mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2026-11-07 18:07:08 -08:00
net-firewall: purge packages shorewall-* shorewall6
shorewall-core, shorewall-init, shorewall-lite, shorewall6, shorewall6-lite Gentoo bug; #560392
This commit is contained in:
@@ -1,2 +0,0 @@
|
||||
DIST shorewall-core-4.5.21.10.tar.bz2 86185 SHA256 57e4b96ae3258b5150fbb188921845e8843d6b6ccb77d60a10bb984f87951334 SHA512 ad96fd91d5d8eb900b7a2180a37fa1826c7448fd5ff0f94f938e897b2cdf9d7b2a064cb4499fb76107bb8cf8f32c1265a7ff6d5966dae1d1d76a4a61482d6c81 WHIRLPOOL f08ccd4c59bac5f7f1fc8ea1bec853e5286aa1f13ad0b09fd3578d5002266ec210382a73f8a2f8b45dd09dda93cdd695f259ee60803820ed2715dc046ff16e7c
|
||||
DIST shorewall-core-4.5.21.9.tar.bz2 86021 SHA256 f431edf0109641b7fd7c9568e39917b16f1d776393d58aef328f82bf5ef20656 SHA512 53525a3159e33aefbc39ff59fe300e5da3f51a4c2c363ecb4b56888d87ef48f56b8ec7c4d09668407148898f2704ff60627a90b42203cf48d2e4c3d3c5fd8f41 WHIRLPOOL 032ee33b1e1e3effc1a7b97ad4000b4e9eaf0a1f4d45cffeb252298aaea06444484ccc80b4c5115d59ffb6e2d76e2fac97b2ceb6b2b2c4b7283f4cdd4778a6f6
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,10 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
||||
<pkgmetadata>
|
||||
<herd>netmon</herd>
|
||||
<herd>proxy-maintainers</herd>
|
||||
<maintainer>
|
||||
<email>whissi@whissi.de</email>
|
||||
<name>Thomas D. (Whissi)</name>
|
||||
</maintainer>
|
||||
</pkgmetadata>
|
||||
@@ -1,74 +0,0 @@
|
||||
# Copyright 1999-2015 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils prefix versionator
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION="Core libraries of shorewall / shorewall(6)-lite"
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="~alpha ~amd64 hppa ~ppc ~ppc64 ~sparc ~x86"
|
||||
IUSE="selinux"
|
||||
|
||||
DEPEND="
|
||||
>=dev-lang/perl-5.10
|
||||
virtual/perl-Digest-SHA
|
||||
!<net-firewall/shorewall-4.5.0.1
|
||||
"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
>=net-firewall/iptables-1.4.20
|
||||
>=sys-apps/iproute2-3.8.0[-minimal]
|
||||
>=sys-devel/bc-1.06.95
|
||||
>=sys-apps/coreutils-8.20
|
||||
selinux? ( >=sec-policy/selinux-shorewall-2.20130424-r2 )
|
||||
"
|
||||
|
||||
DOCS=( changelog.txt releasenotes.txt )
|
||||
|
||||
S=${WORKDIR}/${PN}-${MY_PV}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
default
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if ! has_version sys-apps/net-tools; then
|
||||
elog "It is recommended to install sys-apps/net-tools which will provide the"
|
||||
elog "the 'arp' utility which will give you a better 'shorewall-lite dump' output:"
|
||||
elog ""
|
||||
elog " # emerge sys-apps/net-tools"
|
||||
fi
|
||||
}
|
||||
@@ -1,74 +0,0 @@
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils prefix versionator
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION="Core libraries of shorewall / shorewall(6)-lite"
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="alpha amd64 hppa ppc ppc64 sparc x86"
|
||||
IUSE="selinux"
|
||||
|
||||
DEPEND="
|
||||
>=dev-lang/perl-5.10
|
||||
virtual/perl-Digest-SHA
|
||||
!<net-firewall/shorewall-4.5.0.1
|
||||
"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
>=net-firewall/iptables-1.4.20
|
||||
>=sys-apps/iproute2-3.8.0[-minimal]
|
||||
>=sys-devel/bc-1.06.95
|
||||
>=sys-apps/coreutils-8.20
|
||||
selinux? ( >=sec-policy/selinux-shorewall-2.20130424-r2 )
|
||||
"
|
||||
|
||||
DOCS=( changelog.txt releasenotes.txt )
|
||||
|
||||
S=${WORKDIR}/${PN}-${MY_PV}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
default
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if ! has_version sys-apps/net-tools; then
|
||||
elog "It is recommended to install sys-apps/net-tools which will provide the"
|
||||
elog "the 'arp' utility which will give you a better 'shorewall-lite dump' output:"
|
||||
elog ""
|
||||
elog " # emerge sys-apps/net-tools"
|
||||
fi
|
||||
}
|
||||
@@ -1,2 +0,0 @@
|
||||
DIST shorewall-init-4.5.21.10.tar.bz2 66287 SHA256 53dc29e61d2ed91b7d47f5d4ef51f751567288b2bf0c4459ddbae8dc8259dc32 SHA512 4856816b4f7c5d9015f4c8e65246297ccf927b979050cb955253ef24947938fc31e5aed9b8f6f4a0f5d2ae390a97cf5cd6010639c677befb981ec85234435f6e WHIRLPOOL a5463c06a7c60129f5b969cc28c4c94701d12955192179055deed9e29bb07cab24c4885b8ec279f247fac83b72fa8e39880bceae153ba82c41f7bd4a7cff0740
|
||||
DIST shorewall-init-4.5.21.9.tar.bz2 66436 SHA256 53867182aac095777d08830260596eaad8893c64715a27c837ac928546803f20 SHA512 973302b3f74f655b6b284e36caaa02e95ed3e3afabf5f0eae5307381cf95f8e33f3a85696b573e928dad91b121123ab07903954dfb6fa3b57a4759dfa72f93f6 WHIRLPOOL 43f527cbb4b36b725a981076df1a2efd5213058439916d56baf94dc6981b305286e42d7f8d406f8c6e47362cac92a5674975642e8d2535f0cf6e685db9d918c5
|
||||
@@ -1,27 +0,0 @@
|
||||
--- shorewall-init.old 2013-09-08 23:25:36.364924304 +0200
|
||||
+++ shorewall-init 2013-09-08 23:29:27.418736392 +0200
|
||||
@@ -79,10 +79,6 @@
|
||||
fi
|
||||
done
|
||||
|
||||
- if [ -n "$SAVE_IPSETS" -a -f "$SAVE_IPSETS" ]; then
|
||||
- ipset -R < "$SAVE_IPSETS"
|
||||
- fi
|
||||
-
|
||||
return 0
|
||||
}
|
||||
|
||||
@@ -100,13 +96,6 @@
|
||||
fi
|
||||
done
|
||||
|
||||
- if [ -n "$SAVE_IPSETS" ]; then
|
||||
- mkdir -p $(dirname "$SAVE_IPSETS")
|
||||
- if ipset -S > "${SAVE_IPSETS}.tmp"; then
|
||||
- grep -qE -- '^(-N|create )' "${SAVE_IPSETS}.tmp" && mv -f "${SAVE_IPSETS}.tmp" "$SAVE_IPSETS"
|
||||
- fi
|
||||
- fi
|
||||
-
|
||||
return 0
|
||||
}
|
||||
|
||||
@@ -1,30 +0,0 @@
|
||||
shorewall-init from upstream offers two features (taken from [1]):
|
||||
|
||||
1. It can 'close' the firewall before the network interfaces are
|
||||
brought up during boot.
|
||||
|
||||
2. It can change the firewall state as the result of interfaces
|
||||
being brought up or taken down.
|
||||
|
||||
On Gentoo we only support the first feature -- the firewall lockdown during
|
||||
boot.
|
||||
|
||||
We do not support the second feature, because Gentoo doesn't support a
|
||||
if-{up,down}.d folder like other distributions do. If you would want to use
|
||||
such a feature, you would have to add a custom action to /etc/conf.d/net
|
||||
(please refer to the Gentoo Linux Handbook [2] for more information).
|
||||
If you are able to add your custom {pre,post}{up,down} action, your are
|
||||
also able to specify what shorewall{6,-lite,6-lite} should do, so there is
|
||||
no need for upstream's scripts in Gentoo.
|
||||
|
||||
If you disagree with us, feel free to open a bug [3] and contribute your
|
||||
solution for Gentoo.
|
||||
|
||||
Upstream's original init script also supports saving and restoring of
|
||||
ipsets. Please use the init script from net-firewall/ipset if you need
|
||||
such a feature.
|
||||
|
||||
|
||||
[1] http://www.shorewall.net/Shorewall-init.html
|
||||
[2] http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=4&chap=5
|
||||
[3] https://bugs.gentoo.org
|
||||
@@ -1,9 +0,0 @@
|
||||
# List the Shorewall products that Shorewall-init is to
|
||||
# initialize (space-separated list).
|
||||
#
|
||||
# Sample: PRODUCTS="shorewall shorewall6-lite"
|
||||
#
|
||||
PRODUCTS=""
|
||||
|
||||
# Startup options - set verbosity to 0 (minimal reporting)
|
||||
OPTIONS="-V0"
|
||||
@@ -1,196 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
SHOREWALLRC_FILE="@GENTOO_PORTAGE_EPREFIX@/usr/share/shorewall/shorewallrc"
|
||||
CONFIG_FILE="@GENTOO_PORTAGE_EPREFIX@/etc/conf.d/${SVCNAME}"
|
||||
|
||||
description="Puts Shorewall in a safe state at boot time"
|
||||
description="${description} prior to bringing up the network."
|
||||
|
||||
required_files="$SHOREWALLRC_FILE"
|
||||
|
||||
depend() {
|
||||
need localmount
|
||||
before net
|
||||
after bootmisc ipset tmpfiles.setup ulogd
|
||||
}
|
||||
|
||||
|
||||
. $SHOREWALLRC_FILE
|
||||
|
||||
checkconfig() {
|
||||
local PRODUCT=
|
||||
|
||||
if [ -z "${VARLIB}" ]; then
|
||||
eerror "\"VARLIB\" isn't defined or empty! Please check" \
|
||||
"\"${SHOREWALLRC_FILE}\"."
|
||||
|
||||
|
||||
return 1
|
||||
fi
|
||||
|
||||
if [ -z "${PRODUCTS}" ]; then
|
||||
eerror "${SVCNAME} isn't configured! Please check" \
|
||||
"\"${CONFIG_FILE}\"."
|
||||
|
||||
|
||||
return 1
|
||||
fi
|
||||
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
if [ ! -x ${SBINDIR}/${PRODUCT} ]; then
|
||||
eerror "Invalid product \"${PRODUCT}\" specified" \
|
||||
"in \"${CONFIG_FILE}\"!"
|
||||
eerror "Maybe \"${PRODUCT}\" isn't installed?"
