[leaf-commits] src/bering-uclibc4/source/shorewall accounting.file, 1.2, 1.3 buildtool.cfg, 1.2, 1.3 buildtool.mk, 1.2, 1.3 buildtool.seperatepackages, NONE, 1.1 common.cfg, 1.2, 1.3 maclist.file, 1.2, 1.3 providers.file, 1.2, 1.3 proxyarp.file, 1.2, 1.3 shorewall-config.diff, 1.2, 1.3 shorewall-default, 1.2, 1.3 shorewall-lrp.diff, 1.2, 1.3 tc.file, 1.2, 1.3 tcrules.file, 1.2, 1.3 tunnels.file, 1.2, 1.3
KP Kirchd?rfer <[email protected]>
| Newsgroups | gmane.linux.leaf.cvs |
|---|---|
| Message-ID | <[email protected]> |
Update of /cvsroot/leaf/src/bering-uclibc4/source/shorewall
In directory sfp-cvsdas-2.v30.ch3.sourceforge.com:/tmp/cvs-serv16093
Added Files:
accounting.file buildtool.cfg buildtool.mk
buildtool.seperatepackages common.cfg maclist.file
providers.file proxyarp.file shorewall-config.diff
shorewall-default shorewall-lrp.diff tc.file tcrules.file
tunnels.file
Log Message:
shorewall 4.4.10.2
The perl-based version of shorewall.
--- NEW FILE: tcrules.file ---
<File>
Filename = etc/shorewall/tcrules
Source = etc/shorewall/tcrules
Permissions = 600
Description = TCRules FWMark Rules
Type = binary
Type = conf
</File>
--- NEW FILE: providers.file ---
<File>
Filename = etc/shorewall/providers
Source = etc/shorewall/providers
Permissions = 600
Description = Providers Additional routing table
Type = binary
Type = conf
</File>
--- NEW FILE: shorewall-default ---
#
# Shoreline Firewall startup options
#
# Any flags that appear in this file will be passed to shorewall
# by init.d on startup.
#
# -f = fast
# -q = quiet
#
OPTIONS="-f"
# if your Shorewall configuration requires detection of the ip address of a ppp
# interface, you must list such interfaces in "wait_interface" to get Shorewall
# wait until the interface is configured. Otherwise the script will fail because
# it won't be able to detect the IP address.
#
# Example:
# wait_interface="ppp0"
# or
# wait_interface="ppp0 ppp1"
#
#wait_interface="ppp0"
--- NEW FILE: tunnels.file ---
<File>
Filename = etc/shorewall/tunnels
Source = etc/shorewall/tunnels
Permissions = 600
Description = Tunnels Tunnel Definition (ipsec
Type = binary
Type = conf
</File>
--- NEW FILE: maclist.file ---
<File>
Filename = etc/shorewall/maclist
Source = etc/shorewall/maclist
Permissions = 600
Description = Maclist MAC Verification
Type = binary
Type = conf
</File>
--- NEW FILE: proxyarp.file ---
<File>
Filename = etc/shorewall/proxyarp
Source = etc/shorewall/proxyarp
Permissions = 600
Description = ProxyArp Proxy ARP Configuration
Type = binary
Type = conf
</File>
--- NEW FILE: accounting.file ---
<File>
Filename = etc/shorewall/accounting
Source = etc/shorewall/accounting
Permissions = 600
Description = Account Traffic Accounting Rules
Type = binary
Type = conf
</File>
--- NEW FILE: shorewall-lrp.diff ---
diff -urN shorewall-4.4.10.orig/configfiles/start shorewall-4.4.10/configfiles/start
--- shorewall-4.4.10.orig/configfiles/start 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/configfiles/start 2010-06-18 14:42:38.000000000 +0200
