kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/www/e2guardian/PLIST
sborrill 0237e17be3 e2guardian: update to 5.1.1 
Note that large sections of the code has been re-written and there are
significant changes to the configuration files in this release.

The v5 is written in c++11 and so to compile it you will need gcc v5.4
or later. (or another complier that supports the full c++11).
Note that the target systems may also need an c++11 library update.

REVISED LIST and STORYBOARDING MODEL

Version 5 has a completely revised model for defining and using lists.

List definition is now separated from list application. Lists are no longer
hard-coded, but mapped to a function using a storyboard.

Filtering logic flow is simplified and made more consistent.  Requests are
analysed first and flags set (exception, grey, blocked etc) and once this
checking is complete actions are taken.  Large sections of duplicate logic
has been removed from ConnectionHandler and large sections are now
separate functions.

Storyboarding is a simple scripting language that maps lists to functions
and allows flags to be set.

This means that new lists can be added without changing the code, by adding
a new list definition and then applying it in a revised storyboard.

A different storyboard can be applied to each filtergroup, so if required,
each filtergroup can have a different logic flow.

Please read notes/V5_list_definition.pdf & notes/V5_Storyboard.pdf for
details.

TRANSPARENT HTTPS

    Detects SNI and flags whether traffic is TLS.
    Currently limited to port 443 traffic.

ICAP SERVER

    REQMOD and RESPMOD mode supported.
    See notes/icap.

DIRECT UPSTREAM ACCESS I.e. not via proxy.

    To implement globaly comment out 'proxyip =' in e2guardian.conf.

    The storyboard action setgodirect can be used within checkrequest functions
    to enable selected protocols/site/urls to godirect.
    e.g. to send all connect requests directly add
		if(connect) setgodirect
	to a requestchecks function.
    This can be also useful to by-pass squid for some requests (e.g. os update
    sites) when squid authentication methods are being used.

STORYBOARD TRACING

    New option 'storyboardtrace' to enable tracing output -
    for storyboard bug-fixing

READABLE THREAD_ID FOR LOGS & DEBUG

    Most debug and syslog messages are now prefixed with a thread ID as
    follows:-

    master: for master thread

    listen1_proxy:  normal proxy listener
    listen1_thttps: tranparent https listener
    listen1_icap: icap listener

    where '1' is index

    hw10: for http_worker threads where '10' is the thread number

    log: for logging thread

REVISED DEBUG STAGE 1

    The following low level debugs are no longer enabled by DGDEBUG:

    Network sockets - use NETDEBUG instead

    Regular expressions - use REDEBUG instead

    This reduces the volume of information and makes the debug
    log easier to read.

REVISED DEBUG STAGE 2

    New debuglevel option in e2guardian.conf.  Allows some debuging on
    production systems.   Currently just for ICAP and CLAMAV.  Will be
    extended to other sections of code in future releases.

HTTP/1.1

    Support for HTTP v1.1 completed - including Chunked encoding

ANTI-VIRUS PLUGINS

    Anti-virus plugins implimented for proxy, trans and ICAP

INCLUDE FILES IN e2guardianf1.conf

    Filtergroup configuration files may now include other files, enabling
    a more DRY approach to configuration. So configuration common to several
    filtergroups can be placed in a file which is included in the filtergroup
    config file.

    Syntax is same as list includes  -
    .include<full_path_to_file>

    Where single options and list defines with the same name are
    repeated only the last one read will be actioned.  This differs
    from pre-v5 versions where the first single option was actioned and any
    repeats ignored.  This allows the overwriting of single options and
    re-definion of lists in a structured way.

LIST INPUT VIA STDIN

This replaces the totalblocklist in previous versions allowing multiple
lists to be loaded via stdin.  See notes/lists_via_stdin.

OPENSSL v1.1 SUPPORT

    Will now support OpenSSL v1.1 as well as v1.0.2 or above

------------------------------
New in v4 (v4.1).

The v4 is written in c++11 and so to compile it you will need gcc v5.4
or later. (or another complier that supports the c++11 std::thread library).
Note that the target systems may also need an c++11 library update.

REVISED PROCESS MODEL

The parent children process model (which does not scale for very large numbers
of connections) is replaced with a queue/threads based model.

The main thread now only deals with set-up of the logging, listener, and worker
threads, the input (and reinput) of the lists, signals and statistics.

The treads communicate via fi-fo queues within memory and so there is no need
for ipc pipes.

A listener thread is set up for each ip/port combination. They listen for a
connection, accept it and then push the new connection socket on the
appropriate worker queue.

