Skip to content

Polipo 1.1.1 - DEPRECATED

Using with Tor

  1. Add socksParentProxy=localhost:9050 to Additional options
  2. Point your browser http proxy to 192.168.178.1:8123
  3. Set No proxy for to localhost, 127.0.0.1, 192.168.178.0/24

(assuming default configuration)

If you use Firefox, use Tor
Button to
prevent DNS leakage (and other privacy problems with cookies, plugins,
etc).

Using at your office

Maybe your internet access at your office (school, internet café, etc)
is restricted, filtered and/or monitored and you don't want that. In my
case Trend Micro OfficeScan blocks a lot of web-sites as false positives
(including
www.ip-phone-forum.de).
A solution is this:

  1. Install Polipo and dropbear (or another
    tunnel package)
  2. Forward port 22 (and/or 80 if port 22 is blocked) to localhost:22
    using AVM-firewall
  3. Create an SSH
    tunnel
    from your office to your FritzBox, for example using
    putty
  4. Configure your browser at your office to use the http proxy
    localhost:8123 (assuming default Polipo configuration)

It is not an bad idea to restrict the memory Polipo will use with the
following additional option:

Text Only
chunkHighMark=1048576

Security

Unless you restrict the IP addresses that can access dropbear, my advice
is to disable password login and to use host-based
authentication.

It is also possible to encapsulate SSH traffic using
STunnel, for cases where only http/https traffic
is allowed.

Beware that DNS requests could still be monitored, see the section about
Tor about how to prevent this. (it is possible to use Tor Button without
Tor)

It is possible to tighten security by using these options:

Text Only
tunnelAllowedPorts=443;allowedPorts=80,443

This prevent tunneling through the proxy and access to the freetz web
interface.

Blocking domains

Using the extra options it is possible to specify a file with forbidden
domains, like this:

Text Only
forbiddenFile=/var/media/ftp/uFlash/polipo/forbidden

Add the domains you want to block on separate lines, like this:

Text Only
doubleclick.net
googleadservices.com
google-analytics.com
googlesyndication.com
facebook.com/plugins

Issues

  • Download of large files is broken and wont be fixed:
    ticket