule, you have a configuration problem
71 or a problem with a host in the forwarding chain. Solution:
72 temporarily alter your configuration and take the forwarders out of
77 <p>Or you have a firewall that is interfering and blocking you.
78 Solution: try disabling or removing the firewall as a simple
85 <h3 class="SECT2"><a name="ERROR503" id="ERROR503">5.2. Why am I
86 getting a 503 Error (WSAECONNREFUSED) on every page?</a></h3>
88 <p>More than likely this is a problem with your TCP/IP networking.
89 ZoneAlarm has been reported to cause this symptom -- even if not
90 running! The solution is to either fight the ZA configuration, or
91 uninstall ZoneAlarm, and then find something better behaved in its
92 place. Other personal firewall type products may cause similar type
93 problems if not configured correctly.</p>
97 <h3 class="SECT2"><a name="AEN1109" id="AEN1109">5.3. I just added a
98 new rule, but the steenkin ad is still getting through. How?</a></h3>
100 <p>If the ad had been displayed before you added its URL, it will
101 probably be held in the browser's cache for some time, so it will be
102 displayed without the need for any request to the server, and
103 <span class="APPLICATION">Privoxy</span> will not be involved. Flush
104 the browser's caches, and then try again.</p>
106 <p>If this doesn't help, you probably have an error in the rule you
107 applied. Try pasting the full URL of the offending ad into <a href=
108 "http://config.privoxy.org/show-url-info" target=
109 "_top">http://config.privoxy.org/show-url-info</a> and see if it really
110 matches your new rule. Blocking ads is like blocking spam: a lot of
111 tinkering is required to stay ahead of the game. And remember you need
112 to block the URL of the ad in question, which may be entirely different
113 from the site URL itself. Most ads are hosted on different servers than
114 the main site itself. If you right-click on the ad, you should be able
115 to get all the relevant information you need. Alternately, you can find
116 the correct URL by looking at <span class=
117 "APPLICATION">Privoxy's</span> logs (you may need to enable logging in
118 the main config file if its disabled).</p>
120 <p>Below is a slightly modified real-life log snippet that originates
121 with one requested URL: <tt class="LITERAL">www.example.com</tt> (name
122 of site was changed for this example, the number of requests is real).
123 You can see in this the complexity of what goes into making up this one
124 <span class="QUOTE">"page"</span>. There are eight different domains
125 involved here, with thirty two separate URLs requested in all, making
126 up all manner of images, Shockwave Flash, JavaScript, CSS stylesheets,
127 scripts, and other related content. Some of this content is obviously
128 <span class="QUOTE">"good"</span> or <span class="QUOTE">"bad"</span>,
129 but not all. Many of the more questionable looking requests, are going
130 to outside domains that seem to be identifying themselves with
131 suspicious looking names, making our job a little easier. <span class=
132 "APPLICATION">Privoxy</span> has <span class="QUOTE">"crunched"</span>
133 (meaning caught and BLOCKED) quite a few items in this example, but
134 perhaps missed a few as well.</p>
136 <table border="0" bgcolor="#E0E0E0" width="100%">
140 Request: www.example.com/
141 Request: www.example.com/favicon.ico
142 Request: img.example.com/main.css
143 Request: img.example.com/sr.js
144 Request: example.betamarker.com/example.html
145 Request: www.lik-sang.com/Banners/bestsellers/skyscraper.php?likref=BSellers
146 Request: img.example.com/pb.png
147 Request: www.google-analytics.com/urchin.js crunch! (Blocked)
148 Request: www.advertising-department.com/ats/switch.ps.php?26856 crunch! (Blocked)
149 Request: img.example.com/p.gif
150 Request: www.popuptraffic.com/assign.php?l=example&mode=behind crunch! (Blocked)
151 Request: www.popuptraffic.com/scripts/popup.php?hid=5c3cf&tmpl=PBa.tmpl crunch! (Blocked)