The worker threads pop connections from the worker queue and deal with the
connection.

When a worker wants to log a request it pushes the logging data onto the log
queue. The logging thread will pop the data from the queue, format it and
write it to the log.

Most of the above logic is in FatControler.cpp.  The logic is now much simpler
and has reduced the amount of code in FatControler by over 50%.

Socket classes have been extensively modified to remove interrupt handling (for
list reload etc) and all select calls are removed.  So there is no longer a
need to modify FD_SETSIZE.

New LOptionContainer class has been written to hold list and filter group
setings.   On gentle restart a new LOptionContainer object is created and
loaded with filter group and list settings.   Once fully read in a global
shared pointer is switched from the old list to the new, making actioning
list changes immediate an with no interruption to service.

NOTES FOR PREVIOUS VERSION  - v4.0.1

All pics support has been removed
Mail option not yet implemented.
Url cache not implimented
IP cache not implimented
Auth plugins - tested and working
Scan plugins - some tested
New e2guardian.conf options
   httpworkers
   enablessl
2018-07-16 14:12:34 +00:00

274 lines
15 KiB
Text
Raw Blame History

@comment $NetBSD: PLIST,v 1.5 2018/07/16 14:12:34 sborrill Exp $
man/man8/e2guardian.8
sbin/e2guardian
share/doc/e2guardian/AuthPlugins
share/doc/e2guardian/ContentScanners
share/doc/e2guardian/DownloadManagers
share/doc/e2guardian/FAQ
share/doc/e2guardian/FAQ.html
share/doc/e2guardian/Plugins
share/e2guardian/blockedflash.swf
share/e2guardian/e2guardian.pl
share/e2guardian/languages/arspanish/fancydmtemplate.html
share/e2guardian/languages/arspanish/messages
share/e2guardian/languages/arspanish/template.html
share/e2guardian/languages/bulgarian/fancydmtemplate.html
share/e2guardian/languages/bulgarian/messages
share/e2guardian/languages/bulgarian/template.html
share/e2guardian/languages/chinesebig5/fancydmtemplate.html
share/e2guardian/languages/chinesebig5/messages
share/e2guardian/languages/chinesebig5/template.html
share/e2guardian/languages/chinesegb2312/fancydmtemplate.html
share/e2guardian/languages/chinesegb2312/messages
share/e2guardian/languages/chinesegb2312/template.html
share/e2guardian/languages/czech/fancydmtemplate.html
share/e2guardian/languages/czech/messages
share/e2guardian/languages/czech/template.html
share/e2guardian/languages/danish/fancydmtemplate.html
share/e2guardian/languages/danish/messages
share/e2guardian/languages/danish/template.html
share/e2guardian/languages/dutch/fancydmtemplate.html
share/e2guardian/languages/dutch/messages
share/e2guardian/languages/dutch/template.html
share/e2guardian/languages/french/fancydmtemplate.html
share/e2guardian/languages/french/messages
share/e2guardian/languages/french/template.html
share/e2guardian/languages/german/fancydmtemplate.html
share/e2guardian/languages/german/messages
share/e2guardian/languages/german/template.html
share/e2guardian/languages/hebrew/fancydmtemplate.html
share/e2guardian/languages/hebrew/messages
share/e2guardian/languages/hebrew/template.html
share/e2guardian/languages/hungarian/fancydmtemplate.html
share/e2guardian/languages/hungarian/messages
share/e2guardian/languages/hungarian/template.html
share/e2guardian/languages/indonesian/fancydmtemplate.html
share/e2guardian/languages/indonesian/messages
share/e2guardian/languages/indonesian/template.html
share/e2guardian/languages/italian/fancydmtemplate.html
share/e2guardian/languages/italian/messages
share/e2guardian/languages/italian/template.html
share/e2guardian/languages/japanese/fancydmtemplate.html
share/e2guardian/languages/japanese/messages
share/e2guardian/languages/japanese/template.html
share/e2guardian/languages/lithuanian/fancydmtemplate.html
share/e2guardian/languages/lithuanian/messages
share/e2guardian/languages/lithuanian/template.html
share/e2guardian/languages/malay/fancydmtemplate.html
share/e2guardian/languages/malay/messages
share/e2guardian/languages/malay/template.html
share/e2guardian/languages/mxspanish/fancydmtemplate.html
