Attachment #90722 for bug #127940




# Ports collection makefile for:        ipguard
# Date created:                         6 Oct 2008
# Whom:                                 SeaD
#
# $FreeBSD$
#

PORTNAME=	ipguard
PORTVERSION=	1.00
CATEGORIES=	security net
MASTER_SITES=	http://ipguard.deep.perm.ru/files/ http://deep.perm.ru/files/ipguard/

MAINTAINER=	sead@deep.perm.ru
COMMENT=	Tool designed to protect LAN IP adress space by ARP spoofing

BUILD_DEPENDS=	${LOCALBASE}/lib/libnet11/libnet.a:${PORTSDIR}/net/libnet

USE_RC_SUBR=	${PORTNAME}
MAN8=		${PORTNAME}.8
DOCS=		COPYRIGHT NEWS README README.tcpdump README.log ethers.sample rfc826.txt

MAKE_ARGS+=	ETHERS=${ETHERS}

SUB_FILES=	pkg-message
SUB_LIST=	ETHERS=${ETHERS}

LIBNET_CONFIG?=	${LOCALBASE}/bin/libnet11-config

post-patch:
	@${REINPLACE_CMD} -Ee \
		's|libnet-config|${LIBNET_CONFIG}|; \
		 s|^(INCLUDES=).*|\1`${LIBNET_CONFIG} --cflags`|' \
		${WRKSRC}/${MAKEFILE}

do-install:
	${INSTALL_PROGRAM} ${WRKSRC}/ipguard ${PREFIX}/sbin
	${INSTALL_MAN} ${WRKSRC}/doc/ipguard.8 ${MANPREFIX}/man/man8
	${INSTALL_SCRIPT} ${WRKSRC}/doc/ipguard.sh.sample ${PREFIX}/etc/rc.d

post-install:
.ifndef(NOPORTDOCS)
	@${MKDIR} ${DOCSDIR}
.for doc in ${DOCS}
	@${INSTALL_DATA} ${WRKSRC}/doc/${doc} ${DOCSDIR}
.endfor
.endif

.include <bsd.port.mk>

Lines 1-3 Link Here

(-)ipguard/distinfo (-3 / +3 lines)
1	MD5 (ipguard-1.00.tar.gz) = 3b8e99994a283c549e2e7f452ef38fd7	1	MD5 (ipguard-1.00.tar.gz) = e01642d590a3e34991100e179732a686
2	SHA256 (ipguard-1.00.tar.gz) = fb9d7f34a9c83976a1186f6fd33b04e31462beee7550c95001132aef3d08322e	2	SHA256 (ipguard-1.00.tar.gz) = 39ba935b664a4ac222f49cfc1e82084059fb29063ce7f41d58be80eed0d35b3f
3	SIZE (ipguard-1.00.tar.gz) = 25095	3	SIZE (ipguard-1.00.tar.gz) = 25484




#! /bin/sh

# PROVIDE: ipguard
# REQUIRE: DAEMON
# KEYWORD: shutdown

# Add the following lines to /etc/rc.conf to enable ipguard:
#
# ipguard_enable="YES"
# ipguard_interface="iface"
# ipguard_flags="-u 300 -xz"

. %%RC_SUBR%%

name=ipguard
rcvar=`set_rcvar`
start_precmd=ipguard_precmd
command=%%PREFIX%%/sbin/${name}

ipguard_enable=${ipguard_enable:-"NO"}
ipguard_interface=${ipguard_interface:-"fxp0"}
ipguard_flags=${ipguard_flags:-"-u 300 -xz"}

ipguard_precmd() {
    command_args="$command_args ${ipguard_interface}"
    pidfile="/var/run/${name}_${ipguard_interface}.pid"
}

load_rc_config ${name}
run_rc_command "$1"

Lines 1-8 Link Here

(-)ipguard/files/pkg-message.in (-8 lines)
1
2	===> INSTALL NOTES:
3	Now create %%ETHERS%% file
4	(see ethers(5))
5	and then start ipguard:
6	(cd %%PREFIX%%/etc/rc.d
7	mv ipguard.sh.sample ipguard.sh
8	%%PREFIX%%/etc/rc.d/ipguard.sh start)

Lines 1-8 Link Here

(-)ipguard/pkg-descr (-5 / +5 lines)
1	ipguard listens network for ARP packets. All permitted MAC/IP pairs	1	ipguard listens network for ARP packets. All permitted MAC-IP pairs
2	listed in 'ethers' file. If it recieves one with MAC/IP pair, which is	2	listed in 'ethers' file. If it recieves one with MAC-IP pair, which is
3	not listed in 'ethers' file, it will send ARP reply with configured	3	not listed in 'ethers' file, it will send ARP reply with configured
4	fake address. This will prevent not permitted host to work properly	4	fake address. This will prevent not permitted host to work properly in
5	in this ethernet segment. Especially Windows(TM) hosts.	5	local ethernet segment.
6		6
7	Author SeaD <sead@mail.ru>	7	Author SeaD <sead@deep.perm.ru>
8	WWW: http://ipguard.deep.perm.ru/	8	WWW: http://ipguard.deep.perm.ru/