152 Request: www.popuptraffic.com/assign.php?l=example crunch! (Blocked)
153 Request: www.lik-sang.com/Banners/best_sellers/best_sellers.css
154 Request: www.adtrak.net/adx.js crunch! (Blocked)
155 Request: img.example.com/hbg.gif
156 Request: img.example.com/example.jpg
157 Request: img.example.com/mt.png
158 Request: img.example.com/mm.png
159 Request: img.example.com/mb.png
160 Request: www.popuptraffic.com/scripts/popup.php?hid=a71b91fa5&tmpl=Ua.tmp crunch! (Blocked)
161 Request: www.example.com/tracker.js
162 Request: www.lik-sang.com/Banners/best_sellers/lsi_head.gif
163 Request: www.adtrak.net/adjs.php?n=020548130&what=zone:61 crunch! (Blocked)
164 Request: www.adtrak.net/adjs.php?n=463594413&what=zone:58&source=Ua crunch! (Blocked)
165 Request: www.lik-sang.com/Banners/best_sellers/bottomani.swf
166 Request: mmm.elitemediagroup.net/install.php?allowpop=no&popupmincook=0&allowsp2=1 crunch! (Blocked)
167 Request: www.example.com/tracker.js?screen=1400x1050&win=962x693
168 Request: www.adtrak.net/adlog.php?bannerid=1309&clientid=439&zoneid=61 crunch! (Blocked)
169 Request: 66.70.21.80/scripts/click.php?hid=5c3cf599a9efd0320d26&si
170 Request: 66.70.21.80/img/pixel.gif
171 Request: www.adtrak.net/adlog.php?bannerid=1309&clientid=439&zoneid=58&source=Ua&block=86400 crunch! (Blocked)
172 Request: 66.70.21.80/scripts/click.php?hid=a71b9f6504b0c5681fa5&si=Ua
178 <p>Despite 12 out of 32 requests being blocked, the page looked, and
179 seemed to behave perfectly <span class="QUOTE">"normal"</span> (minus
180 some ads, of course).</p>
184 <h3 class="SECT2"><a name="BADSITE" id="BADSITE">5.4. One of my
185 favorite sites does not work with Privoxy. What can I do?</a></h3>
187 <p>First verify that it is indeed a <span class=
188 "APPLICATION">Privoxy</span> problem, by toggling off <span class=
189 "APPLICATION">Privoxy</span> through <a href=
190 "http://config.privoxy.org/toggle" target=
191 "_top">http://config.privoxy.org/toggle</a> (the toggle feature may
192 need to be enabled in the main <tt class="FILENAME">config</tt>), and
193 then shift-reloading the problem page (i.e. holding down the shift key
194 while clicking reload. Alternatively, flush your browser's disk and
197 <p>If the problem went away, we know we have a configuration related
198 problem. Now go to <a href="http://config.privoxy.org/show-url-info"
199 target="_top">http://config.privoxy.org/show-url-info</a> and paste the
200 full URL of the page in question into the prompt. See which actions are
201 being applied to the URL, and which matches in which actions files are
202 responsible for that. It might be helpful also to look at your logs for
203 this site too, to see what else might be happening (note: logging may
204 need to be enabled in the main config file). Many sites are complex and
205 require a number of related pages to help present their content. Look
206 at what else might be used by the page in question, and what of that
207 might be <span class="emphasis"><i class=
208 "EMPHASIS">required</i></span>. Now, armed with this information, go to
209 <a href="http://config.privoxy.org/show-status" target=
210 "_top">http://config.privoxy.org/show-status</a> and select the
211 appropriate actions files for editing.</p>
213 <p>You can now either look for a section which disables the actions
214 that you suspect to cause the problem and add a pattern for your site
215 there, or make up a completely new section for your site. In any case,
216 the recommended way is to disable only the prime suspect, reload the
217 problem page, and only if the problem persists, disable more and more
218 actions until you have identified the culprit. You may or may not want
219 to turn the other actions on again. Remember to flush your browser's
220 caches in between any such changes!</p>
222 <p>Alternately, if you are comfortable with a text editor, you can
223 accomplish the same thing by editing the appropriate actions file.
