Add create cche

2021-11-22 12:21:36 +01:00
1 parent 35a3d1783c
commit 898ef49f6f
@@ -0,0 +1,24 @@
+README for lists directory
+
+All lists have now been moved into sub-directories
+
+As before plugins have their own directories for lists and mappings
+used by plugins
+
+Sub-directories:
+
+authplugins      - lists/maps used by authplugins
+blacklists	 - placeholder for 3rd party url lists
+common           - lists used by e2guardian.conf and common lists for groups
+contentscanners  - lists used by content/AV scanners
+downloadmanagers - lists used by downloadmanagers
+example.group	 - example lists for group use used by e2guardianf1.conf
+group1		 - lists for group 1
+group2		 - lists for group 2
+...
+groupn		 - lists for group n
+oldphraselists	 - old style format phraselists
+phraselists	 - lists of phrases
+rooms      	 - location (ip) based block/allow
+
+
@@ -0,0 +1,10 @@
+# Filter Groups List file for e2guardian
+#
+# Format is <user>=<1-99> where 1-99 are the groups
+# Legacy format is also recognised: <user>=filter<1-99> where 1-99 are the groups
+#
+# Eg:
+# daniel=2
+#
+# This file is only of use if you have more than 1 filter group
+#
@@ -0,0 +1,11 @@
+# IP-Group list
+# Used by the IP-based auth plugin to assign IP addresses to filter groups.
+#
+# Examples:
+# Straight IP matching:
+#192.168.0.1 = filter1
+# Subnet matching:
+#192.168.1.0/255.255.255.0 = filter1
+# Range matching:
+#192.168.1.0-192.168.1.255 = filter1
+
@@ -0,0 +1,8 @@
+# Port-Group list
+# Used by the Port-based auth plugin to assign Ports to filter groups.
+#
+# Note that ports MUST be entered in ascending order
+#
+# Examples:
+#8080 = filter1
+#8081 = filter2
@@ -0,0 +1,73 @@
+README for lists/common directory
+
+### Lists held in this directory:-
+
+## Lists defined in e2guardian.conf
+
+# Sites that are impossible or undesirable to MITM
+#
+nomitmsitelist
+nomitmsiteiplist
+
+
+# Banned clients
+#
+bannediplist
+# ONLY for banned client IP
+#
+exceptioniplist
+# ONLY for exception client IP
+#
+bannedclientlist
+# Put client dns names in bannedclientlist if required
+exceptionclientlist
+# Put client dns names in exceptionclientlist if required
+
+# Auth exceptions
+# Target Sites/Urls allowed before authentication
+# to allow for machines to update without user authentication
+#
+authexceptioniplist
+authexceptionsitelist
+authexceptionurllist
+
+browserregexpboollist
+#
+# List of regexp that match match User-agent of browsers
+# Used to determine if client is a browser
+# and decide whether to send a block page or go MITM
+
+
+## Lists common to all groups (defined in e2guardianfn.conf)
+
+
+# Embeded referer
+# Some sites have the referering url in their url. Put these url in these
+# lists and e2g will extract the embeded url and then check this againist
+# the refererexception lists.
+# For best results be as specific as possible
+embededreferersitelist
+embededreferersiteiplist
+embededrefererurllist
+
+# Nolog lists
+# Do not log sites/urls/ext
+# Useful to prevent requests not made by user directly being logged
+# Makes logs more readable
+nologsitelist
+nologsiteiplist
+nologurllist
+nologregexpurllist
+nologextensionlist
+
+# Search engine regular expression list 
+# List of regular expressions for matching search engine URLs.  It is assumed
+# that the search terms themselves will be contained in the
+# of output of each expression.
+searchregexplist
+#
+# search engine regexp exception (overide) list
+# Used to prevent urls such os completetion suggestion requests from being detected
+# as search requests
+searchexceptionregexplist
+
@@ -0,0 +1,9 @@
+#Access allowed prior to authentication
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1 @@
+#Access allowed prior to authentication
@@ -0,0 +1 @@
+#Access allowed prior to authentication
@@ -0,0 +1,6 @@
+# Domain names of client machines to
+# disallow web access to.
+#
+# This is not the the domains of web servers
+# you want to filter.
+
@@ -0,0 +1,12 @@
+# IP addresses of client machines to
+# disallow web access to.
+#
+# This is not the IP of web servers
+# you want to filter.
+
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,15 @@
+# Reg Exp to check user-agent shows request is from a browser
+#
+# The format is: "extended regular expression"
+
+(Firefox/)
+(Chrome/)
+(MSIE/)
+(Opera/)
+(Safari/)
+(Edge/)
+
+# curl and wget are not browsers - but are often used for testing
+# so are included below
+(curl/)
+(wget/)
@@ -0,0 +1,10 @@
+# Embeded referer IP sites
+#  sites which may contain embeded exception referer sites in the url
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,2 @@
+# Embeded referer sites
+#  sites which may contain embeded exception referer sites in the url
@@ -0,0 +1,5 @@
+# Embeded referer urls
+#  urls which may contain embeded exception referer sites in the url
+
+# e.g. to allow youtube video when embeded in a trusted referer site/urls
+# www.youtube.com/get_video_info
@@ -0,0 +1,16 @@
+# Doamin names of computers from which
+# web access should not be filtered.
+#
+# These would be servers which
+# need unfiltered access for
+# updates.  Also administrator
+# workstations which need to
+# download programs and check
+# out blocked sites should be
+# put here.
+#
+# To work you must 
+# cater for reverse DNS lookups
+# on your LAN and enable the
+# "reverseclientiplookups" option in
+# e2guardian.conf
@@ -0,0 +1,27 @@
+# IP addresses of computers from which
+# web access should not be filtered.
+#
+# These would be servers which
+# need unfiltered access for
+# updates.  Also administrator
+# workstations which need to
+# download programs and check
+# out blocked sites should be
+# put here.
+#
+# Hostnames are NOT allowed here, 
+# put these in exceptionclientlist and
+# enable the reverseclientlookups option.
+#
+# This is not the IP of web servers
+# you don't want to filter.
+
+#192.168.0.1
+#192.168.0.2
+#192.168.42.2
+
+# Ranges and subnets can also be used,
+# e.g.
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,31 @@
+# No Log file extension list
+
+# requests with extensions in this list will not be logged
+
+# Text/web document types
+
+.css
+
+# Image types
+
+#.bmp
+#.cod
+#.gif
+#.ief
+#.jpe
+#.jpeg
+#.jpg
+#.jfif
+#.tif
+#.tiff
+#.ras
+#.cmx
+#.ico
+#.pnm
+#.pbm
+#.pgm
+#.ppm
+#.rgb
+#.xbm
+#.xpm
+#.xwd
@@ -0,0 +1,4 @@
+# No Log regular expression URL list
+#
+# This acts as a list of URL regexes which, if matched, will 
+# not be logged
@@ -0,0 +1,13 @@
+# No Log IP site list
+#
+# This acts as a list of IP sites which, when found, 
+# will not be logged
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,4 @@
+# No Log site list
+#
+# This acts as a list of domains which, when found, 
+# will not be logged.
@@ -0,0 +1,9 @@
+# No Log URL list
+#
+# This acts as a list of URLs which, when found, will 
+# not be logged
+
+www.google.com/complete
+www.google.co.uk/complete
+
+
@@ -0,0 +1,9 @@
+#IP in nomitmsiteiplist 
+
+#This list is to stop any attempt to mitm these sites,
+# including trying to MITM to client to deliver an error message
+
+#Only put IP sites which cannot be MITM in this list
+#This applies to sites which are only used by apps
+#Sites not using http(s) but connecting via https or CONNECT
+
@@ -0,0 +1,14 @@
+#domains in nomitmsitelist 
+#Don't bother with the www. or the http://
+
+#This list is to stop any attempt to mitm these sites,
+# including trying to MITM to client to deliver an error message
+
+#Only put sites which cannot be MITM in this list
+#This applies to sites which are only used by apps
+#Sites not using http(s) but connecting via https or CONNECT
+
+#NOTE: Sites using just IP should be put into nomitmsiteiplist
+
+reports.crashlytics.com   # google app crash tool
+
@@ -0,0 +1,11 @@
+# This defines urls which will be not search term checked
+# Overrides searchregexplist
+#
+# The format is: "extended regular expression"
+# 
+
+#"^http://[0-9a-z]+\.google\.[a-z]+[-%.0-9a-z]*/complete"
+"^http://www.google.com/complete"
+"^http://www.google.co.uk/complete"
+
+
@@ -0,0 +1,37 @@
+# This defines sites which will be search term checked
+#
+# The format is: "extended regular expression"->"search words"
+# 
+#   left is the site matching pattern
+#   right is the search words
+
+"^http://[0-9a-z]+\.google\.[a-z]+[-/%.0-9a-z]*\?q=([^&]*)\&.*"->"\1"
+"^http://[0-9a-z]+\.google\.[a-z]+[-/%.0-9a-z]*/.*\&q=([^&]*).*"->"\1"
+"^http://[0-9a-z]+\.google\.[a-z]+[-/%.0-9a-z]*\?q=([^&]*)"->"\1"
+"^http://[0-9a-z]+\.google\.[a-z]+[-/%.0-9a-z]*/.*\&q=([^&]*)"->"\1"
+
+"^http://www\.qwant\.com/.*\?q=([^&]*)\&.*"->"\1"
+"^http://www\.qwant\.com/.*\&q=([^&]*).*"->"\1"
+"^http://www\.qwant\.com/.*\?q=([^&]*)"->"\1"
+"^http://www\.qwant\.com/.*\&q=([^&]*)"->"\1"
+"^http://api\.qwant\.com/.*\?q=([^&]*)\&.*"->"\1"
+"^http://api\.qwant\.com/.*\&q=([^&]*).*"->"\1"
+"^http://api\.qwant\.com/.*\?q=([^&]*)"->"\1"
+"^http://api\.qwant\.com/.*\&q=([^&]*)"->"\1"
+
+"^http://duckduckgo.com/\?q=([^&]*)\&.*"->"\1"
+"^http://duckduckgo.com/.*\&q=([^&]*).*"->"\1"
+"^http://duckduckgo.com/\?q=([^&]*)"->"\1"
+"^http://duckduckgo.com/.*\&q=([^&]*)"->"\1"
+
+"^http://[0-9a-z]+\.youtube\.[a-z]+[-/%.0-9a-z]*\?search_query=([^&]*).*"->"\1"
+
+"^http://[0-9a-z]+\.yahoo\.[a-z]+[-/%.0-9a-z]*/search[^?]*\?p=([^&]*).*"->"\1"
+"^http://[0-9a-z]+\.yahoo\.[a-z]+[-/%.0-9a-z]*/search[^?]*.*\&p=([^&]*).*"->"\1"
+
+"^http://[0-9a-z]+\.answers\.[a-z]+[-/%.0-9a-z]*\?s=([^&]*)\&.*"->"\1"
+"^http://www\.answers\.[a-z]+[-%.0-9a-z]*/([^&]*).*"->"\1"
+
+"^http://[0-9a-z]+\.bing\.com[-/%.0-9a-z]*/search\?q=([^&]*).*"->"\1"
+"^http://[0-9a-z]+\.bing\.com[-/%.0-9a-z]*\&q=([^&]*).*"->"\1"
+
@@ -0,0 +1,35 @@
+#Exception Virus extension list
+
+#This file originally from:
+#http://dgav.sourceforge.net
+
+# The Virus scanning code will ignore files with these extensions.
