# $FreeBSD$

# $FreeBSD$

PORTNAME=	softether

PORTNAME=	softether

CATEGORIES=	security

CATEGORIES=	security

MAINTAINER=	net@arrishq.net

MAINTAINER=	net@arrishq.net

COMMENT=	Softether VPN solution

COMMENT=	Softether VPN solution

		src/Cedar/Client.h \

		src/Cedar/Client.h \

		src/Cedar/Nat.h \

		src/Cedar/Nat.h \

		src/Cedar/Server.c \

		src/Cedar/Server.c \

		src/Mayaqua/Cfg.c \

		src/Mayaqua/Cfg.c \

		src/Mayaqua/Cfg.h \

		src/Mayaqua/Cfg.h \

		src/Mayaqua/Network.c \

		src/Mayaqua/Network.c \

		src/Mayaqua/Table.h \

		src/Mayaqua/Table.h \

		src/Mayaqua/Unix.c

		src/Mayaqua/Unix.c

USE_OPENSSL=	yes

USE_OPENSSL=	yes

USES=		dos2unix gmake iconv:wchar_t ncurses readline

USES=		dos2unix gmake iconv:wchar_t ncurses readline

SUB_FILES=	vpncmd

SUB_FILES=	vpncmd

MAKE_JOBS_UNSAFE=	yes

MAKE_JOBS_UNSAFE=	yes

# a pity the source directory has such a naming scheme, but well

# a pity the source directory has such a naming scheme, but well

ALL_TARGET=	build

ALL_TARGET=	build

	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/${PORTNAME}/${i}

	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/${PORTNAME}/${i}

.endfor

.endfor

	@${MKDIR} ${STAGEDIR}${DOCSDIR}

	@${MKDIR} ${STAGEDIR}${DOCSDIR}

.for doc in ${PORTDOCS}

.for doc in ${PORTDOCS}

	${INSTALL_DATA} ${WRKSRC}/${doc} ${STAGEDIR}${DOCSDIR}

	${INSTALL_DATA} ${WRKSRC}/${doc} ${STAGEDIR}${DOCSDIR}

.endfor

.endfor

 #define	LOG_ENGINE_BUFFER_CACHE_SIZE_MAX	(10 * 1024 * 1024)	// Write cache size

 #define	LOG_ENGINE_BUFFER_CACHE_SIZE_MAX	(10 * 1024 * 1024)	// Write cache size

 // Constant such as a file name

 // Constant such as a file name

-#define	SERVER_LOG_DIR_NAME			"@server_log"

-#define	SERVER_LOG_DIR_NAME			"@server_log"

 #define	BRIDGE_LOG_DIR_NAME			SERVER_LOG_DIR_NAME

 #define	BRIDGE_LOG_DIR_NAME			SERVER_LOG_DIR_NAME

 #define	SERVER_LOG_PERFIX			"vpn"

 #define	SERVER_LOG_PERFIX			"vpn"

-#define	HUB_SECURITY_LOG_DIR_NAME	"@security_log"

-#define	HUB_SECURITY_LOG_DIR_NAME	"@security_log"

-#define	HUB_SECURITY_LOG_FILE_NAME	"@security_log/%s"

-#define	HUB_SECURITY_LOG_FILE_NAME	"@security_log/%s"

 #define	HUB_SECURITY_LOG_PREFIX		"sec"

 #define	HUB_SECURITY_LOG_PREFIX		"sec"

-#define	HUB_PACKET_LOG_DIR_NAME		"@packet_log"

-#define	HUB_PACKET_LOG_DIR_NAME		"@packet_log"

-#define	HUB_PACKET_LOG_FILE_NAME	"@packet_log/%s"

-#define	HUB_PACKET_LOG_FILE_NAME	"@packet_log/%s"

 #define	HUB_PACKET_LOG_PREFIX		"pkt"

 #define	HUB_PACKET_LOG_PREFIX		"pkt"

-#define	NAT_LOG_DIR_NAME			"@secure_nat_log"

-#define	NAT_LOG_DIR_NAME			"@secure_nat_log"

-#define	NAT_LOG_FILE_NAME			"@secure_nat_log/%s"

-#define	NAT_LOG_FILE_NAME			"@secure_nat_log/%s"

 #define	NAT_LOG_PREFIX				"snat"

 #define	NAT_LOG_PREFIX				"snat"

-#define	CLIENT_LOG_DIR_NAME			"@client_log"

-#define	CLIENT_LOG_DIR_NAME			"@client_log"

 #define	CLIENT_LOG_PREFIX			"client"

 #define	CLIENT_LOG_PREFIX			"client"

 // Packet log settings

 // Packet log settings

 // Simple log

 // Simple log

-#define TINY_LOG_DIRNAME			"@tiny_log"

-#define TINY_LOG_DIRNAME			"@tiny_log"

-#define TINY_LOG_FILENAME			"@tiny_log/%04u%02u%02u_%02u%02u%02u.log"

-#define TINY_LOG_FILENAME			"@tiny_log/%04u%02u%02u_%02u%02u%02u.log"

 //////////////////////////////////////////////////////////////////////

 //////////////////////////////////////////////////////////////////////

 //#define CE_SNAPSHOT_INTERVAL		((UINT64)(3000))

 //#define CE_SNAPSHOT_INTERVAL		((UINT64)(3000))

