1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
|
#!/bin/bash
#
# SlackBuild for arno-iptables-firewall
# http://rocky.eld.leidenuniv.nl/page/iptables/iptframe.htm
#
# Author: Luis ( luis at riseup d0t net )
#
CWD=`pwd`
# Look for slackbuildrc
if [ -f ~/.slackbuildrc ]; then
source ~/.slackbuildrc
elif [ -f /etc/slackbuildrc ]; then
source /etc/slackbuildrc
fi
# Set variables
SRC_NAME="arno-iptables-firewall"
PKG_NAME="arno-iptables-firewall"
ARCH="noarch"
VERSION=${VERSION:=1.8.8g}
BUILD=${BUILD:=1ls}
SRC_DIR=${SRC_DIR:=$CWD}
TMP=${TMP:=/tmp}
PKG=${PKG:=$TMP/package-$PKG_NAME}
REPOS=${REPOS:=$TMP}
PREFIX=${PREFIX:=/usr}
PKG_SRC="$SRC_DIR/${SRC_NAME}_$VERSION"
# Set error codes (used by createpkg)
ERROR_WGET=31; ERROR_MAKE=32; ERROR_INSTALL=33
ERROR_MD5=34; ERROR_CONF=35; ERROR_HELP=36
ERROR_TAR=37; ERROR_MKPKG=38; ERROR_GPG=39
ERROR_PATCH=40; ERROR_VCS=41; ERROR_MKDIR=42
# Clean up any leftovers of previous builds
rm -rf "$PKG_SRC" 2> /dev/null
rm -rf "$PKG" 2> /dev/null
# Create directories, if necessary
mkdir -p "$SRC_DIR" || exit $ERROR_MKDIR
mkdir -p "$PKG" || exit $ERROR_MKDIR
mkdir -p "$REPOS" || exit $ERROR_MKDIR
# Dowload source, if necessary
SRC="${SRC_NAME}_$VERSION.tar.gz"
URL="http://rocky.eld.leidenuniv.nl/iptables-firewall/$SRC"
if [ ! -s "$SRC_DIR/$SRC" ] || ! gzip -t "$SRC_DIR/$SRC" 2> /dev/null; then
wget "$URL" -O "$SRC_DIR/$SRC" || exit $ERROR_WGET
fi
# Untar and install
cd "$SRC_DIR"
tar --no-same-owner --no-same-permissions -xvf "$SRC_DIR/$SRC" || exit $ERROR_TAR
cd "$PKG_SRC"
mkdir -p "$PKG/etc/rc.d" || exit $ERROR_MKDIR
mkdir -p "$PKG/etc/logrotate.d" || exit $ERROR_MKDIR
mkdir -p "$PKG/$PREFIX/bin" || exit $ERROR_MKDIR
mkdir -p "$PKG/$PREFIX/man/man1" || exit $ERROR_MKDIR
mkdir -p "$PKG/$PREFIX/man/man8" || exit $ERROR_MKDIR
cp -a arno-iptables-firewall "$PKG/etc/rc.d/rc.firewall.new"
cp -a etc/arno-iptables-firewall "$PKG/etc"
cp -a Slackware/syslog.conf "$PKG/etc/syslog.conf.new"
cp -a "$CWD/syslog.new" "$PKG/etc/logrotate.d"
cp -a arno-fwfilter "$PKG/$PREFIX/bin"
cp -a man/arno-fwfilter.1 "$PKG/$PREFIX/man/man1"
cp -a man/arno-iptables-firewall.8 "$PKG/$PREFIX/man/man8"
mv -f "$PKG/etc/arno-iptables-firewall/firewall.conf" \
"$PKG/etc/arno-iptables-firewall/firewall.conf.new"
mv -f "$PKG/etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf" \
"$PKG/etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf.new"
# Compress and link manpages
if [ -d "$PKG/$PREFIX/man" ]; then
( cd "$PKG/$PREFIX/man"
for manpagedir in $(find . -type d -name "man*") ; do
( cd $manpagedir
for eachpage in $( find . -type l -maxdepth 1) ; do
ln -s $( readlink $eachpage ).gz $eachpage.gz
rm $eachpage
done
gzip -9 *.?
)
done
)
fi
# Install documentation
DOCS="CHANGELOG README gpl_license.txt"
mkdir -p "$PKG/$PREFIX/doc/$PKG_NAME-$VERSION" || exit $ERROR_MKDIR
cp -a $DOCS "$PKG/$PREFIX/doc/$PKG_NAME-$VERSION"
# Add package description (slack-desc)
mkdir -p "$PKG/install" || exit $ERROR_MKDIR
cat << EODESC > "$PKG/install/slack-desc"
# HOW TO EDIT THIS FILE:
# The "handy ruler" below makes it easier to edit a package description. Line
# up the first '|' above the ':' following the base package name, and the '|'
# on the right side marks the last column you can put a character in. You must
# make exactly 11 lines for the formatting to be correct. It's also
# customary to leave one space after the ':'.
|-----handy-ruler----------------------------------------|
arno-iptables-firewall: arno-iptables-firewall (Arno's iptables firewall)
arno-iptables-firewall:
arno-iptables-firewall: A highly customizable iptables firewall script,
arno-iptables-firewall: featuring stealth scan detection, extensive user-
arno-iptables-firewall: definable logging, masquerading and port forwarding
arno-iptables-firewall: (NAT), protection against SYN/ICMP flooding, etc.
arno-iptables-firewall: It also includes a filter script (arno-fwfilter) to
arno-iptables-firewall: make its logs more easily readable.
arno-iptables-firewall:
arno-iptables-firewall: For more information, http://rocky.eld.leidenuniv.nl/
arno-iptables-firewall:
EODESC
# Add a post-installation script (doinst.sh)
cat << EOSCRIPT > "$PKG/install/doinst.sh"
config() {
NEW="\$1"
OLD="\$(dirname \$NEW)/\$(basename \$NEW .new)"
# If there's no config file by that name, mv it over:
if [ ! -r \$OLD ]; then
mv \$NEW \$OLD
elif [ "\$(cat \$OLD | md5sum)" = "\$(cat \$NEW | md5sum)" ]; then
# toss the redundant copy
rm \$NEW
fi
# Otherwise, we leave the .new copy for the admin to consider...
}
config etc/rc.d/rc.firewall.new
config etc/arno-iptables-firewall/firewall.conf.new
config etc/arno-iptables-firewall/plugins/ssh-brute-force-protection.conf.new
config etc/syslog.conf.new
config etc/logrotate.d/syslog.new
echo
echo " Remember to check the .new files (if any), specially:"
echo
echo " /etc/rc.d/rc.firewall.new"
echo " /etc/arno-iptables-firewall/firewall.conf.new"
echo " /etc/syslog.conf.new"
echo " /etc/logrotate.d/syslog.new"
echo
echo " Also, firewall.conf *has* to be properly configured for"
echo " this firewall to work."
echo
EOSCRIPT
# Build the package
cd "$PKG"
makepkg -l y -c n "$REPOS/$PKG_NAME-$VERSION-$ARCH-$BUILD.tgz" || exit $ERROR_MKPKG
# Delete source and build directories, if requested
if [ "$CLEANUP" == "yes" ]; then
rm -rf "$PKG_SRC" "$PKG"
fi
|
