Re: Polipo bug reporting

2011-01-31 Thread Andrew Lewman
On Mon, 31 Jan 2011 12:20:10 +
Geoff Down geoffd...@fastmail.net wrote:
  Thank you Juliusz, I appreciate your efforts.
 Clearly Tor needs to ship with a working Polipo, so if this is a real
 fault would the bundle developers please revert to the version which
 was in the Vidalia 0.2.9 bundle, which is still working.

The difference is that the PPC bundle with vidalia 0.2.9 was built on a
10.3.9 ppc mac.  However, the 10.3.9 machine died a smelly, melty
death during a build a few months ago. The current bundles are built on
a 10.5 ppc mac with backwards compatibility for 10.3.9 (at least
according to xcode/gcc).  

Clearly Apple's backwards compatibility options don't work.

-- 
Andrew
pgp 0x74ED336B
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo bug reporting

2011-01-31 Thread Erinn Clark
* Andrew Lewman and...@torproject.org [2011:01:31 08:56 -0500]: 
 On Mon, 31 Jan 2011 12:20:10 +
 Geoff Down geoffd...@fastmail.net wrote:
   Thank you Juliusz, I appreciate your efforts.
  Clearly Tor needs to ship with a working Polipo, so if this is a real
  fault would the bundle developers please revert to the version which
  was in the Vidalia 0.2.9 bundle, which is still working.
 
 The difference is that the PPC bundle with vidalia 0.2.9 was built on a
 10.3.9 ppc mac.  However, the 10.3.9 machine died a smelly, melty
 death during a build a few months ago. The current bundles are built on
 a 10.5 ppc mac with backwards compatibility for 10.3.9 (at least
 according to xcode/gcc).  
 
 Clearly Apple's backwards compatibility options don't work.

They're built with backwards compatibility for 10.4. 10.3 is not supported at
this point, unless someone sends me a patch.


pgp7posSna6m0.pgp
Description: PGP signature


Re: Polipo bug reporting

2011-01-31 Thread Geoff Down


On Mon, 31 Jan 2011 08:56 -0500, Andrew Lewman and...@torproject.org
wrote:
 On Mon, 31 Jan 2011 12:20:10 +
 Geoff Down geoffd...@fastmail.net wrote:
   Thank you Juliusz, I appreciate your efforts.
  Clearly Tor needs to ship with a working Polipo, so if this is a real
  fault would the bundle developers please revert to the version which
  was in the Vidalia 0.2.9 bundle, which is still working.
 
 The difference is that the PPC bundle with vidalia 0.2.9 was built on a
 10.3.9 ppc mac.  However, the 10.3.9 machine died a smelly, melty
 death during a build a few months ago. 

Is nobody freecycling one? http://www.freecycle.org/group/US/
GD

-- 
http://www.fastmail.fm - IMAP accessible web-mail

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo bug reporting

2011-01-31 Thread Aplin, Justin M

On 1/31/2011 7:58 PM, Geoff Down wrote:

The difference is that the PPC bundle with vidalia 0.2.9 was built on a
10.3.9 ppc mac.  However, the 10.3.9 machine died a smelly, melty
death during a build a few months ago.

Is nobody freecycling one? http://www.freecycle.org/group/US/
GD


I may be wrong about this, but I believe it's more of a software issue 
than a hardware one. The last version of Xcode produced for 10.3 is 
known to produce some wonky, apparently random errors in some 
applications when they are run on 10.4 and 10.5. I imagine that 10.4 and 
above are much more prevalent on current live machines (although I'd 
love to see some hard data either way on that one), so given one 
dedicated PPC build machine I imagine the emphasis should be placed on 
producing stable applications for 10.4 and 10.5 (10.6 being Intel-only). 
Xcode for 10.5 is known to produce applications that play fairly nice 
with 10.4, but again, things sometimes get wonky with 10.3 (and then 
again, sometimes not).


That's not to say, of course, that if you happened to find and old mac 
and some 10.3 disks laying around, that a donation wouldn't be 
appreciated =)


~Justin Aplin

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo bug reporting

2011-01-30 Thread Robert Ransom
On Sun, 30 Jan 2011 22:59:49 +
Geoff Down geoffd...@fastmail.net wrote:

 how do I report a bug with the Polipo in
 https://www.torproject.org/dist/vidalia-bundles/vidalia-bundle-0.2.2.22-alpha-0.2.10-ppc.dmg
 ?
 And how do I tell which version is in there also please?

If that bundle contains a CHANGES file for Polipo, the last entry in it
is for the included version of Polipo.  

 ( I saw http://archives.seul.org/or/talk/Jan-2011/msg00161.html but it
 doesn't specify where the new bugtracker is).

We do not know of any new bug tracker for Polipo.  If you have a bug
report for Polipo itself, report it to the polipo-users mailing list
(see https://lists.sourceforge.net/lists/listinfo/polipo-users).


Robert Ransom


signature.asc
Description: PGP signature


Re: Polipo bug reporting

2011-01-30 Thread Geoff Down


On Sun, 30 Jan 2011 16:20 -0800, Robert Ransom
rransom.8...@gmail.com wrote:
 On Sun, 30 Jan 2011 22:59:49 +
 Geoff Down geoffd...@fastmail.net wrote:
 
  how do I report a bug with the Polipo in
  https://www.torproject.org/dist/vidalia-bundles/vidalia-bundle-0.2.2.22-alpha-0.2.10-ppc.dmg
  ?
  And how do I tell which version is in there also please?
 
 If that bundle contains a CHANGES file for Polipo, the last entry in it
 is for the included version of Polipo.  
 
  ( I saw http://archives.seul.org/or/talk/Jan-2011/msg00161.html but it
  doesn't specify where the new bugtracker is).
 
 We do not know of any new bug tracker for Polipo.  If you have a bug
 report for Polipo itself, report it to the polipo-users mailing list
 (see https://lists.sourceforge.net/lists/listinfo/polipo-users).
 
 
 Robert Ransom
 
 Thank you.
There is a Changes.txt file in the .dmg, but it doesn't mention the
Polipo version number, it's mainly concerned with Vidalia changes.
I can't see any other file with 'Changes' or 'Version' in the name in
the .app folder, other than in the Quicktime section.
GD

-- 
http://www.fastmail.fm - Or how I learned to stop worrying and
  love email again

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo bug reporting

2011-01-30 Thread Juliusz Chroboczek
 ( I saw http://archives.seul.org/or/talk/Jan-2011/msg00161.html but it
 doesn't specify where the new bugtracker is).

 We do not know of any new bug tracker for Polipo.  If you have a bug
 report for Polipo itself, report it to the polipo-users mailing list
 (see https://lists.sourceforge.net/lists/listinfo/polipo-users).

