Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to devel-xorg-modular grimoire by Vlad Glagolev (8d0dce7606cb8bf462ff19b271bcabee50a5d585)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Vlad Glagolev <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to devel-xorg-modular grimoire by Vlad Glagolev (8d0dce7606cb8bf462ff19b271bcabee50a5d585)
  • Date: Fri, 27 Apr 2012 15:14:50 -0500

GIT changes to devel-xorg-modular grimoire by Vlad Glagolev
<stealth AT sourcemage.org>:

ChangeLog | 3 +
mail/dspam/DETAILS | 3 -
mail/dspam/HISTORY | 3 +
mail/dspam/PRE_BUILD | 2 -
mail/dspam/rset.patch | 62
--------------------------------------
mail/postfix/DETAILS | 2 -
mail/postfix/HISTORY | 3 +
net/slowhttptest/DEPENDS | 1
net/slowhttptest/DETAILS | 33 ++++++++++++++++++++
net/slowhttptest/HISTORY | 2 +
security/fwknop/BUILD | 1
security/fwknop/CONFIGURE | 19 ++++++-----
security/fwknop/DEPENDS | 21 ++++++++----
security/fwknop/DETAILS | 8 ++--
security/fwknop/HISTORY | 10 ++++++
security/fwknop/INSTALL | 12 ++++++-
security/fwknop/PRE_BUILD | 20 ++----------
security/fwknop/homedir_hack.diff | 18 -----------
security/fwknop/init.d/fwknopd | 25 ++++++++++-----
security/fwknop/init_hack.diff | 20 ------------
20 files changed, 118 insertions(+), 150 deletions(-)

New commits:
commit 9bcc92f9b7a6d631a9861a90d6cac183c1dd729a
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

fwknop: => 2.0

commit c870891d61bc848d97b3768bce9153ff55afbe5c
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

slowhttptest: new spell, application layer DoS attack simulator

commit 3080a1b81ec74da0809900131d9cd458d18ccd49
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

postfix: => 2.9.2

commit 0fdc0b284a131f4f767556918ee9e4d17b0937e0
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

dspam: => 3.10.2

diff --git a/ChangeLog b/ChangeLog
index 81e37cb..1b6ee54 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,6 @@
+2012-04-27 Vlad Glagolev <stealth AT sourcemage.org>
+ * net/slowhttptest: new spell, application layer DoS attack simulator
+
2012-04-26 Vlad Glagolev <stealth AT sourcemage.org>
* graphics/jbig2dec: new spell, decoder implementation of the JBIG2
image compression format
diff --git a/mail/dspam/DETAILS b/mail/dspam/DETAILS
index 1715e1d..5d160a3 100755
--- a/mail/dspam/DETAILS
+++ b/mail/dspam/DETAILS
@@ -17,8 +17,7 @@ SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-scm"
#
SOURCE_HASH=sha512:fd70938b3ef368fbfb992921a596972dc665ce9c6869ca362274c4bd02174fbfd3419438f63c1cdef06167fcde1ceea30fe359228642010bef4d77036e6bcf2f
#SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
else
- VERSION=3.10.1
- PATCHLEVEL=2
+ VERSION=3.10.2
SOURCE="${SPELL}-${VERSION}.tar.gz"
SOURCE2=$SOURCE.asc
SOURCE_URL[0]=$SOURCEFORGE_URL/$SPELL/$SOURCE
diff --git a/mail/dspam/HISTORY b/mail/dspam/HISTORY
index f90e720..a460a84 100644
--- a/mail/dspam/HISTORY
+++ b/mail/dspam/HISTORY
@@ -1,3 +1,6 @@
+2012-04-27 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 3.10.2
+
2012-03-15 Vlad Glagolev <stealth AT sourcemage.org>
* DEPENDS: better handling of daemon <-> sqlite interaction

