Privoxy on router firmwares poses a huge security risk

[email protected] Mon, 30 Dec 2019 18:37:06 +0000

Newsgroups	gmane.comp.web.privoxy.user
Message-ID	<L6B3C5XpS9zZpJq2J2L7p3xB2yzge_7eokemaEG--9snB5KglZajS6U2Cal52drsYOcIBm5AgptbfPBjDs1kVso9dD2Of7Tv4W5SiD1xRbA=@protonmail.com>

Enable OVPN with PBR. Enable privoxy. Check any http ip leak test page like dnsleak.com or whatismyipv6.com

This is happening since when enabling Policy Based Routing the router is not on VPN and since privoxy relies on router, intercepting http traffic from these sites exposes your real IP.

Applies on any open source router firmware.

https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=322517&start=0

This is actually very difficult to find out since more ipleak test sites are on https but you are actually exposed with the combination of PBR & privoxy.

I bet a lot of people are already fully exposed and not even knowing about it...

Sent from ProtonMail mobile