|
||||
|
||||
|
||||
return 1
|
||||
fi
|
||||
done
|
||||
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
check_firewall_script() {
|
||||
if [ ! -x ${STATEDIR}/firewall ]; then
|
||||
if [ ${PRODUCT} = shorewall -o ${PRODUCT} = shorewall6 ]; then
|
||||
ebegin "Creating \"${STATEDIR}/firewall\""
|
||||
${SBINDIR}/${PRODUCT} compile 1>/dev/null
|
||||
eend $?
|
||||
else
|
||||
eerror "\"${PRODUCT}\" isn't configured!"
|
||||
eerror "Please go to your 'administrative system'" \
|
||||
"and deploy the compiled firewall" \
|
||||
"configuration for this system."
|
||||
|
||||
|
||||
return 1
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
is_allowed_to_be_executed() {
|
||||
# This is not a real service. shorewall-init is an intermediate
|
||||
# script to put your Shorewall-based firewall into a safe state
|
||||
# at boot time prior to bringing up the network.
|
||||
# Please read /usr/share/doc/shorewall-init-*/README.gentoo.gz
|
||||
# for more information.
|
||||
# When your system is up, there is no need to call shorewall-init.
|
||||
# Please call shorewall{,6,-lite,6-lite} directly. That's the
|
||||
# reason why we are preventing start, stop or restart here.
|
||||
|
||||
local PRODUCT=
|
||||
|
||||
if [ "${RC_RUNLEVEL}" != "boot" -a "${RC_CMD}" = "start" ]; then
|
||||
# Starting shorewall-init is only allowed at boot time
|
||||
eerror "This is a boot service, which can only be started" \
|
||||
"at boot."
|
||||
eerror "If you want to get your shorewall-based firewall" \
|
||||
"into the same safe boot state again, run"
|
||||
eerror ""
|
||||
eindent
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
eerror "/etc/init.d/${PRODUCT} stop"
|
||||
done
|
||||
eoutdent
|
||||
eerror ""
|
||||
eerror "Yes, \"stop\" and not start."
|
||||
eerror ""
|
||||
return 1
|
||||
fi
|
||||
|
||||
if [ "${RC_RUNLEVEL}" != "shutdown" -a "${RC_CMD}" = "stop" ]; then
|
||||
# Stopping shorewall-init is only allowed at shutdown
|
||||
eerror "This is a boot service, which cannot be stopped."
|
||||
eerror "If you really want to stop your Shorewall-based" \
|
||||
"firewall the same way this service would stop" \
|
||||
"Shorewall at shutdown, please run"
|
||||
eerror ""
|
||||
eindent
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
eerror "/etc/init.d/${PRODUCT} clear"
|
||||
done
|
||||
eoutdent
|
||||
eerror ""
|
||||
eerror "Keep in mind that this will clear (=bring down)" \
|
||||
"your firewall!"
|
||||
eerror ""
|
||||
return 1
|
||||
fi
|
||||
|
||||
if [ "${RC_CMD}" = "restart" ]; then
|
||||
eerror "This is a boot service, which cannot be restarted."
|
||||
eerror "If you want to restart any of your Shorewall-based" \
|
||||
"firewalls, run"
|
||||
eerror ""
|
||||
eindent
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
eerror "/etc/init.d/${PRODUCT} restart"
|
||||
done
|
||||
eoutdent
|
||||
eerror ""
|
||||
return 1
|
||||
fi
|
||||
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
set_statedir() {
|
||||
STATEDIR=
|
||||
local VARDIR=
|
||||
|
||||
if [ -f ${CONFDIR}/${PRODUCT}/vardir ]; then
|
||||
STATEDIR=$( . ${CONFDIR}/${PRODUCT}/vardir && echo ${VARDIR} )
|
||||
fi
|
||||
|
||||
[ ! -n "${STATEDIR}" ] && STATEDIR=${VARLIB}/${PRODUCT}
|
||||
}
|
||||
|
||||
start_pre() {
|
||||
checkconfig || return 1
|
||||
|
||||
is_allowed_to_be_executed || return 1
|
||||
}
|
||||
|
||||
start() {
|
||||
local PRODUCT=
|
||||
local STATEDIR=
|
||||
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
set_statedir
|
||||
|
||||
check_firewall_script || return 1
|
||||
|
||||
ebegin "Initializing \"${PRODUCT}\""
|
||||
${STATEDIR}/firewall stop 1>/dev/null
|
||||
eend $?
|
||||
done
|
||||
}
|
||||
|
||||
stop_pre() {
|
||||
checkconfig || return 1
|
||||
|
||||
is_allowed_to_be_executed || return 1
|
||||
}
|
||||
|
||||
stop() {
|
||||
local PRODUCT=
|
||||
local STATEDIR=
|
||||
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
set_statedir
|
||||
|
||||
check_firewall_script || return 1
|
||||
|
||||
ebegin "Clearing \"${PRODUCT}\""
|
||||
${STATEDIR}/firewall clear 1>/dev/null
|
||||
eend $?
|
||||
done
|
||||
}
|
||||
@@ -1,16 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=shorewall-init
|
||||
Documentation=http://www.shorewall.net/Shorewall-init.html
|
||||
Before=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
ExecStart=/sbin/shorewall-init start
|
||||
ExecStop=/sbin/shorewall-init stop
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,27 +0,0 @@
|
||||
--- shorewall-init.old 2013-09-08 23:25:36.364924304 +0200
|
||||
+++ shorewall-init 2013-09-08 23:29:27.418736392 +0200
|
||||
@@ -79,10 +79,6 @@
|
||||
fi
|
||||
done
|
||||
|
||||
- if [ -n "$SAVE_IPSETS" -a -f "$SAVE_IPSETS" ]; then
|
||||
- ipset -R < "$SAVE_IPSETS"
|
||||
- fi
|
||||
-
|
||||
return 0
|
||||
}
|
||||
|
||||
@@ -100,13 +96,6 @@
|
||||
fi
|
||||
done
|
||||
|
||||
- if [ -n "$SAVE_IPSETS" ]; then
|
||||
- mkdir -p $(dirname "$SAVE_IPSETS")
|
||||
- if ipset -S > "${SAVE_IPSETS}.tmp"; then
|
||||
- grep -qE -- '^(-N|create )' "${SAVE_IPSETS}.tmp" && mv -f "${SAVE_IPSETS}.tmp" "$SAVE_IPSETS"
|
||||
- fi
|
||||
- fi
|
||||
-
|
||||
return 0
|
||||
}
|
||||
|
||||
@@ -1,30 +0,0 @@
|
||||
shorewall-init from upstream offers two features (taken from [1]):
|
||||
|
||||
1. It can 'close' the firewall before the network interfaces are
|
||||
brought up during boot.
|
||||
|
||||
2. It can change the firewall state as the result of interfaces
|
||||
being brought up or taken down.
|
||||
|
||||
On Gentoo we only support the first feature -- the firewall lockdown during
|
||||
boot.
|
||||
|
||||
We do not support the second feature, because Gentoo doesn't support a
|
||||
if-{up,down}.d folder like other distributions do. If you would want to use
|
||||
such a feature, you would have to add a custom action to /etc/conf.d/net
|
||||
(please refer to the Gentoo Linux Handbook [2] for more information).
|
||||
If you are able to add your custom {pre,post}{up,down} action, your are
|
||||
also able to specify what shorewall{6,-lite,6-lite} should do, so there is
|
||||
no need for upstream's scripts in Gentoo.
|
||||
|
||||
If you disagree with us, feel free to open a bug [3] and contribute your
|
||||
solution for Gentoo.
|
||||
|
||||
Upstream's original init script also supports saving and restoring of
|
||||
ipsets. Please use the init script from net-firewall/ipset if you need
|
||||
such a feature.
|
||||
|
||||
|
||||
[1] http://www.shorewall.net/Shorewall-init.html
|
||||
[2] http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=4&chap=5
|
||||
[3] https://bugs.gentoo.org
|
||||
@@ -1,9 +0,0 @@
|
||||
# List the Shorewall products that Shorewall-init is to
|
||||
# initialize (space-separated list).
|
||||
#
|
||||
# Sample: PRODUCTS="shorewall shorewall6-lite"
|
||||
#
|
||||
PRODUCTS=""
|
||||
|
||||
# Startup options - set verbosity to 0 (minimal reporting)
|
||||
OPTIONS="-V0"
|
||||
@@ -1,196 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
SHOREWALLRC_FILE="@GENTOO_PORTAGE_EPREFIX@/usr/share/shorewall/shorewallrc"
|
||||
CONFIG_FILE="@GENTOO_PORTAGE_EPREFIX@/etc/conf.d/${SVCNAME}"
|
||||
|
||||
description="Puts Shorewall in a safe state at boot time"
|
||||
description="${description} prior to bringing up the network."
|
||||
|
||||
required_files="$SHOREWALLRC_FILE"
|
||||
|
||||
depend() {
|
||||
need localmount
|
||||
before net
|
||||
after bootmisc ipset tmpfiles.setup ulogd
|
||||
}
|
||||
|
||||
|
||||
. $SHOREWALLRC_FILE
|
||||
|
||||
checkconfig() {
|
||||
local PRODUCT=
|
||||
|
||||
if [ -z "${VARLIB}" ]; then
|
||||
eerror "\"VARLIB\" isn't defined or empty! Please check" \
|
||||
"\"${SHOREWALLRC_FILE}\"."
|
||||
|
||||
|
||||
return 1
|
||||
fi
|
||||
|
||||
if [ -z "${PRODUCTS}" ]; then
|
||||
eerror "${SVCNAME} isn't configured! Please check" \
|
||||
"\"${CONFIG_FILE}\"."
|
||||
|
||||
|
||||
return 1
|
||||
fi
|
||||
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
if [ ! -x ${SBINDIR}/${PRODUCT} ]; then
|
||||
eerror "Invalid product \"${PRODUCT}\" specified" \
|
||||
"in \"${CONFIG_FILE}\"!"
|
||||
eerror "Maybe \"${PRODUCT}\" isn't installed?"
|
||||
|
||||
|
||||
return 1
|
||||
fi
|
||||
done
|
||||
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
check_firewall_script() {
|
||||
if [ ! -x ${STATEDIR}/firewall ]; then
|
||||
if [ ${PRODUCT} = shorewall -o ${PRODUCT} = shorewall6 ]; then
|
||||
ebegin "Creating \"${STATEDIR}/firewall\""
|
||||
${SBINDIR}/${PRODUCT} compile 1>/dev/null
|
||||
eend $?
|
||||
else
|
||||
eerror "\"${PRODUCT}\" isn't configured!"
|
||||
eerror "Please go to your 'administrative system'" \
|
||||
"and deploy the compiled firewall" \
|
||||
"configuration for this system."
