summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorpeter <peter>2008-06-26 21:01:00 +0000
committerpeter <peter>2008-06-26 21:01:00 +0000
commitb8f755258ca2b5a2c49babc4d095fa89e3b29da9 (patch)
tree22f5297b7d3b8d1dfce0ece3d4b5aedeafd0ba70 /security
parentca5a8d30811d6bde8d8ea1832a483673d9423d8e (diff)
downloadpkgsrc-b8f755258ca2b5a2c49babc4d095fa89e3b29da9.tar.gz
Remove security/pflkm, it's outdated and unmaintained.
Approved by agc.
Diffstat (limited to 'security')
-rw-r--r--security/pflkm/DESCR9
-rw-r--r--security/pflkm/MESSAGE18
-rw-r--r--security/pflkm/Makefile114
-rw-r--r--security/pflkm/PLIST37
-rw-r--r--security/pflkm/buildlink3.mk19
-rw-r--r--security/pflkm/builtin.mk118
-rw-r--r--security/pflkm/distinfo5
-rw-r--r--security/pflkm/files/pf.sh54
-rw-r--r--security/pflkm/files/pflogd.sh18
9 files changed, 0 insertions, 392 deletions
diff --git a/security/pflkm/DESCR b/security/pflkm/DESCR
deleted file mode 100644
index 641eb77a0db..00000000000
--- a/security/pflkm/DESCR
+++ /dev/null
@@ -1,9 +0,0 @@
-Packet Filter (from here on referred to as PF) is OpenBSD's system for
-filtering TCP/IP traffic and doing Network Address Translation. PF is also
-capable of normalizing and conditioning TCP/IP traffic.
-
-PF was originally developed by Daniel Hartmeier and is now maintained and
-developed by Daniel and the rest of the OpenBSD team.
-
-This package includes a complete port (LKM and userland utilities) from
-OpenBSD 3.7 to NetBSD 2.0.
diff --git a/security/pflkm/MESSAGE b/security/pflkm/MESSAGE
deleted file mode 100644
index 5b6ee4b3099..00000000000
--- a/security/pflkm/MESSAGE
+++ /dev/null
@@ -1,18 +0,0 @@
-===========================================================================
-$NetBSD: MESSAGE,v 1.1.1.1 2004/11/05 15:05:30 peter Exp $
-
-First create the /dev/pf device:
-
-# cd /dev
-# ./MAKEDEV pf
-
-Then load the kernel module:
-
-# modload ${PREFIX}/lkm/pf.o
-
-If you want PF to get loaded automatically at boot time, you need to set
-lkm=YES in /etc/rc.conf and add this line to /etc/lkm.conf:
-
-${PREFIX}/lkm/pf.o - - - - AFTERMOUNT
-
-===========================================================================
diff --git a/security/pflkm/Makefile b/security/pflkm/Makefile
deleted file mode 100644
index 4f48549004e..00000000000
--- a/security/pflkm/Makefile
+++ /dev/null
@@ -1,114 +0,0 @@
-# $NetBSD: Makefile,v 1.17 2007/05/18 10:03:31 peter Exp $
-
-DISTNAME= pflkm-20050511
-PKGREVISION= 1
-CATEGORIES= security
-MASTER_SITES= http://nedbsd.nl/~ppostma/pf/
-
-MAINTAINER= pkgsrc-users@NetBSD.org