@@ -10,4 +10,7 @@
# information.
#
###############################################################################
+for file in /etc/shorewall/start.d/* ; do
+ run_user_exit $file
+done
return 0
diff -urN shorewall-4.4.10.orig/configfiles/stop shorewall-4.4.10/configfiles/stop
--- shorewall-4.4.10.orig/configfiles/stop 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/configfiles/stop 2010-06-18 14:43:18.000000000 +0200
@@ -10,3 +10,6 @@
# information.
#
###############################################################################
+for file in /etc/shorewall/stop.d/* ; do
+ run_user_exit $file
+done
diff -urN shorewall-4.4.10.orig/configfiles/shorewall.conf shorewall-4.4.10/configfiles/shorewall.conf
--- shorewall-4.4.10.orig/configfiles/shorewall.conf 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/configfiles/shorewall.conf 2010-06-18 14:47:29.000000000 +0200
@@ -9,7 +9,7 @@
# S T A R T U P E N A B L E D
###############################################################################
-STARTUP_ENABLED=No
+STARTUP_ENABLED=Yes
###############################################################################
# V E R B O S I T Y
@@ -21,9 +21,9 @@
# L O G G I N G
###############################################################################
-LOGFILE=/var/log/messages
+LOGFILE=/var/log/shorewall.log
-STARTUP_LOG=/var/log/shorewall-init.log
+STARTUP_LOG=/var/log/shorewall.log
LOG_VERBOSITY=2
@@ -63,7 +63,7 @@
SHOREWALL_SHELL=/bin/sh
-SUBSYSLOCK=/var/lock/subsys/shorewall
+SUBSYSLOCK=/var/run/shorewall
MODULESDIR=
@@ -130,7 +130,7 @@
MODULE_SUFFIX=ko
-DISABLE_IPV6=No
+DISABLE_IPV6=Yes
BRIDGING=No
diff -urN shorewall-4.4.10.orig/init.debian.sh shorewall-4.4.10/init.debian.sh
--- shorewall-4.4.10.orig/init.debian.sh 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/init.debian.sh 2010-06-18 14:56:53.000000000 +0200
@@ -1,70 +1,16 @@
#!/bin/sh
-### BEGIN INIT INFO
-# Provides: shorewall
-# Required-Start: $network $remote_fs
-# Required-Stop: $network $remote_fs
-# Default-Start: S
-# Default-Stop: 0 6
-# Short-Description: Configure the firewall at boot time
-# Description: Configure the firewall according to the rules specified in
-# /etc/shorewall
-### END INIT INFO
-
+RCDLINKS="2,S19 3,S19 4,S19 5,S19 0,K91 6,K91"
SRWL=/sbin/shorewall
-SRWL_OPTS="-tvv"
WAIT_FOR_IFUP=/usr/share/shorewall/wait4ifup
-test -n ${INITLOG:=/var/log/shorewall-init.log}
-
-test -x $SRWL || exit 0
-test -x $WAIT_FOR_IFUP || exit 0
-test -n "$INITLOG" || {
- echo "INITLOG cannot be empty, please configure $0" ;
- exit 1;
-}
-
-if [ "$(id -u)" != "0" ]
-then
- echo "You must be root to start, stop or restart \"Shorewall firewall\"."
- exit 1
-fi
-echo_notdone () {
+# parse the shorewall params file in order to use params in
+# /etc/default/shorewall
- if [ "$INITLOG" = "/dev/null" ] ; then
- echo "not done."
- else
- echo "not done (check $INITLOG)."
- fi
-
- exit 1
-}
-
-not_configured () {
- echo "#### WARNING ####"
- echo "The firewall won't be started/stopped unless it is configured"
- if [ "$1" != "stop" ]
- then
- echo ""
- echo "Please read about Debian specific customization in"
- echo "/usr/share/doc/shorewall/README.Debian.gz."
