Commit graph

1057 commits

Author SHA1 Message Date
Tim Bishop
5d679a1233 - Update f-prot to 6.2.1. Based on ports/132074.
PR:		ports/132074
Submitted by:	Cristiano Rolim Pereira <cristianorolim@hotmail.com>
2009-11-20 15:21:02 +00:00
Martin Wilke
4afa028822 - Connect security/nettle2
Feature safe: yes
2009-09-21 11:43:18 +00:00
Pav Lucistnik
bcac49f5ee Net::Radius::Server provides an extensible framework to create RADIUS
servers suitable for non-standard scenarios where authentication
needs to consider multiple factors. The RADIUS responses may be
created by arbitrarily complex rules that process the request packet
as well as any external data accessible to Perl.

WWW:	http://search.cpan.org/dist/Net-Radius-Server/

PR:		ports/138164
Submitted by:	Gea-Suan Lin <gslin@gslin.org>
Feature safe:	yes
2009-09-17 15:55:53 +00:00
Dmitry Marakasov
721c3a8d9a Barnyard is a critical tool for the parsing of Snort's unified binary files,
processing and on-forwarding to a variety of output plugins. Unfortunately
it has not seen an updated in over 4 years and is not going to be maintained
by the original developers. With the new version of the unified format
(ie. unified2) arriving we need something to bridge this gap.

The SXL team love barnyard. So much so that we want it to stay and have been
tinkering around with the code to give it a breath of new life. Here is what
we have achieved to far for this reinvigorated code base:

    * Parsing of the new unified2 log files.
    * Maintaining majority of the command syntax of barnyard.
    * Addressed all associated bug reports and feature requests arising since
		barnyard-0.2.0.
    * Completely rewritten code based on the GPLv2 Snort making it entirely
		GPLv2.

This is an effort to fuse the awesome work of Snort and the original concept
of barnyard giving it a fresh update along the way. We've come a long way so
far and have a very stable build that we've integrated into our NSMnow
framework.  If you have any feature requests, bugs or gripes then send them
our way.

WWW: http://www.securixlive.com/barnyard2/

PR:		138326
Submitted by:	Paul Schmehl <pauls@utdallas.edu>
2009-09-09 01:42:44 +00:00
Martin Wilke
24b4f66f4d The Python keyring lib provides an easy way to access the system keyring
service from Python. It can be used in any application that needs safe password
storage. It supports OSX, KDE, Gnome and Windows's native password storing
services. Besides this, it is shipped with kinds of Python implemented keyring
for the left environments.

WWW: http://pypi.python.org/pypi/keyring

PR:		ports/138513
Submitted by:	Douglas Thrift
2009-09-04 21:04:44 +00:00
Cy Schubert
2d8595639f Welcome the new krb5-17.
PR:		138246
2009-08-28 23:37:29 +00:00
Martin Wilke
a5a5ac0b49 MailZu is a simple and intuitive web interface to manage Amavisd-new
quarantine. Users can view their own quarantine, release/delete messages
or request the release of messages. MailZu is written in PHP and requires
Amavisd-new version greater than 2.3.0.

WWW: http://sourceforge.net/projects/mailzu/

PR:		ports/137197
Submitted by:	Sahil Tandon <sahil at tandon.net>
2009-08-14 19:54:33 +00:00
Erwin Lansing
604e70e0af security/dns-proxy-tor
security/trans-proxy-tor: trans-proxy-tor is rendered obsolete by Tor\'s TransPort option  (currently only available in tor-devel)

Approved by:	maintainer
2009-08-09 13:20:47 +00:00
Martin Wilke
509b364c73 AuthCAS aims at providing a Perl API to Yale's Central Authentication
System (CAS). Only a basic Perl library is provided with CAS whereas
AuthCAS is a full object-oriented library.

WWW:	http://cpan.uwinnipeg.ca/dist/AuthCAS

PR:		ports/136956
Submitted by:	Frank Wall <fw at moov.de>
2009-07-28 17:54:27 +00:00
Martin Wilke
e5b7d01def 2009-07-28 games/amy: mastersite disappeared, does not build on recent version
2009-07-28 security/hashish: "does not compile"
2009-07-19 security/smtpmap: depends on GCC 2.95 which has not been available for 9+ months
2009-07-28 09:01:57 +00:00
Shaun Amott
0da5b5c30c Remove this port, as its only mirror (operated by me) is about to be
vanish. The port is pretty useless anyway.
2009-07-19 18:31:22 +00:00
Philip M. Gollucci
3e0f3a3764 LuaSec is a binding for OpenSSL library to provide TLS/SSL communication. This
version delegates to LuaSocket the TCP connection establishment between the
client and server. Then LuaSec uses this connection to start a secure TLS/SSL
session.