-HOMEPAGE= http://nedbsd.nl/~ppostma/pf/
-COMMENT= OpenBSD Packet Filter as loadable kernel module for NetBSD
-
-ONLY_FOR_PLATFORM= NetBSD-2.[0-9]*-*
-
-NO_CONFIGURE= yes
-
-PKG_GROUPS= nogroup
-PKG_USERS= _pflogd:nogroup
-PKG_GECOS._pflogd= pflogd pseudo-user
-PKG_HOME._pflogd= ${VARBASE}/chroot/pflogd
-
-RCD_SCRIPTS= pf pflogd
-PKG_SYSCONFSUBDIR= pf
-CONF_FILES= ${PREFIX}/share/examples/pflkm/pf.conf \
- ${PKG_SYSCONFDIR}/pf.conf
-CONF_FILES+= ${PREFIX}/share/examples/pflkm/pf.os \
- ${PKG_SYSCONFDIR}/pf.os
-CONF_FILES_MODE= 0600
-
-OWN_DIRS= ${VARBASE}/chroot/pflogd
-SUBST_CLASSES+= path
-SUBST_STAGE.path= post-patch
-SUBST_FILES.path= man/pfsync.4 man/pf.conf.5
-SUBST_FILES.path+= sbin/pfctl/pfctl.8 sbin/pfctl/pfctl_parser.h
-SUBST_FILES.path+= usr.sbin/authpf/authpf.8 usr.sbin/authpf/pathnames.h
-SUBST_SED.path= -e 's,/etc/pf.os,${PKG_SYSCONFDIR}/pf.os,g'
-SUBST_SED.path+= -e 's,/etc/pf.conf,${PKG_SYSCONFDIR}/pf.conf,g'
-SUBST_SED.path+= -e 's,/etc/authpf/authpf.conf,${PKG_SYSCONFDIR}/authpf.conf,g'
-SUBST_SED.path+= -e 's,/etc/authpf/authpf.allow,${PKG_SYSCONFDIR}/authpf.allow,g'
-SUBST_SED.path+= -e 's,/etc/authpf/authpf.rules,${PKG_SYSCONFDIR}/authpf.rules,g'
-SUBST_SED.path+= -e 's,/etc/authpf/authpf.problem,${PKG_SYSCONFDIR}/authpf.problem,g'
-SUBST_SED.path+= -e 's,/etc/authpf/authpf.message,${PKG_SYSCONFDIR}/authpf.message,g'
-SUBST_SED.path+= -e 's,/etc/authpf/users,${PKG_SYSCONFDIR}/users,g'
-SUBST_SED.path+= -e 's,/etc/authpf/banned,${PKG_SYSCONFDIR}/banned,g'
-SUBST_SED.path+= -e 's,/usr/sbin/authpf,${PREFIX}/sbin/authpf,g'
-SUBST_SED.path+= -e 's,/sbin/pfctl,${PREFIX}/sbin/pfctl,g'
-SUBST_MESSAGE.path= Fixing hardcoded dirs.
-
-PKG_OPTIONS_VAR= PKG_OPTIONS.pf
-PKG_SUPPORTED_OPTIONS= altq ifevents
-
-.include "../../mk/bsd.options.mk"
-.include "../../mk/bsd.prefs.mk"
-
-.if !empty(PKG_OPTIONS:Maltq)
-# Check if the kernel source was patched.
-_IS_PATCHED_!= ${GREP} -c altq_pfattach ${NETBSDSRCDIR}/sys/altq/altq_subr.c || ${TRUE}
-.if ${_IS_PATCHED_} == "1"
-MAKE_ENV+= ALTQ=yes
-.else
-PKG_FAIL_REASON+= "It appears that you didn't applied the ALTQ patch to your kernel sources."
-PKG_FAIL_REASON+= "Please see: http://nedbsd.nl/~ppostma/pf/\#altq"
-.endif
-.endif
-
-.if !empty(PKG_OPTIONS:Mifevents)
-# Check if the kernel source was patched.
-_IS_PATCHED_!= ${GREP} -c if_event_add ${NETBSDSRCDIR}/sys/net/if.c || ${TRUE}
-.if ${_IS_PATCHED_} == "1"
-MAKE_ENV+= IFEVENTS=yes
-.else
-PKG_FAIL_REASON+= "It appears that you didn't applied the if_events patch to your kernel sources."