|
||||
|
||||
|
||||
return 1
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
is_allowed_to_be_executed() {
|
||||
# This is not a real service. shorewall-init is an intermediate
|
||||
# script to put your Shorewall-based firewall into a safe state
|
||||
# at boot time prior to bringing up the network.
|
||||
# Please read /usr/share/doc/shorewall-init-*/README.gentoo.gz
|
||||
# for more information.
|
||||
# When your system is up, there is no need to call shorewall-init.
|
||||
# Please call shorewall{,6,-lite,6-lite} directly. That's the
|
||||
# reason why we are preventing start, stop or restart here.
|
||||
|
||||
local PRODUCT=
|
||||
|
||||
if [ "${RC_RUNLEVEL}" != "boot" -a "${RC_CMD}" = "start" ]; then
|
||||
# Starting shorewall-init is only allowed at boot time
|
||||
eerror "This is a boot service, which can only be started" \
|
||||
"at boot."
|
||||
eerror "If you want to get your shorewall-based firewall" \
|
||||
"into the same safe boot state again, run"
|
||||
eerror ""
|
||||
eindent
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
eerror "/etc/init.d/${PRODUCT} stop"
|
||||
done
|
||||
eoutdent
|
||||
eerror ""
|
||||
eerror "Yes, \"stop\" and not start."
|
||||
eerror ""
|
||||
return 1
|
||||
fi
|
||||
|
||||
if [ "${RC_RUNLEVEL}" != "shutdown" -a "${RC_CMD}" = "stop" ]; then
|
||||
# Stopping shorewall-init is only allowed at shutdown
|
||||
eerror "This is a boot service, which cannot be stopped."
|
||||
eerror "If you really want to stop your Shorewall-based" \
|
||||
"firewall the same way this service would stop" \
|
||||
"Shorewall at shutdown, please run"
|
||||
eerror ""
|
||||
eindent
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
eerror "/etc/init.d/${PRODUCT} clear"
|
||||
done
|
||||
eoutdent
|
||||
eerror ""
|
||||
eerror "Keep in mind that this will clear (=bring down)" \
|
||||
"your firewall!"
|
||||
eerror ""
|
||||
return 1
|
||||
fi
|
||||
|
||||
if [ "${RC_CMD}" = "restart" ]; then
|
||||
eerror "This is a boot service, which cannot be restarted."
|
||||
eerror "If you want to restart any of your Shorewall-based" \
|
||||
"firewalls, run"
|
||||
eerror ""
|
||||
eindent
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
eerror "/etc/init.d/${PRODUCT} restart"
|
||||
done
|
||||
eoutdent
|
||||
eerror ""
|
||||
return 1
|
||||
fi
|
||||
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
set_statedir() {
|
||||
STATEDIR=
|
||||
local VARDIR=
|
||||
|
||||
if [ -f ${CONFDIR}/${PRODUCT}/vardir ]; then
|
||||
STATEDIR=$( . ${CONFDIR}/${PRODUCT}/vardir && echo ${VARDIR} )
|
||||
fi
|
||||
|
||||
[ ! -n "${STATEDIR}" ] && STATEDIR=${VARLIB}/${PRODUCT}
|
||||
}
|
||||
|
||||
start_pre() {
|
||||
checkconfig || return 1
|
||||
|
||||
is_allowed_to_be_executed || return 1
|
||||
}
|
||||
|
||||
start() {
|
||||
local PRODUCT=
|
||||
local STATEDIR=
|
||||
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
set_statedir
|
||||
|
||||
check_firewall_script || return 1
|
||||
|
||||
ebegin "Initializing \"${PRODUCT}\""
|
||||
${STATEDIR}/firewall stop 1>/dev/null
|
||||
eend $?
|
||||
done
|
||||
}
|
||||
|
||||
stop_pre() {
|
||||
checkconfig || return 1
|
||||
|
||||
is_allowed_to_be_executed || return 1
|
||||
}
|
||||
|
||||
stop() {
|
||||
local PRODUCT=
|
||||
local STATEDIR=
|
||||
|
||||
for PRODUCT in ${PRODUCTS}; do
|
||||
set_statedir
|
||||
|
||||
check_firewall_script || return 1
|
||||
|
||||
ebegin "Clearing \"${PRODUCT}\""
|
||||
${STATEDIR}/firewall clear 1>/dev/null
|
||||
eend $?
|
||||
done
|
||||
}
|
||||
@@ -1,16 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=shorewall-init
|
||||
Documentation=http://www.shorewall.net/Shorewall-init.html
|
||||
Before=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
ExecStart=/sbin/shorewall-init start
|
||||
ExecStop=/sbin/shorewall-init stop
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,10 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
||||
<pkgmetadata>
|
||||
<herd>netmon</herd>
|
||||
<herd>proxy-maintainers</herd>
|
||||
<maintainer>
|
||||
<email>whissi@whissi.de</email>
|
||||
<name>Thomas D. (Whissi)</name>
|
||||
</maintainer>
|
||||
</pkgmetadata>
|
||||
@@ -1,104 +0,0 @@
|
||||
# Copyright 1999-2015 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils versionator prefix
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION="Component to secure a Shorewall-protected system at boot time prior to bringing up the network"
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="~alpha ~amd64 hppa ~ppc ~ppc64 ~sparc ~x86"
|
||||
IUSE=""
|
||||
|
||||
DEPEND=">=sys-apps/coreutils-8.20"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
|| ( =net-firewall/shorewall-${PVR} =net-firewall/shorewall6-${PVR} =net-firewall/shorewall-lite-${PVR} =net-firewall/shorewall6-lite-${PVR} )
|
||||
"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.confd "${S}"/default.gentoo || die "Copying ${PN}.confd failed"
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying ${PN}.initd failed"
|
||||
eprefixify "${S}"/init.gentoo.sh
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.systemd "${S}"/gentoo.service || die "Copying ${PN}.systemd failed"
|
||||
|
||||
epatch "${FILESDIR}"/${PVR}/01_Remove-ipset-functionality.patch
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
|
||||
if [ -d "${D}/etc/logrotate.d" ]; then
|
||||
# On Gentoo, shorewall-init will not create shorewall-ifupdown.log,
|
||||
# so we don't need a logrotate folder at all
|
||||
rm -rf "${D}"/etc/logrotate.d
|
||||
fi
|
||||
|
||||
if [ -d "${D}/etc/NetworkManager" ]; then
|
||||
# On Gentoo, we don't support NetworkManager
|
||||
# so we don't need these folder at all
|
||||
rm -rf "${D}"/etc/NetworkManager
|
||||
fi
|
||||
|
||||
if [ -f "${D}/usr/share/shorewall-init/ifupdown" ]; then
|
||||
# This script won't work on Gentoo
|
||||
rm -rf "${D}"/usr/share/shorewall-init/ifupdown
|
||||
fi
|
||||
|
||||
dodoc changelog.txt releasenotes.txt "${FILESDIR}"/${PVR}/README.Gentoo.txt
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z "${REPLACING_VERSIONS}" ]]; then
|
||||
# This is a new installation
|
||||
elog "Before you can use ${PN}, you need to edit its configuration in:"
|
||||
elog ""
|
||||
elog " ${EPREFIX}/etc/conf.d/${PN}"
|
||||
elog ""
|
||||
elog "To use ${PN}, please add ${PN} to your boot runlevel:"
|
||||
elog ""
|
||||
elog " # rc-update add ${PN} boot"
|
||||
elog ""
|
||||
ewarn "Notice:"
|
||||
ewarn "${PN} is more like a start script than a service."
|
||||
ewarn "Therefore you cannot start or stop ${PN} at default runlevel."
|
||||
ewarn ""
|
||||
ewarn "For more information read ${EPREFIX}/usr/share/doc/${PF}/README.Gentoo.txt.bz2"
|
||||
fi
|
||||
}
|
||||
@@ -1,104 +0,0 @@
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils versionator prefix
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION="Component to secure a Shorewall-protected system at boot time prior to bringing up the network"
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="alpha amd64 hppa ppc ppc64 sparc x86"
|
||||
IUSE=""
|
||||
|
||||
DEPEND=">=sys-apps/coreutils-8.20"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
|| ( =net-firewall/shorewall-${PVR} =net-firewall/shorewall6-${PVR} =net-firewall/shorewall-lite-${PVR} =net-firewall/shorewall6-lite-${PVR} )
|
||||
"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.confd "${S}"/default.gentoo || die "Copying ${PN}.confd failed"
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying ${PN}.initd failed"
|
||||
eprefixify "${S}"/init.gentoo.sh
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.systemd "${S}"/gentoo.service || die "Copying ${PN}.systemd failed"
|
||||
|
||||
epatch "${FILESDIR}"/${PVR}/01_Remove-ipset-functionality.patch
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
|
||||
if [ -d "${D}/etc/logrotate.d" ]; then
|
||||
# On Gentoo, shorewall-init will not create shorewall-ifupdown.log,
|
||||
# so we don't need a logrotate folder at all
|
||||
rm -rf "${D}"/etc/logrotate.d
|
||||
fi
|
||||
|
||||
if [ -d "${D}/etc/NetworkManager" ]; then
|
||||
# On Gentoo, we don't support NetworkManager
|
||||
# so we don't need these folder at all
|
||||
rm -rf "${D}"/etc/NetworkManager
|
||||
fi
|
||||
|
||||
if [ -f "${D}/usr/share/shorewall-init/ifupdown" ]; then
|
||||
# This script won't work on Gentoo
|
||||
rm -rf "${D}"/usr/share/shorewall-init/ifupdown
|
||||
fi
|
||||
|
||||
dodoc changelog.txt releasenotes.txt "${FILESDIR}"/${PVR}/README.Gentoo.txt
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z "${REPLACING_VERSIONS}" ]]; then
|
||||
# This is a new installation
|
||||
elog "Before you can use ${PN}, you need to edit its configuration in:"
|
||||
elog ""
|
||||
elog " ${EPREFIX}/etc/conf.d/${PN}"
|
||||
elog ""
|
||||
elog "To use ${PN}, please add ${PN} to your boot runlevel:"
|
||||
elog ""
|
||||
elog " # rc-update add ${PN} boot"
|
||||
elog ""
|
||||
ewarn "Notice:"
|
||||
ewarn "${PN} is more like a start script than a service."
|
||||
ewarn "Therefore you cannot start or stop ${PN} at default runlevel."
