summaryrefslogtreecommitdiff
path: root/security/libfwbuilder
AgeCommit message (Collapse)AuthorFilesLines
2006-11-09These conflict with with libfwbuilder21 and fwbuilder21 becausebad1-1/+3
of the lib/libfw{builder,compiler}.{a,la.so} files.
2006-10-14Fixed "test ==" and pkglint warnings.rillig5-37/+69
2006-07-22Added "c" to USE_LANGUAGES for packages that use GNU configure scripts,rillig1-2/+2
since they always need a C compiler, even when the source code is completely in C++. For some other packages, stated in the comment that a C compiler is really not needed.
2006-07-13Update libfwbuilder and fwbuilder to 2.0.12. Bugfixes only.bad4-11/+12
2.0.12: Bugs fixed in this release: bug #1455772: Implement more portable fix for converting UTF-8 in comments. The previous one broke the Windows installer. 2.0.11: Bugs fixed in this release: * fixes to make code compile with g++ 4.1. * bug #1455772: Properly convert comments to/from UTF-8 to ensure the script is not corrupted when copied to the firewall * bug #1455748: "make firewall script executable". Bugs fixed in policy compiler for iptables: * bug #1375432: avoid using '-m state' twice for stateless rules with with custom services. * bug#1364060: change shell pattern to match names of conntrack modules in Linux 2.6. Bugs fixed in policy compiler for ipfilter: * bug #1386226: removed nat.conf when nat rules are removed. * bug #1393004: use 'egrep -s' on Solaris.
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-04-17Bump BUILDLINK_ABI_DEPENDS.png and PKGREVISION for png-1.2.9nb2 update.wiz2-4/+4
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed2-5/+5
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-03-12- Link libraries against the pthread library since pthread_* functions areminskim7-16/+57
called. Also include pthread.buildlink3.mk directly. - With the update of qt3-tools to use the libtool mode of qmake, it is unnecessary to install files manually; "make install" just works. Bump PKGREVISION.
2006-03-04Point MAINTAINER to pkgsrc-users@NetBSD.org in the case where nojlam1-2/+2
developer is officially maintaining the package. The rationale for changing this from "tech-pkg" to "pkgsrc-users" is that it implies that any user can try to maintain the package (by submitting patches to the mailing list). Since the folks most likely to care about the package are the folks that want to use it or are already using it, this would leverage the energy of users who aren't developers.
2006-03-03Bump PKGREVISION becuase PLIST was changed due to the recent qt3-toolsminskim2-9/+3
update. While here, remove the runtime dependency on qt3-tools since it is needed at build time only.
2006-03-02Sync the buildlink3.mk list with Makefile.minskim1-2/+2
2006-03-02This package doesn't need libxml. Explicitly depend on libxml2 instead.minskim1-3/+3
Bump PKGREVISION.
2006-02-05Recursive revision bump / recommended bump for gettext ABI change.joerg2-4/+4
2006-01-24Bump BUILDLINK_RECOMMENDED of textproc/expat to 2.0.0 becausewiz2-2/+4
of the shlib major bump. PKGREVISION++ for the dependencies.
2006-01-05Change the default for BUILDLINK_DEPMETHOD.qt3-tools from "full" to "build",ghen1-1/+5
without affecting packages that are currently using it. Packages which previously didn't set BUILDLINK_DEPMETHOD to neither "full" nor "build" now set it to "full", but should be checked whether they really need it (comment added). Packages which previously set it to "build" now don't set it anymore. Ok by jlam, wiz.