-PKG_FAIL_REASON+= "Please see: http://nedbsd.nl/~ppostma/pf/\#if_events"
-.endif
-.endif
-
-do-install:
- ${INSTALL_DATA_DIR} ${PREFIX}/include/net
- ${INSTALL_DATA} ${WRKSRC}/include/net/if_pflog.h ${PREFIX}/include/net/if_pflog.h
- ${INSTALL_DATA} ${WRKSRC}/include/net/if_pfsync.h ${PREFIX}/include/net/if_pfsync.h
- ${INSTALL_DATA} ${WRKSRC}/include/net/pfvar.h ${PREFIX}/include/net/pfvar.h
- ${INSTALL_PROGRAM} ${WRKSRC}/libexec/ftp-proxy/ftp-proxy ${PREFIX}/libexec/ftp-proxy
- ${INSTALL_MAN} ${WRKSRC}/libexec/ftp-proxy/ftp-proxy.cat8 ${PREFIX}/${PKGMANDIR}/cat8/ftp-proxy.0
- ${INSTALL_MAN} ${WRKSRC}/libexec/ftp-proxy/ftp-proxy.8 ${PREFIX}/${PKGMANDIR}/man8/ftp-proxy.8
- ${INSTALL_DATA_DIR} ${PREFIX}/lkm
- ${INSTALL_DATA} ${WRKSRC}/lkm/pf.o ${PREFIX}/lkm/pf.o
- ${INSTALL_MAN} ${WRKSRC}/man/pf.cat4 ${PREFIX}/${PKGMANDIR}/cat4/pf.0
- ${INSTALL_MAN} ${WRKSRC}/man/pflog.cat4 ${PREFIX}/${PKGMANDIR}/cat4/pflog.0
- ${INSTALL_MAN} ${WRKSRC}/man/pfsync.cat4 ${PREFIX}/${PKGMANDIR}/cat4/pfsync.0
- ${INSTALL_MAN} ${WRKSRC}/man/pf.conf.cat5 ${PREFIX}/${PKGMANDIR}/cat5/pf.conf.0
- ${INSTALL_MAN} ${WRKSRC}/man/pf.os.cat5 ${PREFIX}/${PKGMANDIR}/cat5/pf.os.0
- ${INSTALL_MAN} ${WRKSRC}/man/pf.4 ${PREFIX}/${PKGMANDIR}/man4/pf.4
- ${INSTALL_MAN} ${WRKSRC}/man/pflog.4 ${PREFIX}/${PKGMANDIR}/man4/pflog.4
- ${INSTALL_MAN} ${WRKSRC}/man/pfsync.4 ${PREFIX}/${PKGMANDIR}/man4/pfsync.4
- ${INSTALL_MAN} ${WRKSRC}/man/pf.conf.5 ${PREFIX}/${PKGMANDIR}/man5/pf.conf.5
- ${INSTALL_MAN} ${WRKSRC}/man/pf.os.5 ${PREFIX}/${PKGMANDIR}/man5/pf.os.5
- ${INSTALL_PROGRAM} ${WRKSRC}/sbin/pfctl/pfctl ${PREFIX}/sbin/pfctl
- ${INSTALL_MAN} ${WRKSRC}/sbin/pfctl/pfctl.cat8 ${PREFIX}/${PKGMANDIR}/cat8/pfctl.0
- ${INSTALL_MAN} ${WRKSRC}/sbin/pfctl/pfctl.8 ${PREFIX}/${PKGMANDIR}/man8/pfctl.8
- ${INSTALL_PROGRAM} ${WRKSRC}/sbin/pflogd/pflogd ${PREFIX}/sbin/pflogd
- ${INSTALL_MAN} ${WRKSRC}/sbin/pflogd/pflogd.cat8 ${PREFIX}/${PKGMANDIR}/cat8/pflogd.0
- ${INSTALL_MAN} ${WRKSRC}/sbin/pflogd/pflogd.8 ${PREFIX}/${PKGMANDIR}/man8/pflogd.8
- ${INSTALL_PROGRAM} ${WRKSRC}/usr.sbin/authpf/authpf ${PREFIX}/sbin/authpf
- ${INSTALL_MAN} ${WRKSRC}/usr.sbin/authpf/authpf.cat8 ${PREFIX}/${PKGMANDIR}/cat8/authpf.0
- ${INSTALL_MAN} ${WRKSRC}/usr.sbin/authpf/authpf.8 ${PREFIX}/${PKGMANDIR}/man8/authpf.8
- ${INSTALL_PROGRAM} ${WRKSRC}/usr.sbin/tcpdump/pftcpdump ${PREFIX}/sbin/pftcpdump
- ${INSTALL_MAN} ${WRKSRC}/usr.sbin/tcpdump/pftcpdump.cat8 ${PREFIX}/${PKGMANDIR}/cat8/pftcpdump.0
- ${INSTALL_MAN} ${WRKSRC}/usr.sbin/tcpdump/pftcpdump.8 ${PREFIX}/${PKGMANDIR}/man8/pftcpdump.8
- ${INSTALL_DATA_DIR} ${PREFIX}/share/examples/pflkm