share/e2guardian/languages/mxspanish/messages
share/e2guardian/languages/mxspanish/template.html
share/e2guardian/languages/polish/fancydmtemplate.html
share/e2guardian/languages/polish/messages
share/e2guardian/languages/polish/template.html
share/e2guardian/languages/portuguese/fancydmtemplate.html
share/e2guardian/languages/portuguese/messages
share/e2guardian/languages/portuguese/template.html
share/e2guardian/languages/ptbrazilian/fancydmtemplate.html
share/e2guardian/languages/ptbrazilian/messages
share/e2guardian/languages/ptbrazilian/template.html
share/e2guardian/languages/russian-1251/fancydmtemplate.html
share/e2guardian/languages/russian-1251/messages
share/e2guardian/languages/russian-1251/template.html
share/e2guardian/languages/russian-koi8-r/fancydmtemplate.html
share/e2guardian/languages/russian-koi8-r/messages
share/e2guardian/languages/russian-koi8-r/template.html
share/e2guardian/languages/slovak/fancydmtemplate.html
share/e2guardian/languages/slovak/messages
share/e2guardian/languages/slovak/template.html
share/e2guardian/languages/spanish/fancydmtemplate.html
share/e2guardian/languages/spanish/messages
share/e2guardian/languages/spanish/template.html
share/e2guardian/languages/swedish/fancydmtemplate.html
share/e2guardian/languages/swedish/messages
share/e2guardian/languages/swedish/template.html
share/e2guardian/languages/turkish/fancydmtemplate.html
share/e2guardian/languages/turkish/messages
share/e2guardian/languages/turkish/template.html
share/e2guardian/languages/ukenglish/fancydmtemplate.html
share/e2guardian/languages/ukenglish/messages
share/e2guardian/languages/ukenglish/template.html
share/e2guardian/scripts/bsd-init
share/e2guardian/scripts/e2guardian
share/e2guardian/scripts/e2guardian.service
share/e2guardian/scripts/logrotation
share/e2guardian/scripts/solaris-init
share/e2guardian/scripts/systemv-init
share/e2guardian/transparent1x1.gif
share/examples/e2guardian/authplugins/ident.conf
share/examples/e2guardian/authplugins/ip.conf
share/examples/e2guardian/authplugins/port.conf
share/examples/e2guardian/authplugins/proxy-basic.conf
share/examples/e2guardian/authplugins/proxy-digest.conf
share/examples/e2guardian/authplugins/proxy-ntlm.conf
${PLIST.clamd}share/examples/e2guardian/contentscanners/clamdscan.conf
${PLIST.cli}share/examples/e2guardian/contentscanners/commandlinescan.conf
${PLIST.icap}share/examples/e2guardian/contentscanners/icapscan.conf
share/examples/e2guardian/common.story
share/examples/e2guardian/downloadmanagers/default.conf
share/examples/e2guardian/e2guardian.conf
share/examples/e2guardian/e2guardianf1.conf
share/examples/e2guardian/examplef1.story
share/examples/e2guardian/lists/addheaderregexplist
share/examples/e2guardian/lists/authexceptioniplist
share/examples/e2guardian/lists/authexceptionsiteiplist
share/examples/e2guardian/lists/authexceptionsitelist
share/examples/e2guardian/lists/authexceptionurllist
share/examples/e2guardian/lists/authplugins/ipgroups
share/examples/e2guardian/lists/authplugins/portgroups
share/examples/e2guardian/lists/bannedclientlist
share/examples/e2guardian/lists/bannedextensionlist
share/examples/e2guardian/lists/bannediplist
share/examples/e2guardian/lists/bannedmimetypelist
share/examples/e2guardian/lists/bannedphraselist
share/examples/e2guardian/lists/bannedregexpheaderlist
share/examples/e2guardian/lists/bannedregexpurllist
share/examples/e2guardian/lists/bannedregexpuseragentlist
share/examples/e2guardian/lists/bannedrooms/default
share/examples/e2guardian/lists/bannedsearchlist
share/examples/e2guardian/lists/bannedsearchoveridelist
share/examples/e2guardian/lists/bannedsiteiplist
share/examples/e2guardian/lists/bannedsitelist
share/examples/e2guardian/lists/bannedsitelistwithbypass
share/examples/e2guardian/lists/bannedsslsiteiplist
share/examples/e2guardian/lists/bannedsslsitelist
share/examples/e2guardian/lists/bannedurllist
share/examples/e2guardian/lists/contentregexplist
${PLIST.avscan}share/examples/e2guardian/lists/contentscanners/exceptionvirusextensionlist
${PLIST.avscan}share/examples/e2guardian/lists/contentscanners/exceptionvirusmimetypelist
