aboutsummaryrefslogtreecommitdiff
path: root/net
diff options
context:
space:
mode:
Diffstat (limited to 'net')
-rwxr-xr-xnet/firewall/arno-iptables-firewall/arno-iptables-firewall.SlackBuild156
1 files changed, 156 insertions, 0 deletions
diff --git a/net/firewall/arno-iptables-firewall/arno-iptables-firewall.SlackBuild b/net/firewall/arno-iptables-firewall/arno-iptables-firewall.SlackBuild
new file mode 100755
index 00000000..3d2b4bd9
--- /dev/null
+++ b/net/firewall/arno-iptables-firewall/arno-iptables-firewall.SlackBuild
@@ -0,0 +1,156 @@
+#!/bin/bash
+#
+# SlackBuild for arno-iptables-firewall
+# http://rocky.eld.leidenuniv.nl/page/iptables/iptframe.htm
+#
+# Author: Luis ( luis at riseup d0t net )
+#
+
+CWD=`pwd`
+
+# Look for slackbuildrc
+if [ -f ~/.slackbuildrc ]; then
+ source ~/.slackbuildrc
+elif [ -f /etc/slackbuildrc ]; then
+ source /etc/slackbuildrc
+fi
+
+# Set variables
+SRC_NAME="arno-iptables-firewall"
+PKG_NAME="arno-iptables-firewall"
+ARCH="noarch"
+VERSION=${VERSION:=1.8.8g}
+BUILD=${BUILD:=1ls}
+SRC_DIR=${SRC_DIR:=$CWD}
+TMP=${TMP:=/tmp}
+PKG=${PKG:=$TMP/package-$PKG_NAME}
+REPOS=${REPOS:=$TMP}
+PREFIX=${PREFIX:=/usr}
+PKG_SRC="$SRC_DIR/${SRC_NAME}_$VERSION"
+
+# Set error codes (used by createpkg)
+ERROR_WGET=31; ERROR_MAKE=32; ERROR_INSTALL=33
+ERROR_MD5=34; ERROR_CONF=35; ERROR_HELP=36
+ERROR_TAR=37; ERROR_MKPKG=38; ERROR_GPG=39
+ERROR_PATCH=40; ERROR_VCS=41; ERROR_MKDIR=42
+
+# Clean up any leftovers of previous builds
+rm -rf "$PKG_SRC" 2> /dev/null
+rm -rf "$PKG" 2> /dev/null
+
+# Create directories, if necessary
+mkdir -p "$SRC_DIR" || exit $ERROR_MKDIR
+mkdir -p "$PKG" || exit $ERROR_MKDIR
+mkdir -p "$REPOS" || exit $ERROR_MKDIR
+
+# Dowload source, if necessary
+SRC="${SRC_NAME}_$VERSION.tar.gz"
+URL="http://rocky.eld.leidenuniv.nl/iptables-firewall/$SRC"
+
+if [ ! -f "$SRC_DIR/$SRC" ] || ! gzip -t "$SRC_DIR/$SRC" 2> /dev/null; then
+ wget "$URL" -O "$SRC_DIR/$SRC" || exit $ERROR_WGET
+fi
+
+# Untar and install
+cd "$SRC_DIR"
+tar --no-same-owner --no-same-permissions -xvf "$SRC_DIR/$SRC" || exit $ERROR_TAR
+cd "$PKG_SRC"
+mkdir -p "$PKG/etc/rc.d" || exit $ERROR_MKDIR
+mkdir -p "$PKG/$PREFIX/bin" || exit $ERROR_MKDIR
+mkdir -p "$PKG/$PREFIX/man/man1" || exit $ERROR_MKDIR
+mkdir -p "$PKG/$PREFIX/man/man8" || exit $ERROR_MKDIR
+cp -a arno-iptables-firewall "$PKG/etc/rc.d/rc.firewall.new"
+cp -a etc/arno-iptables-firewall "$PKG/etc"
+cp -a Slackware/syslog.conf "$PKG/etc/syslog.conf.new"
+cp -a arno-fwfilter "$PKG/$PREFIX/bin"
+cp -a man/arno-fwfilter.1 "$PKG/$PREFIX/man/man1"
+cp -a man/arno-iptables-firewall.8 "$PKG/$PREFIX/man/man8"
+mv -f "$PKG/etc/arno-iptables-firewall/firewall.conf" \
+ "$PKG/etc/arno-iptables-firewall/firewall.conf.new"
+mv -f "$PKG/etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf" \
+ "$PKG/etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf.new"
+
+# Compress and link manpages
+if [ -d "$PKG/$PREFIX/man" ]; then
+ ( cd "$PKG/$PREFIX/man"
+ for manpagedir in $(find . -type d -name "man*") ; do
+ ( cd $manpagedir
+ for eachpage in $( find . -type l -maxdepth 1) ; do
+ ln -s $( readlink $eachpage ).gz $eachpage.gz
+ rm $eachpage
+ done
+ gzip -9 *.?