diff --git a/mail/dspam/PRE_BUILD b/mail/dspam/PRE_BUILD
index 137213d..ac99efe 100755
--- a/mail/dspam/PRE_BUILD
+++ b/mail/dspam/PRE_BUILD
@@ -3,6 +3,4 @@ cd $SOURCE_DIRECTORY &&
if [[ $DSPAM_BRANCH == scm ]]; then
aclocal &&
NOCONFIGURE=1 ./autogen.sh
-else
- patch -p0 < "$SPELL_DIRECTORY/rset.patch"
fi
diff --git a/mail/dspam/rset.patch b/mail/dspam/rset.patch
deleted file mode 100644
index 883bc58..0000000
--- a/mail/dspam/rset.patch
+++ /dev/null
@@ -1,62 +0,0 @@
---- src/daemon.c.orig
-+++ src/daemon.c
-@@ -1,4 +1,4 @@
--/* $Id: daemon.c,v 1.22 2011/06/28 00:13:48 sbajic Exp $ */
-+/* $Id: daemon.c,v 1.23 2012/02/09 22:05:07 sbajic Exp $ */
-
- /*
- DSPAM
-@@ -992,33 +992,37 @@ char *daemon_expect(THREAD_CTX *TTX, const char
*command) {
- char buf[128];
- char *cmd;
-
-- cmd = daemon_getline(TTX, 300);
-+ cmd = daemon_getline(TTX, 300);
- if (cmd == NULL)
- return NULL;
-
- while(strncasecmp(cmd, command, strlen(command))) {
- if (!strncasecmp(cmd, "QUIT", 4)) {
- free(cmd);
-- daemon_reply(TTX, LMTP_QUIT, "2.0.0", "OK");
-+ daemon_reply(TTX, LMTP_QUIT, "2.0.0", "OK");
- return NULL;
-- }
-- if (!strncasecmp(cmd, "RSET", 4)) {
-+ } else if (!strncasecmp(cmd, "RSET", 4)) {
- snprintf(buf, sizeof(buf), "%d OK", LMTP_OK);
- if (send_socket(TTX, buf)<=0)
- return NULL;
- free(cmd);
-- return "RSET";
-+ if (!strncasecmp(command, "LHLO", 4)) {
-+ cmd = daemon_getline(TTX, 300);
-+ if (cmd == NULL)
-+ return NULL;
-+ } else {
-+ return "RSET";
-+ }
-+ } else {
-+ snprintf(buf, sizeof(buf), "%d 5.0.0 Need %s here.", LMTP_BAD_CMD,
command);
-+ if (send_socket(TTX, buf)<=0)
-+ return NULL;
-+ free(cmd);
-+ cmd = daemon_getline(TTX, 300);
-+ if (cmd == NULL)
-+ return NULL;
- }
--
-- snprintf(buf, sizeof(buf), "%d 5.0.0 Need %s here.", LMTP_BAD_CMD,
command);
--
-- if (send_socket(TTX, buf)<=0)
-- return NULL;
-- free(cmd);
-- cmd = daemon_getline(TTX, 300);
-- if (cmd == NULL)
-- return NULL;
-- }
-+ }
- return cmd;
- }
-
---
diff --git a/mail/postfix/DETAILS b/mail/postfix/DETAILS
index 582f2c0..7efb93e 100755
--- a/mail/postfix/DETAILS
+++ b/mail/postfix/DETAILS
@@ -4,7 +4,7 @@ if [[ "${POSTFIX_EXP}" == "y" ]]; then
VERSION=2.9-20110615
PFIX_BRANCH=experimental
else
- VERSION=2.8.3
+ VERSION=2.9.2
PFIX_BRANCH=official
fi

diff --git a/mail/postfix/HISTORY b/mail/postfix/HISTORY
index a795e42..dd7b0bd 100644
--- a/mail/postfix/HISTORY
+++ b/mail/postfix/HISTORY
@@ -1,3 +1,6 @@
+2012-04-27 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 2.9.2
+
2012-01-19 Vlad Glagolev <stealth AT sourcemage.org>
* CONFLICTS: added masqmail