- fi
- echo "#################"
- exit 0
-}
-
-# check if shorewall is configured or not
if [ -f "/etc/default/shorewall" ]
then
. /etc/default/shorewall
- SRWL_OPTS="$SRWL_OPTS $OPTIONS"
- if [ "$startup" != "1" ]
- then
- not_configured
- fi
-else
- not_configured
fi
[ "$INITLOG" = "/dev/null" ] && SHOREWALL_INIT_SCRIPT=1 || SHOREWALL_INIT_SCRIPT=0
@@ -75,10 +21,16 @@
wait_for_pppd () {
if [ "$wait_interface" != "" ]
then
+ if [ -f $WAIT_FOR_IFUP ]
+ then
for i in $wait_interface
do
$WAIT_FOR_IFUP $i 90
done
+ else
+ echo "$WAIT_FOR_IFUP: File not found"
+ exit 2
+ fi
fi
}
@@ -86,7 +38,7 @@
shorewall_start () {
echo -n "Starting \"Shorewall firewall\": "
wait_for_pppd
- $SRWL $SRWL_OPTS start >> $INITLOG 2>&1 && echo "done." || echo_notdone
+ $SRWL $OPTIONS start 2>&1 && echo "done."
return 0
}
@@ -94,24 +46,24 @@
shorewall_stop () {
echo -n "Stopping \"Shorewall firewall\": "
if [ "$SAFESTOP" = 1 ]; then
- $SRWL $SRWL_OPTS stop >> $INITLOG 2>&1 && echo "done." || echo_notdone
+ $SRWL $OPTIONS stop 2>&1 && echo "done."
else
- $SRWL $SRWL_OPTS clear >> $INITLOG 2>&1 && echo "done." || echo_notdone
- fi
+ $SRWL $OPTIONS clear 2>&1 && echo "done."
+ fi
return 0
}
# restart the firewall
shorewall_restart () {
echo -n "Restarting \"Shorewall firewall\": "
- $SRWL $SRWL_OPTS restart >> $INITLOG 2>&1 && echo "done." || echo_notdone
+ $SRWL $OPTIONS start 2>&1 && echo "done."
return 0
}
# refresh the firewall
shorewall_refresh () {
echo -n "Refreshing \"Shorewall firewall\": "
- $SRWL $SRWL_OPTS refresh >> $INITLOG 2>&1 && echo "done." || echo_notdone
+ $SRWL refresh 2>&1 && echo "done."
return 0
}
--- NEW FILE: shorewall-config.diff ---
diff -urN shorewall-4.4.10.orig/configfiles/interfaces shorewall-4.4.10/configfiles/interfaces
--- shorewall-4.4.10.orig/configfiles/interfaces 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/configfiles/interfaces 2010-06-26 10:18:30.000000000 +0200
@@ -8,3 +8,5 @@
#
###############################################################################
#ZONE INTERFACE BROADCAST OPTIONS
+net eth0 detect dhcp
+loc eth1 detect dhcp
diff -urN shorewall-4.4.10.orig/configfiles/policy shorewall-4.4.10/configfiles/policy
--- shorewall-4.4.10.orig/configfiles/policy 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/configfiles/policy 2010-06-26 10:20:17.000000000 +0200
@@ -9,3 +9,11 @@
###############################################################################
#SOURCE DEST POLICY LOG LIMIT: CONNLIMIT:
# LEVEL BURST MASK
+loc net ACCEPT
+net all DROP ULOG
+# If you want open access to the Internet from your Firewall
+# remove the comment from the following line.