224 Probably the easiest way to deal with such problems when editing by
225 hand is to add your site to a <tt class="LITERAL">{ fragile }</tt>
226 section in <tt class="FILENAME">user.action</tt>, which is an alias
227 that turns off most <span class="QUOTE">"dangerous"</span> actions, but
228 is also likely to turn off more actions then needed, and thus lower
229 your privacy and protection more than necessary,</p>
231 <p>Troubleshooting actions is discussed in more detail in the <a href=
232 "../user-manual/appendix.html#ACTIONSANAT" target="_top">User Manual
233 appendix, Troubleshooting: the Anatomy of an Action</a>. There is also
234 an <a href="../user-manual/actions-file.html#ACT-EXAMPLES" target=
235 "_top">actions tutorial</a> with general configuration information and
238 <p>As a last resort, you can always see if your browser has a setting
239 that will bypass the proxy setting for selective sites. Modern browsers
244 <h3 class="SECT2"><a name="DUN" id="DUN">5.5. After installing Privoxy,
245 I have to log in every time I start IE. What gives?</a></h3>
247 <p>This is a quirk that effects the installation of <span class=
248 "APPLICATION">Privoxy</span>, in conjunction with Internet Explorer and
249 Internet Connection Sharing on Windows 2000 and Windows XP. The
250 symptoms may appear to be corrupted or invalid DUN settings, or
253 <p>When setting up an NT based Windows system with <span class=
254 "APPLICATION">Privoxy</span> you may find that things do not seem to be
255 doing what you expect. When you set your system up you will probably
256 have set up Internet Connection Sharing (ICS) with Dial up Networking
257 (DUN) when logged in with administrator privileges. You will probably
258 have made this DUN connection available to other accounts that you may
259 have set-up on your system. E.g. Mum or Dad sets up the system and
260 makes accounts suitably configured for the kids.</p>
262 <p>When setting up <span class="APPLICATION">Privoxy</span> in this
263 environment you will have to alter the proxy set-up of Internet
264 Explorer (IE) for the specific DUN connection on which you wish to use
265 <span class="APPLICATION">Privoxy</span>. When you do this the ICS DUN
266 set-up becomes user specific. In this instance you will see no
267 difference if you change the DUN connection under the account used to
268 set-up the connection. However when you do this from another user you
269 will notice that the DUN connection changes to make available to "Me
270 only". You will also find that you have to store the password under
271 each different user!</p>
273 <p>The reason for this is that each user's set-up for IE is user
274 specific. Each set-up DUN connection and each LAN connection in IE
275 store the settings for each user individually. As such this enforces
276 individual configurations rather than common ones. Hence the first time
277 you use a DUN connection after re-booting your system it may not
278 perform as you expect, and prompt you for the password. Just set and
279 save the password again and all should be OK.</p>
281 <p>[Thanks to Ray Griffith for this submission.]</p>
285 <h3 class="SECT2"><a name="FTP" id="FTP">5.6. I cannot connect to any
286 FTP sites. Privoxy is blocking me.</a></h3>
288 <p><span class="APPLICATION">Privoxy</span> cannot act as a proxy for
289 FTP traffic, so do not configure your browser to use <span class=
290 "APPLICATION">Privoxy</span> as an FTP proxy. The same is true for
291 <span class="emphasis"><i class="EMPHASIS">any protocol other than HTTP
292 or HTTPS (SSL)</i></span>.</p>
294 <p>Most browsers understand FTP as well as HTTP. If you connect to a
295 site, with a URL like <tt class="LITERAL">ftp://ftp.example.com</tt>,
296 your browser is making an FTP connection, and not a HTTP connection. So
297 while your browser may speak FTP, <span class=
298 "APPLICATION">Privoxy</span> does not, and cannot proxy such
301 <p>To complicate matters, some systems may have a generic <span class=
302 "QUOTE">"proxy"</span> setting, which will enable various protocols,