|
||||
ewarn ""
|
||||
ewarn "For more information read ${EPREFIX}/usr/share/doc/${PF}/README.Gentoo.txt.bz2"
|
||||
fi
|
||||
}
|
||||
@@ -1,4 +0,0 @@
|
||||
DIST shorewall-docs-html-4.5.21.10.tar.bz2 4146174 SHA256 cdbc5f3654f7cfb6f0c3b3750a7174df8fa0590dfe34df055300140b3eb13192 SHA512 94852cc094d6a485cacc4023a2819431f1bfd80b8cbcab29981c422fdff9dfee90697ae8a9bda7ded3a8be03db516bdd5f4bcc4b83e7d01bc433a8c88d23731a WHIRLPOOL 6f02d0e3255dd1e31a43193f67f9b957546a6ae574631e61364f81244bee887e7f21c38f412fa21cde77b3d89aaf0e14e43909683db0c9c32edeb455c20b998e
|
||||
DIST shorewall-docs-html-4.5.21.9.tar.bz2 4146065 SHA256 9056c22b8232d8276cc53a6eb74940bab42a250c670cb5baa42c75cfb89efdef SHA512 48b2c692ba59b7ec74307909e43a95104e212c9b8e21af7f0dd9f3438ac4f24a6fd2bcc6517966681517aef03beaa8faf03efd74406966d97b68cb416be8551b WHIRLPOOL f68cba7ecaf8c541e58d26c157914bff2d90cd9deae30af7323ca69c68d028217133f53e597bf383191aee83fab29203d233b3cd1e75e4cf08d9e17308dc25e4
|
||||
DIST shorewall-lite-4.5.21.10.tar.bz2 79456 SHA256 73f2e7101ca7ff296fa3a7be4dec6b6ec3ec562f5c0d746fe6e2355d2b8931e3 SHA512 145c18f7a2859bea9ce265d243a875e83fbbaa2c982f269f1401b73253133d8d48e1060c3b18aefdee09dbc8755fe3e875014dda354f38e90829f0d970b52718 WHIRLPOOL 0d7187d7ede8b01819c241fec61eeef03e17743845188f8e41b3448d814466994b8822e3dc166793d9b5b2b5f4b04dc33bd85664e09771746bc655756790e813
|
||||
DIST shorewall-lite-4.5.21.9.tar.bz2 79121 SHA256 af6c039d880581a6eaf7aba9f638ff86e471567b15e16adc607053651d1f50f5 SHA512 fb15881dc4d5fd05c8ca8421ee4a5deb0c9f6fdab955d0fc7dd371bf710706bf6d851bdb8ba00d0d34c1f7f1d2bc2cc39e9e9fe0a6d8b48ed4accc27c011462c WHIRLPOOL 2f8eb61da9b3eafdd184718054d14dfdef39afdf6e3724ee62c0386f12ea3aa3badcf959ee0351f8cdcd744cf4b262e168e5cd6afa677a8674d515541f0f2f80
|
||||
@@ -1,15 +0,0 @@
|
||||
# Global start/restart/stop options
|
||||
#
|
||||
OPTIONS=""
|
||||
|
||||
# Start options
|
||||
#
|
||||
STARTOPTIONS=""
|
||||
|
||||
# Stop options
|
||||
#
|
||||
STOPOPTIONS=""
|
||||
|
||||
# Restart options
|
||||
#
|
||||
RESTARTOPTIONS=""
|
||||
@@ -1,82 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
description='The Shoreline Firewall Lite, more commonly known as "Shorewall Lite", is'
|
||||
description="${description} a high-level tool for configuring Netfilter."
|
||||
|
||||
extra_commands="clear"
|
||||
extra_started_commands="reset"
|
||||
|
||||
description_clear="Clear will remove all rules and chains installed by"
|
||||
description_clear="${description_clear} Shorewall Lite. The firewall is"
|
||||
description_clear="${description_clear} then wide open and unprotected."
|
||||
|
||||
description_reset="All the packet and byte counters in the firewall are reset."
|
||||
|
||||
depend() {
|
||||
need net
|
||||
provide firewall
|
||||
after ulogd
|
||||
}
|
||||
|
||||
status() {
|
||||
local _retval
|
||||
/sbin/shorewall-lite status 1>/dev/null
|
||||
_retval=$?
|
||||
if [ ${_retval} = '0' ]; then
|
||||
einfo 'status: started'
|
||||
mark_service_started "${SVCNAME}"
|
||||
return 0
|
||||
else
|
||||
einfo 'status: stopped'
|
||||
mark_service_stopped "${SVCNAME}"
|
||||
return 3
|
||||
fi
|
||||
}
|
||||
|
||||
start() {
|
||||
ebegin "Starting shorewall-lite"
|
||||
/sbin/shorewall-lite ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
stop() {
|
||||
ebegin "Stopping shorewall-lite"
|
||||
/sbin/shorewall-lite ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
restart() {
|
||||
# shorewall comes with its own control script that includes a
|
||||
# restart function, so refrain from calling svc_stop/svc_start
|
||||
# here. Note that this comment is required to fix bug 55576;
|
||||
# runscript.sh greps this script... (09 Jul 2004 agriffis)
|
||||
|
||||
ebegin "Restarting shorewall-lite"
|
||||
/sbin/shorewall-lite status 1>/dev/null
|
||||
if [ $? != 0 ] ; then
|
||||
svc_start
|
||||
else
|
||||
/sbin/shorewall-lite ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
|
||||
fi
|
||||
eend $?
|
||||
}
|
||||
|
||||
clear() {
|
||||
# clear will remove all the rules and bring the system to an unfirewalled
|
||||
# state. (21 Nov 2004 eldad)
|
||||
|
||||
ebegin "Clearing all shorewall-lite rules and setting policy to ACCEPT"
|
||||
/sbin/shorewall-lite ${OPTIONS} clear 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
reset() {
|
||||
# reset the packet and byte counters in the firewall
|
||||
|
||||
ebegin "Resetting the packet and byte counters in shorewall-lite"
|
||||
/sbin/shorewall-lite ${OPTIONS} reset 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall Lite (Shorewall-Lite) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall IPv4 firewall lite
|
||||
Documentation=man:shorewall-lite(8) http://www.shorewall.net/Documentation_Index.html
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
EnvironmentFile=/etc/conf.d/shorewall-lite
|
||||
ExecStart=/sbin/shorewall-lite $OPTIONS start $STARTOPTIONS
|
||||
ExecStop=/sbin/shorewall-lite $OPTIONS stop $STOPOPTIONS
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,15 +0,0 @@
|
||||
# Global start/restart/stop options
|
||||
#
|
||||
OPTIONS=""
|
||||
|
||||
# Start options
|
||||
#
|
||||
STARTOPTIONS=""
|
||||
|
||||
# Stop options
|
||||
#
|
||||
STOPOPTIONS=""
|
||||
|
||||
# Restart options
|
||||
#
|
||||
RESTARTOPTIONS=""
|
||||
@@ -1,82 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
description='The Shoreline Firewall Lite, more commonly known as "Shorewall Lite", is'
|
||||
description="${description} a high-level tool for configuring Netfilter."
|
||||
|
||||
extra_commands="clear"
|
||||
extra_started_commands="reset"
|
||||
|
||||
description_clear="Clear will remove all rules and chains installed by"
|
||||
description_clear="${description_clear} Shorewall Lite. The firewall is"
|
||||
description_clear="${description_clear} then wide open and unprotected."
|
||||
|
||||
description_reset="All the packet and byte counters in the firewall are reset."
|
||||
|
||||
depend() {
|
||||
need net
|
||||
provide firewall
|
||||
after ulogd
|
||||
}
|
||||
|
||||
status() {
|
||||
local _retval
|
||||
/sbin/shorewall-lite status 1>/dev/null
|
||||
_retval=$?
|
||||
if [ ${_retval} = '0' ]; then
|
||||
einfo 'status: started'
|
||||
mark_service_started "${SVCNAME}"
|
||||
return 0
|
||||
else
|
||||
einfo 'status: stopped'
|
||||
mark_service_stopped "${SVCNAME}"
|
||||
return 3
|
||||
fi
|
||||
}
|
||||
|
||||
start() {
|
||||
ebegin "Starting shorewall-lite"
|
||||
/sbin/shorewall-lite ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
stop() {
|
||||
ebegin "Stopping shorewall-lite"
|
||||
/sbin/shorewall-lite ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
restart() {
|
||||
# shorewall comes with its own control script that includes a
|
||||
# restart function, so refrain from calling svc_stop/svc_start
|
||||
# here. Note that this comment is required to fix bug 55576;
|
||||
# runscript.sh greps this script... (09 Jul 2004 agriffis)
|
||||
|
||||
ebegin "Restarting shorewall-lite"
|
||||
/sbin/shorewall-lite status 1>/dev/null
|
||||
if [ $? != 0 ] ; then
|
||||
svc_start
|
||||
else
|
||||
/sbin/shorewall-lite ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
|
||||
fi
|
||||
eend $?
|
||||
}
|
||||
|
||||
clear() {
|
||||
# clear will remove all the rules and bring the system to an unfirewalled
|
||||
# state. (21 Nov 2004 eldad)
|
||||
|
||||
ebegin "Clearing all shorewall-lite rules and setting policy to ACCEPT"
|
||||
/sbin/shorewall-lite ${OPTIONS} clear 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
reset() {
|
||||
# reset the packet and byte counters in the firewall
|
||||
|
||||
ebegin "Resetting the packet and byte counters in shorewall-lite"
|
||||
/sbin/shorewall-lite ${OPTIONS} reset 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall Lite (Shorewall-Lite) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall IPv4 firewall lite
|
||||
Documentation=man:shorewall-lite(8) http://www.shorewall.net/Documentation_Index.html
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
EnvironmentFile=/etc/conf.d/shorewall-lite
|
||||
ExecStart=/sbin/shorewall-lite $OPTIONS start $STARTOPTIONS
|
||||
ExecStop=/sbin/shorewall-lite $OPTIONS stop $STOPOPTIONS
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,10 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
||||
<pkgmetadata>
|
||||
<herd>netmon</herd>
|
||||
<herd>proxy-maintainers</herd>
|
||||
<maintainer>
|
||||
<email>whissi@whissi.de</email>
|
||||
<name>Thomas D. (Whissi)</name>
|
||||
</maintainer>
|
||||
</pkgmetadata>
|
||||
@@ -1,106 +0,0 @@
|
||||
# Copyright 1999-2015 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils linux-info prefix systemd versionator
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
MY_P_DOCS=shorewall-docs-html-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION="An iptables-based firewall whose config is handled by a normal Shorewall"
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="
|
||||
http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2
|
||||
doc? ( http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P_DOCS}.tar.bz2 )
|
||||
"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="~alpha ~amd64 hppa ~ppc ~ppc64 ~sparc ~x86"
|
||||
IUSE="doc"
|
||||
|
||||
DEPEND="=net-firewall/shorewall-core-${PVR}"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
>=net-firewall/iptables-1.4.20
|
||||
>=sys-apps/iproute2-3.8.0[-minimal]
|
||||
"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
pkg_pretend() {
|
||||
local CONFIG_CHECK="~NF_CONNTRACK ~NF_CONNTRACK_IPV4"
|
||||
|
||||
local ERROR_CONNTRACK="${PN} requires NF_CONNTRACK support."
|
||||
|
||||
local ERROR_CONNTRACK_IPV4="${PN} requires NF_CONNTRACK_IPV4 support."