- ${INSTALL_DATA} ${WRKSRC}/etc/pf.conf \
- ${PREFIX}/share/examples/pflkm/pf.conf
- ${INSTALL_DATA} ${WRKSRC}/etc/pf.os \
- ${PREFIX}/share/examples/pflkm/pf.os
-
-.include "../../mk/bsd.pkg.mk"
diff --git a/security/pflkm/PLIST b/security/pflkm/PLIST
deleted file mode 100644
index 2f1f47efa29..00000000000
--- a/security/pflkm/PLIST
+++ /dev/null
@@ -1,37 +0,0 @@
-@comment $NetBSD: PLIST,v 1.4 2006/02/20 23:03:56 wiz Exp $
-include/net/if_pflog.h
-include/net/if_pfsync.h
-include/net/pfvar.h
-libexec/ftp-proxy
-lkm/pf.o
-man/cat4/pf.0
-man/cat4/pflog.0
-man/cat4/pfsync.0
-man/cat5/pf.conf.0
-man/cat5/pf.os.0
-man/cat8/authpf.0
-man/cat8/ftp-proxy.0
-man/cat8/pfctl.0
-man/cat8/pflogd.0
-man/cat8/pftcpdump.0
-man/man4/pf.4
-man/man4/pflog.4
-man/man4/pfsync.4
-man/man5/pf.conf.5
-man/man5/pf.os.5
-man/man8/authpf.8
-man/man8/ftp-proxy.8
-man/man8/pfctl.8
-man/man8/pflogd.8
-man/man8/pftcpdump.8
-sbin/authpf
-sbin/pfctl
-sbin/pflogd
-sbin/pftcpdump
-share/examples/pflkm/pf.conf
-share/examples/pflkm/pf.os
-share/examples/rc.d/pf
-share/examples/rc.d/pflogd
-@dirrm share/examples/pflkm
-@dirrm include/net
-@unexec ${RMDIR} %D/lkm 2>/dev/null || ${TRUE}
diff --git a/security/pflkm/buildlink3.mk b/security/pflkm/buildlink3.mk
deleted file mode 100644
index 9f7bf3d6a5b..00000000000
--- a/security/pflkm/buildlink3.mk
+++ /dev/null
@@ -1,19 +0,0 @@
-# $NetBSD: buildlink3.mk,v 1.6 2006/07/08 23:11:08 jlam Exp $
-
-BUILDLINK_DEPTH:= ${BUILDLINK_DEPTH}+
-PFLKM_BUILDLINK3_MK:= ${PFLKM_BUILDLINK3_MK}+
-
-.if !empty(BUILDLINK_DEPTH:M+)
-BUILDLINK_DEPENDS+= pflkm
-.endif
-
-BUILDLINK_PACKAGES:= ${BUILDLINK_PACKAGES:Npflkm}
-BUILDLINK_PACKAGES+= pflkm
-BUILDLINK_ORDER:= ${BUILDLINK_ORDER} ${BUILDLINK_DEPTH}pflkm
-
-.if !empty(PFLKM_BUILDLINK3_MK:M+)
-BUILDLINK_API_DEPENDS.pflkm+= pflkm>=20040501
-BUILDLINK_PKGSRCDIR.pflkm?= ../../security/pflkm
-.endif # PFLKM_BUILDLINK3_MK
-
-BUILDLINK_DEPTH:= ${BUILDLINK_DEPTH:S/+$//}
diff --git a/security/pflkm/builtin.mk b/security/pflkm/builtin.mk
deleted file mode 100644
index d9c4f4d99b2..00000000000
--- a/security/pflkm/builtin.mk
+++ /dev/null
@@ -1,118 +0,0 @@
-# $NetBSD: builtin.mk,v 1.12 2008/06/15 14:03:22 peter Exp $
-
-BUILTIN_PKG:= pflkm
-
-BUILTIN_FIND_FILES_VAR:= H_PFLKM EXE_PFCTL
-BUILTIN_FIND_FILES.H_PFLKM= /usr/include/net/pfvar.h
-BUILTIN_FIND_FILES.H_PFLKM+= /usr/include/net/pf/pfvar.h
-BUILTIN_FIND_FILES.EXE_PFCTL+= /sbin/pfctl
-
-.include "../../mk/buildlink3/bsd.builtin.mk"
-
-# Compute the version number of the PF API by checking for the presence
-# of symbols added in newer versions and store the result in ${PF_VERSION}.