diff --git a/net/slowhttptest/DEPENDS b/net/slowhttptest/DEPENDS
new file mode 100755
index 0000000..ed472ed
--- /dev/null
+++ b/net/slowhttptest/DEPENDS
@@ -0,0 +1 @@
+depends openssl
diff --git a/net/slowhttptest/DETAILS b/net/slowhttptest/DETAILS
new file mode 100755
index 0000000..5d53fea
--- /dev/null
+++ b/net/slowhttptest/DETAILS
@@ -0,0 +1,33 @@
+ SPELL=slowhttptest
+ VERSION=1.4
+ SOURCE=$SPELL-$VERSION.tar.gz
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
+ SOURCE_URL[0]=http://slowhttptest.googlecode.com/files/$SOURCE
+
SOURCE_HASH=sha512:7110727b6955bd62d532b0cfa5768450e0106e9fd935fa59991fcf276b2e571cf96d268cb09e251c08c619240062b2f053f954d1fdb3596e829a7f06873fe0cf
+ WEB_SITE=http://code.google.com/p/slowhttptest/
+ GATHER_DOCS=off
+ LICENSE[0]=APACHE
+ ENTERED=20120427
+ KEYWORDS="net"
+ SHORT="application layer DoS attack simulator"
+cat << EOF
+SlowHTTPTest is a highly configurable tool that simulates some Application
Layer
+Denial of Service attacks.
+
+It implements most common low-bandwidth Application Layer DoS attacks, such
as
+slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer
exploit)
+by draining concurrent connections pool, as well as Apache Range Header
attack
+by causing very significant memory and CPU usage on the server.
+
+Slowloris and Slow HTTP POST DoS attacks rely on the fact that the HTTP
protocol,
+by design, requires requests to be completely received by the server before
they
+are processed. If an HTTP request is not complete, or if the transfer rate is
+very low, the server keeps its resources busy waiting for the rest of the
data.
+If the server keeps too many resources busy, this creates a denial of
service.
+This tool is sending partial HTTP requests, trying to get denial of service
from
+target HTTP server.
+
+Slow Read DoS attack aims the same resources as slowloris and slow POST, but
+instead of prolonging the request, it sends legitimate HTTP request and reads
+the response slowly.
+EOF
diff --git a/net/slowhttptest/HISTORY b/net/slowhttptest/HISTORY
new file mode 100644
index 0000000..ce94176
--- /dev/null
+++ b/net/slowhttptest/HISTORY
@@ -0,0 +1,2 @@
+2012-04-27 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS, DEPENDS: spell created
diff --git a/security/fwknop/BUILD b/security/fwknop/BUILD
deleted file mode 100755
index 27ba77d..0000000
--- a/security/fwknop/BUILD
+++ /dev/null
@@ -1 +0,0 @@
-true
diff --git a/security/fwknop/CONFIGURE b/security/fwknop/CONFIGURE
index 9688856..bb96534 100755
--- a/security/fwknop/CONFIGURE
+++ b/security/fwknop/CONFIGURE
@@ -1,10 +1,13 @@
-config_query_option FWKNOP_SERVER \
- "Install server component?" y \
- "" \
- "--client-only" &&
+config_query_option FWKNOP_OPTS "Build the fwknop client?" y \
+ "--enable-client" \
+ "--disable-client" &&

-if [[ $FWKNOP_SERVER == '--client-only' ]]
-then
- message "${MESSAGE_COLOR}The init script is useful only" \
- "with the server component.$DEFAULT_COLOR"
+config_query_option FWKNOP_OPTS "Build the fwknop server?" y \
+ "--enable-server" \
+ "--disable-server" &&
+
+if list_find "$FWKNOP_OPTS" "--enable-server"; then
+ config_query_option FWKNOP_OPTS "Enable the fwknopd digest-cache?" y \
+ "--enable-digest-cache" \
+ "--disable-digest-cache"
fi
diff --git a/security/fwknop/DEPENDS b/security/fwknop/DEPENDS
index 387478a..79a76fe 100755
--- a/security/fwknop/DEPENDS
+++ b/security/fwknop/DEPENDS
@@ -1,8 +1,15 @@
-depends perl &&
-depends psmisc &&
+if list_find "$FWKNOP_OPTS" "--enable-server"; then
+ depends libpcap &&

