returning to the topic "how to prevent my browser fetching css and other stuff when 
displaying freesites coming through fproxy and thus revealing my ip"

you need a packet firewall that is able to block certain applications (e.g. by 
determining the app's MD5 or anything similar)

for windows i recommend:
- Tiny Personal Firewall (version 2.x, NOT version 3.x) (get it under 
http://tiny.software.com/ or so) or
- Kerio Personal Firewall (is the successor of the Tiny PF, get it under 
http://www.kerio.com/)
i DO NOT recommend zonealarm, because it simply sucks setting up filter rules ;)

so, first you need a firewall rule which allows connections to localhost, from any 
port to any port.
you should find the needed settings below, allow this rule by default, because it does 
no harm and is needed later:

[X] "allow loopback" ALLOW TCP/UDP (any port) <-> 127.0.0.1:(any port) (any 
application)

then, create a filter which is disabled by default and will prevent the browser you 
use to connect to other computers if enabled:

[ ] "freenet safe"   DENY  TCP     (any port) <-> (any ip):(any port)  (<your 
favourite browser app here>)

as you can see, this rule will deny ALL (TCP)connections to other computers (AND 
localhost) your browser will try to establish when enabled.

alas, the last step is to ensure, that the "allow loopback" filter is processed before 
the "freenet safe" filter, so that you can always connect with any app to 
localhost (and thus to fproxy), but your browser is stopped if it decides to connect 
to somewhere else. graphics within freesites or any "freelinks" will run over 
smoothly fproxy, which will deliver these to your browser.

panam

____________________________________________________________

The information transmitted is intended only for the person or entity to which it is 
addressed and may contain confidential and/or privileged material. Any 
review, retransmission, dissemination or other use of, or taking of any action in 
reliance upon, this information by persons or entities other than the intended 
recipient is prohibited. If you received this in error, please contact the sender and 
delete the material from any computer.






_______________________________________________
support mailing list
[EMAIL PROTECTED]
http://hawk.freenetproject.org/cgi-bin/mailman/listinfo/support

Reply via email to