+
+# File extensions with executable code 
+
+
+# Files which one normally things as non-executable but
+# can contain harmful macros and viruses
+
+
+# Other files which may contain files with executable code
+
+
+# Time/bandwidth wasting files
+
+.mp3  # Music file
+.mpeg # Movie file
+.mpg  # Movie file
+.avi  # Movie file
+.ra   # Real Audio
+.ram  #  "
+.rm   #  "
+
+# Image files not to scan
+.gif
+.png
+.tiff
+.ico
+# http://www.kb.cert.org/vuls/id/297462
+#.jpg
+#.jpeg
@@ -0,0 +1,28 @@
+# MIME types the virus scanning code ignores.
+
+#This file originally from:
+#http://dgav.sourceforge.net
+
+audio/mpeg
+audio/x-mpeg
+audio/x-pn-realaudio
+audio/x-wav
+audio/x-realaudio
+audio/x-pn-realaudio
+audio/vnd.rn-realaudio
+application/ogg
+video/mpeg
+video/x-mpeg2
+video/acorn-replay
+video/quicktime
+video/x-msvideo
+video/msvideo
+video/vnd.rn-realvideo
+
+image/png
+image/gif
+image/tiff
+# http://www.kb.cert.org/vuls/id/297462
+# image/jpeg
+
+# text/html
@@ -0,0 +1,12 @@
+#Sites in virus exception list will not be virus scanned
+#Don't bother with the www. or
+#the http://
+#
+#These are specifically domains and are not URLs.
+#For example 'foo.bar/porn/' is no good, you need
+#to just have 'foo.bar'.
+#
+#You can also match IPs here too.
+#
+
+example.com
@@ -0,0 +1,15 @@
+#URLs in exception virus list will not be virus scanned
+#Don't bother with the www. or
+#the http://
+#
+#These are parts of sites that filtering should
+#be switched off for.
+#
+#These should not be domains, i.e. entire sites,
+#they should be a domain with a path.
+#
+#For example 'foo.bar' is no good, you need
+#to just have 'foo.bar/porn'.
+#
+#Another example:
+#generallybadsite.tld/partthatsok
@@ -0,0 +1,42 @@
+# Managed extension list
+# For use as the 'managedextensionlist' option in the configuration of
+# download managers supporting this feature.
+#
+# When enabled, only content matching the extensions given in this list will
+# be handled by the download manager.
+# If a managedmimetypelist is also enabled, then only content matching both
+# a mimetype and an extension in the lists will be handled.
+
+.bat
+.cab
+.com
+.crt
+.exe
+.hlp
+.ini
+.hta
+.inf
+.lnk
+.mdb
+.pcd
+.sh
+.vbs
+.doc
+.xls
+.gz
+.tar
+.bz2
+.sit
+.bin
+.hqx
+.zip
+.sxw
+.doc
+.iso
+.pdf
+.rar
+.ace
+.arj
+.dll
+.mda
+.mde
@@ -0,0 +1,174 @@
+# Managed mime type list
+# For use as the 'managedmimetypelist' option in the configuration of
+# download managers supporting this feature.
+#
+# When enabled, only content matching the mime types given in this list will
+# be handled by the download manager.
+# If a managedextensionlist is also enabled, then only content matching both
+# a mimetype and an extension in the lists will be handled.
+
+# List originally by David Chewning <david.chewning@onedatacentral.com>
+
+# MIME Types Researched at http://filext.com/
+# bat
+application/bat
+application/x-bat
+# cab
+application/cab
+zz-application/zz-winassoc-cab
+# com
+application/com
+application/x-com
+# crt
+application/x-x509-ca-cert
+application/pkix-cert
+application/keychain_access
+# exe
+application/octet-stream
+application/exe
+application/x-exe
+application/dos-exe
+vms/exe
+application/x-winexe
+application/msdos-windows
+# hlp
+application/winhlp
+application/x-helpfile
+application/x-winhelp
+zz-application/zz-winassoc-hlp
+# ini
+zz-application/zz-winassoc-ini
+# hta
+application/hta
+# inf
+text/inf
+application/x-setupscript
+# lnk
+application/x-ms-shortcut
+# mdb
+application/x-msaccess
+application/vnd.msaccess
+application/mdb
+application/x-mdb
+zz-application/zz-winassoc-mdb
+# pcd
+image/pcd
+image/x-photo-cd
+# sh
+application/x-sh
+application/x-shar
+# vbs
+application/x-vbs
+text/vbs
+text/vbscript
+# doc
+application/msword
+application/doc
+application/vnd.msword
+application/vnd.ms-word
+application/winword
+application/word
+application/x-msw6
+application/x-msword
+zz-application/zz-winassoc-doc
+# xls
+application/msexcel
+application/x-msexcel
+application/x-ms-excel
+application/vnd.ms-excel
+application/x-excel
+application/x-dos_ms_excel
+application/xls
+application/x-xls
+zz-application/zz-winassoc-xls
+# gz
+application/gzip
+application/x-gunzip
+application/gzipped
+application/gzip-compressed
+gzip/document
+# tar
+application/tar
+applicaton/x-gtar
+multipart/x-tar
+# bz2
+application/bzip2
+application/x-bz2
+application/x-bzip
+# sit
+application/stuffit
+application/x-sit
+# bin
+application/macbinary
+application/x-macbinary
+application/bin
+application/binary
+# hqx
+application/binhex
+application/mac-binhex
+application/mac-binhex40
+application/x-winzip
+# zip
+application/zip
+application/x-zip
+multipart/x-zip
+
+# Audio/video types commented out to prevent breakage of streaming apps
+# mp3
+#audio/mpeg
+#audio/x-mpeg
+#audio/mp3
+#audio/x-mp3
+#audio/mpeg3
+#audio/x-mpeg3
+#audio/mpg
+#audio/x-mpg
+#audio/x-mpegaudio
+# mpeg
+#video/mpeg
+# avi
+#video/avi
+#video/msvideo
+#video/x-msvideo
+#image/avi
+#video/xmpg2
+#application/x-troff-msvideo
+#audio/aiff
+#audio/avi
+# asf
+#audio/asf
+#application/asx
+#video/x-ms-asf-plugin
+#application/x-mplayer2
+#video/x-ms-asf
+#application/vnd.ms-asf
+#video/x-ms-asf-plugin
+#video/x-ms-wm
+#video/x-ms-wmx
+# ogg
+#audio/x-ogg
+#application/x-ogg
+
+# Multiple extensions
+# bat, com, dll, exe
+application/x-msdos-program
+# cab, gz, tar, zip
+application/x-compress
+# cab, gz, tar, bz2, zip
+application/x-compressed
+# com, dll, exe, bin
+application/x-msdownload
+# mda, mdb, mde
+application/msaccess
+application/vnd.ms-access
+# sct, wsc
+text/scriptlet
+# sit, bin, hqx
+application/x-stuffit
+# gz, hqx
+application/x-gzip
+# tar, hqx
+application/x-tar
+# hqx, zip
+application/x-zip-compressed
+
@@ -0,0 +1,185 @@
+
+### Lists in this directory relate to a single filter group
+### each filter group has it's own directory
+
+###
+### Many of the exception/grey/banned site/ipsite/url lists are used for
+### switching on/off standard list categories
+###
+### Where available it is best to use the LOCAL lists for your own lists of
+### sites/urls as these override the main ones.
+
+## Order of checking is broadly as follows:-
+##
+## 1. If in Local Exception lists - allow with no further checking
+## 2. If in Local Grey lists - retrieve page and content-check
+## 3. If in Local Banned lists - block with no further checking
+## 4. If in Main Exception lists - allow with no further checking
+## 5. If in Main Grey lists - retrieve page and content-check
+## 6. If in Main Banned lists (or blanket blocked) - block with no further checking
+## 7. If gets here  - retrieve page and content-check
+## 8. Check blocked/exception file/mime types.
+## 9. Content-check page
+
+## Lists in this directory:-
+
+# Nocheckcert lists
+# Do not check ssl certificates for sites listed
+# Can be used to allow sites with self-signed or invalid certificates
+# or to reduced CPU load by not checking certs on heavily used sites (e.g. Google, Bing)
+# Use with caution!
+# Ignored if mitmcheckcert is 'off'
+#
+nocheckcertsitelist
+nocheckcertsiteiplist
+
+# greyssl lists only used in onlymitmsslgrey mode to define sites that
+# will be MITM
+greysslsitelist
+greysslsiteiplist
+localgreysslsitelist
+localgreysslsiteiplist
+
+## Exception lists
+##  Put sites you trust in these lists
+##  they override Grey and Banned entries
+exceptionsitelist
+exceptionsiteiplist
+exceptionurllist
+exceptionregexpurllist
+
+## Grey (i.e. content check) lists
+##  Put sites you want content-checked in these lists
+##  they override Banned entries
+greysitelist
+greysiteiplist
+greyurllist
+
+## Banned sites/urls
+bannedsitelist
+bannedsiteiplist
+bannedurllist
+bannedregexpurllist
+
+# 'bannedssl' lists are not currently used
+bannedsslsitelist
+bannedsslsiteiplist
+
+## Local Exception lists
+localexceptionsitelist
+localexceptionsiteiplist
+localexceptionurllist
+
+## Local Grey lists
+localgreysitelist
+localgreysiteiplist
+localgreyurllist
+
+## Local Banned lists
+localbannedsitelist
+localbannedsiteiplist
+localbannedurllist
+
+## Bannedssl lists are not currently used
+localbannedsslsitelist
+localbannedsslsiteiplist
+
+
+# File type/extensions
+exceptionextensionlist
+exceptionmimetypelist
+
+
+# Use the following lists to block specific kinds of file downloads.
+bannedextensionlist
+bannedmimetypelist
+
+# In either file filtering mode, the following lists can be used to override
+# MIME type & extension blocks for particular domains & URLs (trusted download sites).
+#
+exceptionfilesitelist
+exceptionfilesiteiplist
+exceptionfileurllist
+
+# NEW in v5.4 bannedtimelist - times when no access is allowed
+# To activate a storyboard change is required - see examplef1.story
+bannedtimelist
+
+# NEW in v5.4 blankettimelist - times when blanket block is applied
+# To activate a storyboard change is required - see examplef1.story
+blankettimelist
+
+
+### These lists are useful for allowing/blocking apps or browsers based 
+### on the user-agent
+bannedregexpuseragentlist
+exceptionregexpuseragentlist
+
+# refererexception lists are used to make a request an exception based on the
+# Referer header.
+refererexceptionsitelist
+refererexceptionsiteiplist
+refererexceptionurllist
+
+# Used to modify url on the fly
+# use to enforce safe search etc.
+# Do not try and change target site - use redirect for this.
+urlregexplist
+
+# Replace target connection site for a ssl connection request
+# Note: this does not change the url in any way. It just changes
+# where the request is sent upstream and the new target must accept 
+# the original url. 
+sslsiteregexplist
+
+# Used to redirect browser to different site and or url
+urlredirectregexplist
+
+# Categorise without blocking:
+# Supply categorised lists here and the category string shall be logged against
+# matching requests, but matching these lists does not perform any filtering
+# action.
+logsitelist
+logsiteiplist
+logurllist
+logregexpurllist
+
+# Phrase lists
+bannedphraselist
+weightedphraselist
+exceptionphraselist
+
+oldbannedphraselist
+oldweightedphraselist
+oldexceptionphraselist
+
+# Search Term list(s) for option 1
+bannedsearchlist
+bannedsearchoveridelist
+
+localbannedsearchlist
+
+# Outgoing HTTP request header rules:
+# Lists for blocking based on, and modification of, outgoing HTTP
+# request headers.  Format for headerregexplist is one modification rule per
+# line, similar to content/URL modifications.  Format for
+# bannedregexpheaderlist is one regular expression per line, with matching
+# headers causing a request to be blocked.