Please note that Polipo is very short on manpower -- there's only me
working on it in my copious free time, and it's my nth project, for some
large value of n.  As Robert mentioned, you're welcome to report your
bug on the Polipo mailing list, but please don't expect a timely fix.

--Juliusz
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo bug Re: Tor 0.2.2.21-alpha is out (security patches)

2011-01-21 Thread Geoff Down


On Fri, 21 Jan 2011 08:32 +0100, Erinn Clark er...@torproject.org
wrote:
 * Geoff Down geoffd...@fastmail.net [2011:01:20 12:56 +]: 
  The Polipo in
  https://www.torproject.org/dist/vidalia-bundles/vidalia-bundle-0.2.2.21-alpha-0.2.10-ppc-1.dmg
  is broken:
  
  dyld: /Applications/Vidalia.app.new/Contents/MacOS/polipo Undefined
  symbols:
  /Applications/Vidalia.app.new/Contents/MacOS/polipo undefined reference
  to ___stderrp expected to be defined in /usr/lib/libSystem.B.dylib
  /Applications/Vidalia.app.new/Contents/MacOS/polipo undefined reference
  to ___stdoutp expected to be defined in /usr/lib/libSystem.B.dylib
  Trace/BPT trap
 
 Hi Geoff,
 
 Which version of OS X are you using?
 
Hi Erinn,
10.3.9
GD

-- 
http://www.fastmail.fm - Choose from over 50 domains or use your own

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo bug Re: Tor 0.2.2.21-alpha is out (security patches)

2011-01-20 Thread Erinn Clark
* Geoff Down geoffd...@fastmail.net [2011:01:20 12:56 +]: 
 The Polipo in
 https://www.torproject.org/dist/vidalia-bundles/vidalia-bundle-0.2.2.21-alpha-0.2.10-ppc-1.dmg
 is broken:
 
 dyld: /Applications/Vidalia.app.new/Contents/MacOS/polipo Undefined
 symbols:
 /Applications/Vidalia.app.new/Contents/MacOS/polipo undefined reference
 to ___stderrp expected to be defined in /usr/lib/libSystem.B.dylib
 /Applications/Vidalia.app.new/Contents/MacOS/polipo undefined reference
 to ___stdoutp expected to be defined in /usr/lib/libSystem.B.dylib
 Trace/BPT trap

Hi Geoff,

Which version of OS X are you using?


pgpkt9CBu6wTb.pgp
Description: PGP signature


Re: Polipo starts on bootup

2011-01-19 Thread kuhkatz

Am 19.01.2011 03:27, schrieb andr...@fastmail.fm:

I'm using Ubuntu 10.04 and have the Tor browser bundle installed.

After Ubuntu boots up and I try to start Tor I find that Tor won't
start.  I found that Polipo is running so I did a Pidof polipo and then
a sudo kill  (for the polipo process number).

Is there any reason I should have Polipo on my machine at all and,
secondly, is there any risk in Polipo starting at bootup?
   


AFAIK:
tor project patched the firefox included in TBB so it doesnt need polipo.
so, if you use the browser bundle, you dont need it,
but i am not aware of any dangers if it exists - it just dont get used.


Should I just delete Polipo off my computer?

   
if you dont use it otherwise than for tor (and then its only needed if 
you also installed tor, and not use the bundle) you should be ok with 
deleting it.

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo starts on bootup

2011-01-19 Thread Mary Escondido
Hi Andre,

having polipo running should not prevent tor from running.
What messages did tor emit when it failed to start?
polipo is useful as a http proxy (which tor is not).
typically, you would set your system-wide http-proxy
environment variable to point to polipo, and configure
polipo to use the local tor.

-Mary

--- On Wed, 1/19/11, andr...@fastmail.fm andr...@fastmail.fm wrote:

 From: andr...@fastmail.fm andr...@fastmail.fm
 Subject: Polipo starts on bootup
 To: or-talk@freehaven.net
 Date: Wednesday, January 19, 2011, 2:27 AM
 I'm using Ubuntu 10.04 and have the
 Tor browser bundle installed.
 
 After Ubuntu boots up and I try to start Tor I find that
 Tor won't
 start.  I found that Polipo is running so I did a
 Pidof polipo and then
 a sudo kill  (for the polipo process number).
 
 Is there any reason I should have Polipo on my machine at
 all and,
 secondly, is there any risk in Polipo starting at bootup?
 
 Should I just delete Polipo off my computer?




***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo starts on bootup

2011-01-19 Thread Dirk
andr...@fastmail.fm wrote:
 I'm using Ubuntu 10.04 and have the Tor browser bundle installed.
 
 After Ubuntu boots up and I try to start Tor I find that Tor won't
 start.  I found that Polipo is running so I did a Pidof polipo and then
 a sudo kill  (for the polipo process number).
 
 Is there any reason I should have Polipo on my machine at all and,
 secondly, is there any risk in Polipo starting at bootup?
 
 Should I just delete Polipo off my computer?
 

afaik polipo is some proxy.. just like privoxy it can be used to invoke TOR... 
i think it is a little bit smaller than privoxy
or so.. here is a small howto... 
http://www.pps.jussieu.fr/~jch/software/polipo/tor.html

i just use torify to start processes that should make use of tor... mostly 
cronjobs.. but that's my setup..


Dirk
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo-tor deb/ubuntu native package

2011-01-17 Thread travis+ml-tor-talk
On Thu, Jan 13, 2011 at 12:03:58AM -0500, and...@torproject.org wrote:
 On Fri, Jan 07, 2011 at 03:21:22PM -0800, 
 travis+ml-tor-t...@subspacefield.org wrote 15K bytes in 259 lines about:
 There has been much discussion over a combined tor and polipo package,
 as well as a vidalia-tor-polipo package for deb-based systems.  

Well, I just saw the vidalia ubuntu packages lately, and I think I'll
make it a recommended package for my polipo-tor package, since vidalia
doesn't seem apropos for headless servers, for example (I could be
wrong; only installed it recently).

 The core issue is that packages should not overwrite other packages
 config files.

I don't; I just installed to parallel files such as /etc/polipo-tor.

In other words, it installs polipo, tor, and a bunch of other
dependencies, and then installs a parallel set of config files,
/var/run pid files, and log files so that it doesn't interfere with
the installed polipo.  It also runs on a different port (8118 instead
of polipo's default of 8123).

To make it ridiculously easy for people, I created my own repo here:

http://www.subspacefield.org/packages/ubuntu/

Just follow the instructions, sudo aptitude install polipo-tor,
install torbutton (or whatever), and go.  Should take all of one
minute to get up and running.

