OpenFWTK is an application proxy toolkit which inherits the ideology

of TIS fwtk and maintains API backwards compatibility. The design goal
is to make it simple yet powerful; no performance hacks allowed in the
code and library dependencies are reduced to minimum.

WWW: http://sourceforge.net/projects/openfwtk

PR:		ports/117194
Submitted by:	Anton Karpov <toxa at toxahost.ru>

7 files changed, 165 insertions, 0 deletions

diff --git a/security/openfwtk/files/patch-Makefile.common b/security/openfwtk/files/patch-Makefile.common
new file mode 100644
index 000000000000..5b579f191f3d
--- /dev/null
+++ b/security/openfwtk/files/patch-Makefile.common
@@ -0,0 +1,29 @@
+--- Makefile.common.orig	2007-09-25 06:26:36.000000000 +0400
++++ Makefile.common	2007-10-12 04:55:16.000000000 +0400
+@@ -34,11 +34,11 @@
+ install-etc: $(ETCOBJS)
+ 	@for CETC in $(ETCOBJS) ""; do						\
+ 	    if [ "$$CETC" = "" ]; then continue; fi;				\
+-	    if [ -f $(PREFIX)/etc/$$CETC ]; then				\
+-	        echo "NOT installing $(PREFIX)/$$CETC: exists, skipped";	\
++	    if [ -f $(PREFIX)/etc/openfwtk/$$CETC ]; then				\
++	        echo "NOT installing $(PREFIX)/openfwtk/$$CETC: exists, skipped";	\
+ 	    else								\
+-	        echo "Installing ETC: $$CETC -> $(PREFIX)/etc";			\
+-		cp $$CETC $(PREFIX)/etc;					\
++	        echo "Installing ETC: $$CETC -> $(PREFIX)/etc/openfwtk";			\
++		cp $$CETC $(PREFIX)/etc/openfwtk;					\
+ 	    fi;									\
+ 	done;									\
+ 
+@@ -57,8 +57,7 @@
+ 	    echo "Creating/updating directory: $$CDIR";				\
+ 	    mkdir -p $$CDIR;							\
+ 	done;									\
+-	echo "Installing OpenFWTK base path: OFWTKPATH -> /etc/openfwtk.conf";	\
+-	echo "OFWTKPATH=\"$(PREFIX)\"" > /etc/openfwtk.conf
++	echo "Installing OpenFWTK base path: OFWTKPATH -> ${PREFIX}/etc/openfwtk.conf";	\
++	echo "OFWTKPATH=\"$(PREFIX)\"" > ${PREFIX}/etc/openfwtk.conf
+ 
+ install: all install-common install-bin install-man install-etc
+-	$(INSTALLADD)
diff --git a/security/openfwtk/files/patch-Makefile.config b/security/openfwtk/files/patch-Makefile.config
new file mode 100644
index 000000000000..6038b4f485c7
--- /dev/null
+++ b/security/openfwtk/files/patch-Makefile.config
@@ -0,0 +1,10 @@
+--- Makefile.config.orig	2007-10-12 02:30:32.000000000 +0400
++++ Makefile.config	2007-10-12 02:30:52.000000000 +0400
+@@ -1,6 +1,6 @@
+ # Define here one of the supported OS-es:
+ # Linux, FreeBSD, OpenBSD, Solaris, Solaris64, HP-UX, MacOSX
+-OSTYPE = Linux
++OSTYPE = FreeBSD
+ 
+ include $(GMKPATH)/configs/$(OSTYPE)
+ include $(GMKPATH)/Makefile.common
diff --git a/security/openfwtk/files/patch-configs-FreeBSD b/security/openfwtk/files/patch-configs-FreeBSD
new file mode 100644
index 000000000000..f8460b85f4f3
--- /dev/null
+++ b/security/openfwtk/files/patch-configs-FreeBSD
@@ -0,0 +1,64 @@
+--- configs/FreeBSD.orig	2007-10-12 02:53:28.000000000 +0400
++++ configs/FreeBSD	2007-10-12 03:03:56.000000000 +0400
+@@ -2,25 +2,25 @@
+ CC = cc
+ CP = cp
+ MAKE = make
+-PREFIX = /usr/firewall
++PREFIX = /usr/local
+ 
+ # Defines path where to find ncurses libraries
+-NCURSES_LIBDIR=/usr/local/lib
++NCURSES_LIBDIR=/usr/lib
+ 
+ # Defines path where to find ncurses headers
+-NCURSES_INCDIR=/usr/local/include/ncurses
++NCURSES_INCDIR=/usr/include/ncurses
+ 
+ # Defines path where to find SSL libraries
+-SSL_LIBDIR=/usr/local/ssl/lib
++SSL_LIBDIR=/usr/lib
+ 
+ # Defines path where to find SSL headers
+-SSL_INCDIR=/usr/local/ssl/include
++SSL_INCDIR=/usr/include/openssl
+ 
+ # Defines path where to find GNU Magic/File libraries
+-MAGIC_LIBDIR=/usr/local/lib
++MAGIC_LIBDIR=/usr/lib
+ 
+ # Defines path where to find GNU Magic/File headers
+-MAGIC_INCDIR=/usr/local/include
++MAGIC_INCDIR=/usr/include
+ 
+ # Defines path where to find Milter client library (libci_milter)
+ MILTER_LIBDIR=../../libci_milter
+@@ -29,7 +29,7 @@
+ MILTER_INCDIR=../../libci_milter/include
+ 
+ # Defines path where to find berkeley bd headers
+-DBM_INCDIR=/usr/include/gdbm