|
||||
|
||||
check_extra_config
|
||||
}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.confd "${S}"/default.gentoo || die "Copying ${PN}.confd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying ${PN}.initd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.systemd "${S}"/gentoo.service || die "Copying ${PN}.systemd failed"
|
||||
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
keepdir /var/lib/${PN}
|
||||
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
|
||||
dodoc changelog.txt releasenotes.txt
|
||||
if use doc; then
|
||||
cd "${WORKDIR}/${MY_P_DOCS}"
|
||||
dohtml -r *
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z "${REPLACING_VERSIONS}" ]]; then
|
||||
# This is a new installation
|
||||
elog "Before you can use ${PN}, you need to provide a configuration, which you can"
|
||||
elog "create using ${CATEGORY}/shorewall (the full version, including the compiler)."
|
||||
elog ""
|
||||
elog "To activate ${PN} on system start, please add ${PN} to your default runlevel:"
|
||||
elog ""
|
||||
elog " # rc-update add ${PN} default"
|
||||
fi
|
||||
|
||||
if ! has_version ${CATEGORY}/shorewall-init; then
|
||||
elog ""
|
||||
elog "Starting with shorewall-lite-4.5.21.2, Gentoo also offers ${CATEGORY}/shorewall-init,"
|
||||
elog "which we recommend to install, to protect your firewall at system boot."
|
||||
elog ""
|
||||
elog "To read more about shorewall-init, please visit"
|
||||
elog " http://www.shorewall.net/Shorewall-init.html"
|
||||
fi
|
||||
}
|
||||
@@ -1,106 +0,0 @@
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils linux-info prefix systemd versionator
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
MY_P_DOCS=shorewall-docs-html-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION="An iptables-based firewall whose config is handled by a normal Shorewall"
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="
|
||||
http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2
|
||||
doc? ( http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P_DOCS}.tar.bz2 )
|
||||
"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="alpha amd64 hppa ppc ppc64 sparc x86"
|
||||
IUSE="doc"
|
||||
|
||||
DEPEND="=net-firewall/shorewall-core-${PVR}"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
>=net-firewall/iptables-1.4.20
|
||||
>=sys-apps/iproute2-3.8.0[-minimal]
|
||||
"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
pkg_pretend() {
|
||||
local CONFIG_CHECK="~NF_CONNTRACK ~NF_CONNTRACK_IPV4"
|
||||
|
||||
local ERROR_CONNTRACK="${PN} requires NF_CONNTRACK support."
|
||||
|
||||
local ERROR_CONNTRACK_IPV4="${PN} requires NF_CONNTRACK_IPV4 support."
|
||||
|
||||
check_extra_config
|
||||
}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.confd "${S}"/default.gentoo || die "Copying ${PN}.confd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying ${PN}.initd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.systemd "${S}"/gentoo.service || die "Copying ${PN}.systemd failed"
|
||||
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
keepdir /var/lib/${PN}
|
||||
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
|
||||
dodoc changelog.txt releasenotes.txt
|
||||
if use doc; then
|
||||
cd "${WORKDIR}/${MY_P_DOCS}"
|
||||
dohtml -r *
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z "${REPLACING_VERSIONS}" ]]; then
|
||||
# This is a new installation
|
||||
elog "Before you can use ${PN}, you need to provide a configuration, which you can"
|
||||
elog "create using ${CATEGORY}/shorewall (the full version, including the compiler)."
|
||||
elog ""
|
||||
elog "To activate ${PN} on system start, please add ${PN} to your default runlevel:"
|
||||
elog ""
|
||||
elog " # rc-update add ${PN} default"
|
||||
fi
|
||||
|
||||
if ! has_version ${CATEGORY}/shorewall-init; then
|
||||
elog ""
|
||||
elog "Starting with shorewall-lite-4.5.21.2, Gentoo also offers ${CATEGORY}/shorewall-init,"
|
||||
elog "which we recommend to install, to protect your firewall at system boot."
|
||||
elog ""
|
||||
elog "To read more about shorewall-init, please visit"
|
||||
elog " http://www.shorewall.net/Shorewall-init.html"
|
||||
fi
|
||||
}
|
||||
@@ -1,4 +0,0 @@
|
||||
DIST shorewall-docs-html-4.5.21.10.tar.bz2 4146174 SHA256 cdbc5f3654f7cfb6f0c3b3750a7174df8fa0590dfe34df055300140b3eb13192 SHA512 94852cc094d6a485cacc4023a2819431f1bfd80b8cbcab29981c422fdff9dfee90697ae8a9bda7ded3a8be03db516bdd5f4bcc4b83e7d01bc433a8c88d23731a WHIRLPOOL 6f02d0e3255dd1e31a43193f67f9b957546a6ae574631e61364f81244bee887e7f21c38f412fa21cde77b3d89aaf0e14e43909683db0c9c32edeb455c20b998e
|
||||
DIST shorewall-docs-html-4.5.21.9.tar.bz2 4146065 SHA256 9056c22b8232d8276cc53a6eb74940bab42a250c670cb5baa42c75cfb89efdef SHA512 48b2c692ba59b7ec74307909e43a95104e212c9b8e21af7f0dd9f3438ac4f24a6fd2bcc6517966681517aef03beaa8faf03efd74406966d97b68cb416be8551b WHIRLPOOL f68cba7ecaf8c541e58d26c157914bff2d90cd9deae30af7323ca69c68d028217133f53e597bf383191aee83fab29203d233b3cd1e75e4cf08d9e17308dc25e4
|
||||
DIST shorewall6-lite-4.5.21.10.tar.bz2 78934 SHA256 5010ab69de54ff615fda10be5e343c09d44eace8ed2dda1c04467524ea3d2cb2 SHA512 c4006d5648e1a6d558fb41fa05a3832fc8a58644a0612423940be820a452f68cfada3a412c28cece9447a182b488e99c371450eb5dc28a7ed3447a04ae868538 WHIRLPOOL ad649b67e76ffcec6d6bf954aae55543b02936f1f9e56c9e156a29fe4a24fab8ef2547272f1503b68db13b0b907e21674fb5d5a170f754287768c8f2e824e869
|
||||
DIST shorewall6-lite-4.5.21.9.tar.bz2 78451 SHA256 7e062c2bcc839ee7d84e958cf45c17a6cd00cfa25d5ee12a8644ac2ff73b40bb SHA512 ec62c0564f83090818060bc743b395cc96378b4249b2a68f54bff39012324c31705d7ad3b02564a9f32bcc2f536af38cbddd704fabe0ed4516f894b0218ca56a WHIRLPOOL e44a9e1e209b4540f1c0fae77d5d7eac6809505dc8956156429cd7b745fbd2fee3ef56811ecf681d7a82e138151a2d1425c5bd30593412fd01f5c7aad62665e6
|
||||
@@ -1,15 +0,0 @@
|
||||
# Global start/restart/stop options
|
||||
#
|
||||
OPTIONS=""
|
||||
|
||||
# Start options
|
||||
#
|
||||
STARTOPTIONS=""
|
||||
|
||||
# Stop options
|
||||
#
|
||||
STOPOPTIONS=""
|
||||
|
||||
# Restart options
|
||||
#
|
||||
RESTARTOPTIONS=""
|
||||
@@ -1,82 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
description='The Shoreline Firewall 6 Lite, more commonly known as "Shorewall6 Lite", is'
|
||||
description="${description} a high-level tool for configuring Netfilter."
|
||||
|
||||
extra_commands="clear"
|
||||
extra_started_commands="reset"
|
||||
|
||||
description_clear="Clear will remove all rules and chains installed by"
|
||||
description_clear="${description_clear} Shorewall6 Lite. The firewall is"
|
||||
description_clear="${description_clear} then wide open and unprotected."
|
||||
|
||||
description_reset="All the packet and byte counters in the firewall are reset."
|
||||
|
||||
depend() {
|
||||
need net
|
||||
provide firewall
|
||||
after ulogd
|
||||
}
|
||||
|
||||
status() {
|
||||
local _retval
|
||||
/sbin/shorewall6-lite status 1>/dev/null
|
||||
_retval=$?
|
||||
if [ ${_retval} = '0' ]; then
|
||||
einfo 'status: started'
|
||||
mark_service_started "${SVCNAME}"
|
||||
return 0
|
||||
else
|
||||
einfo 'status: stopped'
|
||||
mark_service_stopped "${SVCNAME}"
|
||||
return 3
|
||||
fi
|
||||
}
|
||||
|
||||
start() {
|
||||
ebegin "Starting shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
stop() {
|
||||
ebegin "Stopping shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
restart() {
|
||||
# shorewall comes with its own control script that includes a
|
||||
# restart function, so refrain from calling svc_stop/svc_start
|
||||
# here. Note that this comment is required to fix bug 55576;
|
||||
# runscript.sh greps this script... (09 Jul 2004 agriffis)
|
||||
|
||||
ebegin "Restarting shorewall6-lite"
|
||||
/sbin/shorewall6-lite status 1>/dev/null
|
||||
if [ $? != 0 ] ; then
|
||||
svc_start
|
||||
else
|
||||
/sbin/shorewall6-lite ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
|
||||
fi
|
||||
eend $?
|
||||
}
|
||||
|
||||
clear() {
|
||||
# clear will remove all the rules and bring the system to an unfirewalled
|
||||
# state. (21 Nov 2004 eldad)
|
||||
|
||||
ebegin "Clearing all shorewall6-lite rules and setting policy to ACCEPT"
|
||||
/sbin/shorewall6-lite ${OPTIONS} clear 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
reset() {
|
||||
# reset the packet and byte counters in the firewall
|
||||
|
||||
ebegin "Resetting the packet and byte counters in shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} reset 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall 6 Lite (Shorewall6-Lite) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall IPv6 firewall lite
|
||||
Documentation=man:shorewall6-lite(8) http://www.shorewall.net/Documentation_Index.html
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
EnvironmentFile=/etc/conf.d/shorewall6-lite
|
||||
ExecStart=/sbin/shorewall6-lite $OPTIONS start $STARTOPTIONS
|
||||
ExecStop=/sbin/shorewall6-lite $OPTIONS stop $STOPOPTIONS
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,15 +0,0 @@
|
||||
# Global start/restart/stop options
|
||||
#
|
||||
OPTIONS=""
|
||||
|
||||
# Start options
|
||||
#
|
||||
STARTOPTIONS=""
|
||||
|
||||
# Stop options
|
||||
#
|
||||
STOPOPTIONS=""
|
||||
|
||||
# Restart options
|
||||
#
|
||||
RESTARTOPTIONS=""
|
||||
@@ -1,82 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
description='The Shoreline Firewall 6 Lite, more commonly known as "Shorewall6 Lite", is'
|
||||
description="${description} a high-level tool for configuring Netfilter."
|
||||
|
||||
extra_commands="clear"
|
||||
extra_started_commands="reset"
|
||||
|
||||
description_clear="Clear will remove all rules and chains installed by"
|
||||
description_clear="${description_clear} Shorewall6 Lite. The firewall is"
|
||||
description_clear="${description_clear} then wide open and unprotected."
|
||||
|
||||
description_reset="All the packet and byte counters in the firewall are reset."