+# Headers are matched/replaced on a line-by-line basis, not as a contiguous
+# block.
+# Use for example, to remove cookies or prevent certain user-agents.
+headerregexplist
+bannedregexpheaderlist
+exceptionregexpheaderlist
+
+# add cookies or other headers etc to matched urls
+addheaderregexplist
+
+# Response HTTP header rules:
+# Lists for modification or removal of HTTP response headers.
+# Format for reponseheaderregexplist is one rule per line, similar to
+# content/URL modifications.
+# Headers are matched/replaced on a line-by-line basis, not as a contiguous
+# block.
+# Use for example, to remove protocol upgrade requests.
+responseheaderregexplist
@@ -0,0 +1,13 @@
+#Add header where url matches
+#
+## to enable restricted YouTube 
+#"(^http://www\.youtube\.com/.*$)"->"YouTube-Restrict: Strict" 
+#"(^http://m\.youtube\.com/.*$)"->"YouTube-Restrict: Strict" 
+#"(^http://youtubei\.googleapis\.com/.*$)"->"YouTube-Restrict: Strict" 
+#"(^http://youtube\.googleapis\.com/.*$)"->"YouTube-Restrict: Strict" 
+#"(^http://www\.youtube-nocookie\.com/.*$)"->"YouTube-Restrict: Strict" 
+#"(^http://www\.youtube\.com$)"->"YouTube-Restrict: Strict" 
+#"(^http://m\.youtube\.com$)"->"YouTube-Restrict: Strict" 
+#"(^http://youtubei\.googleapis\.com$)"->"YouTube-Restrict: Strict" 
+#"(^http://youtube\.googleapis\.com$)"->"YouTube-Restrict: Strict" 
+#"(^http://www\.youtube-nocookie\.com$)"->"YouTube-Restrict: Strict" 
@@ -0,0 +1,211 @@
+#Banned extension list
+
+# File extensions with executable code 
+
+# The following file extensions can contain executable code.
+# This means they can potentially carry a virus to infect your computer.
+
+.ade  # Microsoft Access project extension
+.adp  # Microsoft Access project
+.asx  # Windows Media Audio / Video
+.bas  # Microsoft Visual Basic class module
+.bat  # Batch file
+.cab  # Windows setup file
+.chm  # Compiled HTML Help file
+.cmd  # Microsoft Windows NT Command script
+.com  # Microsoft MS-DOS program
+.cpl  # Control Panel extension
+.crt  # Security certificate 
+.dll  # Windows system file
+.exe  # Program
+.hlp  # Help file
+.ini  # Windows system file
+.hta  # HTML program
+.inf  # Setup Information
+.ins  # Internet Naming Service
+.isp  # Internet Communication settings
+# .js   # JScript file - often needed in web pages
+# .jse  # Jscript Encoded Script file - often needed in web pages
+.lnk  # Windows Shortcut
+.mda  # Microsoft Access add-in program 
+.mdb  # Microsoft Access program
+.mde  # Microsoft Access MDE database
+.mdt  # Microsoft Access workgroup information 
+.mdw  # Microsoft Access workgroup information 
+.mdz  # Microsoft Access wizard program 
+.msc  # Microsoft Common Console document
+.msi  # Microsoft Windows Installer package
+.msp  # Microsoft Windows Installer patch
+.mst  # Microsoft Visual Test source files
+.pcd  # Photo CD image, Microsoft Visual compiled script
+.pif  # Shortcut to MS-DOS program
+.prf  # Microsoft Outlook profile settings
+.reg  # Windows registry entries
+.scf  # Windows Explorer command
+.scr  # Screen saver
+.sct  # Windows Script Component
+.sh   # Shell script
+.shs  # Shell Scrap object
+.shb  # Shell Scrap object
+.sys  # Windows system file
+.url  # Internet shortcut
+.vb   # VBScript file
+.vbe  # VBScript Encoded script file
+.vbs  # VBScript file
+.vxd  # Windows system file
+.wsc  # Windows Script Component
+.wsf  # Windows Script file
+.wsh  # Windows Script Host Settings file
+.otf  # Font file - can be used to instant reboot 2k and xp
+.ops  # Office XP settings 
+
+
+
+# Files which one normally things as non-executable but
+# can contain harmful macros and viruses
+
+.doc  # Word document
+.xls  # Excel document
+.pps
+
+
+# Other files which may contain files with executable code
+
+.gz   # Gziped file
+.tar  # Tape ARchive file
+.zip  # Windows compressed file
+.tgz  # Unix compressed file
+.bz2  # Unix compressed file
+.cdr  # Mac disk image
+.dmg  # Mac disk image
+.smi  # Mac self mounting disk image
+.sit  # Mac compressed file
+.sea  # Mac compressed file, self extracting
+.bin  # Mac binary compressed file
+.hqx  # Mac binhex encoded file
+.rar  # Similar to zip
+
+
+# Time/bandwidth wasting files
+
+.mp3  # Music file
+.mpeg # Movie file
+.mpg  # Movie file
+.avi  # Movie file
+.asf  # this can also exploit a security hole allowing virus infection
+.iso  # CD ISO image
+.ogg  # Music file
+.wmf  # Movie file
+.bin # CD ISO image
+.cue # CD ISO image
+
+# Banned Media extension list (Audio , Video , Streaming)
+# Arrange Alphabetically
+# Some have no Description
+#.3g2    #
+#.3gp      # Nokia Movie File
+#.3gp2
+#.3gpp
+#.3gpp2
+#.aac    # AAC Audio
+#.acp    # AAC for SD Media
+#.adts
+#.aif
+#.aifc
+#.aiff    # AIFF Audio
+#.amc    # AMC Media
+#.amr    # narrow-Band Content
+#.asf      # Media / this can also exploit a security hole allowing virus infection
+#.asx      # Windows Media Audio / Video
+#.au    # uLaw/AU Audio
+#.avi      # Movie file
+#.awb    # AMR Wide-Band Content
+#.bwf
+#.caf    # CAF Audio
+#.cda    # Audio CD File
+#.cdda    # Audio CD File
+#.cel
+#.cue     # CD ISO image
+#.dif
+#.divx    # Compress Movie
+#.dv    # Video Format used in Portable Camera
+#.flc      # Autodesk Animator
+#.fli
+#.flv      # Internet Movies
+#.gsm
+#.ivf
+#.kar    # Karaoke Media Files
+#.m15
+#.m1a
+#.m1s
+#.m1v
+#.m2v
+#.m3u    # MP3 Playlist
+#.m4a    # AAC Audio
+#.m4b
+#.m4e
+#.m4p    # AAC Audio (Protected)
+#.m4v    # Video (Protected)
+#.m75
+#.mid    # Midi Audio Files
+#.midi    # Midi Audio Files
+#.mjpg
+#.mov    # Movie Files
+#.mp1
+#.mp2
+#.mp3      # Music file
+#.mp4    # Mpeg-4 Media
+#.mpa
+#.mpe
+#.mpeg     # Movie file
+#.mpg      # Movie file
+#.mpga
+#.mpm
+#.mps
+#.mpv
+#.mpv2
+#.mqv      # Quicktime Movies
+#.mv
+#.ogg      # Music file
+#.ogm      # Ogg Based Movie Files
+#.pls      # Shoutcast type of radio
+#.qcp    # Qualcomm Purevoice Audio
+#.qt    # Quicktime File
+#.qtc
+#.qtl      # Quicktime Movies
+#.ra    # Real Audio
+#.ram    # Real Audio Media
+#.rm       # Real Media Files
+#.rmi
+#.rmm
+#.rmp
+#.rmvb    # Real Media Video
+#.rnx
+#.rp    # Real Player Files
+#.rt
+#.rts
+#.rtsp
+#.rv
+#.sd2    # Sound Designer II
+#.sdp      # Stream Descriptor
+#.sdv    # SD Video
+#.sf
+#.smf
+#.smi    #
+#.smil     # SMIL Multimedia Presentation (Video and Audio Presentation
+#.snd
+#.ssm      # Streaming Media Metafile
+#.swa    # MP3 Audio
+#.swf      # Shockwave Streaming files
+#.ulw
+#.vfw       # Video for Windows
+#.wav
+#.wax
+#.wm
+#.wma
+#.wmf      # Movie file
+#.wmp
+#.wmv     # Windows Media Video
+#.wmx
+#.wvx
+#.xpl
@@ -0,0 +1,18 @@
+# banned MIME types
+
+audio/mpeg
+audio/x-mpeg
+audio/x-pn-realaudio
+audio/x-wav
+video/mpeg
+video/x-mpeg2
+video/acorn-replay
+video/quicktime
+video/x-msvideo
+video/msvideo
+application/gzip
+application/x-gzip
+application/zip
+application/compress
+application/x-compress
+application/java-vm
@@ -0,0 +1,47 @@
+# BANNEDPHRASELIST - INSTRUCTIONS FOR USE
+#
+# To block any page with the word "sex".
+# < sex >
+#
+# To block any page with words that contain the string "sex". (ie. sexual)
+# <sex>
+#
+# To block any page with the string "sex magazine".
+# <sex magazine>
+#
+# To block any page containing the words/strings "sex" and "fetish".
+# <sex>,<fetish>
+#
+# < test> will match any word with the string 'test' at the beginning
+# <test > will match any word with the string 'test' at the end
+# <test> will match any word with the string 'test' at any point in the word
+# < test > will match only the word 'test'
+# <this is a test phrase> will match that exact phrase
+# <test>,<secondtest> will match if both words are found in the page
+# A combination of the above can also be used eg < test>,<secondtest>
+#
+# All phrases need to be within < and > to work, othewise they will be
+# ignored.
+
+# Note: Use these sparingly - banned phrases tend to overblock
+
+
+#listcategory: "Banned Phrases"
+
+
+# The following banned phraselists are included in the default e2g distribution.
+
+.Include</etc/e2guardian/lists/phraselists/ukenglish/pornography/banned>
+
+#.Include</etc/e2guardian/lists/phraselists/ukenglish/gambling/banned>
+#.Include</etc/e2guardian/lists/phraselists/ukenglish/badwords/banned>
+
+#.Include</etc/e2guardian/lists/phraselists/portuguese/gambling/banned>
+#.Include</etc/e2guardian/lists/phraselists/portuguese/intolerance/banned>
+#.Include</etc/e2guardian/lists/phraselists/portuguese/personals/banned>
+
+#.Include</etc/e2guardian/lists/phraselists/ukenglish/gambling/banned>
+#.Include</etc/e2guardian/lists/phraselists/portuguese/gambling/banned>
+
+
+
@@ -0,0 +1,9 @@
+#Banned outgoing HTTP headers based on regular expressions
+#
+# E.g. 'User-Agent: .*MSIE' would block several versions of Internet Explorer
+# (assuming the user-agent is not being spoofed by the client)
+#
+# Headers are matched line-by-line, not as a single block.
+
+#listcategory: "Banned Regular Expression HTTP Headers"
+
@@ -0,0 +1,122 @@
+#Banned URLs based on Regular Expressions
+#
+# E.g. 'sex' would block sex.com and middlesex.com etc
+
+#listcategory: "Banned Regular Expression URLs"
+
+#Banned URLs based on Regular Expressions
+
+#These examples should be used with extreme caution 
+# as most regexp url patterns tend to overblock
+# Be as specific as possible as this helps avoid this
+
+######################################################
+# Pornography, Modelling and Adult Sites
+######################################################
+
+#\b(big|cyber|hard|huge|mega|small|soft|super|tiny|bare|naked|nude|anal|oral|topp?les|sex|phone)+\b.*\b(anal|babe|bharath|boob|breast|busen|busty|clit|cum|cunt|dick|fetish|fuck|girl|hooter|lez|lust|naked|nude|oral|orgy|penis|porn|porno|pupper|pussy|rotten|sex|shit|smutpump|teen|tit|topp?les|xxx)s\b?
