On Thu, 10 Nov 2005, Jari Aalto wrote:

> Package: privoxy
> Version: 3.0.3-4
> Severity: wishlist

> In /etc/privoxy/config the config line reads:
> 
>   listen-address  127.0.0.1:8118

> However in homenet, with several machines, it would be good to have a
> anonymity hub on the firewall that is connected to the outside word.

> SUGGESTION:
> 
> Allow listening multiple addresses with notation:
> 
>   listen-address  127.0.0.1[,addr[/netmask]]:8118
> 
> An example. To serve hub for small home network:
> 
>   listen-address 127.0.0.1,192.168.1.0/255.255.255.24:8118

Feel free to submit a patch, which provides such a configuration :-)

Until than there is a workarounds to this:

Use 
  listen-address 192.168.1.42:8118
where 192.168.1.42 is the internal network address of the privoxy
server.
Now you have to access privoxy as http://192.168.1.42:8118/ in all
clients including the privoxy sever itself (instead of using
http://localhost:8118/ before).

To make this safer, you can add access control rules:
  permit-access 192.168.1.0/24
  deny-access 0.0.0.0

So only clients from 192.168.1.0/24 can access the server, while all
others are denied.


Alternatively you can listen on all interfaces (including loopback)
and define the access control based on access lists only (not on the
interface):

  listen-address :8118
  permit-access 127.0.0.0/8
  permit-access 192.168.1.0/24
  deny-access 0.0.0.0

You'll find more information on this issue upstream in 
http://sourceforge.net/tracker/index.php?func=detail&aid=640107&group_id=11118&atid=211118

Tschoeeee

        Roland


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to