c0ce4105e7
was supposed to work is useless, because if we can't trust the distfile from the remote machine, we can't trust the signature from the same machine either. Our MD5 and SHA256 are good for checking both the sanity and the trustiness of distfiles. Approved by: portmgr (erwin), erwin (mentor)
100 lines
3.1 KiB
Makefile
100 lines
3.1 KiB
Makefile
# New ports collection makefile for: snort_inline
|
|
# Date created: 4 March 2005
|
|
# Whom: nick@rogness.net
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
PORTNAME= snort_inline
|
|
PORTVERSION= 2.4.5
|
|
CATEGORIES= security
|
|
MASTER_SITES= http://freebsd.rogness.net/ports/snort_inline/
|
|
|
|
MAINTAINER= nick@rogness.net
|
|
COMMENT= An inline IPS system based on snort using ipfw
|
|
|
|
LIB_DEPENDS= pcre.0:${PORTSDIR}/devel/pcre
|
|
|
|
GNU_CONFIGURE= yes
|
|
CONFIGURE_ENV= LDFLAGS="${LDFLAGS}"
|
|
CONFIGURE_TARGET= --build=${MACHINE_ARCH}-portbld-freebsd${OSREL}
|
|
CONFIGURE_ARGS+= --enable-inline --enable-ipfw
|
|
|
|
LIB_DEPENDS+= dnet:${PORTSDIR}/net/libdnet
|
|
|
|
.if defined(WITH_MYSQL)
|
|
USE_MYSQL= yes
|
|
CONFIGURE_ARGS+= --with-mysql=${LOCALBASE}
|
|
.else
|
|
CONFIGURE_ARGS+= --with-mysql=no
|
|
.endif
|
|
|
|
.if defined(WITH_ODBC)
|
|
LIB_DEPENDS+= odbc.1:${PORTSDIR}/databases/unixODBC
|
|
CONFIGURE_ARGS+= --with-odbc=${LOCALBASE}
|
|
LDFLAGS+= ${PTHREAD_LIBS}
|
|
.else
|
|
CONFIGURE_ARGS+= --with-odbc=no
|
|
.endif
|
|
|
|
.if defined(WITH_POSTGRESQL)
|
|
USE_PGSQL= yes
|
|
CONFIGURE_ARGS+= --with-postgresql=${LOCALBASE}
|
|
.if exists(/usr/lib/libssl.a) && exists(/usr/lib/libcrypto.a)
|
|
LDFLAGS+= -lssl -lcrypto
|
|
.endif
|
|
.else
|
|
CONFIGURE_ARGS+= --with-postgresql=no
|
|
.endif
|
|
|
|
MAN8= snort.8 snort_inline.8
|
|
DOCS= ChangeLog doc/AUTHORS doc/BUGS doc/CREDITS doc/faq* doc/NEWS \
|
|
doc/README* doc/TODO doc/USAGE doc/*.pdf
|
|
|
|
RULE_PATH= ${DATADIR}/rules
|
|
|
|
USE_RC_SUBR= snort.sh
|
|
|
|
post-patch:
|
|
${REINPLACE_CMD} "s,%%PREFIX%%,${PREFIX}," ${WRKSRC}/src/snort.c
|
|
${REINPLACE_CMD} "s,/etc/snort_inline/drop-rules,${RULE_PATH}," ${WRKSRC}/etc/snort_inline.conf
|
|
${REINPLACE_CMD} "s,$RULE_PATH/classification.config,${DATADIR}/classification.config," ${WRKSRC}/etc/snort_inline.conf
|
|
${REINPLACE_CMD} "s,$RULE_PATH/reference.config,${DATADIR}/reference.config," ${WRKSRC}/etc/snort_inline.conf
|
|
${REINPLACE_CMD} -e "s/^unicode.map/\/usr\/local\/share\/snort_inline\/unicode.map/" ${WRKSRC}/etc/snort_inline.conf
|
|
|
|
pre-configure:
|
|
@${ECHO} ""
|
|
@${ECHO} "Set WITH_MYSQL, WITH_ODBC or WITH_POSTGRESQL"
|
|
@${ECHO} "to get additional support."
|
|
@${ECHO} ""
|
|
|
|
post-install:
|
|
@${MKDIR} ${DATADIR}
|
|
@${MKDIR} ${RULE_PATH}
|
|
${INSTALL_DATA} ${WRKSRC}/etc/classification.config \
|
|
${DATADIR}/classification.config-sample
|
|
[ -f ${DATADIR}/classification.config ] || \
|
|
${CP} ${DATADIR}/classification.config-sample \
|
|
${DATADIR}/classification.config
|
|
${INSTALL_DATA} ${WRKSRC}/etc/reference.config \
|
|
${DATADIR}/reference.config-sample
|
|
[ -f ${DATADIR}/reference.config ] || \
|
|
${CP} ${DATADIR}/reference.config-sample ${DATADIR}/reference.config
|
|
${INSTALL_DATA} ${WRKSRC}/etc/threshold.conf \
|
|
${DATADIR}/threshold.conf-sample
|
|
[ -f ${DATADIR}/threshold.conf ] || \
|
|
${CP} ${DATADIR}/threshold.conf-sample ${DATADIR}/threshold.conf
|
|
${INSTALL_DATA} ${WRKSRC}/etc/unicode.map \
|
|
${DATADIR}/unicode.map
|
|
.for f in snort.conf snort_inline.conf
|
|
${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}-sample
|
|
[ -f ${PREFIX}/etc/${f} ] || \
|
|
${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}
|
|
.endfor
|
|
.if !defined(NOPORTDOCS)
|
|
@${MKDIR} ${DOCSDIR}
|
|
cd ${WRKSRC} && ${INSTALL_DATA} ${DOCS} ${DOCSDIR}
|
|
.endif
|
|
@${CAT} ${PKGMESSAGE}
|
|
|
|
.include <bsd.port.mk>
|