 We've generally assumed (wrongly) that linux users
 understand their system and can handle manual configuration of a few
 packages, such as tor, polipo, and vidalia.  The general answer for
 users who just want a tor client is to use the tor browser bundle.

I understand; I'm old school, I used to track all third-party sources
via CVS, but it just doesn't scale very well.  Nowadays if it's not in
a repo, it doesn't exist for most people - it's beyond their
level of interest.  I understand both points of view.

 The real answer is to fix firefox so it doesn't need a proxy between it
 and Tor.  We patch firefox to do just this in the osx and linux tor
 browser bundles.  Polipo was a fine kludge until either we started
 patching firefox or mozilla fixed their many-years-old socks bug.

Hmm, I had no idea this was even available for Linux.

It looks like a tarball - it's unclear how this will interact with a
package manager, which likes to know which packages installed which
files, and updates them automatically, etc.

 The great thing about free software is that you're welcome to do just
 what you're doing.  You don't like the situation, so you solve it.
 Great.

Thanks. ;-)  I believe in do-ocracy.

So, now I've brought the level of effort down to one minute or less,
and the level of thought down to something you can do while drunk and
sleep-deprived, since there's no decisions required.

So how do I make people aware of the option?
-- 
Effing the ineffable since 1997. | http://www.subspacefield.org/~travis/
My emails do not usually have attachments; it's a digital signature
that your mail program doesn't understand.
If you are a spammer, please email j...@subspacefield.org to get blacklisted.


pgpkoclIw9M9r.pgp
Description: PGP signature


Re: polipo-tor deb/ubuntu native package

2011-01-17 Thread intrigeri
Hi,

travis+ml-tor-t...@subspacefield.org wrote (17 Jan 2011 20:21:56 GMT) :
 So, now I've brought the level of effort down to one minute or less,
 and the level of thought down to something you can do while drunk
 and sleep-deprived, since there's no decisions required.

Thank you. This is much appreciated.

 So how do I make people aware of the option?

In my humble opinion your package shall be pushed to Debian and Ubuntu
(or at least to deb.torproject.org) before user awareness is the top
priority. Rationale: I'm not a fan of recommending users to install
.deb from any random online repository (no offense intended); trusting
a given APT source almost equals trusting this repository's admins and
package maintainers to be root on your system.

I don't think pushing this package to Debian and Ubuntu is that hard
and I suggest the following process:

0. If not done yet, compare the default polipo configuration you are
   shipping with the Tor Browser Bundle's and T(A)ILS' ones, just to
   make sure no privacy/anonymity-related option was missed.
1. Make sure your package is in good enough shape so that it can be
   included in Debian (= Debian users can use it as well, and Ubuntu
   will fetch it from there in a few months). I mean checking the
   Debian Policy compliance, making sure it is Lintian-clean, etc.
2. Fill a Request For Package (RFP) bug in the Debian BTS [0] so that
   any Tor-friendly Debian developer is aware of your work and can
   decide to upload your package into Debian.
3. Mention the RFP bug on the Debian bug that tracks the polipo vs.
   torbutton port mismatch [1], and reciprocally.
4. Wait for the package to be uploaded into Debian.
5. Wait for the package to be fetched from Debian by Ubuntu.

Note that one does not need to be an official Debian developer to
maintain packages in Debian. Such a formal status is only needed to
upload, so you can go on maintaining this package and work hand in
hand with a Debian developer that will advise you if needed, check
your packages and push it to the Debian archive (... = Ubuntu
archive).

[0] http://www.debian.org/devel/wnpp/
[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606916

Bye,
--
  intrigeri intrig...@boum.org
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
  | Every now and then I get a little bit restless
  | and I dream of something wild.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo-tor deb/ubuntu native package

2011-01-17 Thread travis+ml-tor-talk
On Mon, Jan 17, 2011 at 10:42:18PM +0100, intrigeri wrote:
  So how do I make people aware of the option?
 
 In my humble opinion your package shall be pushed to Debian and Ubuntu
 (or at least to deb.torproject.org) before user awareness is the top
 priority. Rationale: I'm not a fan of recommending users to install
 .deb from any random online repository (no offense intended); trusting
 a given APT source almost equals trusting this repository's admins and
 package maintainers to be root on your system.

Makes sense.

I'd like to get it in the torproject.org repo, but I'm not sure how.

Per Andrew's suggestion, I opened a trac.torproject.org ticket to
ask for someone to help me get it in there.

I am unsure of whether it should be in the debian repo, since the
dependencies aren't even in there yet.  However, I could try and
see what they think.

 I don't think pushing this package to Debian and Ubuntu is that hard
 and I suggest the following process:
 
 0. If not done yet, compare the default polipo configuration you are
shipping with the Tor Browser Bundle's and T(A)ILS' ones, just to
make sure no privacy/anonymity-related option was missed.

Good point, will do.

 1. Make sure your package is in good enough shape so that it can be
included in Debian (= Debian users can use it as well, and Ubuntu
will fetch it from there in a few months). I mean checking the
Debian Policy compliance, making sure it is Lintian-clean, etc.

I uploaded it to debian-mentors and it checks out fine now (as of
version 1.4)

 2. Fill a Request For Package (RFP) bug in the Debian BTS [0] so that
any Tor-friendly Debian developer is aware of your work and can
decide to upload your package into Debian.

Is this related, parallel, a superset or a subset of the
debian-mentors RFS process?  I could go through that, but haven't
flagged this package as needing sponsorship yet since the tor
packages themselves aren't in the debian repo.

-- 
Effing the ineffable since 1997. | http://www.subspacefield.org/~travis/
My emails do not usually have attachments; it's a digital signature
that your mail program doesn't understand.
If you are a spammer, please email j...@subspacefield.org to get blacklisted.


pgpYc2530rMhE.pgp
Description: PGP signature


Re: polipo-tor deb/ubuntu native package

2011-01-17 Thread Andrew Lewman
On Mon, 17 Jan 2011 12:21:56 -0800
travis+ml-tor-t...@subspacefield.org wrote:
  The real answer is to fix firefox so it doesn't need a proxy
  between it and Tor.  We patch firefox to do just this in the osx
  and linux tor browser bundles.  Polipo was a fine kludge until
  either we started patching firefox or mozilla fixed their
  many-years-old socks bug.
 
 Hmm, I had no idea this was even available for Linux.
 
 It looks like a tarball - it's unclear how this will interact with a
 package manager, which likes to know which packages installed which
 files, and updates them automatically, etc.