+ )
+ done
+ )
+fi
+
+# Install documentation
+DOCS="CHANGELOG README gpl_license.txt"
+mkdir -p "$PKG/$PREFIX/doc/$PKG_NAME-$VERSION" || exit $ERROR_MKDIR
+cp -a $DOCS "$PKG/$PREFIX/doc/$PKG_NAME-$VERSION"
+
+# Add package description (slack-desc)
+mkdir -p "$PKG/install" || exit $ERROR_MKDIR
+cat << EODESC > "$PKG/install/slack-desc"
+# HOW TO EDIT THIS FILE:
+# The "handy ruler" below makes it easier to edit a package description. Line
+# up the first '|' above the ':' following the base package name, and the '|'
+# on the right side marks the last column you can put a character in. You must
+# make exactly 11 lines for the formatting to be correct. It's also
+# customary to leave one space after the ':'.
+
+ |-----handy-ruler----------------------------------------|
+arno-iptables-firewall: arno-iptables-firewall (Arno's iptables firewall)
+arno-iptables-firewall:
+arno-iptables-firewall: A highly customizable iptables firewall script,
+arno-iptables-firewall: featuring stealth scan detection, extensive user-
+arno-iptables-firewall: definable logging, masquerading and port forwarding
+arno-iptables-firewall: (NAT), protection against SYN/ICMP flooding, etc.
+arno-iptables-firewall: It also includes a filter script (arno-fwfilter) to
+arno-iptables-firewall: make its logs more easily readable.
+arno-iptables-firewall:
+arno-iptables-firewall: For more information, http://rocky.eld.leidenuniv.nl/
+arno-iptables-firewall:
+EODESC
+
+# Add a post-installation script (doinst.sh)
+cat << EOSCRIPT > "$PKG/install/doinst.sh"
+config() {
+ NEW="\$1"
+ OLD="\$(dirname \$NEW)/\$(basename \$NEW .new)"
+ # If there's no config file by that name, mv it over:
+ if [ ! -r \$OLD ]; then
+ mv \$NEW \$OLD
+ elif [ "\$(cat \$OLD | md5sum)" = "\$(cat \$NEW | md5sum)" ]; then
+ # toss the redundant copy
+ rm \$NEW
+ fi
+ # Otherwise, we leave the .new copy for the admin to consider...
+}
+
+config etc/rc.d/rc.firewall.new
+config etc/arno-iptables-firewall/firewall.conf.new
+config etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf.new
+config etc/syslog.conf.new
+
+echo
+echo " Remember to check the .new files (if any), specially:"
+echo
+echo " /etc/rc.d/rc.firewall.new"
+echo " /etc/arno-iptables-firewall/firewall.conf.new"
+echo " /etc/syslog.conf.new"
+echo
+echo " Also, firewall.conf *has* to be properly configured for"
+echo " this firewall to work."
+echo
+EOSCRIPT
+
+# Build the package
+cd "$PKG"
+makepkg -l y -c n "$REPOS/$PKG_NAME-$VERSION-$ARCH-$BUILD.tgz" || exit $ERROR_MKPKG
+
+# Delete source and build directories, if requested
+if [ "$CLEANUP" == "yes" ]; then
+ rm -rf "$PKG_SRC" "$PKG"
+fi