${PLIST.avscan}share/examples/e2guardian/lists/contentscanners/exceptionvirussitelist
${PLIST.avscan}share/examples/e2guardian/lists/contentscanners/exceptionvirusurllist
share/examples/e2guardian/lists/embededreferersitelist
share/examples/e2guardian/lists/embededreferersiteiplist
share/examples/e2guardian/lists/embededrefererurllist
share/examples/e2guardian/lists/exceptionclientlist
share/examples/e2guardian/lists/exceptionextensionlist
share/examples/e2guardian/lists/exceptionfilesiteiplist
share/examples/e2guardian/lists/exceptionfilesitelist
share/examples/e2guardian/lists/exceptionfileurllist
share/examples/e2guardian/lists/exceptioniplist
share/examples/e2guardian/lists/exceptionmimetypelist
share/examples/e2guardian/lists/exceptionphraselist
share/examples/e2guardian/lists/exceptionregexpheaderlist
share/examples/e2guardian/lists/exceptionregexpurllist
share/examples/e2guardian/lists/exceptionregexpuseragentlist
share/examples/e2guardian/lists/exceptionsitelist
share/examples/e2guardian/lists/exceptionsiteiplist
share/examples/e2guardian/lists/exceptionurllist
share/examples/e2guardian/lists/filtergroupslist
share/examples/e2guardian/lists/greysitelist
share/examples/e2guardian/lists/greysiteiplist
share/examples/e2guardian/lists/greysslsiteiplist
share/examples/e2guardian/lists/greysslsitelist
share/examples/e2guardian/lists/greyurllist
share/examples/e2guardian/lists/headerregexplist
share/examples/e2guardian/lists/localbannedsearchlist
share/examples/e2guardian/lists/localbannedsiteiplist
share/examples/e2guardian/lists/localbannedsitelist
share/examples/e2guardian/lists/localbannedsslsiteiplist
share/examples/e2guardian/lists/localbannedsslsitelist
share/examples/e2guardian/lists/localbannedurllist
share/examples/e2guardian/lists/localexceptionsiteiplist
share/examples/e2guardian/lists/localexceptionsitelist
share/examples/e2guardian/lists/localexceptionurllist
share/examples/e2guardian/lists/localgreysiteiplist
share/examples/e2guardian/lists/localgreysitelist
share/examples/e2guardian/lists/localgreysslsiteiplist
share/examples/e2guardian/lists/localgreysslsitelist
share/examples/e2guardian/lists/localgreyurllist
share/examples/e2guardian/lists/logregexpurllist
share/examples/e2guardian/lists/logsiteiplist
share/examples/e2guardian/lists/logsitelist
share/examples/e2guardian/lists/logurllist
share/examples/e2guardian/lists/nocheckcertsiteiplist
share/examples/e2guardian/lists/nocheckcertsitelist
share/examples/e2guardian/lists/phraselists/badwords/weighted_dutch
share/examples/e2guardian/lists/phraselists/badwords/weighted_french
share/examples/e2guardian/lists/phraselists/badwords/weighted_german
share/examples/e2guardian/lists/phraselists/badwords/weighted_portuguese
share/examples/e2guardian/lists/phraselists/badwords/weighted_spanish
share/examples/e2guardian/lists/phraselists/chat/weighted
share/examples/e2guardian/lists/phraselists/chat/weighted_italian
share/examples/e2guardian/lists/phraselists/conspiracy/weighted
share/examples/e2guardian/lists/phraselists/domainsforsale/weighted
share/examples/e2guardian/lists/phraselists/drugadvocacy/weighted
share/examples/e2guardian/lists/phraselists/forums/weighted
share/examples/e2guardian/lists/phraselists/gambling/banned
share/examples/e2guardian/lists/phraselists/gambling/banned_portuguese
share/examples/e2guardian/lists/phraselists/gambling/weighted
share/examples/e2guardian/lists/phraselists/gambling/weighted_portuguese
share/examples/e2guardian/lists/phraselists/games/weighted
share/examples/e2guardian/lists/phraselists/goodphrases/exception
share/examples/e2guardian/lists/phraselists/goodphrases/exception_email
share/examples/e2guardian/lists/phraselists/goodphrases/weighted_general
share/examples/e2guardian/lists/phraselists/goodphrases/weighted_general_danish
share/examples/e2guardian/lists/phraselists/goodphrases/weighted_general_dutch
share/examples/e2guardian/lists/phraselists/goodphrases/weighted_general_malay
share/examples/e2guardian/lists/phraselists/goodphrases/weighted_general_polish
share/examples/e2guardian/lists/phraselists/goodphrases/weighted_general_portuguese
share/examples/e2guardian/lists/phraselists/goodphrases/weighted_general_swedish