-#
-.if !defined(PF_VERSION)
-PF_VERSION= 3.7 # package default
-. if empty(H_PFLKM:M__nonexistent__)
-# OpenBSD 4.2: pf_statelist added
-_BLTN_PF_4_2!= ${GREP} -c pf_statelist ${H_PFLKM} || ${TRUE}
-# OpenBSD 4.1: PF_OSFP_INET6 added
-_BLTN_PF_4_1!= ${GREP} -c PF_OSFP_INET6 ${H_PFLKM} || ${TRUE}
-# OpenBSD 3.8: pf_socket_lookup added
-_BLTN_PF_3_8!= ${GREP} -c pf_socket_lookup ${H_PFLKM} || ${TRUE}
-# OpenBSD 3.7: pf_threshold added
-_BLTN_PF_3_7!= ${GREP} -c pf_threshold ${H_PFLKM} || ${TRUE}
-# OpenBSD 3.6: pf_cksum_fixup added
-_BLTN_PF_3_6!= ${GREP} -c pf_cksum_fixup ${H_PFLKM} || ${TRUE}
-
-. if ${_BLTN_PF_4_2} != "0"
-PF_VERSION= 4.2
-. elif ${_BLTN_PF_4_1} != "0"
-PF_VERSION= 4.1
-. elif ${_BLTN_PF_3_8} != "0"
-PF_VERSION= 3.8
-. elif ${_BLTN_PF_3_7} != "0"
-PF_VERSION= 3.7
-. elif ${_BLTN_PF_3_6} != "0"
-PF_VERSION= 3.6
-. else
-PF_VERSION= 3.5
-. endif
-. endif
-.endif
-MAKEVARS+= PF_VERSION
-
-###
-### Determine if there is a built-in implementation of the package and
-### set IS_BUILTIN.<pkg> appropriately ("yes" or "no").
-###
-.if !defined(IS_BUILTIN.pflkm)
-IS_BUILTIN.pflkm= no
-. if empty(H_PFLKM:M__nonexistent__) && empty(H_PFLKM:M${LOCALBASE}/*)
-IS_BUILTIN.pflkm= yes
-. endif
-.endif
-MAKEVARS+= IS_BUILTIN.pflkm
-
-###
-### If there is a built-in implementation, then set BUILTIN_PKG.<pkg> to
-### a package name to represent the built-in package.
-###
-.if !defined(BUILTIN_PKG.pflkm) && \
- !empty(IS_BUILTIN.pflkm:M[yY][eE][sS])
-. if ${PF_VERSION} == "3.8"
-BUILTIN_PKG.pflkm= pflkm-20051101 # release date for PF API 3.8
-. elif ${PF_VERSION} == "3.7"
-BUILTIN_PKG.pflkm= pflkm-20050519 # release date for PF API 3.7
-. elif ${PF_VERSION} == "3.6"
-BUILTIN_PKG.pflkm= pflkm-20041101 # release date for PF API 3.6
-. elif ${PF_VERSION} == "3.5"
-BUILTIN_PKG.pflkm= pflkm-20040501 # release date for PF API 3.5
-. else
-BUILTIN_PKG.pflkm= pflkm-20040501 # release date for PF API 3.5
-. endif
-.endif
-MAKEVARS+= BUILTIN_PKG.pflkm
-
-###
-### Determine whether we should use the built-in implementation if it
-### exists, and set USE_BUILTIN.<pkg> appropriate ("yes" or "no").