Tor Browser Bundle isn't something to install, you extract and run.
I've seen a few linux users just double click the tar.gz file and run
from inside their archive extractor.

-- 
Andrew
pgp 0x74ED336B
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo-tor deb/ubuntu native package

2011-01-17 Thread intrigeri
Hi,

travis+ml-tor-t...@subspacefield.org wrote (17 Jan 2011 23:55:16 GMT) :

 I am unsure of whether it should be in the debian repo, since the
 dependencies aren't even in there yet.

What are the missing dependencies? (I have not had a single look at
your package yet, sorry.)

 However, I could try and see what they think.

From my (limited) experience, this is not a process that works very
well inside the Debian community. Things are changing though, but the
process is slow. What works better, as far as I know, is preparing
things really well before submission so that your proposal cannot be
rejected for obvious minor reasons: the first impression it makes is
pretty important.

 I uploaded it to debian-mentors and it checks out fine now (as of
 version 1.4)

Congrats :)

 2. Fill a Request For Package (RFP) bug in the Debian BTS [0] so that
any Tor-friendly Debian developer is aware of your work and can
decide to upload your package into Debian.

 Is this related, parallel, a superset or a subset of the
 debian-mentors RFS process?

I don't know the Debian Mentors process at all, sorry.

 I could go through that, but haven't flagged this package as needing
 sponsorship yet since the tor packages themselves aren't in the
 debian repo.

You might be confusing Debian and Ubuntu on this matter as Tor has
been part of Debian for years:

  - http://packages.debian.org/changelogs/pool/main/t/tor/current/changelog
  - http://snapshot.debian.org/package/tor/

Moreover the Tor package will closely follow upstream releases during
the Debian Squeeze lifecycle, thanks to the Debian Volatile archive.

Bye,
--
  intrigeri intrig...@boum.org
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
  | We're dreaming of something else.
  | Something more clandestine, something happier.
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: [Polipo-users] Polipo moved back to PPS

2011-01-12 Thread grarpamp
 git clone git://git.wifi.pps.jussieu.fr/polipo

Do you have a gitweb? That would be nice.

 Chris's old branch is called polipo-chrisd

Oh, meaning 'chrisd/polipo' @ 20100113
193d95e3906967433081e0b10626a67c075ac131

 and his last tree is tagged ``polipo-chrisd-20100330''.

Oh, meaning 'polipo' @ 20100330
b92db574c11961f681fa258314bd7470e4449cc0
This latter tree seeming to be seeded from the
former when development there stopped.
This commit compiles and runs fine on FreeBSD 8.1 i386 :)
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo and privoxy needed?

2010-12-23 Thread andrew
On Thu, Dec 23, 2010 at 09:26:17AM -0500, pe...@aleksandrsolzhenitsyn.net wrote 
1.4K bytes in 34 lines about:
: I just upgraded my Tor setup with the Browser Bundle.  It runs fine but
: I noticed that I have privoxy and polipo still on my system from the old
: setup.
: 
: Can I delete them?

If you are using TBB, then yes, you can remove privoxy/polipo installed
on your system.


-- 
Andrew
pgp key: 0x74ED336B
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo

2010-08-23 Thread Juliusz Chroboczek
 For the most part, anything involving HTTPS, needs to be taken care of in
 the browser itself.

My personal opinion (and I'm the author of Polipo) is that all content
munging should be done in the browser -- munging in the proxy is
a broken design.  Unfortunately, the browser vendors care more about
functionality than privacy.

 Properly-configured extensions help a lot here.

I'd rather see privacy features in the browser core, not slapped-on as
extensions.

Juliusz
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo

2010-08-21 Thread F. Fox
For the most part, anything involving HTTPS, needs to be taken care of 
in the browser itself. Properly-configured extensions help a lot here.


Also, that adds an extra layer of protection onto normal HTTP stuff, 
too. The more, the merrier...


F. Fox

On 8/21/10, Robert Ransomrransom.8...@gmail.com  wrote:
(snip)

As I understand it, Polipo can't scrub the headers of an HTTPS request,
even if you use it as an HTTPS proxy.


(snip)
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo

2010-08-20 Thread Juliusz Chroboczek
Trystero Lot lo...@callout.me writes:

 it seems the censoredHeaders not working for me.

It works for me.

 have anyone tried to use this and add useragent?

It's user-agent, not useragent.

  censoredHeaders = user-agent

Juliusz


***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo

2010-08-20 Thread Trystero Lot
still the same. i uncommented and added user-agent

censoredHeaders = set-cookie, cookie, cookie2, from,accept-language, user-agent
censorReferer = true

my header is not clean and in fact shows my OS :(

tested using..
https://anonymous-proxy-servers.net/en/anontest
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: polipo

2010-08-20 Thread Robert Ransom
On Sat, 21 Aug 2010 09:39:08 +0800
Trystero Lot lo...@callout.me wrote:

 still the same. i uncommented and added user-agent
 
 censoredHeaders = set-cookie, cookie, cookie2, from,accept-language, 
 user-agent
 censorReferer = true
 
 my header is not clean and in fact shows my OS :(
 
 tested using..
 https://anonymous-proxy-servers.net/en/anontest

As I understand it, Polipo can't scrub the headers of an HTTPS request,
even if you use it as an HTTPS proxy.


Robert Ransom


signature.asc
Description: PGP signature


Re: polipo

2010-08-20 Thread Trystero Lot
no wonder. so there's a downside with https :(
thanks guys.

On 8/21/10, Robert Ransom rransom.8...@gmail.com wrote:
 On Sat, 21 Aug 2010 09:39:08 +0800
 Trystero Lot lo...@callout.me wrote:

 still the same. i uncommented and added user-agent

 censoredHeaders = set-cookie, cookie, cookie2, from,accept-language,
 user-agent
 censorReferer = true

 my header is not clean and in fact shows my OS :(

 tested using..
 https://anonymous-proxy-servers.net/en/anontest

 As I understand it, Polipo can't scrub the headers of an HTTPS request,
 even if you use it as an HTTPS proxy.


 Robert Ransom

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo question

2010-05-08 Thread Juliusz Chroboczek
  does anyone know if there is a config file option to turn off all
  caching in Polipo?

If you look at the Polipo manual, there's an index.  If you look at the
index, there's an entry for uncachable.  If you follow the entry,
you'll find the config variable uncachableFile.

--jch
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


RE: Polipo question

2010-05-08 Thread downie -


 From: j...@pps.jussieu.fr
 To: or-talk@freehaven.net
 Subject: Re: Polipo question
 Date: Sat, 8 May 2010 18:08:22 +0200
 
   does anyone know if there is a config file option to turn off all
   caching in Polipo?
 