+#fw net ACCEPT
+# THE FOLLOWING POLICY MUST BE LAST
+#
+all all REJECT ULOG
diff -urN shorewall-4.4.10.orig/configfiles/zones shorewall-4.4.10/configfiles/zones
--- shorewall-4.4.10.orig/configfiles/zones 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/configfiles/zones 2010-06-18 16:50:41.000000000 +0200
@@ -10,3 +10,6 @@
#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
+net ipv4
+loc ipv4
+#dmz ipv4
diff -urN shorewall-4.4.10.orig/configfiles/rules shorewall-4.4.10/configfiles/rules
--- shorewall-4.4.10.orig/configfiles/rules 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/configfiles/rules 2010-06-26 10:21:00.000000000 +0200
@@ -12,3 +12,28 @@
#SECTION ESTABLISHED
#SECTION RELATED
SECTION NEW
+# Accept DNS connections from the firewall to the network
+# and from the local network to the firewall (in case dnsmasq is running)
+DNS/ACCEPT fw net
+DNS/ACCEPT loc fw
+
+# Accept SSH connections from the local network for administration
+#
+SSH/ACCEPT loc fw
+
+# Allow Ping to Firewall
+#
+Ping/ACCEPT net fw
+Ping/ACCEPT loc fw
+#
+# Allow all ICMP types (including ping) from firewall
+ACCEPT fw loc icmp
+ACCEPT fw net icmp
+# Allow local network to access weblet/webconf
+#
+HTTP/ACCEPT loc fw
+HTTPS/ACCEPT loc fw
+# timeserver (allow syncing with time servers (default: pool.ntp.org))
+NTP/ACCEPT fw net
+# timeserver (allow LAN clients to sync with the time service on the router)
+# NTP/ACCEPT loc fw
diff -urN shorewall-4.4.10.orig/configfiles/masq shorewall-4.4.10/configfiles/masq
--- shorewall-4.4.10.orig/configfiles/masq 2010-06-09 00:57:45.000000000 +0200
+++ shorewall-4.4.10/configfiles/masq 2010-06-26 10:53:53.000000000 +0200
@@ -9,3 +9,4 @@
###############################################################################
#INTERFACE SOURCE ADDRESS PROTO PORT(S) IPSEC MARK USER/
# GROUP
+eth0 192.168.1.0/24
--- NEW FILE: common.cfg ---
<File>
Filename = etc/init.d/shorewall
Source = etc/init.d/shorewall
Permissions = 755
Type = binary
</File>
<File>
Filename = sbin/shorewall
Source = sbin/shorewall
Permissions = 755
Type = binary
</File>
<File>
Filename = usr/share/shorewall/
Type = local
</File>
<File>
Filename = usr/share/shorewall/
Source = usr/share/shorewall/macro*
Type = binary
</File>
<File>
Filename = usr/share/shorewall/Shorewall
Source = usr/share/shorewall/Shorewall/*
Type = binary
</File>
<File>
Filename = usr/share/shorewall/wait4ifup
Source = usr/share/shorewall/wait4ifup
Permissions = 755
Type = binary
</File>
<File>
Filename = usr/share/shorewall/version
Source = usr/share/shorewall/version
Type = binary
</File>
<File>
Filename = usr/share/shorewall/prog.footer
Source = usr/share/shorewall/prog.footer
Type = binary
</File>
<File>
Filename = usr/share/shorewall/prog.header
Source = usr/share/shorewall/prog.header
Type = binary
</File>
<File>
Filename = usr/share/shorewall/modules
Source = usr/share/shorewall/modules
Type = binary
</File>
<File>
Filename = usr/share/shorewall/version
Source = usr/share/shorewall/version
Type = binary
</File>
<File>
Filename = usr/share/shorewall/version
Source = usr/share/shorewall/version
Type = binary
</File>
<File>
Filename = usr/share/shorewall/lib.cli
Source = usr/share/shorewall/lib.cli
Type = binary
</File>
<File>
Filename = usr/share/shorewall/lib.common
Source = usr/share/shorewall/lib.common
Type = binary
</File>
<File>
Filename = usr/share/shorewall/lib.base
Source = usr/share/shorewall/lib.base
Type = binary
</File>
<File>
Filename = usr/share/shorewall/configpath
Source = usr/share/shorewall/configpath
Type = binary
</File>
<File>
Filename = usr/share/shorewall/configpath
Source = usr/share/shorewall/configpath
Type = binary
</File>
<File>
Filename = usr/share/shorewall/helpers
Source = usr/share/shorewall/helpers
Type = binary
</File>
<File>
Filename = usr/share/shorewall/compiler.pl
Source = usr/share/shorewall/compiler.pl
Permissions = 755
Type = binary
</File>
<File>
Filename = usr/share/shorewall/actions.std
Source = usr/share/shorewall/actions.std
Type = binary
</File>
<File>
Filename = usr/share/shorewall/action.Drop
Source = usr/share/shorewall/action.Drop
