67 lines
2.2 KiB
Gherkin
67 lines
2.2 KiB
Gherkin
.Include</etc/e2guardian/common.story>
|
|
.Include</etc/e2guardian/site.story>
|
|
|
|
# Add any altered functions for this filtergroup here
|
|
# They will overwrite library or site level definitions
|
|
|
|
# To allow unfiltered access to this group
|
|
# uncomment next 4 lines
|
|
#function(checkrequest)
|
|
#if(true) return setexception
|
|
#function(thttps-checkrequest)
|
|
#if(true) return setexception
|
|
|
|
# To block all access to this group
|
|
# uncomment next 4 lines
|
|
#function(checkrequest)
|
|
#if(true,,105) return setblock
|
|
#function(sslexceptioncheck)
|
|
#function(localsslcheckrequest)
|
|
|
|
# To block all access to this group at certain times
|
|
# define times in bannedtimelist,
|
|
# uncomment the list definition for 'bannedtimes' in e2guardianfn.conf,
|
|
# and uncomment the next 2 lines
|
|
#function(checktimesblocked)
|
|
#if(timein,bannedtimes) return true
|
|
|
|
# Note: Blanket blocks are checked after exceptions
|
|
# and can be used to make a 'walled garden' filtergroup
|
|
|
|
# To create blanket block for http (and MITM https)
|
|
# uncomment next line and one condition line.
|
|
#function(checkblanketblock)
|
|
#if(true,,502) return setblock # = ** total blanket
|
|
#if(siteisip,,505) return setblock # = *ip ip blanket
|
|
|
|
# To use timed blanket block
|
|
# define times in blankettimelist,
|
|
# uncomment the list definition for 'blankettimes' in e2guardianfn.conf,
|
|
# and uncomment the next line
|
|
#if(timein,blankettimes) return setblock
|
|
|
|
# To create blanket block for SSL
|
|
# uncomment next line and one condition line.
|
|
#function(sslcheckblanketblock)
|
|
#if(true,,506) return setblock # = **s total blanket
|
|
#if(siteisip,,507) return setblock # = **ips ip blanket
|
|
|
|
# To limit MITM to sslgreylist
|
|
# replaces onlymitmsslgrey e2guardianf1.conf option
|
|
# uncomment the next 2 lines
|
|
#function(sslcheckmitm)
|
|
#if(true) return sslcheckmitmgreyonly
|
|
|
|
# SNI checking - overrides default action when no SNI or TSL is present on a
|
|
# THTTPS connection
|
|
# To allow (tunnell) non-tls and/or non-sni connections uncomment the next 3 lines
|
|
#function(checksni)
|
|
#ifnot(tls,,511) return setexception # change to setblock to block only non-tls
|
|
#ifnot(hassniset,,512) return setexception
|
|
|
|
# automitm - overrides default action when thttps
|
|
# To disable automitm for trans https uncomment the next 2 lines
|
|
# function(thttps_automitm)
|
|
# if(true) unsetautomitm
|
|
|