+#\b(anal|babe|bharath|boob|breast|busen|busty|clit|cum|cunt|dick|fetish|fuck|girl|hooter|lez|lust|naked|nude|oral|orgy|penis|porn|porno|pupper|pussy|rotten|sex|shit|smutpump|teen|tit|topp?les|xxx)+\b.*\b(big|cyber|hard|huge|mega|small|soft|super|tiny|bare|naked|nude|anal|oral|topp?les|sex)\b+
+
+#HardCore phrases
+#(adultsight|adultsite|adultsonly|adultweb|blowjob|bondage|centerfold|cumshot|cyberlust|cybercore|hardcore|masturbat)
+#(bangbros|pussylip|playmate|pornstar|sexdream|showgirl|softcore|striptease)
+
+#SoftCore phrases - more likely to overblock - possibly on news sites
+#(incest|obscene|pedophil|pedofil)
+
+#Photo Modeling - supplied by David Burkholder
+#(male|m[ae]n|boy|girl|beaut|agen[ct]|glam)+.*(model|talent)
+
+# The following will help to block explicit media files (images and video)
+#(sex|fuck|boob|cunt|fetish|tits|anal|hooter|asses|shemale|submission|porn|xxx|busty|knockers|slut|nude|naked|pussy)+.*(\.jpg|\.wmv|\.mpg|\.mpeg|\.gif|\.mov)
+#(girls|babes|bikini|model)+.*(\.jpg|\.wmv|\.mpg|\.mpeg|\.gif|\.mov)
+
+#Block Naturism and Nudist sites
+#(naturism|naturist|nude|nudist|nudism|nekkid|nakt|naakt)
+
+
+######################################################
+# Search Engine and Related
+######################################################
+
+#Block unfiltered options on various search engines
+#(^|[\?+=&/])(.*\.google\..*/.*\?.*safe=off)([\?+=&/]|$)
+#(^|[\?+=&/])(.*\.alltheweb.com/customize\?.*copt_offensive=off)([\?+=&/]|$)
+
+#Block images and video on altavista, alltheweb, yahoo etc - as they are anonomised
+#(yahoo.com\/image\/)
+#(yimg.com\/image\/)
+#(altavista.com\/image\/)
+#(altavista.com\/video\/)
+#(picsearch.com\/is)
+
+#Block images and video on google
+#(images.google)+.*(\.jpg|\.wmv|\.mpg|\.mpeg|\.gif|\.mov) 
+#(google.com\/video) #block all video
+#(google.com\/ThumbnailServer) #block video thumbnails
+#(google.com\/videoplay) #block only playing the video
+
+
+######################################################
+# Proxy Sites
+######################################################
+
+#Block Cgiproxy, Poxy, PHProxy and other Web-based proxies
+#(cecid.php|nph-webpr|nph-pro|/dmirror|cgiproxy|phpwebproxy|__proxy_url|proxy.php)
+
+#Block websites containing proxy lists
+#(anonymizer|proxify|megaproxy)
+
+#AGRESSIVE blocking of all URLs containing proxy - WARNING - this WILL overblock!!
+#(proxy)
+
+
+######################################################
+# Gambling - supplied by David Burkholder
+######################################################
+#(casino|bet(ting|s)|lott(ery|o)|gam(e[rs]|ing|bl(e|ing))|sweepstake|poker)
+
+
+######################################################
+# Sport - supplied by David Burkholder
+######################################################
+#(bowling|badminton|box(e[dr]|ing)|skat(e[rs]|ing)|hockey|soccer|nascar|wrest|rugby|tennis|sports|cheerlead|rodeo|cricket|badminton|stadium|derby)
+#((paint|volley|bas(e|ket)|foot|quet)ball|/players[/\.]?|(carn|fest)ival)
+
+#Racing - supplied by David Burkholder
+#(speed(st|wa|y)|corvette|rac[eiy]|wrest|harley|motorcycle|nascar)
+
+
+######################################################
+# News sites - supplied by David Burkholder
+######################################################
+#(news(watch|pap|cast)|herald|sentinel|courier|gazet|tribune|chronicle|daily|ning)news)
+
+
+######################################################
+# Dating Sites - supplied by David Burkholder
+######################################################
+#(meet|hook|mailord|latin|(asi|mexic|dominic|russi|kore|colombi|balk)an|brazil|filip|french|chinese|ukrain|thai|tour|foreign|date)+.*(dar?[lt]ing|(sing|coup)le|m[ae]n|girl|boy|guy|mat(e|ing)|l[ou]ve?|partner|meet)
+#(marr(y|i[ae])|roman(ce|tic)|fiance|bachelo|dating|affair|personals)
+
+
+######################################################
+# Miscellaneous - Productivity etc.
+######################################################
+
+#Use this to block web counters:
+#(adlog.php|cnt.cgi|count.cgi|count.dat|count.jsp|count.pl|count.php|counter.cgi|counter.js|counter.pl|countlink.cgi|fpcount.exe|logitpro.cgi|rcounter.dll|track.pl|w_counter.js)
+#Contributed by proxy@barendse.to
+
+#Free stuff - supplied by David Burkholder
+#(free|phone|mobile)+.*(love|music|movie|dvd|video|stuff|site|arcade|wallpaper|mp3)
+#((ring|real)tone)
+
+#Music - supplied by David Burkholder
+#(rock|pop|jazz|rap|punk)+.*(cult|roll|geek|drum|music|history|band)
+
+# WARNING: This is part of the URL for the e2guardian.org sample virus archive.
+# You probably don't want to go there unintentionally.
+(Variants/AVTest)
+
+
@@ -0,0 +1,12 @@
+#Banned User-Agents based on regular expressions
+#
+# E.g. ' .*MSIE' would block several versions of Internet Explorer
+# (assuming the user-agent is not being spoofed by the client)
+#
+#listcategory: "user-agent"
+#
+# This is useful for blocking apps
+# e.g. to block Kindle app
+#kindle
+#Kindle
+
@@ -0,0 +1,9 @@
+#Banned Search Words
+#
+#Words must be in alphabetic order within a single line
+# and separated by a '+' sign.
+#All combinations of the words will be blocked
+# e.g.   girl+naughty
+#     will block  naughty+girl as well as girl+naughty
+
+
@@ -0,0 +1,12 @@
+# IP sites in banned list
+
+#The bannedsiteiplist is for blocking ALL of an IP site
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,97 @@
+#domains in banned list
+#Don't bother with the www. or the http://
+
+#The bannedurllist is for blocking PART of a site
+#The bannedsitelist is for blocking ALL of a site
+
+#NOTE: Sites using just IP should be put into bannedsiteiplist
+
+#You can include
+#.tld so for example you can match .gov for example
+
+#The 'grey' lists override the 'banned' lists.
+#The 'exception' lists override the 'banned' lists also.
+#The difference is that the 'exception' lists completely switch
+#off *all* other filtering for the match.  'grey' lists only
+#stop the URL filtering and allow the normal filtering to work.
+
+#An example of grey list use is when in Blanket Block (whitelist)
+#mode and you want to allow some sites but still filter as normal
+#on their content
+
+#Another example of grey list use is when you ban a site but want
+#to allow part of it.
+
+#To include additional files in this list use this example:
+#.Include</etc/e2guardian/anotherbannedurllist>
+
+#You can have multiple .Includes.
+
+# Time limiting syntax:
+# #time: <start hour> <start minute> <end hour> <end minute> <days>
+# Example:
+##time: 9 0 17 0 01234
+# Remove the first # from the line above to enable this list only from
+# 9am to 5pm, Monday to Friday.
+
+# List categorisation
+#listcategory: "Banned Sites"
+
+#List other sites to block:
+
+# badboys.com
+
+# NOTE: From v5 Blanket blocks are now implimented using Storyboarding 
+# WARNING: Old style Blanket blocks in this file will be silently ignored
+
+
+# The squidGuard advert domain/URL lists are now included by default.
+# To work with advanced ad blocking & the logadblocks option, advert
+# phrase/site/URL lists should have the string "ADs" in their listcategory.
+# .Include</etc/e2guardian/lists/blacklists/ads/domains>
+
+#Remove the # from the following and edit as needed to use a stock
+#squidGuard/urlblacklists collection.
+#.Include</etc/e2guardian/lists/blacklists/adult/domains>
+#.Include</etc/e2guardian/lists/blacklists/aggressive/domains>
+#.Include</etc/e2guardian/lists/blacklists/artnudes/domains>
+#.Include</etc/e2guardian/lists/blacklists/audio-video/domains>
+#.Include</etc/e2guardian/lists/blacklists/beerliquorinfo/domains>
+#.Include</etc/e2guardian/lists/blacklists/beerliquorsale/domains>
+#.Include</etc/e2guardian/lists/blacklists/chat/domains>
+#.Include</etc/e2guardian/lists/blacklists/childcare/domains>
+#.Include</etc/e2guardian/lists/blacklists/clothing/domains>
+#.Include</etc/e2guardian/lists/blacklists/culinary/domains>
+#.Include</etc/e2guardian/lists/blacklists/dialers/domains>
+#.Include</etc/e2guardian/lists/blacklists/drugs/domains>
+#.Include</etc/e2guardian/lists/blacklists/entertainment/domains>
+#.Include</etc/e2guardian/lists/blacklists/forums/domains>
+#.Include</etc/e2guardian/lists/blacklists/frencheducation/domains>
+#.Include</etc/e2guardian/lists/blacklists/gambling/domains>
+#.Include</etc/e2guardian/lists/blacklists/government/domains>
+#.Include</etc/e2guardian/lists/blacklists/hacking/domains>
+#.Include</etc/e2guardian/lists/blacklists/homerepair/domains>
+#.Include</etc/e2guardian/lists/blacklists/hygiene/domains>
+#.Include</etc/e2guardian/lists/blacklists/jewelry/domains>
+#.Include</etc/e2guardian/lists/blacklists/jobsearch/domains>
+#.Include</etc/e2guardian/lists/blacklists/kidstimewasting/domains>
+#.Include</etc/e2guardian/lists/blacklists/mail/domains>
+#.Include</etc/e2guardian/lists/blacklists/news/domains>
+#.Include</etc/e2guardian/lists/blacklists/onlineauctions/domains>
+#.Include</etc/e2guardian/lists/blacklists/onlinegames/domains>
+#.Include</etc/e2guardian/lists/blacklists/onlinepayment/domains>
+#.Include</etc/e2guardian/lists/blacklists/personalfinance/domains>
+#.Include</etc/e2guardian/lists/blacklists/pets/domains>
+#.Include</etc/e2guardian/lists/blacklists/porn/domains>
+#.Include</etc/e2guardian/lists/blacklists/proxy/domains>
+#.Include</etc/e2guardian/lists/blacklists/publicite/domains>
+#.Include</etc/e2guardian/lists/blacklists/redirector/domains>
+#.Include</etc/e2guardian/lists/blacklists/ringtones/domains>
+#.Include</etc/e2guardian/lists/blacklists/sportnews/domains>
+#.Include</etc/e2guardian/lists/blacklists/sports/domains>
+#.Include</etc/e2guardian/lists/blacklists/vacation/domains>
+#.Include</etc/e2guardian/lists/blacklists/violence/domains>
+#.Include</etc/e2guardian/lists/blacklists/virusinfected/domains>
+#.Include</etc/e2guardian/lists/blacklists/warez/domains>
+
+# You will need to edit to add and remove categories you want
@@ -0,0 +1,15 @@
+#IP sites in banned ssl list
+#This list is only used for SSL (or CONNECT) requests
+#Unlike the bannedsitelist it overides all other lists
+# so can be used ban an https site white the http is allowed or made an exception
+# 
+#Only list sites where you only want the https site blocked
+#Use bannedsiteiplist for sites where you want both http & https blocked
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,9 @@
+#domains in banned ssl list
+#Don't bother with the www. or the https://
+#This list is only used for SSL (or CONNECT) requests
+# and will not have any effect when MITM is enabled.