-if [[ $FWKNOP_SERVER != '--client-only' ]]
-then
- depends iptables &&
- depends libcap
-fi
+ runtime_depends iptables &&
+
+ optional_depends gdbm \
+ "--disable-file-cache" \
+ "--enable-file-cache" \
+ "to replace file cache with gdbm"
+fi &&
+
+optional_depends gpgme \
+ "--with-gpgme" \
+ "--without-gpgme" \
+ "for gpg encryption support"
diff --git a/security/fwknop/DETAILS b/security/fwknop/DETAILS
index 6ed6bdc..6f226e9 100755
--- a/security/fwknop/DETAILS
+++ b/security/fwknop/DETAILS
@@ -1,17 +1,17 @@
SPELL=fwknop
- VERSION=1.8.1
+ VERSION=2.0
SOURCE=$SPELL-$VERSION.tar.bz2
SOURCE2=$SOURCE.asc
SOURCE_URL[0]=http://www.cipherdyne.org/fwknop/download/$SOURCE
- SOURCE2_URL[0]=http://www.cipherdyne.org/fwknop/download/$SOURCE2
+ SOURCE2_URL[0]=${SOURCE_URL[0]}.asc
SOURCE_GPG=fwknop.gpg:$SOURCE2:UPSTREAM_KEY
SOURCE2_IGNORE=signature
-SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
WEB_SITE=http://www.cipherdyne.org/fwknop/
ENTERED=20070821
LICENSE[0]=GPL
KEYWORDS="security"
- SHORT="A Single Packet Authorization (SPA) implementation."
+ SHORT="Single Packet Authorization and Port Knocking"
cat << EOF
fwknop stands for the "FireWall KNock OPerator", and implements an
authorization scheme called Single Packet Authorization (SPA) that is
diff --git a/security/fwknop/HISTORY b/security/fwknop/HISTORY
index d218369..dd7ad08 100644
--- a/security/fwknop/HISTORY
+++ b/security/fwknop/HISTORY
@@ -1,3 +1,13 @@
+2012-04-27 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 2.0; updated short desc
+ * DEPENDS: perl is no more -- as of version 2, fwknop has been fully
+ re-written in C
+ * CONFIGURE: use FWKNOP_OPTS
+ * INSTALL: carefully install config files even without castfs
+ * PRE_BUILD: removed dirty hacks; fixed config files trashing
+ * BUILD, homedir_hack.diff, init_hack.diff: dropped
+ * init.d/fwknopd: unified; added reload/restart functions
+
2011-09-23 Bor Kraljič <pyrobor AT ver.si>
* fwknop.gpg: added gpg key 0D3E7410 to keyring (fixes #104)
public key from Michael Rash (Signing key for cipherdyne.org
projects) <mbr AT cipherdyne.org>
diff --git a/security/fwknop/INSTALL b/security/fwknop/INSTALL
index 765d39e..8e6319e 100755
--- a/security/fwknop/INSTALL
+++ b/security/fwknop/INSTALL
@@ -1 +1,11 @@
-./install.pl --Defaults $FWKNOP_SERVER
+default_install &&
+
+if list_find "$FWKNOP_OPTS" "--enable-server"; then
+ install -vm 755 -d "$INSTALL_ROOT/etc/fwknop" &&
+
+ install_config_file "$SOURCE_DIRECTORY/server/access.conf" \
+ "$INSTALL_ROOT/etc/fwknop/access.conf" &&
+
+ install_config_file "$SOURCE_DIRECTORY/server/fwknopd.conf" \
+ "$INSTALL_ROOT/etc/fwknop/fwknopd.conf"
+fi
diff --git a/security/fwknop/PRE_BUILD b/security/fwknop/PRE_BUILD
index 7870077..2f7639a 100755
--- a/security/fwknop/PRE_BUILD
+++ b/security/fwknop/PRE_BUILD
@@ -1,17 +1,5 @@
-default_pre_build &&
-cd "$SOURCE_DIRECTORY" &&
+default_pre_build &&
+cd "$SOURCE_DIRECTORY" &&

