Page MenuHomeFreeBSD
Files F172236917

D7712.id19847.diff
No OneTemporary
Actions

D7712.id19847.diff
View Options

Index: security/snort2pfcd/Makefile
===================================================================
--- /dev/null
+++ security/snort2pfcd/Makefile
@@ -0,0 +1,26 @@
+# $FreeBSD$
+
+PORTNAME= snort2pfcd
+PORTVERSION= 0.5
+CATEGORIES= security
+MASTER_SITES= http://www.tworoutes.com/oss/
+
+MAINTAINER= onestsam@gmail.com
+COMMENT= Snort alert to pf blocker
+
+LIB_DEPENDS= libcidr.so:devel/libcidr
+RUN_DEPENDS= snort:security/snort
+
+USE_RC_SUBR= snort2pfcd
+PLIST_FILES= sbin/snort2pfcd
+
+OPTIONS_DEFINE= MANPAGES
+OPTIONS_DEFAULT= MANPAGES
+MANPAGES_PLIST_FILES= man/man8/snort2pfcd.8.gz
+
+do-install:
+ ${INSTALL_PROGRAM} ${WRKSRC}/snort2pfcd ${STAGEDIR}${PREFIX}/sbin
+do-install-MANPAGES-on:
+ ${INSTALL_MAN} ${WRKSRC}/snort2pfcd.8.gz ${STAGEDIR}${MAN8PREFIX}/man/man8
+
+.include <bsd.port.mk>
Index: security/snort2pfcd/distinfo
===================================================================
--- /dev/null
+++ security/snort2pfcd/distinfo
@@ -0,0 +1,3 @@
+TIMESTAMP = 1472559141
+SHA256 (snort2pfcd-0.5.tar.gz) = ea2f3df7bfbad5ecce7a266df89c4102cf5e92fa72869615925ca15631064dfe
+SIZE (snort2pfcd-0.5.tar.gz) = 9321
Index: security/snort2pfcd/files/patch-Makefile
===================================================================
--- /dev/null
+++ security/snort2pfcd/files/patch-Makefile
@@ -0,0 +1,11 @@
+--- Makefile.orig 2016-08-30 14:07:38 UTC
++++ Makefile
+@@ -1,7 +1,7 @@
+ PROG= snort2pfcd
+ SRCS= main.c parser.c kevent.c spfc.c ioctl_helpers.c
+ MAN= ${PROG}.8
+-CFLAGS+=-Wall -Werror -pedantic
++CFLAGS+=-Wall -pedantic -I${LOCALBASE}/include
+ LDFLAGS+=-lutil -L${LOCALBASE}/lib -lcidr
+
+ .include <bsd.prog.mk>
Index: security/snort2pfcd/files/snort2pfcd.in
===================================================================
--- /dev/null
+++ security/snort2pfcd/files/snort2pfcd.in
@@ -0,0 +1,45 @@
+#!/bin/sh
+
+# PROVIDE: snort2pfcd
+# REQUIRE: DAEMON pf snort
+# KEYWORD: shutdown
+
+. /etc/rc.subr
+
+name="snort2pfcd"
+rcvar=${name}_enable
+pidfile="/var/run/${name}.pid"
+command="%%PREFIX%%/sbin/${name}"
+start_cmd="${name}_start"
+stop_cmd="${name}_stop"
+required_modules="pf"
+
+snort2pfcd_start()
+{
+ echo "Starting ${name}..."
+ if [ $(sysctl -n kern.securelevel) != "3" ]; then
+ ${command} ${snort2pfcd_flags}
+ else
+ echo "${name} cannot operate on pf at securelevel 3"
+ fi
+
+ if [ -f ${pidfile} ]; then
+ echo "${name} successfully started"
+ else
+ echo "${name} statup failed"
+ fi
+}
+
+snort2pfcd_stop()
+{
+ if [ -f ${pidfile} ]; then
+ echo "Stopping ${name}..."
+ kill $(cat ${pidfile})
+ rm ${pidfile}
+ else
+ echo "${name} is not running?"
+ fi
+}
+
+load_rc_config ${name}
+run_rc_command "$1"
Index: security/snort2pfcd/pkg-descr
===================================================================
--- /dev/null
+++ security/snort2pfcd/pkg-descr
@@ -0,0 +1,3 @@
+Analyzes snort alert output and blocks ip addresses using pf for a specified
+period of time. A whitelist is specified in CIDR format to exclude local and
+trusted ip address from being blocked.

File Metadata

Mime Type
text/plain
Expires
Fri, Sep 18, 3:23 AM (14 h, 37 s)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
39117721
Default Alt Text
D7712.id19847.diff (2 KB)

Event Timeline