+#Unlike the bannedsitelist it overides all other lists
+# so can be used ban an https site white the http is allowed or made an exception
+# 
+#Only list sites where you only want the https site blocked
+#Use bannedsitelist for sites where you want both http & https blocked
@@ -0,0 +1,13 @@
+#timebands when internet blocked
+
+#You can have multiple .Includes.
+
+# Tiime banding syntax:
+# <start hour> <start minute> <end hour> <end minute> <days>
+# Note figures are 0 based - hours (0-23) mins (0-59) days (0-6)
+# Example:
+# 22 0 23 59 01234
+# 0  0 07 0 01234
+
+# Uncomment the lines above to block access from
+# 0am to 5am and 10pm to 11:59pm, Monday to Friday.
@@ -0,0 +1,59 @@
+#URLs in banned list
+#Don't bother with the http:// or the www
+
+#The bannedurllist is for blocking PART of a site
+#The bannedsitelist is for blocking ALL of a site
+
+#The 'grey' lists override the 'banned' lists.
+#The 'exception' lists override the 'banned' lists also.
+#The difference is that the 'exception' lists completely switch
+#off *all* other filtering for the match.  'grey' lists only
+#stop the URL filtering and allow the normal filtering to work.
+
+#An example of grey list use is when in Blanket Block (whitelist)
+#mode and you want to allow some sites but still filter as normal
+#on their content
+
+#Another example of grey list use is when you ban a site but want
+#to allow part of it.
+
+#To include additional files in this list use this example:
+#.Include</etc/e2guardian/anotherbannedurllist>
+
+#You can have multiple .Includes.
+
+#listcategory: "Banned URLs"
+
+#List other URLs to block:
+
+# members.home.net/uporn
+
+# The squidGuard advert domain/URL lists are now included by default.
+# To work with advanced ad blocking & the logadblocks option, advert
+# phrase/site/URL lists should have the string "ADs" in their listcategory.
+#.Include</etc/e2guardian/lists/blacklists/ads/urls>
+
+#Remove the # from the following and edit as needed to use a stock
+#squidGuard/urlblacklist blacklists collection.
+#.Include</etc/e2guardian/lists/blacklists/adult/urls>
+#.Include</etc/e2guardian/lists/blacklists/aggressive/urls>
+#.Include</etc/e2guardian/lists/blacklists/audio-video/urls>
+#.Include</etc/e2guardian/lists/blacklists/chat/urls>
+#.Include</etc/e2guardian/lists/blacklists/drugs/urls>
+#.Include</etc/e2guardian/lists/blacklists/entertainment/urls>
+#.Include</etc/e2guardian/lists/blacklists/frencheducation/urls>
+#.Include</etc/e2guardian/lists/blacklists/gambling/urls>
+#.Include</etc/e2guardian/lists/blacklists/government/urls>
+#.Include</etc/e2guardian/lists/blacklists/hacking/urls>
+#.Include</etc/e2guardian/lists/blacklists/jobsearch/urls>
+#.Include</etc/e2guardian/lists/blacklists/kidstimewasting/urls>
+#.Include</etc/e2guardian/lists/blacklists/mail/urls>
+#.Include</etc/e2guardian/lists/blacklists/news/urls>
+#.Include</etc/e2guardian/lists/blacklists/porn/urls>
+#.Include</etc/e2guardian/lists/blacklists/proxy/urls>
+#.Include</etc/e2guardian/lists/blacklists/publicite/urls>
+#.Include</etc/e2guardian/lists/blacklists/redirector/urls>
+#.Include</etc/e2guardian/lists/blacklists/violence/urls>
+#.Include</etc/e2guardian/lists/blacklists/virusinfected/urls>
+#.Include</etc/e2guardian/lists/blacklists/warez/urls>
+# You will need to edit to add and remove categories you want
@@ -0,0 +1,16 @@
+#timebands when blanket block is applied
+# (only exception sites will be allowed)
+# To enable this list edit e2guardianfn.conf and filter group i
+# storyboard fn.story - see examplef1.story
+
+#You can have multiple .Includes.
+
+# Tiime banding syntax:
+# <start hour> <start minute> <end hour> <end minute> <days>
+# Note figures are 0 based - hours (0-23) mins (0-59) days (0-6)
+# Example:
+# 22 0 23 59 01234
+# 0  0 07 0 01234
+
+# Uncomment the lines above to blanket block from
+# 0am to 5am and 10pm to 11:59pm, Monday to Friday.
@@ -0,0 +1,93 @@
+#Content modifying Regular Expressions
+#
+# The format is: "extended regular expression"->"replacement straight string"
+# E.g. "shit"->"censored" would replace all occurances of shit in any case.
+# Far more complicated matches are possible.  See other sources for examples
+# of extended regular expressions.
+
+# These are just some examples.  If you write any, for example, to
+# remove popups etc, please send them to author at e2guardian.org.
+#
+#"<script language.*open\(.*script>"->"<!-- its gone -->"
+#"fuck|cunt|shit"->"**censored**"
+#
+# For ALL of these to work it requires e2guardian to be built with PCRE support,
+# but some may work with the default C library regular expression support.
+#
+# Some of these are based on regular expressions from Privoxy.
+
+#remove popups by AFN 2004/2/28
+#"<html>"->"<script language='javascript'>fwo=window.open;function NO(url,nam,atr){return(this.window);}window.open=NO;</script><html>"
+#"=[ ]*?window\.open[ ]*?\("->"=fwo("
+#"<html>"->"<script language='javascript'>function NO(url,nam,atr){return(this.window);}window.open=NO;</script><html>"
+
+# Fix Firefox <= 1.0.7 DoS
+# http://www.whitedust.net/speaks/1432/
+#"((<source)|(</source))text>"->"$1dosremovedtext"
+
+# Disable ActiveX objects.
+#"<object [^>]*application\/x-oleobject[^>]*>.*?<\/object>"->"<!-- Guardian Removed ActiveX Object -->"
+#"<embed [^>]*(application/x-oleobject).*?>(.*?</embed>)?"->"<!-- Guardian Removed ActiveX Embed -->"
+
+# Warn about address bar spoofing.
+#"(<a[^>]*href[^>]*)(\x01|\x02|\x03|%0[012])"->"$1MALICIOUS-LINK"
+
+# Disable all popups in JavaScript and HTML.  It may cause unavoidable
+# Javascript warnings or errors.  Do not enable at the same time as other
+# popup removing lines.
+#"((\W\s*)(window|this|parent)\.)open\s*\\?\("->"$1concat("
+#"\starget\s*=\s*(['"]?)_?(blank|new)\1?"->" notarget"
+
+# Removes the APPLET tag which is generally used Java applets.
+#"<applet[^>]*>.*?<\/applet>"->""
+
+# Disable the BLINK and MARQUEE tags.
+#"</?(blink|marquee)[^>]*>"->""
+
+# Warn about potential cross-site-scripting vulnerability described here:
+# http://online.securityfocus.com/archive/1/298748/2002-11-02/2002-11-08/2
+#"f\("javascript:location.replace\('mk:@MSITStore:C:'\)"\);"->"alert\("This page looks like it tries to use a vulnerability described here:\n http://online.securityfocus.com/archive/1/298748/2002-11-02/2002-11-08/2"\);"
+
+# Removes the SCRIPT tag with JavaScript.  This will likely break sites that are
+# badly written and thus rely on JavaScript.  This should not be used at the same
+# time as the 'script' category.
+#"<script [^>]*javascript[^>]*>.*?<\/script>"->""
+
+# Removes href=javascript: onmouseover=javascript: and other javascript actions.
+# This is a good category to tick if using 'script' or 'javascript' categories.
+# Beware that there are likely going to be a large number of matches and will
+# require more CPU.  Also this will break badly written sites that require
+# JavaScript for navigation.
+#"(onclick|ondblclick|onmousedown|onmouseup|onmouseover|onmousemove|onmouseout|onkeypress|onkeydown|onkeyup|href)(=("|')?)javascript:"->"guardianremoved$2none:"
+
+# Remove cookies set by JavaScript and HTML.
+#"(\w+\.)+cookie(?=[ \t\r\n]*=)(?!='aab)"->"GuardianRemovedCookie"
+#"<meta\s+http-equiv=['"]?set-cookie.*>"->"<!-- GuardianRemovedCookie -->"
+
+# Attempt to detect and stop Nimda infected servers's web pages. This is rare
+# and generally should be left unused.
+#"<script language="JavaScript">(window\.open|1;''\.concat)\("readme\.eml", null, "resizable=no,top=6000,left=6000"\)</script>"->"<br><font size="7"> WARNING: This Server is infected with <a href="http://www.cert.org/advisories/CA-2001-26.html">Nimda</a>!</font>"
+
+# Disable onunload (page close) popups.
+#"(<body\s+[^>]*)onunload"->"$1never"
+#"(<script.*)window\.onunload(?=.*</script>)"->"$1never"
+
+# Removes the SCRIPT tag which could include JavaScript, perlscript and vbscript.
+# This will likely break sites that are badly written and thus rely on client
+# side scripts.  This should not be used at the same time as the 'javascript' line.
+#"<script[^>]*>.*?<\/script>"->""
+
+# Disable Sockwave Flash objects.
+#"<object [^>]*macromedia[^>]*>.*?<\/object>"->"<!-- Guardian Removed Shockwave Object -->"
+#"<embed [^>]*(application/x-shockwave-flash\|\.swf).*?>(.*?</embed>)?"->"<!-- Guardian Removed Shockwave Flash Embed -->"
+
+# Disable unsolicited popups.
+#"([^'"]\s*<head.*>)(?=\s*[^'"])"->"$1<script>function SWGuardianWindowOpen(){return(null);}</script>"
+#"([^\w\s.]\s*)((window|this|parent)\.)?open\s*\("->"$1SWGuardianWindowOpen("
+#"([^'"]\s*</html>)(?!\s*(\\n|'|"))"->"$1<script>function PrivoxyWindowOpen(a, b, c){return(window.open(a, b, c));}</script>"
+
+# Remove 1x1 GIFs used for user tracking.
+#"<img\s+[^>]*(?:(width)|(height))\s*=\s*['"]?[01](?=\D)[^>]*(?:(width)|(height))\s*=\s*['"]?[01](?=\D)[^>]*?>"->""
+
+# Prevent windows from resizing and moving themselves.
+#"(?:window|this|self|top)\.(?:move|resize)(?:to|by)\("->"''.concat("
@@ -0,0 +1,63 @@
+# User are not allowed to bypass domains in this list
+
+#Don't bother with the www. or the http://
+
+#NOTE: Sites using just IP should be put into bannedsiteiplistwithbypass
+
+#You can include
+#.tld so for example you can match .gov for example
+
+#.Include</etc/e2guardian/anotherbannedurllist>
+
+#You can have multiple .Includes.
+
+# WARNING: Old style Blanket blocks in this file will be silently ignored
+
+
+# .Include</etc/e2guardian/lists/blacklists/ads/domains>
+
+#Remove the # from the following and edit as needed to use a stock
+#squidGuard/urlblacklists collection.