Type = binary
</File>
<File>
Filename = usr/share/shorewall/action.Reject
Source = usr/share/shorewall/action.Reject
Type = binary
</File>
<File>
Filename = usr/share/shorewall/action.template
Source = usr/share/shorewall/action.template
Type = binary
</File>
<File>
Filename = var/lib/shorewall/
Type = directory
</File>
<File>
Filename = etc/default/shorewall
Source = etc/default/shorewall
Description = Default Shorewall Runtime Startup options
Type = binary
Type = conf
Type = local
</File>
<File>
Filename = etc/shorewall/
Type = local
</File>
<File>
Filename = etc/shorewall/start.d
Type = directory
</File>
<File>
Filename = etc/shorewall/stop.d
Type = directory
</File>
<File>
Filename = etc/shorewall/params
Source = etc/shorewall/params
Permissions = 600
Description = Params Assign parameter values
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/zones
Source = etc/shorewall/zones
Description = Zones Partition the network into Zones
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/interfaces
Source = etc/shorewall/interfaces
Permissions = 600
Description = Ifaces Shorewall Networking Interfaces
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/hosts
Source = etc/shorewall/hosts
Permissions = 600
Description = Hosts Define specific zones
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/policy
Source = etc/shorewall/policy
Permissions = 600
Description = Policy Firewall high-level policy
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/rules
Source = etc/shorewall/rules
Permissions = 600
Description = Rules Exceptions to policy
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/masq
Source = etc/shorewall/masq
Permissions = 600
Description = Masq Internal MASQ Server Configuration
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/routestopped
Source = etc/shorewall/routestopped
Permissions = 600
Description = RStopped Hosts admitted after 'shorewall stop'
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/nat
Source = etc/shorewall/nat
Permissions = 600
Description = Nat Static NAT Configuration
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/shorewall.conf
Source = etc/shorewall/shorewall.conf
Permissions = 600
Description = Config Shorewall Global Parameters
Type = binary
Type = conf
</File>
<File>
Filename = usr/share/shorewall/modules
Source = usr/share/shorewall/modules
Permissions = 600
Description = Modules Netfilter modules to load
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/tos
Source = etc/shorewall/tos
Permissions = 600
Description = TOS Type of Service policy
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/blacklist
Source = etc/shorewall/blacklist
Permissions = 600
Description = Blacklist Blacklisted hosts
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/ecn
Source = etc/shorewall/ecn
Permissions = 600
Description = ECN Disable ECN to hosts and networks
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/init
Source = etc/shorewall/init
Permissions = 600
Description = Init Commands executed before [re]start
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/initdone
Source = etc/shorewall/initdone
Permissions = 600
Description = Initdone Commands executed during [re]start
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/start
Source = etc/shorewall/start
Permissions = 600
Description = Start Commands executed after [re]start
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/started
Source = etc/shorewall/started
Permissions = 600
Description = Started Commands executed after complete [re]start
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/stop
Source = etc/shorewall/stop
Permissions = 600
Description = Stop Commands executed before stop
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/stopped
Source = etc/shorewall/stopped
Permissions = 600
Description = Stopped Commands executed after stop
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/actions
Source = etc/shorewall/actions
Permissions = 600
Description = Actions Define user actions
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/netmap
Source = etc/shorewall/netmap
