Add create cche

docker-compose/e2guardian/lists/common/README

@@ -0,0 +1,73 @@
+README for lists/common directory
+
+### Lists held in this directory:-
+
+## Lists defined in e2guardian.conf
+
+# Sites that are impossible or undesirable to MITM
+#
+nomitmsitelist
+nomitmsiteiplist
+
+
+# Banned clients
+#
+bannediplist
+# ONLY for banned client IP
+#
+exceptioniplist
+# ONLY for exception client IP
+#
+bannedclientlist
+# Put client dns names in bannedclientlist if required
+exceptionclientlist
+# Put client dns names in exceptionclientlist if required
+
+# Auth exceptions
+# Target Sites/Urls allowed before authentication
+# to allow for machines to update without user authentication
+#
+authexceptioniplist
+authexceptionsitelist
+authexceptionurllist
+
+browserregexpboollist
+#
+# List of regexp that match match User-agent of browsers
+# Used to determine if client is a browser
+# and decide whether to send a block page or go MITM
+
+
+## Lists common to all groups (defined in e2guardianfn.conf)
+
+
+# Embeded referer
+# Some sites have the referering url in their url. Put these url in these
+# lists and e2g will extract the embeded url and then check this againist
+# the refererexception lists.
+# For best results be as specific as possible
+embededreferersitelist
+embededreferersiteiplist
+embededrefererurllist
+
+# Nolog lists
+# Do not log sites/urls/ext
+# Useful to prevent requests not made by user directly being logged
+# Makes logs more readable
+nologsitelist
+nologsiteiplist
+nologurllist
+nologregexpurllist
+nologextensionlist
+
+# Search engine regular expression list 
+# List of regular expressions for matching search engine URLs.  It is assumed
+# that the search terms themselves will be contained in the
+# of output of each expression.
+searchregexplist
+#
+# search engine regexp exception (overide) list
+# Used to prevent urls such os completetion suggestion requests from being detected
+# as search requests
+searchexceptionregexplist
+

docker-compose/e2guardian/lists/common/authexceptioniplist

@@ -0,0 +1,9 @@
+#Access allowed prior to authentication
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#

docker-compose/e2guardian/lists/common/authexceptionsitelist

@@ -0,0 +1 @@
+#Access allowed prior to authentication

docker-compose/e2guardian/lists/common/authexceptionurllist

@@ -0,0 +1 @@
+#Access allowed prior to authentication

docker-compose/e2guardian/lists/common/bannedclientlist

@@ -0,0 +1,6 @@
+# Domain names of client machines to
+# disallow web access to.
+#
+# This is not the the domains of web servers
+# you want to filter.
+

docker-compose/e2guardian/lists/common/bannediplist

@@ -0,0 +1,12 @@
+# IP addresses of client machines to
+# disallow web access to.
+#
+# This is not the IP of web servers
+# you want to filter.
+
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#

docker-compose/e2guardian/lists/common/browserregexplist

@@ -0,0 +1,15 @@
+# Reg Exp to check user-agent shows request is from a browser
+#
+# The format is: "extended regular expression"
+
+(Firefox/)
+(Chrome/)
+(MSIE/)
+(Opera/)
+(Safari/)
+(Edge/)
+
+# curl and wget are not browsers - but are often used for testing
+# so are included below
+(curl/)
+(wget/)

docker-compose/e2guardian/lists/common/embededreferersiteiplist

@@ -0,0 +1,10 @@
+# Embeded referer IP sites
+#  sites which may contain embeded exception referer sites in the url
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#

docker-compose/e2guardian/lists/common/embededreferersitelist

@@ -0,0 +1,2 @@
+# Embeded referer sites
+#  sites which may contain embeded exception referer sites in the url

docker-compose/e2guardian/lists/common/embededrefererurllist

@@ -0,0 +1,5 @@
+# Embeded referer urls
+#  urls which may contain embeded exception referer sites in the url
+
+# e.g. to allow youtube video when embeded in a trusted referer site/urls
+# www.youtube.com/get_video_info

docker-compose/e2guardian/lists/common/exceptionclientlist

@@ -0,0 +1,16 @@
+# Doamin names of computers from which
+# web access should not be filtered.
+#
+# These would be servers which
+# need unfiltered access for
+# updates.  Also administrator
+# workstations which need to
+# download programs and check
+# out blocked sites should be
+# put here.
+#
+# To work you must 
+# cater for reverse DNS lookups
+# on your LAN and enable the
+# "reverseclientiplookups" option in
+# e2guardian.conf

docker-compose/e2guardian/lists/common/exceptioniplist

@@ -0,0 +1,27 @@
+# IP addresses of computers from which
+# web access should not be filtered.
+#
+# These would be servers which
+# need unfiltered access for
+# updates.  Also administrator
+# workstations which need to
+# download programs and check
+# out blocked sites should be
+# put here.
+#
+# Hostnames are NOT allowed here, 
+# put these in exceptionclientlist and
+# enable the reverseclientlookups option.
+#
+# This is not the IP of web servers
+# you don't want to filter.
+
+#192.168.0.1
+#192.168.0.2
+#192.168.42.2
+
+# Ranges and subnets can also be used,
+# e.g.
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#

docker-compose/e2guardian/lists/common/nologextensionlist

@@ -0,0 +1,31 @@
+# No Log file extension list
+
+# requests with extensions in this list will not be logged
+
+# Text/web document types
+
+.css
+
+# Image types
+
+#.bmp
+#.cod
+#.gif
+#.ief
+#.jpe
+#.jpeg
+#.jpg
+#.jfif
+#.tif
+#.tiff
+#.ras
+#.cmx
+#.ico
+#.pnm
+#.pbm
+#.pgm
+#.ppm
+#.rgb
+#.xbm
+#.xpm
+#.xwd