+#.Include</etc/e2guardian/lists/blacklists/adult/domains>
+#.Include</etc/e2guardian/lists/blacklists/aggressive/domains>
+#.Include</etc/e2guardian/lists/blacklists/artnudes/domains>
+#.Include</etc/e2guardian/lists/blacklists/audio-video/domains>
+#.Include</etc/e2guardian/lists/blacklists/beerliquorinfo/domains>
+#.Include</etc/e2guardian/lists/blacklists/beerliquorsale/domains>
+#.Include</etc/e2guardian/lists/blacklists/chat/domains>
+#.Include</etc/e2guardian/lists/blacklists/childcare/domains>
+#.Include</etc/e2guardian/lists/blacklists/clothing/domains>
+#.Include</etc/e2guardian/lists/blacklists/culinary/domains>
+#.Include</etc/e2guardian/lists/blacklists/dialers/domains>
+#.Include</etc/e2guardian/lists/blacklists/drugs/domains>
+#.Include</etc/e2guardian/lists/blacklists/entertainment/domains>
+#.Include</etc/e2guardian/lists/blacklists/forums/domains>
+#.Include</etc/e2guardian/lists/blacklists/frencheducation/domains>
+#.Include</etc/e2guardian/lists/blacklists/gambling/domains>
+#.Include</etc/e2guardian/lists/blacklists/government/domains>
+#.Include</etc/e2guardian/lists/blacklists/hacking/domains>
+#.Include</etc/e2guardian/lists/blacklists/homerepair/domains>
+#.Include</etc/e2guardian/lists/blacklists/hygiene/domains>
+#.Include</etc/e2guardian/lists/blacklists/jewelry/domains>
+#.Include</etc/e2guardian/lists/blacklists/jobsearch/domains>
+#.Include</etc/e2guardian/lists/blacklists/kidstimewasting/domains>
+#.Include</etc/e2guardian/lists/blacklists/mail/domains>
+#.Include</etc/e2guardian/lists/blacklists/news/domains>
+#.Include</etc/e2guardian/lists/blacklists/onlineauctions/domains>
+#.Include</etc/e2guardian/lists/blacklists/onlinegames/domains>
+#.Include</etc/e2guardian/lists/blacklists/onlinepayment/domains>
+#.Include</etc/e2guardian/lists/blacklists/personalfinance/domains>
+#.Include</etc/e2guardian/lists/blacklists/pets/domains>
+#.Include</etc/e2guardian/lists/blacklists/porn/domains>
+#.Include</etc/e2guardian/lists/blacklists/proxy/domains>
+#.Include</etc/e2guardian/lists/blacklists/publicite/domains>
+#.Include</etc/e2guardian/lists/blacklists/redirector/domains>
+#.Include</etc/e2guardian/lists/blacklists/ringtones/domains>
+#.Include</etc/e2guardian/lists/blacklists/sportnews/domains>
+#.Include</etc/e2guardian/lists/blacklists/sports/domains>
+#.Include</etc/e2guardian/lists/blacklists/vacation/domains>
+#.Include</etc/e2guardian/lists/blacklists/violence/domains>
+#.Include</etc/e2guardian/lists/blacklists/virusinfected/domains>
+#.Include</etc/e2guardian/lists/blacklists/warez/domains>
+
+# You will need to edit to add and remove categories you want
@@ -0,0 +1,49 @@
+# Exception file extension list
+# Use as a filter group's "exceptionextensionlist",
+# to override a blanket download block.
+# (blockdownloads = on)
+#
+# DOES NOT override content/virus scanning or site/URL bans. 
+#
+# Default list:
+# Unblock web pages & graphics
+
+# Text/web document types
+
+.css
+.html
+.shtml
+.htm
+.stm
+.asp
+.php
+.txt
+.rtx
+.xml
+.xsl
+.cgi
+.pl
+
+# Image types
+
+.bmp
+.cod
+.gif
+.ief
+.jpe
+.jpeg
+.jpg
+.jfif
+.tif
+.tiff
+.ras
+.cmx
+.ico
+.pnm
+.pbm
+.pgm
+.ppm
+.rgb
+.xbm
+.xpm
+.xwd
@@ -0,0 +1,15 @@
+# Exception file site ip list
+# Use this list to define ip sites from which files can be downloaded,
+# overriding a blanket download block (blockdownloads = on) or the
+# banned MIME type and extension lists (blockdownloads = off).
+#
+# DOES NOT override content/virus scanning or site/URL bans.
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,30 @@
+# Exception file site list
+# Use this list to define sites from which files can be downloaded,
+# overriding a blanket download block (blockdownloads = on) or the
+# banned MIME type and extension lists (blockdownloads = off).
+#
+# DOES NOT override content/virus scanning or site/URL bans.
+
+# Don't bother with the www. or
+# the http://
+#
+# These are specifically domains and are not URLs.
+# For example 'foo.bar/porn/' is no good, you need
+# to just have 'foo.bar'.
+#
+# You can also match IPs here too.
+#
+# As of DansGuardian 2.7.3 you can now include
+# .tld so for example you can match .gov for example
+
+
+# Time limiting syntax:
+# #time: <start hour> <start minute> <end hour> <end minute> <days>
+# Example:
+##time: 9 0 17 0 01234
+# Remove the first # from the line above to enable this list only from
+# 9am to 5pm, Monday to Friday.
+
+windowsupdate.microsoft.com
+update.microsoft.com
+download.windowsupdate.com
@@ -0,0 +1,27 @@
+# Exception file URL list
+# Use this list to define URLs from which files can be downloaded,
+# overriding a blanket download block (blockdownloads = on) or the
+# banned MIME type and extension lists (blockdownloads = off).
+#
+# DOES NOT override content/virus scanning or site/URL bans.
+
+# Don't bother with the www. or
+# the http://
+#
+# These are specifically domains and are not URLs.
+# For example 'foo.bar/porn/' is no good, you need
+# to just have 'foo.bar'.
+#
+# You can also match IPs here too.
+#
+# As of DansGuardian 2.7.3 you can now include
+# .tld so for example you can match .gov for example
+
+
+# Time limiting syntax:
+# #time: <start hour> <start minute> <end hour> <end minute> <days>
+# Example:
+##time: 9 0 17 0 01234
+# Remove the first # from the line above to enable this list only from
+# 9am to 5pm, Monday to Friday.
+
@@ -0,0 +1,40 @@
+# Exception MIME type list
+# Use as a filter group's "exceptionmimetypelist",
+# to override a blanket download block.
+# (blockdownloads = on)
+#
+# DOES NOT override content/virus scanning or site/URL bans.
+#
+# Default list:
+# Unblock web pages & graphics
+
+# Text/web document types
+
+text/plain
+text/html
+text/css
+text/xml
+text/xsl
+text/richtext
+
+# Image types
+
+image/bmp
+image/cis-cod
+image/gif
+image/ief
+image/jpeg
+image/pipeg
+image/png
+image/tiff
+image/x-cmu-raster
+image/x-cmx
+image/x-icon
+image/x-portable-anymap
+image/x-portable-bitmap
+image/x-portable-graymap
+image/x-portable-pixmap
+image/x-rgb
+image/x-xbitmap
+image/x-xpixmap
+image/x-xwindowdump
@@ -0,0 +1,19 @@
+# EXCEPTIONPHRASELIST - INSTRUCTIONS FOR USE
+#
+# If any of the phrases listed below appear in a web page
+# then it will bypass the filtering and be allowed through
+# eg
+# < medical >
+#
+#
+# Combinations
+# Unblock the page if the following phrases are found on the same page.
+# Each line is a new combination.
+# eg
+#<education>,<biology>,<medical>
+#
+# See the bannedphraselist for more examples.
+
+# Use this sparingly as can easily make exceptions of unsuitable urls
+
+#.Include</etc/e2guardian/lists/phraselists/ukenglish/goodphrases/exception_email>
@@ -0,0 +1,8 @@
+#Allowed outgoing HTTP headers based on regular expressions
+#
+# E.g. 'User-Agent: .*MSIE' would allow several versions of Internet Explorer
+# (assuming the user-agent is not being spoofed by the client)
+#
+# Headers are matched line-by-line, not as a single block.
+
+#listcategory: "Allowed Regular Expression HTTP Headers"
@@ -0,0 +1,15 @@
+#Exception URLs based on Regular Expressions
+#
+# E.g. 'news' would unblock news.bbc.com etc
+
+# Example
+#news
+
+# Prevent content scanning of CSS and/or JavaScript files
+#^[^?]*\.css($|\?)
+#^[^?]*\.jsp?($|\?)
+
+# Allow Facebook plugin applications like
+# http://apps.facebook.com/neighborhoods/Setup.aspx and others.
+mock_ajax_proxy.php
+
@@ -0,0 +1,10 @@
+#Exception User-Agent based on regular expressions
+#
+# E.g. ' .*MSIE' would allow several versions of Internet Explorer
+# (assuming the user-agent is not being spoofed by the client)
+#
+# Usefull for allowing 'apps' to work
+# E.g. 'Kindle' would make kindle app an exception 
+
+#listcategory: "user-agent"
+
@@ -0,0 +1,9 @@
+#IP Sites in exception list
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,24 @@
+#Sites in exception list
+#Don't bother with the www. or
+#the http://
+#
+#These are specifically domains and are not URLs.
+#For example 'foo.bar/porn/' is no good, you need
+#to just have 'foo.bar'.
+#
+# IP must be put in exceptionsiteiplist
+#
+#.tld so for example you can match .gov for example
+
+
+# Time limiting syntax:
+# #time: <start hour> <start minute> <end hour> <end minute> <days>
+# Example:
+##time: 9 0 17 0 01234
+# Remove the first # from the line above to enable this list only from
+# 9am to 5pm, Monday to Friday.
+
+# NOTE: From v5 Blanket exceptions are now implimented using Storyboarding 
+# WARNING: Old style Blanket blocks in this file will be silently ignored
+
+windowsupdate.microsoft.com
@@ -0,0 +1,15 @@
+#URLs in exception list
+#Don't bother with the www. or
+#the http://
+#
+#These are parts of sites that filtering should
+#be switched off for.
+#
+#These should not be domains, i.e. entire sites,
+#they should be a domain with a path.
+#
+#For example 'foo.bar' is no good, you need
+#to just have 'foo.bar/porn/'.
+#
+#Another example:
+#generallybadsite.tld/partthatsok/
@@ -0,0 +1,45 @@
+# Exception file extension list
+# Use as a filter group's "exceptionvirusextensionlist",
+#
+# Default list:
+# Unblock web pages & graphics
+
+# Text/web document types
+
+.css
+.html
+.shtml
+.htm
+.stm
+.asp
+.php
+.txt
+.rtx
+.xml
+.xsl
+.cgi
+.pl
+
+# Image types
+
+.bmp
+.cod
+.gif
+.ief
+.jpe
+.jpeg
+.jpg
+.jfif
+.tif
+.tiff
+.ras
+.cmx
+.ico
+.pnm
+.pbm
+.pgm
+.ppm
+.rgb
+.xbm
+.xpm
+.xwd
@@ -0,0 +1,12 @@
+# IP sites in exceptionvirussiteiplist 
+
+#The exceptionvirussiteiplist is for allowing ALL of an IP site
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,16 @@
+# IP site in grey list
+
+#The 'grey' lists override the 'banned' lists.
+#The 'exception' lists override the 'banned' lists also.
+#The difference is that the 'exception' lists completely switch
+#off *all* other filtering for the match.  'grey' lists only
+#stop the URL filtering and allow the normal filtering to work.