 If you look at the Polipo manual, there's an index.  If you look at the
 index, there's an entry for uncachable.  If you follow the entry,
 you'll find the config variable uncachableFile.
 
 --jch

Thank you, I have a recollection of reading that section and not really 
understanding it - I think I would need a good understanding of how caching 
works and all the directives first. From what I read, you have to know in 
advance which URLs you don't want cached, and put them in uncachableFile. 
That's not really practical. But thanks for trying to help.
GD
  
_
The New Busy is not the too busy. Combine all your e-mail accounts with Hotmail.
http://www.windowslive.com/campaign/thenewbusy?tile=multiaccountocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4

Re: Polipo and dnsUseGethostbyname - what is the best option and does it matter?

2010-04-12 Thread Matthew

I'm not sure whether either of these bugs are fixed at present (ugh). So
I'd recommend sticking with yes (or true, I guess it's called now).


If yes is the same as true then this is a setting the Polipo manual
strongly advises against. Finally, if dnsUseGethostbyname is true,
Polipo never tries to speak DNS itself and uses the system resolver straight away 
(this is not recommended).

- 
Given those, and since polipo shouldn't be doing any dns resolves anyway

when it's using a socks5 proxy, I figured I'd go for the choice that
exposed less surface area.

My fundamental question is this:

If the config file says yes to dnsUseGethostbyname then Tor does the 
DNS resolution.
If however the config file says something else e.g. reluctantly (The 
manual says if it is reluctantly
(the default), Polipo tries to speak DNS and falls back to the system 
resolver if a name server
could not be contacted.) then does Polipo do its own DNS resolution and 
then pass this on to Tor therefore leaking?


Or, are you saying, that since polipo shouldn't be doing any dns 
resolves anyway when it's using a socks5 proxy the value of 
dnsUseGethostbyname is not relevant when using Polipo with Tor since Tor 
will ALWAYS do DNS resolution because of 
socksParentProxy = localhost:9050 and socksProxyType = socks5.


If yes then my first question is moot.

This is what is confusing me the most - whether changing 
dnsUseGethostbyname means Polipo (not Tor) now does the DNS resolution.




--Roger

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/

  

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo and dnsUseGethostbyname - what is the best option and does it matter?

2010-04-11 Thread andrew
On Thu, Apr 08, 2010 at 04:24:06PM +0100, pump...@cotse.net wrote 2.7K bytes in 
64 lines about:
 The standard Polipo configuration file for Ubuntu located at  
 https://svn.torproject.org/svn/torbrowser/trunk/build-scripts/config/polipo.conf
  
 should replace the configuration file one downloads when Polipo is  

I believe you mean The standard polipo configuration file for safely
using Tor.  The standard ubuntu polipo config doesn't use Tor.

 this setting in the configuration file is not important? Or does Polipo  
 do the DNS resolution before traffic is passed on to Tor in which case  
 the configuration file is crucial? In other words, when is DNS resolved  
 when using Tor and Polipo?

In practice, with that config file, dns queries are passed to tor
directly for resolution, not being done by polipo nor the actual system
resolver.

If you change the options, you should see polipo query your local dns
resolver either directly, or via gethostbyname.

I agree the config needs more clarity and to match an actual option as
specified in the info page.  I'll add it as a bug to research.

This is also the case for TBB, not necessarily so for non-tbb use cases.

-- 
Andrew Lewman
The Tor Project
pgp 0x31B0974B

Website: https://www.torproject.org/
Blog: https://blog.torproject.org/
Identi.ca: torproject
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo and dnsUseGethostbyname - what is the best option and does it matter?

2010-04-11 Thread Matthew

and...@torproject.org wrote:


In practice, with that config file, dns queries are passed to tor
directly for resolution, not being done by polipo nor the actual system
resolver.
  

Thank you for the confirmation.

If you change the options, you should see polipo query your local dns
resolver either directly, or via gethostbyname.

  
So, the option reluctantly for dnsUseGethostbyname would mean DNS 
requests are done by Tor and are only done by Polipo if Tor DNS fails or 
does it mean DNS requests are now done by Polipo usually and only done 
by the system resolver if Polipo DNS fails?


The manual says for reluctantly - Polipo tries to speak DNS and falls 
back to the system resolver if a name server
could not be contacted.  I am unclear where it tries to speak DNS - 
would this be before Tor or would the DNS still get pushed through Tor 
even though the configuration file has been modified?

I agree the config needs more clarity and to match an actual option as
specified in the info page.  I'll add it as a bug to research.
  
I am still confused regarding what yes actually means - does it refer 
to the default which is reluctantly or does it mean nothing to Polipo 
and is just ignored?  In which case why not just comment this option out?


Thank you for your help!
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo and dnsUseGethostbyname - what is the best option and does it matter?

2010-04-11 Thread Matthew



If you change the options, you should see polipo query your local dns
resolver either directly, or via gethostbyname.

  
But if you change it to false would that not be the safest option - 
from what I can gather in this situation Polipo would never do its own DNS.

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo and dnsUseGethostbyname - what is the best option and does it matter?

2010-04-11 Thread Roger Dingledine
On Sun, Apr 11, 2010 at 11:14:31PM +0100, Matthew wrote:
 If you change the options, you should see polipo query your local dns
 resolver either directly, or via gethostbyname.

 But if you change it to false would that not be the safest option -  
 from what I can gather in this situation Polipo would never do its own 
 DNS.

As I understand it, the question is whether polipo should use the
system call named gethostbyname(), or if it should use its own internal
non-blocking dns resolve code. The question isn't should polipo disable
dns resolves or not.

Back when I picked the yes answer, there were two reasons:

A) polipo's internal dns resolve code didn't look at /etc/hosts,
so when I set my proxy to localhost:9050, polipo would try to resolve
localhost, and it ended up asking my ISP where localhost was. My ISP
helpfully answered 127.0.0.1, but what if my ISP had answered something
else? Really bad news.

B) There were some remote buffer overflows in polipo's internal dns
resolve code.

Given those, and since polipo shouldn't be doing any dns resolves anyway
when it's using a socks5 proxy, I figured I'd go for the choice that
exposed less surface area.

I'm not sure whether either of these bugs are fixed at present (ugh). So
I'd recommend sticking with yes (or true, I guess it's called now).