|
||||
|
||||
depend() {
|
||||
need net
|
||||
provide firewall
|
||||
after ulogd
|
||||
}
|
||||
|
||||
status() {
|
||||
local _retval
|
||||
/sbin/shorewall6-lite status 1>/dev/null
|
||||
_retval=$?
|
||||
if [ ${_retval} = '0' ]; then
|
||||
einfo 'status: started'
|
||||
mark_service_started "${SVCNAME}"
|
||||
return 0
|
||||
else
|
||||
einfo 'status: stopped'
|
||||
mark_service_stopped "${SVCNAME}"
|
||||
return 3
|
||||
fi
|
||||
}
|
||||
|
||||
start() {
|
||||
ebegin "Starting shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
stop() {
|
||||
ebegin "Stopping shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
restart() {
|
||||
# shorewall comes with its own control script that includes a
|
||||
# restart function, so refrain from calling svc_stop/svc_start
|
||||
# here. Note that this comment is required to fix bug 55576;
|
||||
# runscript.sh greps this script... (09 Jul 2004 agriffis)
|
||||
|
||||
ebegin "Restarting shorewall6-lite"
|
||||
/sbin/shorewall6-lite status 1>/dev/null
|
||||
if [ $? != 0 ] ; then
|
||||
svc_start
|
||||
else
|
||||
/sbin/shorewall6-lite ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
|
||||
fi
|
||||
eend $?
|
||||
}
|
||||
|
||||
clear() {
|
||||
# clear will remove all the rules and bring the system to an unfirewalled
|
||||
# state. (21 Nov 2004 eldad)
|
||||
|
||||
ebegin "Clearing all shorewall6-lite rules and setting policy to ACCEPT"
|
||||
/sbin/shorewall6-lite ${OPTIONS} clear 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
reset() {
|
||||
# reset the packet and byte counters in the firewall
|
||||
|
||||
ebegin "Resetting the packet and byte counters in shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} reset 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall 6 Lite (Shorewall6-Lite) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall IPv6 firewall lite
|
||||
Documentation=man:shorewall6-lite(8) http://www.shorewall.net/Documentation_Index.html
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
EnvironmentFile=/etc/conf.d/shorewall6-lite
|
||||
ExecStart=/sbin/shorewall6-lite $OPTIONS start $STARTOPTIONS
|
||||
ExecStop=/sbin/shorewall6-lite $OPTIONS stop $STOPOPTIONS
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,15 +0,0 @@
|
||||
# Global start/restart/stop options
|
||||
#
|
||||
OPTIONS=""
|
||||
|
||||
# Start options
|
||||
#
|
||||
STARTOPTIONS=""
|
||||
|
||||
# Stop options
|
||||
#
|
||||
STOPOPTIONS=""
|
||||
|
||||
# Restart options
|
||||
#
|
||||
RESTARTOPTIONS=""
|
||||
@@ -1,82 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
description='The Shoreline Firewall 6 Lite, more commonly known as "Shorewall6 Lite", is'
|
||||
description="${description} a high-level tool for configuring Netfilter."
|
||||
|
||||
extra_commands="clear"
|
||||
extra_started_commands="reset"
|
||||
|
||||
description_clear="Clear will remove all rules and chains installed by"
|
||||
description_clear="${description_clear} Shorewall6 Lite. The firewall is"
|
||||
description_clear="${description_clear} then wide open and unprotected."
|
||||
|
||||
description_reset="All the packet and byte counters in the firewall are reset."
|
||||
|
||||
depend() {
|
||||
need net
|
||||
provide firewall
|
||||
after ulogd
|
||||
}
|
||||
|
||||
status() {
|
||||
local _retval
|
||||
/sbin/shorewall6-lite status 1>/dev/null
|
||||
_retval=$?
|
||||
if [ ${_retval} = '0' ]; then
|
||||
einfo 'status: started'
|
||||
mark_service_started "${SVCNAME}"
|
||||
return 0
|
||||
else
|
||||
einfo 'status: stopped'
|
||||
mark_service_stopped "${SVCNAME}"
|
||||
return 3
|
||||
fi
|
||||
}
|
||||
|
||||
start() {
|
||||
ebegin "Starting shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
stop() {
|
||||
ebegin "Stopping shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
restart() {
|
||||
# shorewall comes with its own control script that includes a
|
||||
# restart function, so refrain from calling svc_stop/svc_start
|
||||
# here. Note that this comment is required to fix bug 55576;
|
||||
# runscript.sh greps this script... (09 Jul 2004 agriffis)
|
||||
|
||||
ebegin "Restarting shorewall6-lite"
|
||||
/sbin/shorewall6-lite status 1>/dev/null
|
||||
if [ $? != 0 ] ; then
|
||||
svc_start
|
||||
else
|
||||
/sbin/shorewall6-lite ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
|
||||
fi
|
||||
eend $?
|
||||
}
|
||||
|
||||
clear() {
|
||||
# clear will remove all the rules and bring the system to an unfirewalled
|
||||
# state. (21 Nov 2004 eldad)
|
||||
|
||||
ebegin "Clearing all shorewall6-lite rules and setting policy to ACCEPT"
|
||||
/sbin/shorewall6-lite ${OPTIONS} clear 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
reset() {
|
||||
# reset the packet and byte counters in the firewall
|
||||
|
||||
ebegin "Resetting the packet and byte counters in shorewall6-lite"
|
||||
/sbin/shorewall6-lite ${OPTIONS} reset 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall 6 Lite (Shorewall6-Lite) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall IPv6 firewall lite
|
||||
Documentation=man:shorewall6-lite(8) http://www.shorewall.net/Documentation_Index.html
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
EnvironmentFile=/etc/conf.d/shorewall6-lite
|
||||
ExecStart=/sbin/shorewall6-lite $OPTIONS start $STARTOPTIONS
|
||||
ExecStop=/sbin/shorewall6-lite $OPTIONS stop $STOPOPTIONS
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,10 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
||||
<pkgmetadata>
|
||||
<herd>netmon</herd>
|
||||
<herd>proxy-maintainers</herd>
|
||||
<maintainer>
|
||||
<email>whissi@whissi.de</email>
|
||||
<name>Thomas D. (Whissi)</name>
|
||||
</maintainer>
|
||||
</pkgmetadata>
|
||||
@@ -1,107 +0,0 @@
|
||||
# Copyright 1999-2015 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils linux-info prefix systemd versionator
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
MY_P_DOCS=shorewall-docs-html-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION="An iptables-based firewall whose config is handled by a normal Shorewall6"
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="
|
||||
http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2
|
||||
doc? ( http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P_DOCS}.tar.bz2 )
|
||||
"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="~alpha ~amd64 hppa ~ppc ~ppc64 ~sparc ~x86"
|
||||
IUSE="doc"
|
||||
|
||||
DEPEND="=net-firewall/shorewall-core-${PVR}"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
>=net-firewall/iptables-1.4.20[ipv6]
|
||||
>=sys-apps/iproute2-3.8.0[-minimal]
|
||||
>=dev-perl/Socket6-0.230.0
|
||||
"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
pkg_pretend() {
|
||||
local CONFIG_CHECK="~NF_CONNTRACK ~NF_CONNTRACK_IPV6"
|
||||
|
||||
local ERROR_CONNTRACK="${PN} requires NF_CONNTRACK support."
|
||||
|
||||
local ERROR_CONNTRACK_IPV6="${PN} requires NF_CONNTRACK_IPV6 support."
|
||||
|
||||
check_extra_config
|
||||
}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.confd "${S}"/default.gentoo || die "Copying ${PN}.confd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying ${PN}.initd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.systemd "${S}"/gentoo.service || die "Copying ${PN}.systemd failed"
|
||||
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
keepdir /var/lib/${PN}
|
||||
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
|
||||
dodoc changelog.txt releasenotes.txt
|
||||
if use doc; then
|
||||
cd "${WORKDIR}/${MY_P_DOCS}"
|
||||
dohtml -r *
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z "${REPLACING_VERSIONS}" ]]; then
|
||||
# This is a new installation
|
||||
elog "Before you can use ${PN}, you need to provide a configuration, which you can"
|
||||
elog "create using ${CATEGORY}/shorewall6 (the full version, including the compiler)."
|
||||
elog ""
|
||||
elog "To activate ${PN} on system start, please add ${PN} to your default runlevel:"
|
||||
elog ""
|
||||
elog " # rc-update add ${PN} default"
|
||||
fi
|
||||
|
||||
if ! has_version ${CATEGORY}/shorewall-init; then
|
||||
elog ""
|
||||
elog "Starting with shorewall6-lite-4.5.21.2, Gentoo also offers ${CATEGORY}/shorewall-init,"
|
||||
elog "which we recommend to install, to protect your firewall at system boot."
|
||||
elog ""
|
||||
elog "To read more about shorewall-init, please visit"
|
||||
elog " http://www.shorewall.net/Shorewall-init.html"
|
||||
fi
|
||||
}
|
||||
@@ -1,107 +0,0 @@
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils linux-info prefix systemd versionator
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
MY_P_DOCS=shorewall-docs-html-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION="An iptables-based firewall whose config is handled by a normal Shorewall6"
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="
|
||||
http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2
|
||||
doc? ( http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P_DOCS}.tar.bz2 )
|
||||
"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="alpha amd64 hppa ppc ppc64 sparc x86"
|
||||
IUSE="doc"
|
||||
|
||||
DEPEND="=net-firewall/shorewall-core-${PVR}"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
>=net-firewall/iptables-1.4.20[ipv6]
|
||||
>=sys-apps/iproute2-3.8.0[-minimal]
|
||||
>=dev-perl/Socket6-0.230.0
|
||||
"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
pkg_pretend() {
|
||||
local CONFIG_CHECK="~NF_CONNTRACK ~NF_CONNTRACK_IPV6"
|
||||
|
||||
local ERROR_CONNTRACK="${PN} requires NF_CONNTRACK support."
|
||||
|
||||
local ERROR_CONNTRACK_IPV6="${PN} requires NF_CONNTRACK_IPV6 support."
|
||||
|
||||
check_extra_config
|
||||
}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.confd "${S}"/default.gentoo || die "Copying ${PN}.confd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying ${PN}.initd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.systemd "${S}"/gentoo.service || die "Copying ${PN}.systemd failed"
|
||||
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
keepdir /var/lib/${PN}
|
||||
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
|
||||
dodoc changelog.txt releasenotes.txt
|
||||
if use doc; then
|
||||
cd "${WORKDIR}/${MY_P_DOCS}"
|
||||
dohtml -r *
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z "${REPLACING_VERSIONS}" ]]; then
|
||||
# This is a new installation
|
||||
elog "Before you can use ${PN}, you need to provide a configuration, which you can"
|
||||
elog "create using ${CATEGORY}/shorewall6 (the full version, including the compiler)."