WWW: http://www.inf.puc-rio.br/~brunoos/luasec/

PR:		ports/136266
Submitted by:	Andrew Lewis <dru at silenceisdefeat.net>
2009-07-14 06:07:51 +00:00
Juergen Lock
dcb4858c08 This is a Linux Fedora 10 infrastructure port for...
The Cyrus SASL (Simple Authentication and Security Layer)

SASL is the Simple Authentication and Security Layer, a method
for adding authentication support to connection-based protocols.
To use SASL, a protocol includes a command for identifying and
authenticating a user to a server and for optionally negotiating
protection of subsequent protocol interactions. If its use is
negotiated, a security layer is inserted between the protocol
and the connection.

WWW: http://cyrusimap.web.cmu.edu/

Obtained from:	Peter Jeremy <peterjeremy@optushome.com.au>
2009-07-03 20:56:24 +00:00
Max Brazhnikov
07fc014c6f Connect pinentry-qt4 to build 2009-06-24 08:27:30 +00:00
Martin Wilke
0c44d42fda Jifty::Plugin::OpenID is a perl module provides OpenID
authentication for your jifty app.

WWW:	http://search.cpan.org/dist/Jifty-Plugin-OpenID/

PR:		ports/135558
Submitted by:	Wen Heping <wenheping at gmail.com>
2009-06-19 05:35:12 +00:00
Martin Wilke
70c4785ca0 ranpwd uses /dev/random or /dev/urandom to generate cryptographically secure
passwords.

Generated passwords may consist of any specified length and any combination of
upper- or lower-case alphanumeric characters or punctuation.  ranpwd can also
generate passwords consisting of hexadecimal, decimal, octal or binary numbers,
and format these as valid C constants for inclusion in source code.

WWW: http://freshmeat.net/projects/ranpwd

PR:		ports/135540
Submitted by:	corky1951 at comcast.net
2009-06-19 05:28:46 +00:00
Martin Wilke
ca2be65696 The netpgp command can digitally sign files and verify that the
signatures attached to files were signed by a given user identifier.
netpgp can also encrypt files using the public or private keys of
users and, in the same manner, decrypt files which were encrypted.

The netpgp utility can also be used to generate a new key-pair for a
user.  This key is in two parts, the public key (which can be used by
other people) and a private key.

In addition to these primary uses, the third way of using netpgp is to
maintain keyrings.  Keyrings are collections of public keys belonging
to other users.  By using other means of identification, it is
possible to establish the bona fides of other users.  Once trust has
been established, the public key of the other user will be signed.
The other user's public key can be added to our keyring.  The other
user will add our public key to their keyring.

WWW:	http://www.NetBSD.org/

PR:		ports/134997
Submitted by:	bapt <baptiste.daroussin at gmail.com>
2009-06-15 21:46:41 +00:00
Martin Wilke
9c5972786d OpenConnect is a client for Cisco's AnyConnect SSL VPN, which is
supported by IOS 12.4(9)T or later on Cisco SR500, 870, 880,
1800, 2800, 3800, 7200 Series and Cisco 7301 Routers.

Like vpnc, OpenConnect is not officially supported by, or
associated in any way with, Cisco Systems. It just happens to
interoperate with their equipment.

WWW: http://www.infradead.org/openconnect.html

PR:		ports/135274
Submitted by:	Damian Gerow
2009-06-06 22:48:49 +00:00
Boris Samorodov
c11516af7b Here are new Linux Fedora 10 infrastructure ports.
Those ports are intended to be used with 8-CURRENT at least
with SVN r192206.

If you want to switch to linux-f10 ports, please define at /etc/make.conf:
  OVERRIDE_LINUX_BASE_PORT=f10
  OVERRIDE_LINUX_NONBASE_PORTS=f10

An upgrading procedure is shown at /usr/ports/UPDATING, entries 20090401
and 20070327.

For the first time all tested linux ports work as expected(!):
. acroread8;
. google-earth;
. skype;
. seamonkey.

Many thanks for kernel folks who really did the main work
(and I wrote only some lines of ports).