share/examples/e2guardian/lists/phraselists/goodphrases/weighted_news
share/examples/e2guardian/lists/phraselists/googlesearches/banned
share/examples/e2guardian/lists/phraselists/gore/weighted
share/examples/e2guardian/lists/phraselists/gore/weighted_portuguese
share/examples/e2guardian/lists/phraselists/idtheft/weighted
share/examples/e2guardian/lists/phraselists/illegaldrugs/banned
share/examples/e2guardian/lists/phraselists/illegaldrugs/weighted
share/examples/e2guardian/lists/phraselists/illegaldrugs/weighted_portuguese
share/examples/e2guardian/lists/phraselists/intolerance/banned_portuguese
share/examples/e2guardian/lists/phraselists/intolerance/weighted
share/examples/e2guardian/lists/phraselists/intolerance/weighted_portuguese
share/examples/e2guardian/lists/phraselists/legaldrugs/weighted
share/examples/e2guardian/lists/phraselists/malware/weighted
share/examples/e2guardian/lists/phraselists/music/weighted
share/examples/e2guardian/lists/phraselists/news/weighted
share/examples/e2guardian/lists/phraselists/nudism/weighted
share/examples/e2guardian/lists/phraselists/peer2peer/weighted
share/examples/e2guardian/lists/phraselists/personals/weighted
share/examples/e2guardian/lists/phraselists/personals/weighted_portuguese
share/examples/e2guardian/lists/phraselists/pornography/banned
share/examples/e2guardian/lists/phraselists/pornography/banned_portuguese
share/examples/e2guardian/lists/phraselists/pornography/weighted
share/examples/e2guardian/lists/phraselists/pornography/weighted_chinese
share/examples/e2guardian/lists/phraselists/pornography/weighted_danish
share/examples/e2guardian/lists/phraselists/pornography/weighted_dutch
share/examples/e2guardian/lists/phraselists/pornography/weighted_french
share/examples/e2guardian/lists/phraselists/pornography/weighted_german
share/examples/e2guardian/lists/phraselists/pornography/weighted_italian
share/examples/e2guardian/lists/phraselists/pornography/weighted_japanese
share/examples/e2guardian/lists/phraselists/pornography/weighted_malay
share/examples/e2guardian/lists/phraselists/pornography/weighted_norwegian
share/examples/e2guardian/lists/phraselists/pornography/weighted_polish
share/examples/e2guardian/lists/phraselists/pornography/weighted_portuguese
share/examples/e2guardian/lists/phraselists/pornography/weighted_russian
share/examples/e2guardian/lists/phraselists/pornography/weighted_russian_utf8
share/examples/e2guardian/lists/phraselists/pornography/weighted_spanish
share/examples/e2guardian/lists/phraselists/pornography/weighted_swedish
share/examples/e2guardian/lists/phraselists/proxies/weighted
share/examples/e2guardian/lists/phraselists/rta/banned
share/examples/e2guardian/lists/phraselists/safelabel/banned
share/examples/e2guardian/lists/phraselists/secretsocieties/weighted
share/examples/e2guardian/lists/phraselists/sport/weighted
share/examples/e2guardian/lists/phraselists/translation/weighted
share/examples/e2guardian/lists/phraselists/travel/weighted
share/examples/e2guardian/lists/phraselists/upstreamfilter/weighted
share/examples/e2guardian/lists/phraselists/violence/weighted
share/examples/e2guardian/lists/phraselists/violence/weighted_portuguese
share/examples/e2guardian/lists/phraselists/warezhacking/weighted
share/examples/e2guardian/lists/phraselists/weapons/weighted
share/examples/e2guardian/lists/phraselists/weapons/weighted_portuguese
share/examples/e2guardian/lists/phraselists/webmail/weighted
share/examples/e2guardian/lists/refererexceptionsiteiplist
share/examples/e2guardian/lists/refererexceptionsitelist
share/examples/e2guardian/lists/refererexceptionurllist
share/examples/e2guardian/lists/searchregexplist
share/examples/e2guardian/lists/sslsiteregexplist
share/examples/e2guardian/lists/urlredirectregexplist
share/examples/e2guardian/lists/urlregexplist
share/examples/e2guardian/lists/weightedphraselist
share/examples/e2guardian/preauth.story
share/examples/e2guardian/site.story
@pkgdir share/examples/e2guardian/lists/contentscanners
@pkgdir share/examples/e2guardian/contentscanners
Reference in a new issue View git blame Copy permalink