|
||||
elog ""
|
||||
elog "To activate ${PN} on system start, please add ${PN} to your default runlevel:"
|
||||
elog ""
|
||||
elog " # rc-update add ${PN} default"
|
||||
fi
|
||||
|
||||
if ! has_version ${CATEGORY}/shorewall-init; then
|
||||
elog ""
|
||||
elog "Starting with shorewall6-lite-4.5.21.2, Gentoo also offers ${CATEGORY}/shorewall-init,"
|
||||
elog "which we recommend to install, to protect your firewall at system boot."
|
||||
elog ""
|
||||
elog "To read more about shorewall-init, please visit"
|
||||
elog " http://www.shorewall.net/Shorewall-init.html"
|
||||
fi
|
||||
}
|
||||
@@ -1,4 +0,0 @@
|
||||
DIST shorewall-docs-html-4.5.21.10.tar.bz2 4146174 SHA256 cdbc5f3654f7cfb6f0c3b3750a7174df8fa0590dfe34df055300140b3eb13192 SHA512 94852cc094d6a485cacc4023a2819431f1bfd80b8cbcab29981c422fdff9dfee90697ae8a9bda7ded3a8be03db516bdd5f4bcc4b83e7d01bc433a8c88d23731a WHIRLPOOL 6f02d0e3255dd1e31a43193f67f9b957546a6ae574631e61364f81244bee887e7f21c38f412fa21cde77b3d89aaf0e14e43909683db0c9c32edeb455c20b998e
|
||||
DIST shorewall-docs-html-4.5.21.9.tar.bz2 4146065 SHA256 9056c22b8232d8276cc53a6eb74940bab42a250c670cb5baa42c75cfb89efdef SHA512 48b2c692ba59b7ec74307909e43a95104e212c9b8e21af7f0dd9f3438ac4f24a6fd2bcc6517966681517aef03beaa8faf03efd74406966d97b68cb416be8551b WHIRLPOOL f68cba7ecaf8c541e58d26c157914bff2d90cd9deae30af7323ca69c68d028217133f53e597bf383191aee83fab29203d233b3cd1e75e4cf08d9e17308dc25e4
|
||||
DIST shorewall6-4.5.21.10.tar.bz2 252715 SHA256 1932c54f16750840985257abf27d7dc77235eacdb00560be8424ec9357747c62 SHA512 e436e7020213bbd1da688461eeac969d47b862a8f97c870af610c1e6aae9e01c626d5f9e15c2b500257c3ff5ac97fa63722cf99e10deac03fda9bd284baf907a WHIRLPOOL 15f5e07bce8d88c6fae69d05d261ebc107e2a2f340107748427bc6cfcddec7ad26caee61c28ca006d60425c9cfd6e4eaa1b2b59ea6fcb6f8c8ba44c5c00789ba
|
||||
DIST shorewall6-4.5.21.9.tar.bz2 252533 SHA256 2c4606fffc49b0129ec79142493949d8efe15bdef4f6e1619af32e694cbd5aba SHA512 91be0dd55485d56b33f52a91f315562998e6aaf7f2f5ddcb1882fcda589146132810d0f1d5ae2ab6e6ec1256319084969e1499bdd3f37e5a63e0cc65d5ed77bb WHIRLPOOL 7e129116662c8501fb12b23f9552a01d9ae14501194376026ea43758d1470ee7739ff90e26985c7d1e9e9a8c7db7cfdc26b64943e8e470893f5d38d7ef51509a
|
||||
@@ -1,15 +0,0 @@
|
||||
# Global start/restart/stop options
|
||||
#
|
||||
OPTIONS=""
|
||||
|
||||
# Start options
|
||||
#
|
||||
STARTOPTIONS=""
|
||||
|
||||
# Stop options
|
||||
#
|
||||
STOPOPTIONS=""
|
||||
|
||||
# Restart options
|
||||
#
|
||||
RESTARTOPTIONS=""
|
||||
@@ -1,107 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
description='The Shoreline Firewall 6, more commonly known as "Shorewall6", is'
|
||||
description="${description} a high-level tool for configuring Netfilter."
|
||||
|
||||
extra_commands="check clear"
|
||||
extra_started_commands="refresh reset"
|
||||
|
||||
description_check="Checks if the configuration will compile or not."
|
||||
|
||||
description_clear="Clear will remove all rules and chains installed by"
|
||||
description_clear="${description_clear} Shorewall6. The firewall is then"
|
||||
description_clear="${description_clear} wide open and unprotected."
|
||||
|
||||
description_refresh="The mangle table will be refreshed along with the"
|
||||
description_refresh="${description_refresh} blacklist chain (if any)."
|
||||
|
||||
description_reset="All the packet and byte counters in the firewall are reset."
|
||||
|
||||
depend() {
|
||||
need net
|
||||
provide firewall
|
||||
after ulogd
|
||||
}
|
||||
|
||||
status() {
|
||||
local _retval
|
||||
/sbin/shorewall6 status 1>/dev/null
|
||||
_retval=$?
|
||||
if [ ${_retval} = '0' ]; then
|
||||
einfo 'status: started'
|
||||
mark_service_started "${SVCNAME}"
|
||||
return 0
|
||||
else
|
||||
einfo 'status: stopped'
|
||||
mark_service_stopped "${SVCNAME}"
|
||||
return 3
|
||||
fi
|
||||
}
|
||||
|
||||
start() {
|
||||
ebegin "Starting shorewall6"
|
||||
/sbin/shorewall6 ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
stop() {
|
||||
ebegin "Stopping shorewall6"
|
||||
/sbin/shorewall6 ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
restart() {
|
||||
# shorewall comes with its own control script that includes a
|
||||
# restart function, so refrain from calling svc_stop/svc_start
|
||||
# here. Note that this comment is required to fix bug 55576;
|
||||
# runscript.sh greps this script... (09 Jul 2004 agriffis)
|
||||
|
||||
ebegin "Restarting shorewall6"
|
||||
/sbin/shorewall6 status 1>/dev/null
|
||||
if [ $? != 0 ] ; then
|
||||
svc_start
|
||||
else
|
||||
/sbin/shorewall6 ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
|
||||
fi
|
||||
eend $?
|
||||
}
|
||||
|
||||
clear() {
|
||||
# clear will remove all the rules and bring the system to an unfirewalled
|
||||
# state. (21 Nov 2004 eldad)
|
||||
|
||||
ebegin "Clearing all shorewall rules and setting policy to ACCEPT"
|
||||
/sbin/shorewall6 ${OPTIONS} clear 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
reset() {
|
||||
# reset the packet and byte counters in the firewall
|
||||
|
||||
ebegin "Resetting the packet and byte counters in shorewall6"
|
||||
/sbin/shorewall6 ${OPTIONS} reset 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
refresh() {
|
||||
# refresh the rules involving the broadcast addresses of firewall
|
||||
# interfaces, the black list, traffic control rules and
|
||||
# ECN control rules
|
||||
|
||||
ebegin "Refreshing shorewall6 rules"
|
||||
/sbin/shorewall6 ${OPTIONS} refresh 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
check() {
|
||||
# perform cursory validation of the zones, interfaces, hosts, rules
|
||||
# and policy files. CAUTION: does not parse and validate the generated
|
||||
# iptables commands.
|
||||
|
||||
ebegin "Checking shorewall6 configuration"
|
||||
/sbin/shorewall6 ${OPTIONS} check 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall 6 (Shorewall6) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall IPv6 firewall
|
||||
Documentation=man:shorewall6(8) http://www.shorewall.net/Documentation_Index.html
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
EnvironmentFile=/etc/conf.d/shorewall6
|
||||
ExecStart=/sbin/shorewall6 $OPTIONS start $STARTOPTIONS
|
||||
ExecStop=/sbin/shorewall6 $OPTIONS stop $STOPOPTIONS
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,15 +0,0 @@
|
||||
# Global start/restart/stop options
|
||||
#
|
||||
OPTIONS=""
|
||||
|
||||
# Start options
|
||||
#
|
||||
STARTOPTIONS=""
|
||||
|
||||
# Stop options
|
||||
#
|
||||
STOPOPTIONS=""
|
||||
|
||||
# Restart options
|
||||
#
|
||||
RESTARTOPTIONS=""
|
||||
@@ -1,107 +0,0 @@
|
||||
#!/sbin/runscript
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
description='The Shoreline Firewall 6, more commonly known as "Shorewall6", is'
|
||||
description="${description} a high-level tool for configuring Netfilter."
|
||||
|
||||
extra_commands="check clear"
|
||||
extra_started_commands="refresh reset"
|
||||
|
||||
description_check="Checks if the configuration will compile or not."
|
||||
|
||||
description_clear="Clear will remove all rules and chains installed by"
|
||||
description_clear="${description_clear} Shorewall6. The firewall is then"
|
||||
description_clear="${description_clear} wide open and unprotected."
|
||||
|
||||
description_refresh="The mangle table will be refreshed along with the"
|
||||
description_refresh="${description_refresh} blacklist chain (if any)."
|
||||
|
||||
description_reset="All the packet and byte counters in the firewall are reset."
|
||||
|
||||
depend() {
|
||||
need net
|
||||
provide firewall
|
||||
after ulogd
|
||||
}
|
||||
|
||||
status() {
|
||||
local _retval
|
||||
/sbin/shorewall6 status 1>/dev/null
|
||||
_retval=$?
|
||||
if [ ${_retval} = '0' ]; then
|
||||
einfo 'status: started'
|
||||
mark_service_started "${SVCNAME}"
|
||||
return 0
|
||||
else
|
||||
einfo 'status: stopped'
|
||||
mark_service_stopped "${SVCNAME}"
|
||||
return 3
|
||||
fi
|
||||
}
|
||||
|
||||
start() {
|
||||
ebegin "Starting shorewall6"
|
||||
/sbin/shorewall6 ${OPTIONS} start ${STARTOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
stop() {
|
||||
ebegin "Stopping shorewall6"
|
||||
/sbin/shorewall6 ${OPTIONS} stop ${STOPOPTIONS} 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
restart() {
|
||||
# shorewall comes with its own control script that includes a
|
||||
# restart function, so refrain from calling svc_stop/svc_start
|
||||
# here. Note that this comment is required to fix bug 55576;
|
||||
# runscript.sh greps this script... (09 Jul 2004 agriffis)
|
||||
|
||||
ebegin "Restarting shorewall6"
|
||||
/sbin/shorewall6 status 1>/dev/null
|
||||
if [ $? != 0 ] ; then
|
||||
svc_start
|
||||
else
|
||||
/sbin/shorewall6 ${OPTIONS} restart ${RESTARTOPTIONS} 1>/dev/null
|
||||
fi
|
||||
eend $?
|
||||
}
|
||||
|
||||
clear() {
|
||||
# clear will remove all the rules and bring the system to an unfirewalled
|
||||
# state. (21 Nov 2004 eldad)
|
||||
|
||||
ebegin "Clearing all shorewall rules and setting policy to ACCEPT"
|
||||
/sbin/shorewall6 ${OPTIONS} clear 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
reset() {
|
||||
# reset the packet and byte counters in the firewall
|
||||
|
||||
ebegin "Resetting the packet and byte counters in shorewall6"
|
||||
/sbin/shorewall6 ${OPTIONS} reset 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
refresh() {
|
||||
# refresh the rules involving the broadcast addresses of firewall
|
||||
# interfaces, the black list, traffic control rules and
|
||||
# ECN control rules
|
||||
|
||||
ebegin "Refreshing shorewall6 rules"
|
||||
/sbin/shorewall6 ${OPTIONS} refresh 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
|
||||
check() {
|
||||
# perform cursory validation of the zones, interfaces, hosts, rules
|
||||
# and policy files. CAUTION: does not parse and validate the generated
|
||||
# iptables commands.
|
||||
|
||||
ebegin "Checking shorewall6 configuration"
|
||||
/sbin/shorewall6 ${OPTIONS} check 1>/dev/null
|
||||
eend $?