--Roger

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


RE: Polipo question

2010-04-02 Thread downie -







 Subject: Re: Polipo question
 From: incoming.li...@ax11.de
 To: or-talk@freehaven.net
 Date: Thu, 1 Apr 2010 23:10:09 +0200
 
 Am Donnerstag, den 18.03.2010, 23:35 -0400 schrieb downie -:
  Hi,
   does anyone know if there is a config file option to turn off all
  caching in Polipo?
  I am having a problem with variable PHP pages being cached, and would
  prefer not to have to add Cache-Control headers everywhere. The manual
  doesn't seem to allow for that eventuality.
  downie
 
 Have you tried connecting to http://localhost:8123/polipo/config? (and
 setting CacheDir to /dev/null there if nothing else works) 
 
 Cheers,
 Tom

Hi,
Polipo is on port 8118 for Tor: anyhow, Firefox won't connect to localhost - 
it's 'restricted'.
Also disc cacheing is off already (critical for privacy), it's the memory cache 
that is still a problem.
downie
  
_
The New Busy think 9 to 5 is a cute idea. Combine multiple calendars with 
Hotmail. 
http://www.windowslive.com/campaign/thenewbusy?tile=multicalendarocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_5

Re: Polipo question

2010-04-02 Thread Roger Dingledine
On Fri, Apr 02, 2010 at 12:56:25PM -0400, downie - wrote:
   I am having a problem with variable PHP pages being cached, and would
   prefer not to have to add Cache-Control headers everywhere. The manual
   doesn't seem to allow for that eventuality.

I believe the answer is that you can't turn off caching. It's core to
what polipo does. But perhaps Chris or Juliusz will contradict me.

 Polipo is on port 8118 for Tor: anyhow, Firefox won't connect to
localhost - it's 'restricted'.

My guess is that's actually Torbutton preventing you from reaching port
8118 or port 8123, not Firefox preventing you from reaching localhost.

http://kb.mozillazine.org/Network.security.ports.banned
https://www.torproject.org/torbutton/design/#browseroverlay

--Roger

***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo question

2010-04-01 Thread Hans Jemand Anders
Am Donnerstag, den 18.03.2010, 23:35 -0400 schrieb downie -:
 Hi,
  does anyone know if there is a config file option to turn off all
 caching in Polipo?
 I am having a problem with variable PHP pages being cached, and would
 prefer not to have to add Cache-Control headers everywhere. The manual
 doesn't seem to allow for that eventuality.
 downie

Have you tried connecting to http://localhost:8123/polipo/config? (and
setting CacheDir to /dev/null there if nothing else works) 

Cheers,
Tom


***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


Re: Polipo question

2010-03-20 Thread andrew
On Thu, Mar 18, 2010 at 11:35:49PM -0400, downgeo...@hotmail.com wrote 1.8K 
bytes in 53 lines about:
:  does anyone know if there is a config file option to turn off all caching in 
Polipo?

I think you have to compile it without caching.  Have you tried setting
chunkhighmark and objecthighmark to 0?

-- 
Andrew Lewman
The Tor Project
pgp 0x31B0974B

Website: https://www.torproject.org/
Blog: https://blog.torproject.org/
Identi.ca: torproject
***
To unsubscribe, send an e-mail to majord...@torproject.org with
unsubscribe or-talkin the body. http://archives.seul.org/or/talk/


RE: Polipo question

2010-03-20 Thread downie -


 Date: Sat, 20 Mar 2010 10:52:28 -0400
 From: and...@torproject.org
 To: or-talk@freehaven.net
 Subject: Re: Polipo question
 
 On Thu, Mar 18, 2010 at 11:35:49PM -0400, downgeo...@hotmail.com wrote 1.8K 
 bytes in 53 lines about:
 :  does anyone know if there is a config file option to turn off all caching 
 in Polipo?
 
 I think you have to compile it without caching.  Have you tried setting
 chunkhighmark and objecthighmark to 0?
 


Thanks for the suggestion; I don't compile myself.
/Applications/Vidalia.app/Contents/Resources/polipo.conf:62: unknown config 
variable diskCacheRoot
/Applications/Vidalia.app/Contents/Resources/polipo.conf:71: unknown config 
variable localDocumentRoot
Impossibly low objectHighMark -- setting to 16

almost but not quite :-/ it's still caching small files at least.

  
_
The New Busy is not the old busy. Search, chat and e-mail from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID27925::T:WLMTAGL:ON:WL:en-US:WM_HMP:032010_3

Re: Polipo automatic?

2010-03-14 Thread zzzjethro666

 Thank you very much.

 


 

 

-Original Message-
From: downie - downgeo...@hotmail.com
To: Or-talk or-talk@freehaven.net
Sent: Sat, Mar 13, 2010 10:22 am
Subject: RE: Polipo automatic?


To: or-talk@freehaven.net
Subject: Polipo automatic?
Date: Fri, 12 Mar 2010 21:50:23 -0500
From: zzzjethro...@email2me.net


 Hi.
Just read a post made me think of this:
On Mac 10.5.2, with the Vidalia/Bundle, does Polipo automatically run after 
starting Vidalia or do I have to start it separately? I think it's now Polipo 
rather than Privoxy for v 0.2.1.24-0.2.7?

thanks

 


Certainly with the OSX Vidalia bundle I downloaded, it was enabled already: 
it's an option in Vidalia/Control Panle/Settings.

downie
   

Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign up now.=
 


RE: Polipo automatic?

2010-03-12 Thread downie -

To: or-talk@freehaven.net
Subject: Polipo automatic?
Date: Fri, 12 Mar 2010 21:50:23 -0500
From: zzzjethro...@email2me.net


 Hi.

Just read a post made me think of this:

On Mac 10.5.2, with the Vidalia/Bundle, does Polipo automatically run after 
starting Vidalia or do I have to start it separately? I think it's now Polipo 
rather than Privoxy for v 0.2.1.24-0.2.7?



thanks



 




Certainly with the OSX Vidalia bundle I downloaded, it was enabled already: 
it's an option in Vidalia/Control Panle/Settings.

downie
  
_
Hotmail: Trusted email with Microsoft’s powerful SPAM protection.
http://clk.atdmt.com/GBL/go/210850552/direct/01/

Re: polipo POC

2009-12-09 Thread Jacob Appelbaum
Darren Thurston wrote:
 
 #!/usr/bin/perl
 # estranged.pl
 # AKA
 # Polipo 1.0.4 Remote Memory Corruption 0day PoC

Cute.

 $payload = GET / HTTP/1.1\r\nContent-Length: 2147483602\r\n\r\n;
 

The proof of concept works as advertised. Wheee.