docker-compose/e2guardian/lists/common/nologregexpurllist

@@ -0,0 +1,4 @@
+# No Log regular expression URL list
+#
+# This acts as a list of URL regexes which, if matched, will 
+# not be logged

docker-compose/e2guardian/lists/common/nologsiteiplist

@@ -0,0 +1,13 @@
+# No Log IP site list
+#
+# This acts as a list of IP sites which, when found, 
+# will not be logged
+
+# IP site addresses 
+#
+# Single IPs, ranges and subnets can be used,
+# e.g.
+# 192.168.0.1
+# 10.0.0.1-10.0.0.3
+# 10.0.0.0/24
+#

docker-compose/e2guardian/lists/common/nologsitelist

@@ -0,0 +1,4 @@
+# No Log site list
+#
+# This acts as a list of domains which, when found, 
+# will not be logged.

docker-compose/e2guardian/lists/common/nologurllist

@@ -0,0 +1,9 @@
+# No Log URL list
+#
+# This acts as a list of URLs which, when found, will 
+# not be logged
+
+www.google.com/complete
+www.google.co.uk/complete
+
+

docker-compose/e2guardian/lists/common/nomitmsiteiplist

@@ -0,0 +1,9 @@
+#IP in nomitmsiteiplist 
+
+#This list is to stop any attempt to mitm these sites,
+# including trying to MITM to client to deliver an error message
+
+#Only put IP sites which cannot be MITM in this list
+#This applies to sites which are only used by apps
+#Sites not using http(s) but connecting via https or CONNECT
+

docker-compose/e2guardian/lists/common/nomitmsitelist

@@ -0,0 +1,14 @@
+#domains in nomitmsitelist 
+#Don't bother with the www. or the http://
+
+#This list is to stop any attempt to mitm these sites,
+# including trying to MITM to client to deliver an error message
+
+#Only put sites which cannot be MITM in this list
+#This applies to sites which are only used by apps
+#Sites not using http(s) but connecting via https or CONNECT
+
+#NOTE: Sites using just IP should be put into nomitmsiteiplist
+
+reports.crashlytics.com   # google app crash tool
+

docker-compose/e2guardian/lists/common/searchexceptionregexplist

@@ -0,0 +1,11 @@
+# This defines urls which will be not search term checked
+# Overrides searchregexplist
+#
+# The format is: "extended regular expression"
+# 
+
+#"^http://[0-9a-z]+\.google\.[a-z]+[-%.0-9a-z]*/complete"
+"^http://www.google.com/complete"
+"^http://www.google.co.uk/complete"
+
+

docker-compose/e2guardian/lists/common/searchregexplist

@@ -0,0 +1,37 @@
+# This defines sites which will be search term checked
+#
+# The format is: "extended regular expression"->"search words"
+# 
+#   left is the site matching pattern
+#   right is the search words
+
+"^http://[0-9a-z]+\.google\.[a-z]+[-/%.0-9a-z]*\?q=([^&]*)\&.*"->"\1"
+"^http://[0-9a-z]+\.google\.[a-z]+[-/%.0-9a-z]*/.*\&q=([^&]*).*"->"\1"
+"^http://[0-9a-z]+\.google\.[a-z]+[-/%.0-9a-z]*\?q=([^&]*)"->"\1"
+"^http://[0-9a-z]+\.google\.[a-z]+[-/%.0-9a-z]*/.*\&q=([^&]*)"->"\1"
+
+"^http://www\.qwant\.com/.*\?q=([^&]*)\&.*"->"\1"
+"^http://www\.qwant\.com/.*\&q=([^&]*).*"->"\1"
+"^http://www\.qwant\.com/.*\?q=([^&]*)"->"\1"
+"^http://www\.qwant\.com/.*\&q=([^&]*)"->"\1"
+"^http://api\.qwant\.com/.*\?q=([^&]*)\&.*"->"\1"
+"^http://api\.qwant\.com/.*\&q=([^&]*).*"->"\1"
+"^http://api\.qwant\.com/.*\?q=([^&]*)"->"\1"
+"^http://api\.qwant\.com/.*\&q=([^&]*)"->"\1"
+
+"^http://duckduckgo.com/\?q=([^&]*)\&.*"->"\1"
+"^http://duckduckgo.com/.*\&q=([^&]*).*"->"\1"
+"^http://duckduckgo.com/\?q=([^&]*)"->"\1"
+"^http://duckduckgo.com/.*\&q=([^&]*)"->"\1"
+
+"^http://[0-9a-z]+\.youtube\.[a-z]+[-/%.0-9a-z]*\?search_query=([^&]*).*"->"\1"
+
+"^http://[0-9a-z]+\.yahoo\.[a-z]+[-/%.0-9a-z]*/search[^?]*\?p=([^&]*).*"->"\1"
+"^http://[0-9a-z]+\.yahoo\.[a-z]+[-/%.0-9a-z]*/search[^?]*.*\&p=([^&]*).*"->"\1"
+
+"^http://[0-9a-z]+\.answers\.[a-z]+[-/%.0-9a-z]*\?s=([^&]*)\&.*"->"\1"
+"^http://www\.answers\.[a-z]+[-%.0-9a-z]*/([^&]*).*"->"\1"
+
+"^http://[0-9a-z]+\.bing\.com[-/%.0-9a-z]*/search\?q=([^&]*).*"->"\1"
+"^http://[0-9a-z]+\.bing\.com[-/%.0-9a-z]*\&q=([^&]*).*"->"\1"
+