Lines 1-2 Link Here

(-)ipguard/pkg-plist (-1 / +8 lines)
1	sbin/ipguard	1	sbin/ipguard
2	etc/rc.d/ipguard.sh.sample	2	%%PORTDOCS%%%%DOCSDIR%%/COPYRIGHT
		3	%%PORTDOCS%%%%DOCSDIR%%/NEWS
		4	%%PORTDOCS%%%%DOCSDIR%%/README
		5	%%PORTDOCS%%%%DOCSDIR%%/README.tcpdump
		6	%%PORTDOCS%%%%DOCSDIR%%/README.log
		7	%%PORTDOCS%%%%DOCSDIR%%/ethers.sample
		8	%%PORTDOCS%%%%DOCSDIR%%/rfc826.txt
		9	%%PORTDOCS%%@dirrm %%DOCSDIR%%

Return to bug 127940

Lines 1-43 Link Here

(-)ipguard/Makefile (-28 / +15 lines)
1	# New ports collection makefile for: ipguard	1	# Ports collection makefile for: ipguard
2	# Date created: 2 Sep 2005	2	# Date created: 6 Oct 2008
3	# Whom: SeaD	3	# Whom: SeaD
4	#	4	#
5	# $FreeBSD: ports/security/ipguard/Makefile,v 1.5 2008/10/05 10:19:53 miwi Exp $	5	# $FreeBSD$
6	#	6	#
7		7
8	PORTNAME= ipguard	8	PORTNAME= ipguard
9	PORTVERSION= 1.00	9	PORTVERSION= 1.00
10	CATEGORIES= security net	10	CATEGORIES= security net
11	MASTER_SITES= http://ipguard.deep.perm.ru/files/	11	MASTER_SITES= http://ipguard.deep.perm.ru/files/ http://deep.perm.ru/files/ipguard/
12		12
13	MAINTAINER= ports@FreeBSD.org	13	MAINTAINER= sead@deep.perm.ru
14	COMMENT= Tool designed to protect LAN IP adress space by ARP spoofing	14	COMMENT= Tool designed to protect LAN IP adress space by ARP spoofing
15		15
16	BUILD_DEPENDS= ${LIBNET_CONFIG}:${PORTSDIR}/net/libnet	16	BUILD_DEPENDS= ${LOCALBASE}/lib/libnet11/libnet.a:${PORTSDIR}/net/libnet
17		17
18	MAN8= ipguard.8	18	USE_RC_SUBR= ${PORTNAME}
19		19	MAN8= ${PORTNAME}.8
20	ETHERS?= /etc/ethers	20	DOCS= COPYRIGHT NEWS README README.tcpdump README.log ethers.sample rfc826.txt
21
22	MAKE_ARGS+= ETHERS=${ETHERS}
23
24	SUB_FILES= pkg-message
25	SUB_LIST= ETHERS=${ETHERS}
26
27	LIBNET_CONFIG?= ${LOCALBASE}/bin/libnet11-config
28
29	post-patch:
30	@${REINPLACE_CMD} -Ee \
31	's\|libnet-config\|${LIBNET_CONFIG}\|; \
32	s\|^(INCLUDES=).*\|\1`${LIBNET_CONFIG} --cflags`\|' \
33	${WRKSRC}/${MAKEFILE}
34
35	do-install:
36	${INSTALL_PROGRAM} ${WRKSRC}/ipguard ${PREFIX}/sbin
37	${INSTALL_MAN} ${WRKSRC}/doc/ipguard.8 ${MANPREFIX}/man/man8
38	${INSTALL_SCRIPT} ${WRKSRC}/doc/ipguard.sh.sample ${PREFIX}/etc/rc.d
39		21
40	post-install:	22	post-install:
41	@${CAT} ${PKGMESSAGE}	23	.ifndef(NOPORTDOCS)
		24	@${MKDIR} ${DOCSDIR}
		25	.for doc in ${DOCS}
		26	@${INSTALL_DATA} ${WRKSRC}/doc/${doc} ${DOCSDIR}
		27	.endfor
		28	.endif
42		29
43	.include <bsd.port.mk>	30	.include <bsd.port.mk>

Line 0 Link Here

(-)ipguard/files/ipguard.in (+30 lines)
	1	#! /bin/sh
	2
	3	# PROVIDE: ipguard
	4	# REQUIRE: DAEMON
	5	# KEYWORD: shutdown
	6
	7	# Add the following lines to /etc/rc.conf to enable ipguard:
	8	#
	9	# ipguard_enable="YES"
	10	# ipguard_interface="iface"
	11	# ipguard_flags="-u 300 -xz"
	12
	13	. %%RC_SUBR%%
	14
	15	name=ipguard
	16	rcvar=`set_rcvar`
	17	start_precmd=ipguard_precmd
	18	command=%%PREFIX%%/sbin/${name}
	19
	20	ipguard_enable=${ipguard_enable:-"NO"}
	21	ipguard_interface=${ipguard_interface:-"fxp0"}
	22	ipguard_flags=${ipguard_flags:-"-u 300 -xz"}
	23
	24	ipguard_precmd() {
	25	command_args="$command_args ${ipguard_interface}"
	26	pidfile="/var/run/${name}_${ipguard_interface}.pid"
	27	}
	28
	29	load_rc_config ${name}
	30	run_rc_command "$1"