++DBM_INCDIR=/usr/include
+ 
+ # Defines for your operating system
+ DEFINES=-DPREFIX=\"$(PREFIX)\"
+@@ -70,16 +70,16 @@
+ FWTKSRCDIR=$(PREFIX)/src/fwtk
+ 
+ # Location of X libraries for X-gw
+-XLIBDIR=/usr/X11R6/lib
++XLIBDIR=${X11BASE}lib/X11
+ 
+ # X Libraries
+ XLIBS = -L$(XLIBDIR) -lXaw -lXmu -lXt -lXext -lX11 -lSM -lICE -lXext
+ 
+ # Location of X include files
+-XINCLUDE=/usr/X11R6/include
++XINCLUDE=${X11BASE}/include/X11
+ 
+ # IPFilter location
+ #IPFILTER=$(PREFIX)/development/src/ipfilter/ip_fil3.2.9
+ 
+ # authsrv agent communication socket
+-AUTHSRV_SOCK_PATH=$(PREFIX)/var/
++AUTHSRV_SOCK_PATH=/var/run/openfwtk
diff --git a/security/openfwtk/files/patch-reports-Makefile b/security/openfwtk/files/patch-reports-Makefile
new file mode 100644
index 000000000000..008d0eb2e85f
--- /dev/null
+++ b/security/openfwtk/files/patch-reports-Makefile
@@ -0,0 +1,13 @@
+--- reports/Makefile.orig	2007-09-25 00:20:36.000000000 +0400
++++ reports/Makefile	2007-10-12 04:54:53.000000000 +0400
+@@ -16,10 +16,3 @@
+ logtail: $(LTLOBJS)
+ 	$(OFWTKLINK) $(LTLOBJS)
+ 
+-INSTALLADD =												\
+-	if ! grep -q frequentcheck /etc/crontab; then 							\
+-	    echo "59      *       *       *       *       root    $(DEST)/frequentcheck">>/etc/crontab ;\
+-	fi; 												\
+-	if ! grep -q daily_report /etc/crontab; then 							\
+-	    echo "58      23      *       *       *       root    $(DEST)/daily_report">>/etc/crontab ;	\
+-	fi
diff --git a/security/openfwtk/files/patch-reports-frequentcheck.sh b/security/openfwtk/files/patch-reports-frequentcheck.sh
new file mode 100644
index 000000000000..10df4b1f7c13
--- /dev/null
+++ b/security/openfwtk/files/patch-reports-frequentcheck.sh
@@ -0,0 +1,17 @@
+--- reports/frequentcheck.sh.orig	2007-10-12 04:42:16.000000000 +0400
++++ reports/frequentcheck.sh	2007-10-12 04:42:45.000000000 +0400
+@@ -43,10 +43,10 @@
+ 
+ PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin
+ 
+-PATFILE=$OFWTKPATH/etc/frequentcheck.ignore
+-ALERTFILE=$OFWTKPATH/etc/securityalerts.ignore
+-WARNFILE=$OFWTKPATH/etc/securitywarnings.ignore
+-ERRFILE=$OFWTKPATH/etc/syserr.ignore
++PATFILE=$OFWTKPATH/etc/openfwtk/frequentcheck.ignore
++ALERTFILE=$OFWTKPATH/etc/openfwtk/securityalerts.ignore
++WARNFILE=$OFWTKPATH/etc/openfwtk/securitywarnings.ignore
++ERRFILE=$OFWTKPATH/etc/openfwtk/syserr.ignore
+ 
+ # Set the flag variables
+ FOUND=0
diff --git a/security/openfwtk/files/patch-squid-gw-squid-gw.restart b/security/openfwtk/files/patch-squid-gw-squid-gw.restart
new file mode 100644
index 000000000000..1488605a913b
--- /dev/null
+++ b/security/openfwtk/files/patch-squid-gw-squid-gw.restart
@@ -0,0 +1,8 @@
+--- squid-gw/squid-gw.restart.orig	2007-10-12 18:09:43.000000000 +0400
++++ squid-gw/squid-gw.restart	2007-10-12 18:10:12.000000000 +0400
+@@ -9,4 +9,4 @@
+     exit 1
+ fi
+ 
+-kill -HUP `cat $OFWTKPATH/var/pid/squid-gw.pid`
++kill -HUP `cat /var/run/openfwtk/squid-gw.pid`
diff --git a/security/openfwtk/files/pkg-message.in b/security/openfwtk/files/pkg-message.in
new file mode 100644
index 000000000000..4bfe43abb428
--- /dev/null
+++ b/security/openfwtk/files/pkg-message.in
@@ -0,0 +1,24 @@
+=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=
+* NOTE:
+
+* In order to use OpenFWTK proxies you need to have 
+procfs(5) filesystem mounted. 
+
+* You are advised to add following to /etc/crontab:
+
+59      *       *       *       *       root    %%LOCALBASE%%/bin/frequentcheck
+58      23      *       *       *       root    %%LOCALBASE%%/bin/daily_report
+
+* In order to get this reports, run:
+echo "admin@email.addr" > %%LOCALBASE%%/etc/openfwtk/admin
+
+* fw_check installed in %%LOCALBASE%%/share/fw_watch.
+
+* In order to user openfwtk, you need to create 
+%%LOCALBASE%%/etc/netperm-table, there is no predefined
+example for now! 
+
+* netperm-table(5) is a good place to start read about
+various configuration options
+
+=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=