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
#
|
||||
# The Shoreline Firewall 6 (Shorewall6) Packet Filtering Firewall - V4.5
|
||||
#
|
||||
[Unit]
|
||||
Description=Shorewall IPv6 firewall
|
||||
Documentation=man:shorewall6(8) http://www.shorewall.net/Documentation_Index.html
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
EnvironmentFile=/etc/conf.d/shorewall6
|
||||
ExecStart=/sbin/shorewall6 $OPTIONS start $STARTOPTIONS
|
||||
ExecStop=/sbin/shorewall6 $OPTIONS stop $STOPOPTIONS
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
@@ -1,23 +0,0 @@
|
||||
#
|
||||
# Gentoo Shorewall 4.5 rc file
|
||||
#
|
||||
BUILD= #Default is to detect the build system
|
||||
HOST=gentoo #Gentoo GNU Linux
|
||||
PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc.
|
||||
SHAREDIR=${PREFIX}/share #Directory for arch-neutral files.
|
||||
LIBEXECDIR=${PREFIX}/share #Directory for executable scripts.
|
||||
PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory
|
||||
CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed
|
||||
SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed
|
||||
MANDIR=${PREFIX}/share/man #Directory where manpages are installed.
|
||||
INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed.
|
||||
INITFILE=${PRODUCT} #Name of the product's installed SysV init script
|
||||
INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script
|
||||
ANNOTATED= #If non-zero, annotated configuration files are installed
|
||||
SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only)
|
||||
SERVICEFILE=gentoo.service #Name of the distributed file to be installed as systemd service file
|
||||
SYSCONFFILE=default.gentoo #Name of the distributed file to be installed in $SYSCONFDIR
|
||||
SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed
|
||||
SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR
|
||||
VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored.
|
||||
VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored.
|
||||
@@ -1,10 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
||||
<pkgmetadata>
|
||||
<herd>netmon</herd>
|
||||
<herd>proxy-maintainers</herd>
|
||||
<maintainer>
|
||||
<email>whissi@whissi.de</email>
|
||||
<name>Thomas D. (Whissi)</name>
|
||||
</maintainer>
|
||||
</pkgmetadata>
|
||||
@@ -1,112 +0,0 @@
|
||||
# Copyright 1999-2015 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils linux-info prefix systemd versionator
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
MY_P_DOCS=shorewall-docs-html-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION='The Shoreline Firewall, commonly known as Shorewall,'
|
||||
DESCRIPTION+=' IPv6 component'
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="
|
||||
http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2
|
||||
doc? ( http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P_DOCS}.tar.bz2 )
|
||||
"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="~alpha ~amd64 hppa ~ppc ~ppc64 ~sparc ~x86"
|
||||
IUSE="doc"
|
||||
|
||||
DEPEND="=net-firewall/shorewall-${PVR}"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
>=net-firewall/iptables-1.4.20[ipv6]
|
||||
>=sys-apps/iproute2-3.8.0[-minimal]
|
||||
>=dev-perl/Socket6-0.230.0
|
||||
"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
pkg_pretend() {
|
||||
local CONFIG_CHECK="~NF_CONNTRACK ~NF_CONNTRACK_IPV6"
|
||||
|
||||
local WARNING_CONNTRACK="Without NF_CONNTRACK support, you will be unable"
|
||||
local WARNING_CONNTRACK+=" to run ${PN} on the local system."
|
||||
|
||||
local WARNING_CONNTRACK_IPV6="Without NF_CONNTRACK_IPV6 support, you will"
|
||||
local WARNING_CONNTRACK_IPV6+=" be unable to run ${PN} on the local system."
|
||||
|
||||
check_extra_config
|
||||
}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.confd "${S}"/default.gentoo || die "Copying ${PN}.confd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying ${PN}.initd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.systemd "${S}"/gentoo.service || die "Copying ${PN}.systemd failed"
|
||||
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
keepdir /var/lib/${PN}
|
||||
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
|
||||
dodoc changelog.txt releasenotes.txt
|
||||
if use doc; then
|
||||
dodoc -r Samples6
|
||||
cd "${WORKDIR}"/${MY_P_DOCS}
|
||||
dohtml -r *
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z "${REPLACING_VERSIONS}" ]]; then
|
||||
# This is a new installation
|
||||
elog "Before you can use ${PN}, you need to edit its configuration in:"
|
||||
elog ""
|
||||
elog " ${EPREFIX}/etc/${PN}/${PN}.conf"
|
||||
elog ""
|
||||
elog "To activate ${PN} on system start, please add ${PN} to your default runlevel:"
|
||||
elog ""
|
||||
elog " # rc-update add ${PN} default"
|
||||
fi
|
||||
|
||||
if ! has_version ${CATEGORY}/shorewall-init; then
|
||||
elog ""
|
||||
elog "Starting with shorewall6-4.5.21.2, Gentoo also offers ${CATEGORY}/shorewall-init,"
|
||||
elog "which we recommend to install, to protect your firewall at system boot."
|
||||
elog ""
|
||||
elog "To read more about shorewall-init, please visit"
|
||||
elog " http://www.shorewall.net/Shorewall-init.html"
|
||||
fi
|
||||
}
|
||||
@@ -1,112 +0,0 @@
|
||||
# Copyright 1999-2014 Gentoo Foundation
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
# $Id$
|
||||
|
||||
EAPI="5"
|
||||
|
||||
inherit eutils linux-info prefix systemd versionator
|
||||
|
||||
MY_URL_PREFIX=
|
||||
case ${P} in
|
||||
*_beta* | \
|
||||
*_rc*)
|
||||
MY_URL_PREFIX='development/'
|
||||
;;
|
||||
esac
|
||||
|
||||
MY_PV=${PV/_rc/-RC}
|
||||
MY_PV=${MY_PV/_beta/-Beta}
|
||||
MY_P=${PN}-${MY_PV}
|
||||
MY_P_DOCS=shorewall-docs-html-${MY_PV}
|
||||
|
||||
MY_MAJOR_RELEASE_NUMBER=$(get_version_component_range 1-2)
|
||||
MY_MAJORMINOR_RELEASE_NUMBER=$(get_version_component_range 1-3)
|
||||
|
||||
DESCRIPTION='The Shoreline Firewall, commonly known as Shorewall,'
|
||||
DESCRIPTION+=' IPv6 component'
|
||||
HOMEPAGE="http://www.shorewall.net/"
|
||||
SRC_URI="
|
||||
http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P}.tar.bz2
|
||||
doc? ( http://www1.shorewall.net/pub/shorewall/${MY_URL_PREFIX}${MY_MAJOR_RELEASE_NUMBER}/shorewall-${MY_MAJORMINOR_RELEASE_NUMBER}/${MY_P_DOCS}.tar.bz2 )
|
||||
"
|
||||
|
||||
LICENSE="GPL-2"
|
||||
SLOT="0"
|
||||
KEYWORDS="alpha amd64 hppa ppc ppc64 sparc x86"
|
||||
IUSE="doc"
|
||||
|
||||
DEPEND="=net-firewall/shorewall-${PVR}"
|
||||
RDEPEND="
|
||||
${DEPEND}
|
||||
>=net-firewall/iptables-1.4.20[ipv6]
|
||||
>=sys-apps/iproute2-3.8.0[-minimal]
|
||||
>=dev-perl/Socket6-0.230.0
|
||||
"
|
||||
|
||||
S=${WORKDIR}/${MY_P}
|
||||
|
||||
pkg_pretend() {
|
||||
local CONFIG_CHECK="~NF_CONNTRACK ~NF_CONNTRACK_IPV6"
|
||||
|
||||
local WARNING_CONNTRACK="Without NF_CONNTRACK support, you will be unable"
|
||||
local WARNING_CONNTRACK+=" to run ${PN} on the local system."
|
||||
|
||||
local WARNING_CONNTRACK_IPV6="Without NF_CONNTRACK_IPV6 support, you will"
|
||||
local WARNING_CONNTRACK_IPV6+=" be unable to run ${PN} on the local system."
|
||||
|
||||
check_extra_config
|
||||
}
|
||||
|
||||
src_prepare() {
|
||||
cp "${FILESDIR}"/${PVR}/shorewallrc "${S}"/shorewallrc.gentoo || die "Copying shorewallrc failed"
|
||||
eprefixify "${S}"/shorewallrc.gentoo
|
||||
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.confd "${S}"/default.gentoo || die "Copying ${PN}.confd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying ${PN}.initd failed"
|
||||
cp "${FILESDIR}"/${PVR}/${PN}.systemd "${S}"/gentoo.service || die "Copying ${PN}.systemd failed"
|
||||
|
||||
epatch_user
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
:;
|
||||
}
|
||||
|
||||
src_install() {
|
||||
keepdir /var/lib/${PN}
|
||||
|
||||
DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed"
|
||||
|
||||
dodoc changelog.txt releasenotes.txt
|
||||
if use doc; then
|
||||
dodoc -r Samples6
|
||||
cd "${WORKDIR}"/${MY_P_DOCS}
|
||||
dohtml -r *
|
||||
fi
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
if [[ -z "${REPLACING_VERSIONS}" ]]; then
|
||||
# This is a new installation
|
||||
elog "Before you can use ${PN}, you need to edit its configuration in:"
|
||||
elog ""
|
||||
elog " ${EPREFIX}/etc/${PN}/${PN}.conf"
|
||||
elog ""
|
||||
elog "To activate ${PN} on system start, please add ${PN} to your default runlevel:"
|
||||
elog ""
|
||||
elog " # rc-update add ${PN} default"
|
||||
fi
|
||||
|
||||
if ! has_version ${CATEGORY}/shorewall-init; then
|
||||
elog ""
|
||||
elog "Starting with shorewall6-4.5.21.2, Gentoo also offers ${CATEGORY}/shorewall-init,"
|
||||
elog "which we recommend to install, to protect your firewall at system boot."
|
||||
elog ""
|
||||
elog "To read more about shorewall-init, please visit"
|
||||
elog " http://www.shorewall.net/Shorewall-init.html"
|
||||
fi
|
||||
}
|
||||
Reference in New Issue
Block a user