 #define CE_SNAPSHOT_POLLING_INTERVAL	(1 * 1000)

 #define CE_SNAPSHOT_POLLING_INTERVAL	(1 * 1000)

 #define CE_SNAPSHOT_POLLING_INTERVAL_LICENSE	(30 * 1000)

 #define CE_SNAPSHOT_POLLING_INTERVAL_LICENSE	(30 * 1000)

-#define CE_SNAPSHOT_DIR_NAME		"@carrier_log"

-#define CE_SNAPSHOT_DIR_NAME		"@carrier_log"

 #define CE_SNAPSHOT_PREFIX			"carrier"

 #define CE_SNAPSHOT_PREFIX			"carrier"

 // Expiration date of random size cache

 // Expiration date of random size cache

 #define	RAND_SIZE_CACHE_EXPIRE		(24 * 60 * 60 * 1000)

 #define	RAND_SIZE_CACHE_EXPIRE		(24 * 60 * 60 * 1000)

 // Management allowed IP address list file name

 // Management allowed IP address list file name

 #define NON_SSL_MIN_COUNT			60

 #define NON_SSL_MIN_COUNT			60

 #define NON_SSL_ENTRY_EXPIRES		(10 * 60 * 1000)

 #define NON_SSL_ENTRY_EXPIRES		(10 * 60 * 1000)

 //////////////////////////////////////////////////////////////////////

 //////////////////////////////////////////////////////////////////////

 #define	EL_ADMIN_PORT			22888

 #define	EL_ADMIN_PORT			22888

-#define	EL_PACKET_LOG_DIR_NAME	"@etherlogger_log"

-#define	EL_PACKET_LOG_DIR_NAME	"@etherlogger_log"

-#define	EL_PACKET_LOG_FILE_NAME	"@etherlogger_log/%s"

-#define	EL_PACKET_LOG_FILE_NAME	"@etherlogger_log/%s"

+#define	EL_CONFIG_FILENAME		"/var/db/softether/etherlogger.config"

+#define	EL_CONFIG_FILENAME		"/var/db/softether/etherlogger.config"

 #define	EL_PACKET_LOG_PREFIX	"pkt"

 #define	EL_PACKET_LOG_PREFIX	"pkt"

 #define	EL_LICENSE_CHECK_SPAN	(10 * 1000)

 #define	EL_LICENSE_CHECK_SPAN	(10 * 1000)

@@ -125,7 +125,7 @@

@@ -125,7 +125,7 @@

@@ -115,7 +115,7 @@

@@ -115,7 +115,7 @@

 #define	NAT_H

 #define	NAT_H

@@ -115,12 +115,12 @@

@@ -115,12 +115,12 @@

 static SERVER *server = NULL;

 static SERVER *server = NULL;

 static bool server_reset_setting = false;

 static bool server_reset_setting = false;

 	}

 	}

 	// Determine the directory name

 	// Determine the directory name

 // Macro

 // Macro

 //#define	CHECK_CFG_NAME_EXISTS			// Check duplication of the existing name

 //#define	CHECK_CFG_NAME_EXISTS			// Check duplication of the existing name

 		msg = "Unknown Error";

 		msg = "Unknown Error";

 	}

 	}

 #define	UNICODE_CACHE_FILE		L".unicode_cache_%s.dat"

 #define	UNICODE_CACHE_FILE		L".unicode_cache_%s.dat"

 #define	LANGLIST_FILENAME		"|languages.txt"

 #define	LANGLIST_FILENAME		"|languages.txt"

 	GetExeDir(dir, sizeof(dir));

 	GetExeDir(dir, sizeof(dir));

 	// File name generation

 	// File name generation

 	fd = open(name, O_WRONLY);

 	fd = open(name, O_WRONLY);

 	if (fd == -1)

 	if (fd == -1)

 	Hash(hash, exe_name, StrLen(exe_name), false);

 	Hash(hash, exe_name, StrLen(exe_name), false);

 	BinToStr(tmp1, sizeof(tmp1), hash, sizeof(hash));

 	BinToStr(tmp1, sizeof(tmp1), hash, sizeof(hash));

-	Format(name, size, "%s/.pid_%s", dir, tmp1);

-	Format(name, size, "%s/.pid_%s", dir, tmp1);

 }

 }

 // Delete the PID file

 // Delete the PID file

 	Hash(hash, exe_name, StrLen(exe_name), false);

 	Hash(hash, exe_name, StrLen(exe_name), false);

 	BinToStr(tmp1, sizeof(tmp1), hash, sizeof(hash));

 	BinToStr(tmp1, sizeof(tmp1), hash, sizeof(hash));

To run softether vpn bridge from startup, add

To run softether vpn bridge from startup, add

softether_bridge_enable="YES" in your rc.conf.

softether_bridge_enable="YES" in your rc.conf.

Initial and further configuration of all softether services can be

Initial and further configuration of all softether services can be

done either by using a Windows client to connect to the running

done either by using a Windows client to connect to the running

services or by vpncmd from command line.

services or by vpncmd from command line.

When removing SoftEther VPN without the desire to reinstall, please

When removing SoftEther VPN without the desire to reinstall, please

ensure to remove the directory /var/db/softether as well.

ensure to remove the directory /var/db/softether as well.

libexec/softether/vpnserver

libexec/softether/vpnserver

sbin/vpncmd

sbin/vpncmd

@dir libexec/softether

@dir libexec/softether