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,59 @@
+#domains in grey list
+#Don't bother with the www. or the http://
+
+#The 'grey' lists override the 'banned' lists.
+#The 'exception' lists override the 'banned' lists also.
+#The difference is that the 'exception' lists completely switch
+#off *all* other filtering for the match.  'grey' lists only
+#stop the URL filtering and allow the normal filtering to work.
+
+#An example of grey list use is when in Blanket Block (whitelist)
+#mode and you want to allow some sites but still filter as normal
+#on their content
+
+#Another example of grey list use is when you ban a site but want
+#to allow part of it.
+
+#The greyurllist is for partly unblocking PART of a site
+#The greysitelist is for partly unblocking ALL of a site
+
+#As of DansGuardian 2.7.3 you can now include
+#.tld so for example you can match .gov for example
+
+#To include additional files in this list use this example:
+#.Include</etc/e2guardian/anotherurllist>
+
+#You can have multiple .Includes.
+
+# Time limiting syntax:
+# #time: <start hour> <start minute> <end hour> <end minute> <days>
+# Example:
+##time: 9 0 17 0 01234
+# Remove the first # from the line above to enable this list only from
+# 9am to 5pm, Monday to Friday.
+
+
+# Blanket match.  To greylist all sites except those in the
+# exceptionsitelist and greysitelist files, remove
+# the # from the next line to leave only a '**':
+#**
+
+# Blanket SSL/CONNECT match.  To greylist all SSL 
+# and CONNECT tunnels except to addresses in the
+# exceptionsitelist and greysitelist files, remove
+# the # from the next line to leave only a '**s':
+#**s
+
+# Blanket IP match.  To greylist all sites specified only as an IP,
+# remove the # from the next line to leave only a '*ip':
+#*ip
+
+# Blanket SSL/CONNECT IP match.  To greylist all SSL and CONNECT
+# tunnels to sites specified only as an IP,
+# remove the # from the next line to leave only a '*ips':
+#*ips
+
+
+#List other sites to greylist:
+
+#www.bbc.co.uk
@@ -0,0 +1,10 @@
+# IP sites in SSL grey list
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,4 @@
+#domains in SSL grey list
+#Don't bother with the www. or the https://
+
+#This 'grey' lists override the 'banned' lists for SSL only.
@@ -0,0 +1,27 @@
+#URLs in grey list
+#Don't bother with the http:// or the www
+
+#The greyurllist is for partly unblocking PART of a site
+#The greysitelist is for partly unblocking ALL of a site
+
+#The 'grey' lists override the 'banned' lists.
+#The 'exception' lists override the 'banned' lists also.
+#The difference is that the 'exception' lists completely switch
+#off *all* other filtering for the match.  'grey' lists only
+#stop the URL filtering and allow the normal filtering to work.
+
+#An example of grey list use is when in Blanket Block (whitelist)
+#mode and you want to allow some sites but still filter as normal
+#on their content
+
+#Another example of grey list use is when you ban a site but want
+#to allow part of it.
+
+#To include additional files in this list use this example:
+#.Include</etc/e2guardian/anotherurllist>
+
+#You can have multiple .Includes.
+
+#List other URLs to block:
+
+#members.home.net/nice
@@ -0,0 +1,15 @@
+# Outgoing HTTP request header modifying Regular Expressions
+#
+# The format is: "extended regular expression"->"replacement straight string"
+# E.g. "shit"->"censored" would replace all occurances of shit in any case.
+# Far more complicated matches are possible.  See other sources for examples
+# of extended regular expressions.
+#
+# Headers are run through replacements line-by-line, not as a single block.
+#
+# To remove a header put "X-E2G-IgnoreMe:" as the replacement
+# e.g. to remove 'upgrade:' headers
+#"upgrade:.*$"->"X-E2G-IgnoreMe:"
+
+# Windows Live Search cookie replacement - force filtering on
+#"cookie:(.*)&ADLT=(OFF|DEMOTE)"->"Cookie:$1&ADLT=STRICT"
@@ -0,0 +1,13 @@
+# User are not allowed to bypass IP sites in this list
+
+#
+# This is not the IP of web servers
+# you want to filter.
+
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
+
@@ -0,0 +1,14 @@
+#Local Banned Search Words
+#
+#Words must be in alphabetic order within a single line
+# and separated by a '+' sign.
+#All combinations of the words will be blocked
+# e.g.   girl+naughty
+#     will block  naughty+girl as well as girl+naughty
+
+
+#.Include</home/dg/etc/local/lists/local_block_all/bannedsearchterms>
+#.Include</home/dg/etc/local/lists/porn/bannedsearchterms>
+#.Include</home/dg/etc/local/lists/proxy/bannedsearchterms>
+#.Include</home/dg/etc/local/lists/hacking/bannedsearchterms>
+#.Include</home/dg/etc/local/lists/drugs/bannedsearchterms>
@@ -0,0 +1,10 @@
+# IP sites in local banned list
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,6 @@
+#domains in local banned list
+#.Include</home/dg/etc/local/lists/local_block_all/domains>
+#.Include</home/dg/etc/local/lists/porn/domains>
+#.Include</home/dg/etc/local/lists/proxy/domains>
+#.Include</home/dg/etc/local/lists/hacking/domains>
+#.Include</home/dg/etc/local/lists/drugs/domains>
@@ -0,0 +1,12 @@
+# IP sites in local banned ssl list
+#This list is only used for SSL (or CONNECT) requests
+#Unlike the bannedsitelist it overides all other lists
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,5 @@
+#domains in banned ssl list
+#Don't bother with the www. or the https://
+#This list is only used for SSL (or CONNECT) requests
+# and has no effect when MITM is enabled
+#Unlike the bannedsitelist it overides all other lists
@@ -0,0 +1 @@
+#URLs in local banned list
@@ -0,0 +1,10 @@
+#IP Sites in local exception list
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1 @@
+#Sites in local exception list
@@ -0,0 +1 @@
+#URLs in local exception list
@@ -0,0 +1,10 @@
+# IP sites in local grey list
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1 @@
+#domains in local grey list
@@ -0,0 +1,10 @@
+# IP sites in local SSL grey list
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,6 @@
+#domains in SSL grey list
+#Don't bother with the www. or the https://
+
+#This 'grey' lists overrides the main site 'exception' lists for SSL allowing MITM to be enabled in order to check https full url.
+
+# Use to overcome issue where ssl url is in local blocked url list but is overriden by main site exception list forcing tunnel mode and so url never checked. 
@@ -0,0 +1 @@
+#URLs in local grey list
@@ -0,0 +1,12 @@
+# Log regular expression URL list
+#
+# This acts as a list of URL regexes which, if matched, will have their category
+# recorded but no specific filtering action taken.  It is only really useful
+# in conjunction with log analysers, to perform meaningful categorisation and
+# analysis upon non-blocked/exception requests, and so is disabled and empty
+# by default.
+#
+# If you would like to enable this feature, uncomment "logregexpurllist" in your
+# e2guardianf*.conf file(s), and place .Include<> statements here for the
+# categories you would like to log.  Included list files must contain a
+# "#listcategory" directive.
@@ -0,0 +1,21 @@
+# Log IP site list
+#
+# This acts as a list of IP sites which, when found, will have their category
+# recorded but no specific filtering action taken.  It is only really useful
+# in conjunction with log analysers, to perform meaningful categorisation and
+# analysis upon non-blocked/exception requests, and so is disabled and empty
+# by default.
+#
+# If you would like to enable this feature, uncomment "logsitelist" in your
+# e2guardianf*.conf file(s), and place .Include<> statements here for the
+# categories you would like to log.  Included list files must contain a
+# "#listcategory" directive.
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,12 @@
+# Log site list
+#
+# This acts as a list of domains which, when found, will have their category
+# recorded but no specific filtering action taken.  It is only really useful
+# in conjunction with log analysers, to perform meaningful categorisation and
+# analysis upon non-blocked/exception requests, and so is disabled and empty
+# by default.
+#
+# If you would like to enable this feature, uncomment "logsitelist" in your
+# e2guardianf*.conf file(s), and place .Include<> statements here for the
+# categories you would like to log.  Included list files must contain a
+# "#listcategory" directive.
@@ -0,0 +1,12 @@
+# Log URL list
+#
+# This acts as a list of URLs which, when found, will have their category
+# recorded but no specific filtering action taken.  It is only really useful
+# in conjunction with log analysers, to perform meaningful categorisation and
+# analysis upon non-blocked/exception requests, and so is disabled and empty
+# by default.
+#
+# If you would like to enable this feature, uncomment "logurllist" in your
+# e2guardianf*.conf file(s), and place .Include<> statements here for the
+# categories you would like to log.  Included list files must contain a
+# "#listcategory" directive.
@@ -0,0 +1,17 @@
+# IP sites which are NOT to have their certificates checked (when in MITM mode)
+#
+# Do not check ssl certificates for IP sites listed
+#
+# Can be used to allow sites with self-signed or invalid certificates
+# or to reduced CPU load by not checking certs on heavily used sites (e.g. Google, Bing)
+# Use with caution!
+# Ignored if mitmcheckcert is 'off'
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,9 @@
+# domains which are NOT to have their certificates checked (when in MITM mode)
+#
+# Do not check ssl certificates for sites/domains listed
+#
+# Can be used to allow sites with self-signed or invalid certificates
+# or to reduced CPU load by not checking certs on heavily used sites (e.g. Google, Bing)
+# Use with caution!
+# Ignored if mitmcheckcert is 'off'
+#Don't bother with the https://
@@ -0,0 +1,57 @@
+# BANNEDPHRASELIST - INSTRUCTIONS FOR USE
+#
+# To block any page with the word "sex".
+# < sex >
+#
+# To block any page with words that contain the string "sex". (ie. sexual)
+# <sex>
+#
+# To block any page with the string "sex magazine".
+# <sex magazine>
+#
+# To block any page containing the words/strings "sex" and "fetish".
+# <sex>,<fetish>
+#
+# < test> will match any word with the string 'test' at the beginning
+# <test > will match any word with the string 'test' at the end
+# <test> will match any word with the string 'test' at any point in the word
+# < test > will match only the word 'test'
+# <this is a test phrase> will match that exact phrase
+# <test>,<secondtest> will match if both words are found in the page
+# A combination of the above can also be used eg < test>,<secondtest>
+#
+#
+# Extra phrase-list files to include
+# .Include</etc/e2guardian/testphrase>
+#
+#
+# All phrases need to be within < and > to work, othewise they will be
+# ignored.
+
+# MORE EXAMPLE LISTS CAN BE DOWNLOADED FROM DANSGUARDIAN.ORG
+
+# Phrase Exceptions are no longer listed in this file, they are now
+# listed in the exceptionphraselist file.
+#
+
+#listcategory: "Banned Phrases"
+
+# The following banned phraselists enable Website Content Labeling systems.  These are enabled by default, but may also be activated using phraselists.  
+
+.Include</etc/e2guardian/lists/oldphraselists/safelabel/banned>
+#.Include</etc/e2guardian/lists/oldphraselists/rta/banned_portuguese>
+
+# The following banned oldphraselists are included in the default DG distribution.
+
+.Include</etc/e2guardian/lists/oldphraselists/pornography/banned>
+##.Include</etc/e2guardian/lists/oldphraselists/pornography/banned_portuguese>
+
+#.Include</etc/e2guardian/lists/oldphraselists/illegaldrugs/banned>
+
+#.Include</etc/e2guardian/lists/oldphraselists/gambling/banned>
+##.Include</etc/e2guardian/lists/oldphraselists/gambling/banned_portuguese>
+
+#.Include</etc/e2guardian/lists/oldphraselists/googlesearches/banned>
+
+
+
@@ -0,0 +1,18 @@
+# EXCEPTIONPHRASELIST - INSTRUCTIONS FOR USE
+#
+# If any of the phrases listed below appear in a web page
+# then it will bypass the filtering and be allowed through
+# eg
+# < medical >
+#
+#
+# Combinations
+# Unblock the page if the following phrases are found on the same page.