There is a good chance that those ports may become a default
for 8.0-RELEASE. Please, test and report back to emulation@ ML.
2009-06-01 17:26:31 +00:00
Martin Wilke
e741fcf7f9 The scrypt key derivation function was originally developed for use in
the Tarsnap online backup system and is designed to be far more secure
against hardware brute-force attacks than alternative functions such as
PBKDF2 or bcrypt.

WWW:   http://www.tarsnap.com/scrypt/

PR:		ports/134961
Submitted by:	Wen Heping <wenheping at gmail.com>
2009-05-29 11:56:22 +00:00
Martin Wilke
7a5515161e Prelude is a new innovative hybrid Intrusion Detection system designed
to be very modular, distributed, rock solid and fast.

Prelude-PFlogger Listens at OpenBSD PF redirect logged packet, and
send alerts to the Prelude Manager.

WWW: http://www.prelude-ids.org/

PR:		ports/134746
Submitted by:	Anders Troback <freebsd at troback.com>
2009-05-23 14:08:35 +00:00
Jose Alonso Cardenas Marquez
f27a0d866a - New port: security/gambas2-gb-crypt
The gambas crypt encription component
2009-05-09 01:34:13 +00:00
Greg Larkin
bb06397c6c This module comes with a set of methods to use with htaccess password
files. These files (and htaccess) are used to do Basic Authentication
on a web server.

The password file is a flat-file with login names and their associated
crypted password. You can use this for non-Apache files if you wish,
but it was written specifically for .htaccess style files.

WWW:    http://search.cpan.org/dist/Apache-Htpasswd/
2009-04-30 17:51:57 +00:00
Martin Wilke
aa3d4c052b It will transparently hijack HTTP traffic on a network, watch for HTTPS links
and redirects, then map those links into either look-alike HTTP links or
homograph-similar HTTPS links. It also supports modes for supplying a
favicon which looks like a lock icon, selective logging, and session denial.

WWW:	http://www.thoughtcrime.org/software/sslstrip/

PR:		ports/134021
Submitted by:	Matt Donovan <kitchetech@gmail.com>
2009-04-26 23:21:50 +00:00
Martin Wilke
2984a8ea26 py-pylibacl -- Manipulate the POSIX.1e Access Control Lists with python
WWW:	http://pylibacl.sourceforge.net/

PR:		ports/133846
Submitted by:	joris
2009-04-23 17:15:38 +00:00
Wesley Shields
8f26924f02 Download and install definition files for Clamav from the following sites:
sanesecurity.com
malware.com.br
msrbl.com
clamav.securiteinfo.com

WWW: https://sourceforge.net/projects/scamp/

PR:		ports/133248
Submitted by:	Gerard Seibert <gerard@seibercom.net>
2009-04-23 13:20:02 +00:00
Li-Wen Hsu
b9bf0908c3 Add libssh 0.2, a library implementing the SSH1 and SSH2 protocol.
PR:		ports/133657
Submitted by:	Alexander Logvinov <ports at logvinov.com>
2009-04-12 17:47:48 +00:00
Mark Linimon
0661c80219 Remove expired port security/cutlass: does not work with current version
of security/botan.
2009-04-11 20:51:13 +00:00
Boris Samorodov
d7a70652e5 Add linux-f8-nss 3.12.2, network Security Services (Linux Fedora 8). 2009-04-06 16:15:34 +00:00
Boris Samorodov
831a46c8da Add linux-f8-libssh2 0.18, the library implementing the SSH2 protocol
(Linux Fedora 8).
2009-04-06 16:09:54 +00:00
Boris Samorodov
824eda00fc Here are new Linux Fedora 8 infrastructure ports.
The recommended version of FreeBSD to use them is 8-CURRENT.
FreeBSD-7.x is not fully compatible with compat.linux.osrelease
2.6.16. Some syscalls cannot be MFCed due to native FreeBSD
ABI breakage.

Usage (and package building):
1. define compat.linux.osrelease=2.6.16;
2. add following variables to /etc/make.conf:
   . OVERRIDE_LINUX_BASE_PORT=f8;
   . OVERRIDE_LINUX_NONBASE_PORTS=f8.

Approved by:	bsam (me) ;-)
2009-04-01 15:25:39 +00:00
Martin Wilke
2d04fc9d63 Pairing-based cryptography is a relatively young area of cryptography
that revolves around a certain function with special properties.

The PBC (Pairing-Based Cryptography) library is a free C library
(released under the GNU Public License) built on the GMP library that
performs the mathematical operations underlying pairing-based
cryptosystems.