303 including <span class="emphasis"><i class="EMPHASIS">both</i></span>
304 HTTP and FTP proxying! So it is possible to accidentally enable FTP
305 proxying in these cases. And of course, if this happens, <span class=
306 "APPLICATION">Privoxy</span> will indeed cause problems since it does
307 not know FTP. Newer version will give a sane error message if a FTP
308 connection is attempted. Just disable the FTP setting and all will be
311 <p>Will <span class="APPLICATION">Privoxy</span> ever proxy FTP
312 traffic? Unlikely. There just is not much reason, and the work to make
313 this happen is more than it may seem.</p>
317 <h3 class="SECT2"><a name="MACOSXIE" id="MACOSXIE">5.7. In Mac OS X, I
318 can't configure Microsoft Internet Explorer to use Privoxy as the HTTP
321 <p>Microsoft Internet Explorer (in versions like 5.1) respects
322 system-wide network settings. In order to change the HTTP proxy, open
323 System Preferences, and click on the Network icon. In the settings pane
324 that comes up, click on the Proxies tab. Ensure the "Web Proxy (HTTP)"
325 checkbox is checked and enter <tt class="LITERAL">127.0.0.1</tt> in the
326 entry field. Enter <tt class="LITERAL">8118</tt> in the Port field. The
327 next time you start IE, it should reflect these values.</p>
331 <h3 class="SECT2"><a name="MACOSXUNINSTALL" id="MACOSXUNINSTALL">5.8.
332 In Mac OS X, I dragged the Privoxy folder to the trash in order to
333 uninstall it. Now the finder tells me I don't have sufficient
334 privileges to empty the trash.</a></h3>
336 <p>Note: This ONLY applies to privoxy 3.0.6 and earlier.</p>
338 <p>Just dragging the <span class="APPLICATION">Privoxy</span> folder to
339 the trash is not enough to delete it. <span class=
340 "APPLICATION">Privoxy</span> supplies an <span class=
341 "APPLICATION">uninstall.command</span> file that takes care of these
342 details. Open the trash, drag the <span class=
343 "APPLICATION">uninstall.command</span> file out of the trash and
344 double-click on it. You will be prompted for confirmation and the
345 administration password.</p>
347 <p>The trash may still appear full after this command; emptying the
348 trash from the desktop should make it appear empty again.</p>
352 <h3 class="SECT2"><a name="MACOSXIMAGES" id="MACOSXIMAGES">5.9. In Mac
353 OS X Panther (10.3), images often fail to load and/or I experience
354 random delays in page loading. I'm using <tt class=
355 "LITERAL">localhost</tt> as my browser's proxy setting.</a></h3>
357 <p>We believe this is due to an IPv6-related bug in Mac OS X, but don't
358 fully understand the issue yet. In any case, changing the proxy setting
359 to <tt class="LITERAL">127.0.0.1</tt> instead of <tt class=
360 "LITERAL">localhost</tt> works around the problem.</p>
364 <h3 class="SECT2"><a name="MACOSXACCOUNTDELETION" id=
365 "MACOSXACCOUNTDELETION">5.10. I just upgraded to Mac OS X 10.9
366 (Mavericks) and now <span class="APPLICATION">Privoxy</span> has
367 stopped working.</a></h3>
369 <p>The upgrade process to Mac OS X Mavericks (10.9) from an earlier
370 version of OS X deletes all user accounts that are either not part of
371 OS X itself or are not interactive user accounts (ones you log in
372 with). Since, for the sake of security, <span class=
373 "APPLICATION">Privoxy</span> runs as a non-privileged user that is
374 created by its installer (_privoxy), it can no longer start up once
375 that account gets deleted. The solution is to perform a complete
376 uninstall using the supplied <span class=
377 "APPLICATION">uninstall.command</span> script (either back up your
378 configuration files or select to not have the uninstaller remove them
379 when it prompts you) and then reinstall <span class=
380 "APPLICATION">Privoxy</span> using the installer package and merge in
381 your configuration.</p>
385 <h3 class="SECT2"><a name="BLANKPAGE" id="BLANKPAGE">5.11. I get a
386 completely blank page at one site. <span class="QUOTE">"View
387 Source"</span> shows only: <span class=
388 "MARKUP"><html><body></body></html></span>.