-#
-# Prevent client-only installation from putting files under /root
-#
-patch -p0 < "$SCRIPT_DIRECTORY/homedir_hack.diff" &&
-
-#
-# Prevent init script installation
-#
-patch -p0 < "$SCRIPT_DIRECTORY/init_hack.diff" &&
-
-#
-# Change client-only installation's lib path from /lib to /usr/lib
-#
-sed -i "s|\$homedir/lib|\$homedir/usr/lib|g" install.pl
+# don't trash fwknopd configs (without castfs)
+sed -i "s:install-dist_fwknopdDATA install-man:install-man:"
server/Makefile.in
diff --git a/security/fwknop/homedir_hack.diff
b/security/fwknop/homedir_hack.diff
deleted file mode 100644
index 7abaf95..0000000
--- a/security/fwknop/homedir_hack.diff
+++ /dev/null
@@ -1,18 +0,0 @@
---- install.pl~ 2007-06-04 02:13:34.000000000 +0000
-+++ install.pl 2007-08-21 11:57:27.000000000 +0000
-@@ -224,15 +224,7 @@
-
- if ($client_install) {
-
-- ### we are installing as a normal user instead of root, so see
-- ### if it is ok to install within the user's home directory
- $homedir = '';
-- if ($config_homedir) {
-- $homedir = $config_homedir;
-- } else {
-- $homedir = $ENV{'HOME'} or die '[*] Could not get home ',
-- "directory, set the $config_homedir var.";
-- }
-
- print
- " The fwknop client will be installed at $homedir/bin/fwknop, and a
few\n",
diff --git a/security/fwknop/init.d/fwknopd b/security/fwknop/init.d/fwknopd
old mode 100644
new mode 100755
index 3b135ad..00731a1
--- a/security/fwknop/init.d/fwknopd
+++ b/security/fwknop/init.d/fwknopd
@@ -1,24 +1,33 @@
+#!/bin/bash
+
PROGRAM=/usr/sbin/fwknopd
RUNLEVEL=3
NEEDS="+network"

. /etc/init.d/smgl_init

-start()
+stop()
{
- echo "Starting the fwknop daemons..."
- /usr/sbin/fwknopd
+ echo "Stopping $NAME..."
+ $PROGRAM --kill
evaluate_retval
}

-stop()
+restart()
{
- echo "Stopping the fwknop daemons..."
- /usr/sbin/fwknopd --Kill
- evaluate_retval
+ echo "Restarting $NAME..."
+ stop
+ sleep 2
+ _start
+}
+
+reload()
+{
+ $PROGRAM --restart
+ evaluate_retval
}

status()
{
- /usr/sbin/fwknopd --Status
+ $PROGRAM --status
}
diff --git a/security/fwknop/init_hack.diff b/security/fwknop/init_hack.diff
deleted file mode 100644
index 5246cfb..0000000
--- a/security/fwknop/init_hack.diff
+++ /dev/null
@@ -1,20 +0,0 @@
---- install.pl~ 2007-06-04 02:13:34.000000000 +0000
-+++ install.pl 2007-08-21 13:27:36.000000000 +0000
-@@ -640,16 +640,12 @@
- }
- }
-
-- if (-d $INIT_DIR) {
-- &enable_fwknop_at_boot($distro) unless $data_method =~
/client/i;
-- }
--
- if ($data_method =~ /client/i) {
- print "\n[+] fwknop has been installed!\n\n";
- } else {
- print
- "\n[+] fwknop has been installed! To start in server mode, run\n\n",
--" \"/etc/init.d/fwknop start\"\n\n",
-+" \"telinit run fwknopd start\"\n\n",
- " Note: You will need to edit $config{'FWKNOP_CONF_DIR'}/access.conf for
fwknop to\n",
- " function properly in server mode. More information can be found in\n",
- " the fwknop manpage.\n\n";



  • [SM-Commit] GIT changes to devel-xorg-modular grimoire by Vlad Glagolev (8d0dce7606cb8bf462ff19b271bcabee50a5d585), Vlad Glagolev, 04/27/2012

Archive powered by MHonArc 2.6.24.

Top of Page