The PBC library is designed to be the backbone of implementations of
pairing-based cryptosystems, thus speed and portability are important
goals. It provides routines such as elliptic curve generation, elliptic
curve arithmetic and pairing computation. Thanks to the GMP library,
despite being written in C, pairings times are reasonable.

WWW:	http://crypto.stanford.edu/pbc/

PR:		ports/133172
Submitted by:	Wen Heping <wenheping at gmail.com>
2009-03-31 09:39:12 +00:00
Max Brazhnikov
0ec82edd28 connect qca-cyrus-sasl and qca-gnupg to build 2009-03-19 12:01:04 +00:00
Wesley Shields
e5744b10ae - Connect unhide to the build.
PR:		ports/132131
Submitted by:	Nikos Ntarmos <ntarmos@cs.uoi.gr>
2009-03-13 00:31:32 +00:00
Martin Wilke
c041c07d22 SSH key-based authentication is tried-and-true, but it lacks a true
Public Key Infrastructure for key certification, revocation and
expiration.  Monkeysphere is a framework that uses the OpenPGP web of
trust for these PKI functions.  It can be used in both directions: for
users to get validated host keys, and for hosts to authenticate users.

WWW: http://web.monkeysphere.info/

PR:		ports/128406
Submitted by:	Daniel Kahn Gillmor <dkg at fifthhorseman.net>
2009-03-10 07:45:27 +00:00
Martin Wilke
e7a6e4981b - Connect security/py-pyclamd to the build 2009-02-14 23:31:21 +00:00
Gabor Kovesdan
a6ec929c8d HotSSH is an interface to Secure Shell, for GNOME and OpenSSH. It
intends to be a better experience than simply invoking "ssh" from an
existing terminal window.

   * Fast search-based interface for new connections
   * Also display and search of local (Avahi) SSH servers
   * Tabbed display with automatic session saving (Firefox style)
   * Status bar with information like latency to server and output of
     remote uptime
   * Close integration with OpenSSH features like connection sharing
     (near-instant new tabs)
   * NetworkManager integration to easily reconnect after a network
     change, great for laptops

WWW:	http://projects.gnome.org/hotssh/

PR:		ports/131133
Submitted by:	Ashish Shukla <wahjava at gmail.com>
2009-02-13 23:36:51 +00:00
Martin Wilke
72cb71315e The OpenPGP SDK project provides an open source library, written in C,
which implements the OpenPGP specification.

WWW:	http://openpgp.nominet.org.uk/
2009-02-10 11:27:57 +00:00
Martin Wilke
feb4910a37 py-PF is a pure-Python module for managing OpenBSD's Packet Filter. It aims
to combine the flexibility of PF's C API and the power of Python, making it
easier to manage PF data and to integrate firewalling capabilities in more
complex applications.

WWW:	http://www.kernel-panic.it/software/py-pf/

PR:		ports/131463
Submitted by:	Sofian Brabez <sbrabez at gmail.com>
2009-02-09 21:25:26 +00:00
Martin Wilke
071613d170 The Nmap::Parser library provides a Ruby interface to
Nmap's scan data.  It can run Nmap and parse its XML
output directly from the scan, parse a file containing
the XML data from a separate scan, parse a String of
XML data from a scan, or parse XML data from an object
via its read() method.  This information is presented
in an easy-to-use and intuitive fashion for storage
and manipulation.

WWW: http://rubynmap.sourceforge.net/

PR:		ports/131516
Submitted by:	Daniel Roethlisberger <daniel at roe.ch>
2009-02-09 16:52:15 +00:00
Gabor Kovesdan
4ef9544c62 Crypt::Juniper - Encrypt/decrypt Juniper $9$ secrets
WWW:	http://search.cpan.org/dist/Crypt-Juniper/

PR:		ports/131126
Submitted by:	Tsung-Han Yeh <snowfly at yuntech.edu.tw>
2009-02-04 12:46:38 +00:00
Gabor Kovesdan
07099141b4 The Mcrypt modules provides and simple and inuitive perl abstraction of the
libmcrypt cryptography library.  It provide mechanisms for encoding and
decoding perl scalars.