389 Without Privoxy the page loads fine.</a></h3>
391 <p>Chances are that the site suffers from a bug in <a href=
392 "http://www.php.net/" target="_top"><span class=
393 "APPLICATION">PHP</span></a>, which results in empty pages being sent
394 if the client explicitly requests an uncompressed page, like
395 <span class="APPLICATION">Privoxy</span> does. This bug has been fixed
398 <p>To find out if this is in fact the source of the problem, try adding
399 the site to a <tt class="LITERAL">-prevent-compression</tt> section in
400 <tt class="FILENAME">user.action</tt>:</p>
402 <table border="0" bgcolor="#E0E0E0" width="100%">
406 # Make exceptions for ill-behaved sites:
408 {-prevent-compression}
415 <p>If that works, you may also want to report the problem to the site's
416 webmasters, telling them to use zlib.output_compression instead of
417 ob_gzhandler in their PHP applications (workaround) or upgrade to PHP
418 4.2.3 or later (fix).</p>
422 <h3 class="SECT2"><a name="NOHOSTNAME" id="NOHOSTNAME">5.12. My logs
423 show many <span class="QUOTE">"Unable to get my own hostname"</span>
426 <p><span class="APPLICATION">Privoxy</span> tries to get the hostname
427 of the system its running on from the IP address of the system
428 interface it is bound to (from the <tt class="FILENAME">config</tt>
429 file <span class="emphasis"><i class=
430 "EMPHASIS">listen-address</i></span> setting). If the system cannot
431 supply this information, <span class="APPLICATION">Privoxy</span> logs
434 <p>Typically, this would be considered a minor system configuration
435 error. It is not a fatal error to <span class=
436 "APPLICATION">Privoxy</span> however, but may result in a much slower
437 response from <span class="APPLICATION">Privoxy</span> on some
438 platforms due to DNS timeouts.</p>
440 <p>This can be caused by a problem with the local <tt class=
441 "FILENAME">hosts</tt> file. If this file has been changed from the
442 original, try reverting it to see if that helps. Make sure whatever
443 name(s) are used for the local system, that they resolve both ways.</p>
445 <p>You should also be able to work around the problem with the <a href=
446 "../user-manual/config.html#HOSTNAME" target="_top">hostname
451 <h3 class="SECT2"><a name="INUSE" id="INUSE">5.13. When I try to launch
452 Privoxy, I get an error message <span class="QUOTE">"port 8118 is
453 already in use"</span> (or similar wording). Why?</a></h3>
455 <p>Port 8118 is <span class="APPLICATION">Privoxy's</span> default TCP
456 <span class="QUOTE">"listening"</span> port. Typically this message
457 would mean that there is already one instance of <span class=
458 "APPLICATION">Privoxy</span> running, and your system is actually
459 trying to start a second <span class="APPLICATION">Privoxy</span> on
460 the same port, which will not work. (You can have multiple instances
461 but they must be assigned different ports.) How and why this might
462 happen varies from platform to platform, but you need to check your
463 installation and start-up procedures.</p>
467 <h3 class="SECT2"><a name="DEMORONIZER" id="DEMORONIZER">5.14. Pages
468 with UTF-8 fonts are garbled.</a></h3>
470 <p>This may be the result of an overly aggressive filter. The filters
471 that are enabled in the default configuration aren't expected to cause
472 problems like this. If you enabled the <span class=
473 "QUOTE">"demoronizer"</span> filter, please try temporarily disabling
476 <p>If that doesn't help, temporarily disable all filters to see if
477 another filter could be the culprit. If the problem disappears, enable
478 the filters one by one, until the problem reappears and the offending
481 <p>Once the problem-causing filter is known, it can be fixed or
484 <p>Upgrading <span class="APPLICATION">Privoxy</span>, or going to the
485 most recent <tt class="FILENAME">default.action</tt> file available
487 "http://sourceforge.net/project/showfiles.php?group_id=11118" target=
