diff options
author | Mike Frysinger <vapier@gentoo.org> | 2003-09-29 02:16:00 +0000 |
---|---|---|
committer | Mike Frysinger <vapier@gentoo.org> | 2003-09-29 02:16:00 +0000 |
commit | 39dd6099ef248f1cd26c892090fbc04ab3566c06 (patch) | |
tree | b154fec10527a75d572aa35d98844eba2600785d /net-analyzer/ipac-ng/files | |
parent | msterret -> mr_bones_ (diff) | |
download | gentoo-2-39dd6099ef248f1cd26c892090fbc04ab3566c06.tar.gz gentoo-2-39dd6099ef248f1cd26c892090fbc04ab3566c06.tar.bz2 gentoo-2-39dd6099ef248f1cd26c892090fbc04ab3566c06.zip |
initial ebuild #19246
Diffstat (limited to 'net-analyzer/ipac-ng/files')
-rw-r--r-- | net-analyzer/ipac-ng/files/digest-ipac-ng-1.27_p1 | 1 | ||||
-rw-r--r-- | net-analyzer/ipac-ng/files/ipac-ng.cron | 8 | ||||
-rw-r--r-- | net-analyzer/ipac-ng/files/ipac-ng.rc | 36 | ||||
-rw-r--r-- | net-analyzer/ipac-ng/files/ipac.conf | 56 |
4 files changed, 101 insertions, 0 deletions
diff --git a/net-analyzer/ipac-ng/files/digest-ipac-ng-1.27_p1 b/net-analyzer/ipac-ng/files/digest-ipac-ng-1.27_p1 new file mode 100644 index 000000000000..6b0ba9181e50 --- /dev/null +++ b/net-analyzer/ipac-ng/files/digest-ipac-ng-1.27_p1 @@ -0,0 +1 @@ +MD5 9ac8ded2b1690605017d41da04a7d90f ipac-ng-1.27pl1.tar.bz2 194433 diff --git a/net-analyzer/ipac-ng/files/ipac-ng.cron b/net-analyzer/ipac-ng/files/ipac-ng.cron new file mode 100644 index 000000000000..d86b859ab26b --- /dev/null +++ b/net-analyzer/ipac-ng/files/ipac-ng.cron @@ -0,0 +1,8 @@ +#!/bin/sh +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ipac-ng/files/ipac-ng.cron,v 1.1 2003/09/29 02:16:00 vapier Exp $ + +FI=/usr/sbin/fetchipac + +if [ -x ${FI} ] && [ -f /var/run/ipac.rules ]; then + ${FI} +fi diff --git a/net-analyzer/ipac-ng/files/ipac-ng.rc b/net-analyzer/ipac-ng/files/ipac-ng.rc new file mode 100644 index 000000000000..00488db75b1a --- /dev/null +++ b/net-analyzer/ipac-ng/files/ipac-ng.rc @@ -0,0 +1,36 @@ +#!/sbin/runscript +# Copyright 1999-2003 Gentoo Technologies, Inc. +# Distributed under the terms of the GNU General Public License, v2 or later +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ipac-ng/files/ipac-ng.rc,v 1.1 2003/09/29 02:16:00 vapier Exp $ + +depend() { + need net logger +} + +start() { + ebegin "Setting up ipac-ng iptables chains" + /usr/sbin/fetchipac -S + /usr/sbin/fetchipac + eend $? +} + +stop() { + ## fetch so we dont loose data + /usr/sbin/fetchipac + + IPT=/sbin/iptables + ebegin "Removing ipac-ng iptables settings" + + ${IPT} -D INPUT -s 0/0 -d 0/0 -j ipac_in + ${IPT} -D OUTPUT -s 0/0 -d 0/0 -j ipac_out + ${IPT} -D FORWARD -s 0/0 -d 0/0 -j ipac_in + ${IPT} -D FORWARD -s 0/0 -d 0/0 -j ipac_out + ${IPT} -F ipac_in + ${IPT} -F ipac_out + ${IPT} -X ipac_in + ${IPT} -X ipac_out + + rm -f /var/run/ipac.rules /var/run/ipac.status + + eend $? +} diff --git a/net-analyzer/ipac-ng/files/ipac.conf b/net-analyzer/ipac-ng/files/ipac.conf new file mode 100644 index 000000000000..9428b8160db5 --- /dev/null +++ b/net-analyzer/ipac-ng/files/ipac.conf @@ -0,0 +1,56 @@ +# $Id: ipac.conf,v 1.1 2003/09/29 02:16:00 vapier Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-analyzer/ipac-ng/files/ipac.conf,v 1.1 2003/09/29 02:16:00 vapier Exp $ + +# Example config file with accounting rules +# Install as /etc/ipac-ng/ipac.conf +# +# Format: +# Name of rule|direction|interface|protocol|source|destination +# +# where +# Name of rule Any string to identify this rule +# direction in | out +# interface ip number or interface name, '+' means all interfaces +# protocol tcp | udp | icmp | all +# source \ +# destination both as described in ipfwadm(8), or empty + +# target accept, deny, reject or none of that +# +# incoming: + +incoming all |in|eth+|all|| +incoming TCP |in|eth+|tcp|| +incoming UDP |in|eth+|udp|| +incoming ICMP |in|eth+|icmp|| +incoming local SSH |in|eth+|tcp||0/0 ssh + +#incoming smtp|in||tcp|0/0 smtp| +#incoming nntp|in||tcp|0/0 nntp| +#incoming samba|in|eth+|tcp||0/0 137 138 139 +#incoming samba|in|eth+|udp||0/0 137 138 139 +#incoming samba|in|eth+|tcp|0/0 137 138 139| +#incoming samba|in|eth+|udp|0/0 137 138 139| +#incoming http|in||tcp|0/0 http https 81 82 83 8080| +#incoming ftp |in||tcp|0/0 ftp ftp-data| +#incoming dns |in||udp|0/0 domain| + +# +# Outgoing: +outgoing all |out|eth+|all|| +outgoing TCP |out|eth+|tcp|| +outgoing UDP |out|eth+|udp|| +outgoing ICMP |out|eth+|icmp|| +outgoing local Webserver |out|eth+|tcp|0/0 http https| +outgoing local SSH |out|eth+|tcp|0/0 ssh| + +#outgoing smtp|out||tcp||0/0 smtp +#outgoing nntp|out||tcp||0/0 nntp +#outgoing samba|out|eth+|tcp|0/0 137 138 139| +#outgoing samba|out|eth+|udp|0/0 137 138 139| +#outgoing samba|out|eth+|tcp||0/0 137 138 139 +#outgoing samba|out|eth+|udp||0/0 137 138 139 +#outgoing http|out||tcp||0/0 http https 81 82 83 8080 +#outgoing ftp |out||tcp||0/0 ftp ftp-data +#outgoing dns |out||udp||0/0 domain +# |