Here's a simple patch (that probably breaks some requests and is
imperfect) to stop the proof of concept while we wait on upstream to
provide a real fix for it:

--- polipo-1.0.4/client.c   2008-01-08 14:56:45.0 +0200
+++ polipo-1.0.4-fixed/client.c 2009-12-09 15:30:53.0 +0200
@@ -998,7 +998,7 @@
 return 1;
 }

-if(connection-reqlen  connection-reqbegin) {
+if(connection-reqlen  connection-reqbegin  (connection-reqlen
- connection-reqbegin )  0 ) {
 memmove(connection-reqbuf, connection-reqbuf +
connection-reqbegin,
 connection-reqlen - connection-reqbegin);
 connection-reqlen -= connection-reqbegin;

Using memmove like that is extremely unsafe. :-(

Best,
Jacob



signature.asc
Description: OpenPGP digital signature


Re: [Polipo-users] Testing Polipo on Windows

2007-09-24 Thread Juliusz Chroboczek
[CC-ing or-talk, in case somebody there has already heard about this
Windows thing]

 1. I'm seriously thinking about removing the native Windows code,
 unless I find a maintainer.

 That worries me a bit,

It's not like Polipo development breaks things daily.  If the Mingw
code starts rotting, you'll get plenty of advance notice (months).
For now, I'm simply doing my best not to break anything, but not
actively testing under Windows.

But it does make me uneasy to have this blob of code in Polipo which
I'm not able to maintain.  Unless this changes, I am unwilling to
commit to anything.

 it's part of Hv3's plan for world domination.

World domination is my plan.  Please pick a different one.

 And I can test it informally as part of Hv3 a bit.

I think that would be more effective if Hv3 used a pristine copy of
Polipo rather than a local copy, and tracked the head branch
regularly -- this would make you notice faster if anything broke.

Of course, if there were one or two Windows users willing to check
every release candidate for Windows-specific regressions, that would
do a lot to make me more comfortable.

 However I'm a bit limited in what I can do. All I have at present is the 
 mingw compiler and windows-xp under vmware.

It looks like we're all struggling to support an obsolete OS that none
of us use any longer.  It reminds me a little of the ``#ifdef VMS''
fetish we used to have in the nineties.

Juliusz


Re: [Polipo-users] Testing Polipo on Windows

2007-09-24 Thread phobos
On Mon, Sep 24, 2007 at 01:49:23PM +0200, [EMAIL PROTECTED] wrote 1.8K bytes in 
48 lines about:
:  However I'm a bit limited in what I can do. All I have at present is the 
:  mingw compiler and windows-xp under vmware.
: 
: It looks like we're all struggling to support an obsolete OS that none
: of us use any longer.  It reminds me a little of the ``#ifdef VMS''
: fetish we used to have in the nineties.

WinXP isn't obsolete yet.  It has a very large installed base.
Generally, what works under XP has worked with WinNT, Win2000, and Vista
as well.  I have win98 in a vm as well, I could test that as a truly
obsolete OS.  Much like Tor, it appears none of the polipo developers
nor testers use Windows as their main OS.  Unfortunately, our users
typically use Windows as their main OS.  This means we do have to
support and maintain the Windows code and issues.  

I'm happy to test and maintain Windows packages for Polipo and Tor.
I'm can't maintain the Windows code however, just provide good bug
reports of what is broken.

-- 
Andrew


Re: [Polipo-users] Reminder: running Polipo with Tor, no need to mail me

2007-09-22 Thread phobos
On Sat, Sep 22, 2007 at 05:11:57PM +0200, [EMAIL PROTECTED] wrote 1.3K bytes in 
35 lines about:

For Polipo 1.0.3, I'll include a config.tor for the lazy people.

-- 
Andrew


Re: [Polipo-users] Reminder: running Polipo with Tor, no need to mail me

2007-09-22 Thread Juliusz Chroboczek
 On Sat, Sep 22, 2007 at 05:11:57PM +0200, [EMAIL PROTECTED] wrote 1.3K bytes 
 in 35 lines about:

 For Polipo 1.0.3, I'll include a config.tor for the lazy people.

Point taken.  Patches welcome.

Juliusz


Re: [Polipo-users] ANNOUNCE: Polipo-1.0.2

2007-09-03 Thread phobos
On Sun, Aug 26, 2007 at 11:08:50PM +0200, [EMAIL PROTECTED] wrote 2.2K bytes in 
71 lines about:

I put together a standard Polipo 1.0.2 universal binary for OSX users.  
It's located at http://interloper.org/tmp/polipo/.  The tarball
contains my 'contrib' dir designed to be extracted in the polipo-1.0.2/
dir.  I've personally tested it since the 1.0.2 release and feel it's
ready for general usage.  The config file has comments for those wishing
to use it with Tor.

I've signed it with the same key I use to sign the official Tor
packages.

Juliusz, feel free to link to it from your polipo page.  And yes, I
still used the custom Makefile to make my life easier.

In the future, I hope to have less time between release and dmg
availability.

Feedback and comments welcome.

-- 
Andrew


pgps9lyQ541JT.pgp
Description: PGP signature


Re: [Polipo-users] ANNOUNCE: Polipo-1.0.2

2007-09-03 Thread Juliusz Chroboczek
 I put together a standard Polipo 1.0.2 universal binary for OSX users.  
 It's located at http://interloper.org/tmp/polipo/.

Excellent.

 The config file has comments for those wishing to use it with Tor.

Could I please see a copy?  I'm rather keen on having the default
installation of Polipo be roughly the same on all platforms.

DJB is annoying, but he often has a point.  Please see

  http://cr.yp.to/compatibility.html

especially the last paragraph.

 Juliusz, feel free to link to it from your polipo page.

Done.

Juliusz


Re: [Polipo-users] Polipo 1.0.1 Windows binary

2007-07-02 Thread Juliusz Chroboczek
(Andrew -- are you on polipo-users?  If so, I suggest we move there,
no need to clutter or-talk.)

 I put up the source from which I built the dmg and universal binary,

Thanks.  (For anyone listening and who's not familiar with Apple's
marketing talk, a « Universal binary » is what us mere mortals call
a fat binary or a multiarch binary.  It's merely a binary that
contains the object code for multiple architectures.  In Apple's case,
it's PPC and x86.)

 +UNIVERSAL = -O -g -isysroot /Developer/SDKs/MacOSX10.4u.sdk -arch i386 -arch 
 ppc
 +LDFLAGS = -Wl,-syslibroot,/Developer/SDKs/MacOSX10.4u.sdk
 +CFLAGS = $(MD5INCLUDES) $(CDEBUGFLAGS) $(DEFINES) $(EXTRA_DEFINES) 
 $(UNIVERSAL)

I'd just replace this hunk with

  PLATFORM_DEFINES=-sysroot ... -arch i386 -arch ppc

This way, you can still say something like

  make CDEBUGFLAGS='-O0 -g'

and get the expected result.