Permissions = 600
Description = Netmap Network Mapping Table
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/route_rules
Source = etc/shorewall/route_rules
Permissions = 600
Description = Route_rules Routing to providers
Type = binary
Type = conf
</File>
--- NEW FILE: tc.file ---
<File>
Filename = etc/shorewall/tcclasses
Source = etc/shorewall/tcclasses
Permissions = 600
Description = TCClasses
Type = binary
Type = conf
</File>
<File>
Filename = etc/shorewall/tcdevices
Source = etc/shorewall/tcdevices
Permissions = 600
Description = TCDevices
Type = binary
Type = conf
</File>
--- NEW FILE: buildtool.mk ---
######################################
#
# buildtool makefile for Shoreline Firewall
#
######################################
include $(MASTERMAKEFILE)
TARGET_DIR=$(BT_BUILD_DIR)/shorewall
SHOREWALL_DIR:=shorewall-4.4.10.2
$(SHOREWALL_DIR)/.source:
zcat $(SHOREWALL_SOURCE) | tar -xvf -
cat $(SHOREWALL_LRP_DIFF) | patch -d $(SHOREWALL_DIR) -p1
cat $(SHOREWALL_CONFIG_DIFF) | patch -d $(SHOREWALL_DIR) -p1
touch $(SHOREWALL_DIR)/.source
#errata
# cp compiler $(SHOREWALL_DIR)
$(SHOREWALL_DIR)/.build: $(SHOREWALL_DIR)/.source
cp $(SHOREWALL_DIR)/init.debian.sh $(SHOREWALL_DIR)/init.sh
mkdir -p $(TARGET_DIR)
(cd $(SHOREWALL_DIR); env PREFIX=$(TARGET_DIR) ./install.sh)
# chmod 755 $(TARGET_DIR)/usr/share/shorewall/firewall
mkdir -p $(TARGET_DIR)/etc/default
install -c $(SHOREWALL_DEFAULT) $(TARGET_DIR)/etc/default/shorewall
rm -rf $(TARGET_DIR)/usr/share/shorewall/configfiles
rm -rf $(TARGET_DIR)/usr/share/shorewall/macro.template
rm -rf $(TARGET_DIR)/etc/shorewall/Makefile
rm -rf $(TARGET_DIR)/etc/shorewall/Documentation
rm -rf $(TARGET_DIR)/usr/share/shorewall/xmodules
cp -afv $(TARGET_DIR)/* $(BT_STAGING_DIR)
touch $(SHOREWALL_DIR)/.build
source: $(SHOREWALL_DIR)/.source
build: $(SHOREWALL_DIR)/.build
cp -afv $(TARGET_DIR)/* $(BT_STAGING_DIR)
clean: stageclean
rm -rf $(TARGET_DIR)
rm -f $(SHOREWALL_DIR)/.build
stageclean:
rm -f $(BT_STAGING_DIR)/etc/init.d/shorewall
rm -f $(BT_STAGING_DIR)/etc/default/shorewall
rm -f $(BT_STAGING_DIR)/sbin/shorewall
rm -rf $(BT_STAGING_DIR)/etc/shorewall
rm -rf $(BT_STAGING_DIR)/usr/share/shorewall
rm -rf $(BT_STAGING_DIR)/var/lib/shorewall
rm -rf $(BT_STAGING_DIR)/var/state/shorewall
srcclean: clean
rm -rf $(SHOREWALL_DIR)
--- NEW FILE: buildtool.seperatepackages ---
<Server shorewall-net>
Type = http
Name = www.shorewall.net
Serverpath = /pub/shorewall
</Server>
<File shorewall-4.4.10.tgz>
Server = shorewall-net
Directory = 4.4/shorewall-4.4.10
Envname = SHOREWALL_SOURCE
</File>
<File buildtool.mk>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File common.cfg>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File maclist.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
#<File dynamiczones.file>
# Server = cvs4-sourceforge
# Revision = HEAD
# Directory = shorewall
#</File>
<File accounting.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File providers.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File proxyarp.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File tunnels.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File tc.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File tcrules.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
This patch provides generic changes to run under Bering uClibc
<File shorewall-lrp.diff>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
Envname = SHOREWALL_LRP_DIFF
</File>
This patch provides the Bering-uClibc specific configuration defaults
<File shorewall-config.diff>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
Envname = SHOREWALL_CONFIG_DIFF
</File>
# This patch provides the Bering-uClibc specific configuration defaults
<File shorewall-default>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
Envname = SHOREWALL_DEFAULT
</File>
# ---------------------------------------------------------------------
<Package>
<shorwall-basic>
packagename=shorwall
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <common.cfg>
</Contents>
</shorwall-basic>
<shorwall-maclist>