-###
-.if !defined(USE_BUILTIN.pflkm)
-. if ${PREFER.pflkm} == "pkgsrc"
-USE_BUILTIN.pflkm= no
-. else
-USE_BUILTIN.pflkm= ${IS_BUILTIN.pflkm}
-. if defined(BUILTIN_PKG.pflkm) && \
- !empty(IS_BUILTIN.pflkm:M[yY][eE][sS])
-USE_BUILTIN.pflkm= yes
-. for _dep_ in ${BUILDLINK_API_DEPENDS.pflkm}
-. if !empty(USE_BUILTIN.pflkm:M[yY][eE][sS])
-USE_BUILTIN.pflkm!= \
- if ${PKG_ADMIN} pmatch ${_dep_:Q} ${BUILTIN_PKG.pflkm:Q}; then \
- ${ECHO} yes; \
- else \
- ${ECHO} no; \
- fi
-. endif
-. endfor
-. endif
-. endif # PREFER.pflkm
-.endif
-MAKEVARS+= USE_BUILTIN.pflkm
-
-###
-### The section below only applies if we are not including this file
-### solely to determine whether a built-in implementation exists.
-###
-CHECK_BUILTIN.pflkm?= no
-.if !empty(CHECK_BUILTIN.pflkm:M[nN][oO])
-
-. if !empty(USE_BUILTIN.pflkm:M[nN][oO])
-PFCTL?= ${BUILDLINK_PREFIX.pflkm}/bin/pfctl
-. else
-PFCTL?= ${EXE_PFCTL}
-. endif
-
-.endif # CHECK_BUILTIN.pflkm
diff --git a/security/pflkm/distinfo b/security/pflkm/distinfo
deleted file mode 100644
index 43ae0bbcefd..00000000000
--- a/security/pflkm/distinfo
+++ /dev/null
@@ -1,5 +0,0 @@
-$NetBSD: distinfo,v 1.5 2005/05/11 22:01:28 peter Exp $
-
-SHA1 (pflkm-20050511.tar.gz) = 83e9ea9a4c666ddea69a18d63f3f9f8a55e92f0c
-RMD160 (pflkm-20050511.tar.gz) = 8243fed8cbe7eebd9da6e83851700eea6f8d5275
-Size (pflkm-20050511.tar.gz) = 892106 bytes
diff --git a/security/pflkm/files/pf.sh b/security/pflkm/files/pf.sh
deleted file mode 100644
index 61a0cbeedb1..00000000000
--- a/security/pflkm/files/pf.sh
+++ /dev/null
@@ -1,54 +0,0 @@
-#!@RCD_SCRIPTS_SHELL@
-#
-# $NetBSD: pf.sh,v 1.2 2005/01/18 17:36:53 peter Exp $
-#
-# PROVIDE: pf
-# REQUIRE: DAEMON
-#
-
-. /etc/rc.subr
-
-name="pf"
-rcvar=$name
-pfctl="@PREFIX@/sbin/pfctl"
-config="@PKG_SYSCONFDIR@/pf.conf"
-start_cmd="pf_start"
-stop_cmd="pf_stop"
-reload_cmd="pf_reload"
-status_cmd="pf_status"
-extra_commands="reload status"
-
-pf_start()
-{
- echo "Enabling pf firewall."
- ${pfctl} -q -e
- if [ -f ${config} ]; then
- ${pfctl} -q -f ${config}
- else
- warn "pf.conf not found; no pf rules loaded."
- fi
-}
-
-pf_stop()
-{
- echo "Disabling pf firewall."
- ${pfctl} -q -Fa -d
-}
-
-pf_reload()
-{
- echo "Reloading pf rules."
- if [ -f ${config} ]; then
- ${pfctl} -q -f ${config}
- else
- warn "pf.conf not found; no pf rules loaded."
- fi
-}
-
-pf_status()
-{
- ${pfctl} -s info
-}
-
-load_rc_config $name
-run_rc_command "$1"
diff --git a/security/pflkm/files/pflogd.sh b/security/pflkm/files/pflogd.sh
deleted file mode 100644
index a0692e44da8..00000000000
--- a/security/pflkm/files/pflogd.sh
+++ /dev/null
@@ -1,18 +0,0 @@
-#!@RCD_SCRIPTS_SHELL@
-#
-# $NetBSD: pflogd.sh,v 1.1.1.1 2004/11/05 15:05:30 peter Exp $
-#
-# PROVIDE: pflogd
-# REQUIRE: DAEMON
-#
-
-. /etc/rc.subr
-
-name="pflogd"
-rcvar=$name
-command="@PREFIX@/sbin/${name}"
-start_precmd="/sbin/ifconfig pflog0 up"
-pidfile="/var/run/${name}.pid"
-
-load_rc_config $name
-run_rc_command "$1"