I'm following the X11 makefile conventions (with a few additions from
GNU), and the idea is that:

 - CDEBUGFLAGS should have a reasonable default value, but it can be
   changed by the user;
 - PLATFORM_DEFINES is reserved for platform-dependent stuff;
 - EXTRA_DEFINES is reserved for the user -- it should never be set in
   the makefile;
 - all other variables are internal to the makefile and should not be
   changed by the user.

 -   md5import.c md5.c ftsimport.c fts_compat.c socks.c mingw.c
 +   md5import.c md5.c ftsimport.c fts_compat.c socks.c 

That's not necessary -- there's an « #ifdef MINGW » around mingw.c.

 +proxyAddress = 127.0.0.1# IPv4 only

That's already the default.

 +allowedClients = 127.0.0.1

That's not necessary if you set proxyAddress.

 +socksParentProxy = localhost:9050
 +socksProxyType = socks5

Hmm... I'm wondering whether it's a good idea to have this enabled by
default -- after all, Polipo is useful without tor.  If you do so, may
I kindly request that you should put a prominent notice in the README
file about that?

 + chunkHighMark = 50331648
 + objectHighMark = 16384

I guess that if you're running Mac OS X, fifty megs is small change ;-)

Thanks again for your work,

Juliusz


Re: Polipo 1.0.1 Windows binary

2007-07-01 Thread phobos
On Mon, Jun 25, 2007 at 04:59:50PM +0200, [EMAIL PROTECTED] wrote 0.6K bytes in 
23 lines about:

I've built a Polipo-1.0.1 universal binary for OSX 10.4 and above.  This
Polipo installs to /Library/Polipo, uses a start script in
/Library/StartupItems/Polipo, and places the www, cache, and other
directories under /Library/Polipo.  The config file included uses port
8118 and attempts to make intelligent decisions for usage.  Polipo runs
on port 8118 to make it as easy as possible to replace Privoxy with
Polipo.  The config also assumes you have Tor running on localhost:9050. 

Please remember this is a test.  It appears to be stable after a few
days of abusive testing.

I welcome feedback and suggestions.  

The package is signed by my key, which signs most of the packages
created for Tor.  It's located at
http://interloper.org/tmp/polipo-1.0.1/index.html.  As always, there is no IP
address logging on the webserver.

Enjoy.

-- 
Andrew


pgpaP2WVhRY86.pgp
Description: PGP signature


Re: [Polipo-users] Polipo 1.0.1 Windows binary

2007-07-01 Thread Juliusz Chroboczek
 I've built a Polipo-1.0.1 universal binary for OSX 10.4 and above.

Excellent.

Is the async resolver working?  I tested it under 10.3 at some point,
but I'd be glad to hear whether I've broken anything since then.

 The config file [...] attempts to make intelligent decisions for
 usage.

Could you please explain that?  (I'm unfortunately unable to unpack
your dmg file since I replaced my installation of MacOS 7.1 with
NetBSD 1.5.  So now you know why Polipo contains ``#ifdef __mc68020__''.)

 The package is signed by my key, which signs most of the packages
 created for Tor.

Conveniently, Andrew's key (31B0974B) is signed by Roger's (28988BF5)
which is signed by more or less everyone, so you should have no trouble
veryfing it.

Thanks a lot for your work, Andrew.

Juliusz


pgpmqBr7S8nqR.pgp
Description: PGP signature


Re: [Polipo-users] Polipo 1.0.1 Windows binary

2007-07-01 Thread phobos
On Mon, Jul 02, 2007 at 01:16:52AM +0200, [EMAIL PROTECTED] wrote 1.1K bytes in 
38 lines about:
: Could you please explain that?  (I'm unfortunately unable to unpack
: your dmg file since I replaced my installation of MacOS 7.1 with
: NetBSD 1.5.  So now you know why Polipo contains ``#ifdef __mc68020__''.)

I put up the source from which I built the dmg and universal
binary, as polipo-1.0.1-osx.tgz.  The rough instructions are to
extract, type make and it should all magically build right.
And then ./contrib/package.sh will build the dmg package.

I did many sloppy things, such as create a Makefile.osx and
config.osx rather than modify the default ones. And I stripped
out the make install commands that don't work in stock OSX.  

-- 
Andrew


pgps5wuzTjkdY.pgp
Description: PGP signature


Re: Polipo-20060823 native Windows binary

2006-08-31 Thread thalunil
Juliusz Chroboczek wrote:
 Hi all,
 
 I've put an experimental native Windows binary of Polipo in
[..]
 This binary has never seen a real Windows system (I test under Linux
 with a Windows emulator -- sorry, but I don't have a Windows machine),
 and I'd be very grateful for feedback from Windows users.


I tested it under WinXP SP2 and it worked fine (even with SOCKS4a
support and Tor-upstream).
Although I am not using Windows regularly, I can tell it worked fine for
this short-term-usage.



Thal



signature.asc
Description: OpenPGP digital signature


Re: Polipo web proxy

2006-08-23 Thread Juliusz Chroboczek
 On Wed, Aug 23, 2006 at 03:02:48AM +0200, Juliusz Chroboczek wrote:
  6) Polipo writes your hostname in every request. Either define proxyName
  to something else, or set [d]isableVia = true in your config file.

 This cannot be stressed enough.  Unfortunately, use of Via is a MUST
 according to RFC 2616 (it's not completely useless -- Polipo uses it
 to detect proxy loops).

 So if you want to follow the RFC, would it be adequate to use the
 pseudonym polipo in each case?

That's a somewhat radical approach to proxy loop avoidance ;-)

(It would disallow chaining proxies, and chaining proxies is a
somewhat common usage scenario -- when evading firewalls, or when
trying to work around a lossy wireless link.)

I guess I'll just make disableVia the default, and give up on my
policy of conforming by default.  People who actually care about loop
avoidance can enable it manually.

Juliusz


Re: Polipo web proxy (was Re: Tor and Google Image search)

2006-08-18 Thread Roger Dingledine
On Fri, Aug 18, 2006 at 07:49:56PM -0500, Mike Perry wrote:
 7) The definition of parent proxy is different between Polipo and
 Privoxy. It turns out Privoxy has teh awesoma poweru of being able to
 have an HTTP proxy after Tor. This is useful for sites that block Tor,
 such as slashdot  wikipedia (for posting), craigslist, IRC, etc etc
 etc. I was unable to find a way for Polipo to do this. It made me
 sad. Course it aint exactly convenient for Privoxy, but at least it's
 there when you absolutely need to start some flame wars on /. ;)

Polipo can do this too. Just set both your parentProxy and your
socksParentProxy.

--Roger