2005-12-12Update fwbuilder and libfwbuilder to 2.0.10.bad4-9/+10
Bugs fixed since 2.0.9: * bug #1349326 "ulogd option does not work". There was a typo in the class iptAdvancedDialog ( 'useULOG' instead of 'use_ULOG' ) * bug #1315892: "fwbuilder crashes on missing OS template" The GUI crashed if user added new hostOS or firewall platform template under resources/os or resources/platforms, then reinstalled the package (and therefore lost their custom template files), then tried to open firewall or host OS settings dialog for the object using new template. * bug #1305933: "fwbuilder/Solaris: compilation errors". Another case of implicit type conversion QString->string which does not compile on systems with QT built w/o STL support. * bug #1304878: fwbuilder: signal.h required (Solaris). Using 'AC_CHECK_HEADERS([signal.h])' in configure.in to check for the appropriate #include. * bug #1304764: "configure script: Sun make check fails". Need to use ${MAKE-make} instead of $ac_make when checking for GNU make. * bug #1304785: "fwbuilder - Solaris has no libutil". Using better way to check whether we need to link with libutil. Bugs fixed in policy compiler for iptables since 2.0.9: * bug #1342495: "SNAT with address range". Compiler used to print warning "Adding virtual addresses for NAT is not supported for address range" even if adding virtual addresses for NAT was turned off. * bug #1313420: "OUTPUT chain is built wrong under certain conditions." Rules that have firewall in SRC and DST, while DST has negation, should be split so that the second generated rule goes into OUTPUT chain rather than FORWARD
2005-10-27Upgrade fwbuilder and libfwbuilder to version 2.0.9.bad5-16/+20
Changes since version 2.0.6: Version 2.0.9 -- This is a bug fix release What's new: * support for Cisco FWSM. * Print comments on objects. * Add "commit" menu item. * Spanish translation has been added. Bugs fixed in the GUI: * bug #1254775: "RCS checkin fails on Windows when data file is too big". * bug #1226069: "Segfault: Drag&Drop between two instances". * bugs #1233165: "Illegal Logging-Limit string" and #1287755: "i18n is breaking iptables script". * bug #1240205: "Iilegal --log-level Information". * bug #1277129: "script is truncated when installed by the GUI running on Mac". Bugs fixed in policy compiler for PF: * bug #1276083: "Destination NAT rules". Old restriction on "rdr" rules. Version 2.0.8 -- This is a bug fix release What's new: * Improvements in the GUI: * Included updated German translation by Hans Peter Dittler. * Print RCS Log". * Code changes to make the code compile and work on Solaris. * Improvements in policy compilers for pf, ipf, ipfw: * implemented support for subnets for backup ssh access for pf,ipf,ipfw. * Improvements in compiler for ipfw: * using rule sets to atomically swap old and new rules. * added "established" rule on top of the regular backup ssh access rule. Bugs fixed in the Standard Objects library: * bug #210518: 'Incorrect ending day in the standard object "weekends"'. Bugs fixed in scripts and tools: * bug #1200902: "fwb_compile_all does not work in 2.0". Bugs fixed in GUI: * bug #1072842: "fwbuilder: Solaris and forkpty". * bug #1201406: "shutdown messages should be suppressed". * bug #1204067: "incorrect timezone handling in RCS". * bug #1207983: "incorrect size of "I" and "L" buttons in the group view dialog". * bug #1212121: "sudo shutdown doesn't work". * bug #1212123: "executing file below /tmp as root". * bug #1212179: "tool tips for TCP services cuts off some services". * bug #1213361: "PF on FreeBSD-5.4R". Bugs fixed in policy compiler for iptables: * bug #191423: "Weekend Time restriction not created correctly". * bug #1205665: "Error with summer time when compiling script". * bug #1215279: "rate limiting rule logs everything". Bugs fixed in policy compiler for ipfw: * bug #1155351: "Remote install of FW rulset fails due to race condition". Version 2.0.7 -- This is a bug fix release What's new: * Improvements in the GUI: * "Close" button should change is caption/title to "Install". * "Search for IP Addresses". * Support for SNMP operations has been added in Windows packages of Firewall Builder. * Improvements in built-in installer: User can specify additional command line parameters for ssh that built-in installer runs to access firewall. * Improvements in compiler for ipfilter fwb_ipf: Added support for dynamic addresses in ipfilter. * Improvements in compiler for iptables fwb_ipt: Generated iptables script sets default policies to DROP in all ipv6 filter chains. Bugs fixed in GUI: * bug #1151052: "Not external interfaces marked as external". * bug #1151212: "Collapsed sub-objects shouldn't be added if they are hidden". * bug #1151243: "Maintain format of description text". * bug #1155163: "print does not print group contents". * bug #1172620: "Add tcp service object for icslap". * bug #1184791: "can not copy/paste multiple objects into a group". Bugs fixed in API: * bug #1158870: "mutexes are not properly created on FreeBSD". * bug #1151219: "New Host creation window is not well dimensioned". * bug #1157976: "patches to make fwbuilder compile under NetBSD 1.6". * bug #1173801: '"&" character in prolog/epilog'. Bugs fixed in policy compiler for iptables fwb_ipt: * bug #1123748: "busybox grep -E". * bug #1160186: 'IPTables Compiler - Multiport Issue'. * bug #1176890: "block IPv6". * bug #1176890: "block IPv6". * bug #1179103: 'compiled rules can not be installed'. * bug #1181359: "Missing traling space in "INVALID state" syslog message". * bug #1195201: "getaddr function return error ip address". Bugs fixed in policy compiler for pf fwb_ipf: * bug #1173067: "support for port ranges in NAT rules (ipfilter)". * bug #1173064: "support for dynamic interfaces in ipfilter". Bugs fixed in policy compiler for pf fwb_pf: * bug #1176051: "incorrect rule generated for TCP service ftp-data".
2005-05-22Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions:jlam1-2/+2
USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
2005-04-11Remove USE_BUILDLINK3 and NO_BUILDLINK; these are no longer used.tv1-2/+1
2005-03-25Don't need to provide a definition of QMAKE in the environment any longer.bad1-5/+1
qt3-tools/buildlink3.mk does that now.
2005-03-07Because LIBTOOLIZE_PLIST is "yes" by default we must list only the .la filebad1-10/+1
in the PLIST.
2005-02-26Upgrade fwbuilder and libfwbuilder to 2.0.6.bad5-16/+10
The main change is support for printing policies and NAT rules for firewall objects. Also improvments in the iptables compiler and lots of bug fixes, to numerous to mentions. See the release notes at: http://www.fwbuilder.org/archives/cat_release_notes.html#000185
2005-02-24Add RMD160 digests.bad1-1/+2
2005-02-24Replace libfwbuilder with version 2.0.5 as the previous version wasn'tbad9-212/+159
useful. Firewall Builder is a multi-platform firewall configuration and management tool. It consists of a GUI and a set of policy compilers for various firewall platforms. Firewall Builder uses an object-oriented approach, it helps administrators maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, IP Filter, ipfw, OpenBSD PF, and Cisco PIX libfwbuilder provides the back-end functionality in a library.
2004-11-20Bump PKGREVISION due to security fixes in libxml (dependency adjusted tojmmv1-2/+2
1.8.17nb3).
2004-10-14You're going to install those .la files, and you're going to like it, Mister.tv4-3/+29
(Fixes build breakage because the .la files are needed by the new libtoolize-plist logic.)
2004-10-07This is a libtool package. .la files go in the PLIST.tv3-12/+7
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv1-1/+2
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-07-06Initial import of libfwbuilder-1.0.2 into the Packages Collection. Thisagc7-0/+245
was based a long time ago on the OpenBSD port, but the only thing that remains form that is one of the patches, and I'm not sure that's necessary any more. Firewall Builder is multi-platform firewall configuration and management tool. It consists of a GUI and set of policy compilers for various firewall platforms. Firewall Builder uses object-oriented approach, it helps administrator maintain a database of network objects and allows policy editing using simple drag-and-drop operations. Firewall Builder currently supports iptables, ipfilter, OpenBSD PF, and Cisco PIX libfwbuilder provides the back-end functionality in a library.