488 "_top">SourceForge</a> might be worth a try, too.</p>
492 <h3 class="SECT2"><a name="DEMORONIZER2" id="DEMORONIZER2">5.15. Why
493 are binary files (such as images) corrupted when Privoxy is
496 <p>This may also be caused by an (<a href=
497 "trouble.html#DEMORONIZER">overly aggressive filter</a> in conjunction
498 with a web server that is misreporting the content type. By default
499 binary files are exempted from <span class=
500 "APPLICATION">Privoxy's</span> filtering (unless the web server by
501 mistake says the file is something else).</p>
505 <h3 class="SECT2"><a name="DEMORONIZER3" id="DEMORONIZER3">5.16. What
506 is the <span class="QUOTE">"demoronizer"</span> and why is it
509 <p>The original demoronizer was a Perl script that cleaned up HTML
510 pages which were created with certain Microsoft products. MS has used
511 proprietary extensions to standardized font encodings (ISO 8859-1),
512 which has caused problems for pages that are viewed with non-Microsoft
513 products (and are expecting to see a standard set of fonts). The
514 demoronizer corrected these errors so the pages displayed correctly.
515 <span class="APPLICATION">Privoxy</span> borrowed from this script,
516 introducing a filter based on the original demoronizer, which in turn
517 could correct these errors on the fly.</p>
519 <p>But this is only needed in some situations, and will cause serious
520 problems in some other situations.</p>
522 <p>If you are using Microsoft products, you do not need it. If you need
523 to view pages with UTF-8 characters (such as Cyrillic or Chinese), then
524 it will cause corruption of the fonts, and thus <span class=
525 "emphasis"><i class="EMPHASIS">should not be on</i></span>.</p>
527 <p>On the other hand, if you use non-Microsoft products, and you
528 occasionally notice weird characters on pages, you might want to try
533 <h3 class="SECT2"><a name="WINDOWOPEN" id="WINDOWOPEN">5.17. Why do I
534 keep seeing <span class="QUOTE">"PrivoxyWindowOpen()"</span> in raw
535 source code?</a></h3>
537 <p><span class="APPLICATION">Privoxy</span> is attempting to disable
538 malicious <a href="http://en.wikipedia.org/wiki/Javascript" target=
539 "_top">Javascript</a> in this case, with the <tt class=
540 "LITERAL">unsolicited-popups</tt> filter. <span class=
541 "APPLICATION">Privoxy</span> cannot tell very well <span class=
542 "QUOTE">"good"</span> code snippets from <span class=
543 "QUOTE">"bad"</span> code snippets.</p>
545 <p>If you see this in HTML source, and the page displays without
546 problems, then this is good, and likely some pop-up window was
547 disabled. If you see this where it is causing a problem, such as a
548 downloaded program source code file, then you should set an exception
549 for this site or page such that the integrity of the page stays in tact
550 by disabling all filtering.</p>
554 <h3 class="SECT2"><a name="DNSERRORS" id="DNSERRORS">5.18. I am getting
555 too many DNS errors like <span class="QUOTE">"404 No Such
556 Domain"</span>. Why can't Privoxy do this better?</a></h3>
558 <p>There are potentially several factors here. First of all, the DNS
559 resolution is done by the underlying operating system -- not
560 <span class="APPLICATION">Privoxy</span> itself. <span class=
561 "APPLICATION">Privoxy</span> merely initiates the process and hands it
562 off, and then later reports whatever the outcome was and tries to give
563 a coherent message if there seems to be a problem. In some cases, this
564 might otherwise be mitigated by the browser itself which might try some
565 work-arounds and alternate approaches (e.g adding <span class=
566 "QUOTE">"www."</span> to the URL).</p>
568 <p>In other cases, if <span class="APPLICATION">Privoxy</span> is being
569 chained with another proxy, this could complicate the issue, and cause
570 undue delays and timeouts. In the case of a <span class=
571 "QUOTE">"socks4a"</span> proxy, the socks server handles all the DNS.
