Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

added fwknop-2.0.4 OpenBSD port from Vlad Glagolev

  • Loading branch information...
commit 0d19065ecc4c4f1a34c85b27302c98bc2e6adfe7 1 parent 0e89efb
Michael Rash authored
4 ChangeLog
View
@@ -1,3 +1,7 @@
+fwknop-2.0.5 (//2013):
+ - (Vlad Glagolev) Submitted an OpenBSD port for fwknop-2.0.4, and this has
+ been checked in under the extras/openbsd/fwknop-2.0.4 directory.
+
fwknop-2.0.4 (12/09/2012):
- [client] Misc fixes and the addition of save_args and last command
(.fwknop.last) support on the Windows platform.
46 extras/openbsd/fwknop-2.0.4/Makefile
View
@@ -0,0 +1,46 @@
+# $OpenBSD$
+
+COMMENT= Single Packet Authorization and Port Knocking
+
+VERSION= 2.0.4
+DISTNAME= fwknop-${VERSION}
+EXTRACT_SUFX= .tar.bz2
+CATEGORIES= net security mystuff
+
+MAINTAINER= Vlad Glagolev <stealth@sourcemage.org>
+
+HOMEPAGE= http://www.cipherdyne.org/fwknop/
+
+MASTER_SITES= http://www.cipherdyne.org/fwknop/download/
+
+SHARED_LIBS+= fko 1.0
+
+# GPL
+PERMIT_PACKAGE_CDROM= Yes
+PERMIT_PACKAGE_FTP= Yes
+PERMIT_DISTFILES_CDROM= Yes
+PERMIT_DISTFILES_FTP= Yes
+
+WANTLIB= c pcap iconv intl
+WANTLIB+= gpg-error gpgme assuan
+WANTLIB+= gdbm
+
+CONFIGURE_STYLE= gnu
+USE_GMAKE= Yes
+USE_GROFF= Yes
+
+# fixes GDBM detection
+CONFIGURE_ENV= LDFLAGS="-L${LOCALBASE}/lib" \
+ CFLAGS="-I${LOCALBASE}/include"
+
+CONFIGURE_ARGS+= --localstatedir='$${DESTDIR}/var' \
+ --enable-client \
+ --enable-server \
+ --enable-digest-cache \
+ --disable-file-cache \
+ --with-gpgme
+
+LIB_DEPENDS+= databases/gdbm
+LIB_DEPENDS+= security/gpgme
+
+.include <bsd.port.mk>
5 extras/openbsd/fwknop-2.0.4/distinfo
View
@@ -0,0 +1,5 @@
+MD5 (fwknop-2.0.4.tar.bz2) = mHgTfdXTUqGWO2GKlkcviw==
+RMD160 (fwknop-2.0.4.tar.bz2) = EKwI3hgbIAFBn7P4ycYfdbkzsWI=
+SHA1 (fwknop-2.0.4.tar.bz2) = rPhumfUKKbktna8Z5BOAuqX6rcc=
+SHA256 (fwknop-2.0.4.tar.bz2) = ooZRWMCcZEaQPZ712BxYHCDXevPcUjQn0RI3AjKYedQ=
+SIZE (fwknop-2.0.4.tar.bz2) = 1251804
14 extras/openbsd/fwknop-2.0.4/pkg/DESCR
View
@@ -0,0 +1,14 @@
+fwknop stands for the "FireWall KNock OPerator", and implements an authorization
+scheme called Single Packet Authorization (SPA) that is based around packet
+filter and libpcap.
+
+SPA requires only a single encrypted packet in order to communicate various
+pieces of information including desired access through a packet filter's policy
+and/or complete commands to execute on the target system. By using packet filter
+to maintain a "default drop" stance, the main application of this program is to
+protect services such as OpenSSH with an additional layer of security in order
+to make the exploitation of vulnerabilities (both 0-day and unpatched code) much
+more difficult.
+
+With fwknop deployed, anyone using nmap to look for sshd can't even tell that it
+is listening; it makes no difference if they have a 0-day exploit or not.
2  extras/openbsd/fwknop-2.0.4/pkg/PFRAG.shared
View
@@ -0,0 +1,2 @@
+@comment $OpenBSD$
+@lib lib/libfko.so.${LIBfko_VERSION}
11 extras/openbsd/fwknop-2.0.4/pkg/PLIST
View
@@ -0,0 +1,11 @@
+@comment $OpenBSD$
+%%SHARED%%
+@bin bin/fwknop
+include/fko.h
+@info info/libfko.info
+lib/libfko.a
+@comment lib/libfko.la
+@man man/man8/fwknop.8
+@man man/man8/fwknopd.8
+@bin sbin/fwknopd
+@rcscript ${RCDIR}/fwknopd
9 extras/openbsd/fwknop-2.0.4/pkg/fwknopd.rc
View
@@ -0,0 +1,9 @@
+#!/bin/sh
+#
+# $OpenBSD$
+
+daemon="${TRUEPREFIX}/sbin/fwknopd"
+
+. /etc/rc.d/rc.subr
+
+rc_cmd $1
Please sign in to comment.
Something went wrong with that request. Please try again.