WWW: http://search.cpan.org/dist/Mcrypt/

PR:		ports/131051
Submitted by:	Tatsuki Makino <tatsuki_makino@hotmail.com>
2009-02-04 12:45:02 +00:00
Martin Wilke
780e8a39f0 2009-01-19 games/emacs-chess: has been broken for more than 6 months
2009-02-01 devel/subversion-devel: Use devel/subversion or devel/subversion-freebsd instead of this port
2009-01-19 devel/hs-hat: has been broken for more than 6 months
2009-01-19 devel/hs-hpl: has been broken for more than 6 months
2009-01-19 databases/mysqlbigram: has been broken for more than 6 months
2009-01-19 mail/claws-mail-clamav: has been broken for more than 6 months
2009-01-19 mail/sylpheed2-devel: has been broken for more than 6 months
2009-01-19 www/pecl-mnogosearch: has been broken for more than 6 months
2009-01-31 x11-fonts/mathfonts: This port was supported by Mozilla 1.8 (including Firefox 2.0) - to be replaced by  STIX fonts for Firefox 3.x
2009-01-19 x11-wm/fluxspace: has been broken for more than 6 months
2009-01-31 x11-wm/expocity: project has been abandoned
2009-01-19 x11/bbuname: has been broken for more than 6 months
2009-01-19 security/squidclam: has been broken for more than 6 months
2009-01-19 print/virtualpaper: depends on broken, expired port
2009-01-19 print/ifhp: has been broken for more than 6 months
2009-01-19 net-p2p/peercast: has been forbidden for more than 6 months
2009-01-19 palm/pdbc: has been broken for more than 6 months
2009-01-19 net-mgmt/NeTraMet: has been broken for more than 6 months
2009-01-19 net-im/sulci: has been broken for more than 6 months
2009-01-19 multimedia/mjpegtools-yuvfilters: has been broken for more than 6 months
2009-01-19 multimedia/helixplayer: has been broken for more than 6 months
2009-01-19 lang/quack: has been broken for more than 6 months
2009-01-19 misc/pybliographer: has been broken for more than 6 months
2009-01-19 net/versuch: has been broken for more than 6 months
2009-01-19 net/py-mantissa: has been broken for more than 6 months
2009-01-19 net/libunpipc: has been broken for more than 6 months
2009-01-19 net/gnometelnet: has been broken for more than 6 months
2009-01-19 net/gacxtool: depends on expired, broken port
2009-01-19 devel/py-coro: has been broken for more than 6 months
2009-01-19 chinese/stardict2-dict-zh_TW: has been broken for more than 6 months
2009-01-19 x11-themes/gtk-industrial-theme: has been broken for more than 6 months
2009-02-03 22:38:25 +00:00
Gabor Pali
da4ace3067 This package provides efficient cryptographic hash implementations for
strict and lazy bytestrings for the functional programming language
Haskell.

WWW: http://hackage.haskell.org/cgi-bin/hackage-scripts/package/digest

Reviewed by:	gabor
Approved by:	tabthorpe
2009-01-23 23:47:58 +00:00
Cy Schubert
61cdb0d881 Add sudosh2. 2009-01-15 16:06:00 +00:00
Philip M. Gollucci
35be5a0f01 Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log
and bans IP that makes too many password failures. It updates
firewall rules to reject the IP address.

WWW: http://www.fail2ban.org/wiki/index.php/Main_Page
2009-01-13 18:22:19 +00:00
Joe Marcus Clarke
610ae56816 Presenting GNOME 2.24 for FreeBSD.
See http://library.gnome.org/misc/release-notes/2.24/ for the general
release notes.  On the FreeBSD front, this release introduces Fuse support
in HAL, adds multi-CPU support to libgtop, WebKit updates, and fixes some
long-standing seahorse and gnome-keyring bugs.  The documentation updates
to the website are forthcoming.

This release features commits by adamw, ahze, kwm, mezz, and myself.  It would
not have been possible without are contributors and testers:

Alexander Loginov
Craig Butler [1]
Dmitry Marakasov [6]
Eric L. Chen
Joseph S. Atkinson
Kris Moore
Lapo Luchini [7]
Nikos Ntarmos
Pawel Worach
Romain Tartiere
TAOKA Fumiyoshi [3]
Yasuda Keisuke
Zyl
aZ [4]
bf [2] [5]
Florent Thoumie
Peter Wemm
pluknet

PR:		125857 [1]
		126993 [2]
		130031 [3]
		127399 [4]
		127661 [5]
		124302 [6]
		129570 [7]
		129936
		123790
2009-01-10 05:22:13 +00:00
Dirk Meyer
63c086dc44 - disconnect openssl-beta 2009-01-09 16:35:20 +00:00
Roman Bogorodskiy
846abd3383 Re-add gnutls-devel port at version 2.7.4. 2009-01-09 07:21:29 +00:00
Dirk Meyer
eddd3eb565 - disconnect openssl-stable 2008-12-30 13:49:35 +00:00