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: shorwall.lrp iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <maclist.file>
</Contents>
</shorwall-maclist>
<shorwall-accounting>
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: shorwall.lrp iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <accounting.file>
</Contents>
</shorwall-accounting>
<shorwall-providers>
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: shorwall.lrp iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <providers.file>
</Contents>
</shorwall-providers>
<shorwall-proxyarp>
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: shorwall.lrp iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <proxyarp.file>
</Contents>
</shorwall-proxyarp>
<shorwall-tunnels>
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: shorwall.lrp iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <tunnels.file>
</Contents>
</shorwall-tunnels>
<shorwall-tcrules>
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: shorwall.lrp iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <tcrules.file>
</Contents>
</shorwall-tcrules>
<shorwall-tc>
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: shorwall.lrp iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <tc.file>
</Contents>
</shorwall-tc>
<shorwall>
packagename=shorwall
Version 4.4.10
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
Homepage: http://www.shorewall.net
Requires: iptables.lrp ulogd.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <common.cfg>
#include <maclist.file>
#include <dynamiczones.file>
#include <accounting.file>
#include <providers.file>
#include <proxyarp.file>
#include <tunnels.file>
#include <tcrules.file>
#include <tc.file>
</Contents>
</shorwall>
</Package>
--- NEW FILE: buildtool.cfg ---
<Server shorewall-net>
Type = http
Name = www.shorewall.net
Serverpath = /pub/shorewall
</Server>
<File shorewall-4.4.10.2.tgz>
Server = shorewall-net
Directory = 4.4/shorewall-4.4.10
Envname = SHOREWALL_SOURCE
</File>
<File buildtool.mk>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File common.cfg>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File maclist.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File accounting.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File providers.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File proxyarp.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File tunnels.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File tc.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
<File tcrules.file>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
</File>
This patch provides generic changes to run under Bering uClibc
<File shorewall-lrp.diff>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
Envname = SHOREWALL_LRP_DIFF
</File>
This patch provides the Bering-uClibc specific configuration defaults
<File shorewall-config.diff>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
Envname = SHOREWALL_CONFIG_DIFF
</File>
# This patch provides the Bering-uClibc specific configuration defaults
<File shorewall-default>
Server = cvs4-sourceforge
Revision = HEAD
Directory = shorewall
Envname = SHOREWALL_DEFAULT
</File>
# ---------------------------------------------------------------------
<Package>
<shorwall>
packagename=shorwall
Version 4.4.10.2
Revision = 1
Help <<EOF
Shoreline Firewall (Shorewall)
This is the perl-based version of shorewall.
Homepage: http://www.shorewall.net
Requires: iptables.lrp ulogd.lrp perl.lrp
LEAF package by __PACKAGER__, __BUILDDATE__
EOF
<Permissions>
Files = 644
Directories = 755
</Permissions>
<Owner>
Files = root:root
Directories = root:root
</Owner>
<Contents>
#include <common.cfg>
#include <maclist.file>
#include <accounting.file>
#include <providers.file>
#include <proxyarp.file>
#include <tunnels.file>
#include <tcrules.file>
#include <tc.file>
</Contents>
</shorwall>
</Package>
------------------------------------------------------------------------------
This SF.net email is sponsored by Sprint
What will you do first with EVO, the first 4G phone?
Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first