+# Each line is a new combination.
+# eg
+#<education>,<biology>,<medical>
+#
+# See the bannedphraselist for more examples.
+
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/exception>
+#.Include</etc/e2guardian/lists/oldphraselists/goodphrases/exception_email>
@@ -0,0 +1,142 @@
+# E2GUARDIAN weightedphraselist INSTRUCTIONS FOR USE
+
+# New in v5.2 - per cent feature
+
+# If weighting is a % then that % of the naughtynesslimit is used as the weight
+# e.g.  
+# < slut ><10%>
+# - If naughtynesslimit is 200 will add 20 to the count against the word 'slut'
+#
+# This allows phrases to be used which will have the same effect in all
+# filtergroups
+
+#
+# Examples:
+#
+# <slut><10>			
+# - Adds 10 to the count against the string 'slut'.   ie. sluts, slut!, abslutxyz.
+#
+# < slut ><10>
+# - Adds 10 to the count against the word 'slut'.   ie. Sally is a slut that smells.
+#
+# <slut>,<horny><50>
+# - Adds 50 to the count when the strings 'slut' and 'horny' are found on the same page.
+#
+# <breast>,<medical><-30>
+# - Subtracts 30 from the count when 'breast' and 'medical' are on the one page.
+#
+# <education><-25>
+# - Subtracts 25 from the count when 'education' is on the page.
+#
+# See the bannedphraselist for more examples.
+#
+# Extra weighted-list files to include
+# .Include</etc/e2guardian/lists/oldphraselists/weightedphraselist.topic>
+#
+# Help by contributing customised lists and/or new keyword lists. 
+# Email: pornmastergeneral@e2guardian.org or phrasemaster@e2guardian.org
+#
+# NOTE: New lists are commented out as ALPHA or BETA depending on how much the 
+# lists have been tested.
+# ALPHA - Brand new and/or incomplete - little testing has been done
+# BETA - Relatively new - tested in several locations
+#
+
+#listcategory: "Weighted Phrases"
+
+#To enable several non-PICS self-labelling and self-rating systems.  
+#Enabled as a bannedsitelist by default.  Disable there before enabling as a phraselist.
+##.Include</etc/e2guardian/lists/oldphraselists/safelabel/weighted>
+
+#Good Phrases (to allow medical, education, news and other good sites)
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/weighted_general>
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/weighted_news>
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/weighted_general_danish>
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/weighted_general_dutch>
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/weighted_general_malay>
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/weighted_general_polish>
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/weighted_general_portuguese>
+.Include</etc/e2guardian/lists/oldphraselists/goodphrases/weighted_general_swedish>
+
+#Pornography
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted>
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_chinese> #ALPHA#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_danish> #ALPHA#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_dutch> #BETA#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_french>
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_german>
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_italian>
+#.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_japanese> #ALPHA# #Disabled due to overblocking#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_malay> #BETA#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_norwegian> #BETA#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_polish>
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_portuguese>
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_russian> #BETA#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_russian_utf8> #BETA#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_spanish> #ALPHA#
+.Include</etc/e2guardian/lists/oldphraselists/pornography/weighted_swedish>
+.Include</etc/e2guardian/lists/oldphraselists/nudism/weighted>
+
+#Bad Words - swearing
+.Include</etc/e2guardian/lists/oldphraselists/badwords/weighted_dutch> 
+.Include</etc/e2guardian/lists/oldphraselists/badwords/weighted_french>
+.Include</etc/e2guardian/lists/oldphraselists/badwords/weighted_german> #ALPHA#
+.Include</etc/e2guardian/lists/oldphraselists/badwords/weighted_portuguese> #ALPHA#
+.Include</etc/e2guardian/lists/oldphraselists/badwords/weighted_spanish> #ALPHA#
+
+#Drugs
+#.Include</etc/e2guardian/lists/oldphraselists/drugadvocacy/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/illegaldrugs/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/illegaldrugs/weighted_portuguese>
+#.Include</etc/e2guardian/lists/oldphraselists/legaldrugs/weighted>
+
+#Violence and intolerance
+#.Include</etc/e2guardian/lists/oldphraselists/intolerance/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/intolerance/weighted_portuguese>
+#.Include</etc/e2guardian/lists/oldphraselists/gore/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/gore/weighted_portuguese>
+#.Include</etc/e2guardian/lists/oldphraselists/violence/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/violence/weighted_portuguese>
+#.Include</etc/e2guardian/lists/oldphraselists/weapons/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/weapons/weighted_portuguese>
+
+#Chat
+#.Include</etc/e2guardian/lists/oldphraselists/chat/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/chat/weighted_italian>
+
+#Webmail
+#.Include</etc/e2guardian/lists/oldphraselists/webmail/weighted>
+#Note that if you enable the webmail weighted list you should also disable 
+#the "exception_email" list in the exceptionphraselist file.
+
+#Forums
+#.Include</etc/e2guardian/lists/oldphraselists/forums/weighted> #BETA#
+
+#Gambling
+#.Include</etc/e2guardian/lists/oldphraselists/gambling/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/gambling/weighted_portuguese>
+
+#Productivity
+#.Include</etc/e2guardian/lists/oldphraselists/games/weighted> #ALPHA#
+#.Include</etc/e2guardian/lists/oldphraselists/news/weighted> #ALPHA#
+#.Include</etc/e2guardian/lists/oldphraselists/personals/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/personals/weighted_portuguese>
+#.Include</etc/e2guardian/lists/oldphraselists/sport/weighted> #ALPHA#
+#.Include</etc/e2guardian/lists/oldphraselists/travel/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/music/weighted>
+
+#System Management and Security
+#.Include</etc/e2guardian/lists/oldphraselists/domainsforsale/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/idtheft/weighted>
+.Include</etc/e2guardian/lists/oldphraselists/malware/weighted> #BETA#
+.Include</etc/e2guardian/lists/oldphraselists/proxies/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/translation/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/upstreamfilter/weighted>
+.Include</etc/e2guardian/lists/oldphraselists/warezhacking/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/peer2peer/weighted>
+
+#Miscellaneous	
+#.Include</etc/e2guardian/lists/oldphraselists/conspiracy/weighted>
+#.Include</etc/e2guardian/lists/oldphraselists/secretsocieties/weighted>
+
+
@@ -0,0 +1,11 @@
+# Exception referer IP sites
+#  sites which are refered to by these sites will be made exceptions
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#
@@ -0,0 +1,2 @@
+# Exception referer sites
+#  sites which are refered to by these sites will be made exceptions
@@ -0,0 +1 @@
+# Referer URLs - Sites refered to by these URLs will be made exception
@@ -0,0 +1,13 @@
+# HTTP response header modifying Regular Expressions
+#
+# The format is: "extended regular expression"->"replacement straight string"
+# E.g. "shit"->"censored" would replace all occurances of shit in any case.
+# Far more complicated matches are possible.  See other sources for examples
+# of extended regular expressions.
+#
+# Headers are run through replacements line-by-line, not as a single block.
+#
+# To remove a header put "X-E2G-IgnoreMe:" as the replacement
+# e.g. to remove 'upgrade:' headers
+#"upgrade:.*$"->"X-E2G-IgnoreMe:"
+
@@ -0,0 +1,29 @@
+#SSL site modifying Regular Expressions
+#
+# The format is: "extended regular expression"->"replacement straight string"
+# E.g. "shit"->"censored" would replace all occurances of shit in any case.
+# Far more complicated matches are possible.  See other sources for examples
+# of extended regular expressions.
+#
+# Users are pointed at the replaced site transparently.
+# This is used to 'cname' ssl sites and avoids having to adjust DNS
+# and allows option of switching off/on depending on filter group.
+
+# This list applies to the site only (not full URL) for 
+#   HTTPS sites (regardless of SSL MITM configuration).
+
+# Do not use patterns with full urls in this list as they can never
+#   match the site name.
+
+# Enforce restricted mode in YouTube
+#
+#"(^https://www.youtube.com)"->"https://restrict.youtube.com"
+#"(^https://m.youtube.com)"->"https://restrict.youtube.com"
+#"(^https://youtubei.googleapis.com)"->"https://restrict.youtube.com"
+#"(^https://youtube.googleapis.com)"->"https://restrict.youtube.com"
+#"(^https://www.youtube-nocookie.com)"->"https://restrict.youtube.com"
+#
+# Enforce restricted mode in Google
+#
+#"(^https://www\.google\.[a-zA-Z0-9_.]*$)"->"https://forcesafesearch.google.com"
+#"(^https://.*\.gstatic\.com$)"->"https://forcesafesearch.google.com"
@@ -0,0 +1,51 @@
+# User are not allowed to bypass url sites in this list
+
+#Don't bother with the www. or the http://
+
+#NOTE: Sites using just IP should be put into bannedsiteiplistwithbypass
+
+#You can have multiple .Includes.
+
+# WARNING: Old style Blanket blocks in this file will be silently ignored
+
+#To include additional files in this list use this example:
+#.Include</etc/e2guardian/anotherbannedurllist>
+
+#You can have multiple .Includes.
+
+#listcategory: "Banned URLs"
+
+#List other URLs to block:
+
+# members.home.net/uporn
+
+# The squidGuard advert domain/URL lists are now included by default.
+# To work with advanced ad blocking & the logadblocks option, advert
+# phrase/site/URL lists should have the string "ADs" in their listcategory.
+#.Include</etc/e2guardian/lists/blacklists/ads/urls>
+
+#Remove the # from the following and edit as needed to use a stock
+#squidGuard/urlblacklist blacklists collection.
+#.Include</etc/e2guardian/lists/blacklists/adult/urls>
+#.Include</etc/e2guardian/lists/blacklists/aggressive/urls>
+#.Include</etc/e2guardian/lists/blacklists/audio-video/urls>
+#.Include</etc/e2guardian/lists/blacklists/chat/urls>
+#.Include</etc/e2guardian/lists/blacklists/drugs/urls>
+#.Include</etc/e2guardian/lists/blacklists/entertainment/urls>
+#.Include</etc/e2guardian/lists/blacklists/frencheducation/urls>
+#.Include</etc/e2guardian/lists/blacklists/gambling/urls>
+#.Include</etc/e2guardian/lists/blacklists/government/urls>
+#.Include</etc/e2guardian/lists/blacklists/hacking/urls>
+#.Include</etc/e2guardian/lists/blacklists/jobsearch/urls>
+#.Include</etc/e2guardian/lists/blacklists/kidstimewasting/urls>
+#.Include</etc/e2guardian/lists/blacklists/mail/urls>
+#.Include</etc/e2guardian/lists/blacklists/news/urls>
+#.Include</etc/e2guardian/lists/blacklists/porn/urls>
+#.Include</etc/e2guardian/lists/blacklists/proxy/urls>
+#.Include</etc/e2guardian/lists/blacklists/publicite/urls>
+#.Include</etc/e2guardian/lists/blacklists/redirector/urls>
+#.Include</etc/e2guardian/lists/blacklists/violence/urls>
+#.Include</etc/e2guardian/lists/blacklists/virusinfected/urls>
+#.Include</etc/e2guardian/lists/blacklists/warez/urls>
+# You will need to edit to add and remove categories you want
+
				`@@ -0,0 +1 @@`
				`# Referer URLs - Sites refered to by these URLs will be made exception`