572 <span class="APPLICATION">Privoxy</span> would just be the <span class=
573 "QUOTE">"messenger"</span> which is reporting whatever problem occurred
574 downstream, and not the root cause of the error.</p>
576 <p>In any case, versions newer than 3.0.3 include various improvements
577 to help <span class="APPLICATION">Privoxy</span> better handle these
582 <h3 class="SECT2"><a name="ALLCPU" id="ALLCPU">5.19. At one site
583 Privoxy just hangs, and starts taking all CPU. Why is this?</a></h3>
585 <p>This is probably a manifestation of the <span class="QUOTE">"100%
586 cpu"</span> problem that occurs on pages containing many (thousands
587 upon thousands) of blank lines. The blank lines are in the raw HTML
588 source of the page, and the browser just ignores them. But the pattern
589 matching in <span class="APPLICATION">Privoxy's</span> page filtering
590 mechanism is trying to match against absurdly long strings and this
591 becomes very CPU-intensive, taking a long, long time to complete.</p>
593 <p>Until a better solution comes along, disable filtering on these
594 pages, particularly the <tt class="LITERAL">js-annoyances</tt> and
595 <tt class="LITERAL">unsolicited-popups</tt> filters. If you run into
596 this problem with a recent <span class="APPLICATION">Privoxy</span>
597 version, please send a problem report.</p>
601 <h3 class="SECT2"><a name="SLOWCRAWL" id="SLOWCRAWL">5.20. I just
602 installed Privoxy, and all my browsing has slowed to a crawl. What
605 <p>This should not happen, and for the overwhelming number of users
606 world-wide, it does not happen. I would suspect some inadvertent
607 interaction of software components such as anti-virus software, spyware
608 protectors, personal firewalls or similar components. Try disabling (or
609 uninstalling) these one at a time and see if that helps. Either way, if
610 you are using a recent <span class="APPLICATION">Privoxy</span>
611 version, please report the problem.</p>
615 <h3 class="SECT2"><a name="PREVENTCOMP" id="PREVENTCOMP">5.21. Why do
616 my filters work on some sites but not on others?</a></h3>
618 <p>It's probably due to compression. It is a common practice for web
619 servers to send their content <span class="QUOTE">"compressed"</span>
620 in order to speed things up, and then let the browser <span class=
621 "QUOTE">"uncompress"</span> them. When compiled with zlib support
622 <span class="APPLICATION">Privoxy</span> can decompress content before
623 filtering, otherwise you may want to enable <a href=
624 "../user-manual/actions-file.html#PREVENT-COMPRESSION" target=
625 "_top">prevent-compression</a>.</p>
627 <p>As of <span class="APPLICATION">Privoxy</span> 3.0.9, zlib support
628 is enabled in the default builds.</p>
632 <h3 class="SECT2"><a name="SSL-WARNINGS" id="SSL-WARNINGS">5.22. On
633 some HTTPS sites my browser warns me about unauthenticated content, the
634 URL bar doesn't get highlighted and the lock symbol appears to be
635 broken. What's going on?</a></h3>
637 <p>Probably the browser is requesting ads through HTTPS and
638 <span class="APPLICATION">Privoxy</span> is blocking the requests.
