diff options
| -rwxr-xr-x | net/firewall/arno-iptables-firewall/arno-iptables-firewall.SlackBuild | 156 |
1 files changed, 156 insertions, 0 deletions
diff --git a/net/firewall/arno-iptables-firewall/arno-iptables-firewall.SlackBuild b/net/firewall/arno-iptables-firewall/arno-iptables-firewall.SlackBuild new file mode 100755 index 00000000..3d2b4bd9 --- /dev/null +++ b/net/firewall/arno-iptables-firewall/arno-iptables-firewall.SlackBuild @@ -0,0 +1,156 @@ +#!/bin/bash +# +# SlackBuild for arno-iptables-firewall +# http://rocky.eld.leidenuniv.nl/page/iptables/iptframe.htm +# +# Author: Luis ( luis at riseup d0t net ) +# + +CWD=`pwd` + +# Look for slackbuildrc +if [ -f ~/.slackbuildrc ]; then + source ~/.slackbuildrc +elif [ -f /etc/slackbuildrc ]; then + source /etc/slackbuildrc +fi + +# Set variables +SRC_NAME="arno-iptables-firewall" +PKG_NAME="arno-iptables-firewall" +ARCH="noarch" +VERSION=${VERSION:=1.8.8g} +BUILD=${BUILD:=1ls} +SRC_DIR=${SRC_DIR:=$CWD} +TMP=${TMP:=/tmp} +PKG=${PKG:=$TMP/package-$PKG_NAME} +REPOS=${REPOS:=$TMP} +PREFIX=${PREFIX:=/usr} +PKG_SRC="$SRC_DIR/${SRC_NAME}_$VERSION" + +# Set error codes (used by createpkg) +ERROR_WGET=31; ERROR_MAKE=32; ERROR_INSTALL=33 +ERROR_MD5=34; ERROR_CONF=35; ERROR_HELP=36 +ERROR_TAR=37; ERROR_MKPKG=38; ERROR_GPG=39 +ERROR_PATCH=40; ERROR_VCS=41; ERROR_MKDIR=42 + +# Clean up any leftovers of previous builds +rm -rf "$PKG_SRC" 2> /dev/null +rm -rf "$PKG" 2> /dev/null + +# Create directories, if necessary +mkdir -p "$SRC_DIR" || exit $ERROR_MKDIR +mkdir -p "$PKG" || exit $ERROR_MKDIR +mkdir -p "$REPOS" || exit $ERROR_MKDIR + +# Dowload source, if necessary +SRC="${SRC_NAME}_$VERSION.tar.gz" +URL="http://rocky.eld.leidenuniv.nl/iptables-firewall/$SRC" + +if [ ! -f "$SRC_DIR/$SRC" ] || ! gzip -t "$SRC_DIR/$SRC" 2> /dev/null; then + wget "$URL" -O "$SRC_DIR/$SRC" || exit $ERROR_WGET +fi + +# Untar and install +cd "$SRC_DIR" +tar --no-same-owner --no-same-permissions -xvf "$SRC_DIR/$SRC" || exit $ERROR_TAR +cd "$PKG_SRC" +mkdir -p "$PKG/etc/rc.d" || exit $ERROR_MKDIR +mkdir -p "$PKG/$PREFIX/bin" || exit $ERROR_MKDIR +mkdir -p "$PKG/$PREFIX/man/man1" || exit $ERROR_MKDIR +mkdir -p "$PKG/$PREFIX/man/man8" || exit $ERROR_MKDIR +cp -a arno-iptables-firewall "$PKG/etc/rc.d/rc.firewall.new" +cp -a etc/arno-iptables-firewall "$PKG/etc" +cp -a Slackware/syslog.conf "$PKG/etc/syslog.conf.new" +cp -a arno-fwfilter "$PKG/$PREFIX/bin" +cp -a man/arno-fwfilter.1 "$PKG/$PREFIX/man/man1" +cp -a man/arno-iptables-firewall.8 "$PKG/$PREFIX/man/man8" +mv -f "$PKG/etc/arno-iptables-firewall/firewall.conf" \ + "$PKG/etc/arno-iptables-firewall/firewall.conf.new" +mv -f "$PKG/etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf" \ + "$PKG/etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf.new" + +# Compress and link manpages +if [ -d "$PKG/$PREFIX/man" ]; then + ( cd "$PKG/$PREFIX/man" + for manpagedir in $(find . -type d -name "man*") ; do + ( cd $manpagedir + for eachpage in $( find . -type l -maxdepth 1) ; do + ln -s $( readlink $eachpage ).gz $eachpage.gz + rm $eachpage + done + gzip -9 *.? + ) + done + ) +fi + +# Install documentation +DOCS="CHANGELOG README gpl_license.txt" +mkdir -p "$PKG/$PREFIX/doc/$PKG_NAME-$VERSION" || exit $ERROR_MKDIR +cp -a $DOCS "$PKG/$PREFIX/doc/$PKG_NAME-$VERSION" + +# Add package description (slack-desc) +mkdir -p "$PKG/install" || exit $ERROR_MKDIR +cat << EODESC > "$PKG/install/slack-desc" +# HOW TO EDIT THIS FILE: +# The "handy ruler" below makes it easier to edit a package description. Line +# up the first '|' above the ':' following the base package name, and the '|' +# on the right side marks the last column you can put a character in. You must +# make exactly 11 lines for the formatting to be correct. It's also +# customary to leave one space after the ':'. + + |-----handy-ruler----------------------------------------| +arno-iptables-firewall: arno-iptables-firewall (Arno's iptables firewall) +arno-iptables-firewall: +arno-iptables-firewall: A highly customizable iptables firewall script, +arno-iptables-firewall: featuring stealth scan detection, extensive user- +arno-iptables-firewall: definable logging, masquerading and port forwarding +arno-iptables-firewall: (NAT), protection against SYN/ICMP flooding, etc. +arno-iptables-firewall: It also includes a filter script (arno-fwfilter) to +arno-iptables-firewall: make its logs more easily readable. +arno-iptables-firewall: +arno-iptables-firewall: For more information, http://rocky.eld.leidenuniv.nl/ +arno-iptables-firewall: +EODESC + +# Add a post-installation script (doinst.sh) +cat << EOSCRIPT > "$PKG/install/doinst.sh" +config() { + NEW="\$1" + OLD="\$(dirname \$NEW)/\$(basename \$NEW .new)" + # If there's no config file by that name, mv it over: + if [ ! -r \$OLD ]; then + mv \$NEW \$OLD + elif [ "\$(cat \$OLD | md5sum)" = "\$(cat \$NEW | md5sum)" ]; then + # toss the redundant copy + rm \$NEW + fi + # Otherwise, we leave the .new copy for the admin to consider... +} + +config etc/rc.d/rc.firewall.new +config etc/arno-iptables-firewall/firewall.conf.new +config etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf.new +config etc/syslog.conf.new + +echo +echo " Remember to check the .new files (if any), specially:" +echo +echo " /etc/rc.d/rc.firewall.new" +echo " /etc/arno-iptables-firewall/firewall.conf.new" +echo " /etc/syslog.conf.new" +echo +echo " Also, firewall.conf *has* to be properly configured for" +echo " this firewall to work." +echo +EOSCRIPT + +# Build the package +cd "$PKG" +makepkg -l y -c n "$REPOS/$PKG_NAME-$VERSION-$ARCH-$BUILD.tgz" || exit $ERROR_MKPKG + +# Delete source and build directories, if requested +if [ "$CLEANUP" == "yes" ]; then + rm -rf "$PKG_SRC" "$PKG" +fi |