639 Privoxy's error messages are delivered unencrypted and while it's
640 obvious for the browser that the HTTPS request is already blocked by
641 the proxy, some warn about unauthenticated content anyway.</p>
643 <p>To work around the problem you can redirect those requests to an
644 invalid local address instead of blocking them. While the redirects
645 aren't encrypted either, many browsers don't care. They simply follow
646 the redirect, fail to reach a server and display an error message
647 instead of the ad.</p>
649 <p>To do that, enable logging to figure out which requests get blocked
650 by <span class="APPLICATION">Privoxy</span> and add the hosts (no path
651 patterns) to a section like this:</p>
653 <table border="0" bgcolor="#E0E0E0" width="100%">
657 {+redirect{http://127.0.0.1:0/} -block -limit-connect}
664 <p>Additionally you have to configure your browser to contact
665 <span class="QUOTE">"127.0.0.1:0"</span> directly (instead of through
666 <span class="APPLICATION">Privoxy</span>).</p>
668 <p>To add a proxy exception in <span class="APPLICATION">Mozilla
669 Firefox</span> open the <span class="QUOTE">"Preferences"</span>, click
670 the <span class="QUOTE">"Settings"</span> button located on the
671 <span class="QUOTE">"Network"</span> tab in the <span class=
672 "QUOTE">"Advanced"</span> section, and add <span class=
673 "QUOTE">"127.0.0.1:0"</span> in the <span class="QUOTE">"No Proxy
674 for:"</span> field.</p>
678 <h3 class="SECT2"><a name="SE-LINUX" id="SE-LINUX">5.23. I get selinux
679 error messages. How can I fix this?</a></h3>
681 <p>Please report the problem to the creator of your selinux
684 <p>The problem is that some selinux policy writers aren't familiar with
685 the application they are trying to <span class="QUOTE">"secure"</span>
686 and thus create policies that make no sense.</p>
688 <p>In <span class="APPLICATION">Privoxy's</span> case the problem
689 usually is that the policy only allows outgoing connections for certain
690 destination ports (e.g. 80 and 443). While this may cover the standard
691 ports, websites occasionally use other ports as well. This isn't a
692 security problem and therefore <span class=
693 "APPLICATION">Privoxy's</span> default configuration doesn't block
696 <p>If you really want to block these ports (and don't be able to load
697 websites that don't use standard ports), you should configure Privoxy
698 to block these ports as well, so it doesn't trigger the selinux
703 <h3 class="SECT2"><a name="GENTOO-RICERS" id="GENTOO-RICERS">5.24. I
704 compiled <span class="APPLICATION">Privoxy</span> with Gentoo's portage
705 and it appears to be very slow. Why?</a></h3>
707 <p>Probably you unintentionally compiled <span class=
708 "APPLICATION">Privoxy</span> without threading support in which case
709 requests have to be serialized and only one can be served at the same
712 <p>Check your <span class="QUOTE">"USE"</span> flags and make sure they
713 include <span class="QUOTE">"threads"</span>. If they don't, add the
714 flag and rebuild <span class="APPLICATION">Privoxy</span>.</p>
716 <p>If you compiled <span class="APPLICATION">Privoxy</span> with
717 threading support (on POSIX-based systems), the <span class=
718 "QUOTE">"Conditional #defines"</span> section on <a href=
719 "http://config.privoxy.org/show-status" target=
720 "_top">http://config.privoxy.org/show-status</a> will list <span class=
721 "QUOTE">"FEATURE_PTHREAD"</span> as <span class=
722 "QUOTE">"enabled"</span>.</p>
726 <div class="NAVFOOTER">
727 <hr align="left" width="100%">
729 <table summary="Footer navigation table" width="100%" border="0"
730 cellpadding="0" cellspacing="0">
732 <td width="33%" align="left" valign="top"><a href="misc.html"
733 accesskey="P">Prev</a></td>
735 <td width="34%" align="center" valign="top"><a href="index.html"
736 accesskey="H">Home</a></td>
738 <td width="33%" align="right" valign="top"><a href="contact.html"
739 accesskey="N">Next</a></td>
743 <td width="33%" align="left" valign="top">Miscellaneous</td>
745 <td width="34%" align="center" valign="top"> </td>
747 <td width="33%" align="right" valign="top">Contacting the developers,
748 Bug Reporting and Feature Requests</td>