diff --git a/mail/postfix/HISTORY b/mail/postfix/HISTORY
index a795e42..dd7b0bd 100644
--- a/mail/postfix/HISTORY
+++ b/mail/postfix/HISTORY
@@ -1,3 +1,6 @@
+2012-04-27 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 2.9.2
+
2012-01-19 Vlad Glagolev <stealth AT sourcemage.org>
* CONFLICTS: added masqmail
diff --git a/net/slowhttptest/DEPENDS b/net/slowhttptest/DEPENDS
new file mode 100755
index 0000000..ed472ed
--- /dev/null
+++ b/net/slowhttptest/DEPENDS
@@ -0,0 +1 @@
+depends openssl
diff --git a/net/slowhttptest/DETAILS b/net/slowhttptest/DETAILS
new file mode 100755
index 0000000..5d53fea
--- /dev/null
+++ b/net/slowhttptest/DETAILS
@@ -0,0 +1,33 @@
+ SPELL=slowhttptest
+ VERSION=1.4
+ SOURCE=$SPELL-$VERSION.tar.gz
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
+ SOURCE_URL[0]=http://slowhttptest.googlecode.com/files/$SOURCE
+
SOURCE_HASH=sha512:7110727b6955bd62d532b0cfa5768450e0106e9fd935fa59991fcf276b2e571cf96d268cb09e251c08c619240062b2f053f954d1fdb3596e829a7f06873fe0cf
+ WEB_SITE=http://code.google.com/p/slowhttptest/
+ GATHER_DOCS=off
+ LICENSE[0]=APACHE
+ ENTERED=20120427
+ KEYWORDS="net"
+ SHORT="application layer DoS attack simulator"
+cat << EOF
+SlowHTTPTest is a highly configurable tool that simulates some Application
Layer
+Denial of Service attacks.
+
+It implements most common low-bandwidth Application Layer DoS attacks, such
as
+slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer
exploit)
+by draining concurrent connections pool, as well as Apache Range Header
attack
+by causing very significant memory and CPU usage on the server.
+
+Slowloris and Slow HTTP POST DoS attacks rely on the fact that the HTTP
protocol,
+by design, requires requests to be completely received by the server before
they
+are processed. If an HTTP request is not complete, or if the transfer rate is
+very low, the server keeps its resources busy waiting for the rest of the
data.
+If the server keeps too many resources busy, this creates a denial of
service.
+This tool is sending partial HTTP requests, trying to get denial of service
from
+target HTTP server.
+
+Slow Read DoS attack aims the same resources as slowloris and slow POST, but
+instead of prolonging the request, it sends legitimate HTTP request and reads
+the response slowly.
+EOF
diff --git a/net/slowhttptest/HISTORY b/net/slowhttptest/HISTORY
new file mode 100644
index 0000000..ce94176
--- /dev/null
+++ b/net/slowhttptest/HISTORY
@@ -0,0 +1,2 @@
+2012-04-27 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS, DEPENDS: spell created
diff --git a/security/fwknop/BUILD b/security/fwknop/BUILD
deleted file mode 100755
index 27ba77d..0000000
--- a/security/fwknop/BUILD
+++ /dev/null
@@ -1 +0,0 @@
-true
diff --git a/security/fwknop/CONFIGURE b/security/fwknop/CONFIGURE
index 9688856..bb96534 100755
--- a/security/fwknop/CONFIGURE
+++ b/security/fwknop/CONFIGURE
@@ -1,10 +1,13 @@
-config_query_option FWKNOP_SERVER \
- "Install server component?" y \
- "" \
- "--client-only" &&
+config_query_option FWKNOP_OPTS "Build the fwknop client?" y \
+ "--enable-client" \
+ "--disable-client" &&
-if [[ $FWKNOP_SERVER == '--client-only' ]]
-then
- message "${MESSAGE_COLOR}The init script is useful only" \
- "with the server component.$DEFAULT_COLOR"
+config_query_option FWKNOP_OPTS "Build the fwknop server?" y \
+ "--enable-server" \
+ "--disable-server" &&
+
+if list_find "$FWKNOP_OPTS" "--enable-server"; then
+ config_query_option FWKNOP_OPTS "Enable the fwknopd digest-cache?" y \
+ "--enable-digest-cache" \
+ "--disable-digest-cache"
fi
diff --git a/security/fwknop/DEPENDS b/security/fwknop/DEPENDS
index 387478a..79a76fe 100755
--- a/security/fwknop/DEPENDS
+++ b/security/fwknop/DEPENDS
@@ -1,8 +1,15 @@
-depends perl &&
-depends psmisc &&
+if list_find "$FWKNOP_OPTS" "--enable-server"; then
+ depends libpcap &&
-if [[ $FWKNOP_SERVER != '--client-only' ]]
-then
- depends iptables &&
- depends libcap
-fi
+ runtime_depends iptables &&
+
+ optional_depends gdbm \
+ "--disable-file-cache" \
+ "--enable-file-cache" \
+ "to replace file cache with gdbm"
+fi &&
+
+optional_depends gpgme \
+ "--with-gpgme" \
+ "--without-gpgme" \
+ "for gpg encryption support"
diff --git a/security/fwknop/DETAILS b/security/fwknop/DETAILS
index 6ed6bdc..6f226e9 100755
--- a/security/fwknop/DETAILS
+++ b/security/fwknop/DETAILS
@@ -1,17 +1,17 @@
SPELL=fwknop
- VERSION=1.8.1
+ VERSION=2.0
SOURCE=$SPELL-$VERSION.tar.bz2
SOURCE2=$SOURCE.asc
SOURCE_URL[0]=http://www.cipherdyne.org/fwknop/download/$SOURCE
- SOURCE2_URL[0]=http://www.cipherdyne.org/fwknop/download/$SOURCE2
+ SOURCE2_URL[0]=${SOURCE_URL[0]}.asc
SOURCE_GPG=fwknop.gpg:$SOURCE2:UPSTREAM_KEY
SOURCE2_IGNORE=signature
-SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
WEB_SITE=http://www.cipherdyne.org/fwknop/
ENTERED=20070821
LICENSE[0]=GPL
KEYWORDS="security"
- SHORT="A Single Packet Authorization (SPA) implementation."
+ SHORT="Single Packet Authorization and Port Knocking"
cat << EOF
fwknop stands for the "FireWall KNock OPerator", and implements an
authorization scheme called Single Packet Authorization (SPA) that is
diff --git a/security/fwknop/HISTORY b/security/fwknop/HISTORY
index d218369..dd7ad08 100644
--- a/security/fwknop/HISTORY
+++ b/security/fwknop/HISTORY
@@ -1,3 +1,13 @@
+2012-04-27 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 2.0; updated short desc
+ * DEPENDS: perl is no more -- as of version 2, fwknop has been fully
+ re-written in C
+ * CONFIGURE: use FWKNOP_OPTS
+ * INSTALL: carefully install config files even without castfs
+ * PRE_BUILD: removed dirty hacks; fixed config files trashing
+ * BUILD, homedir_hack.diff, init_hack.diff: dropped
+ * init.d/fwknopd: unified; added reload/restart functions
+
2011-09-23 Bor Kraljič <pyrobor AT ver.si>
* fwknop.gpg: added gpg key 0D3E7410 to keyring (fixes #104)
public key from Michael Rash (Signing key for cipherdyne.org
projects) <mbr AT cipherdyne.org>
diff --git a/security/fwknop/INSTALL b/security/fwknop/INSTALL
index 765d39e..8e6319e 100755
--- a/security/fwknop/INSTALL
+++ b/security/fwknop/INSTALL
@@ -1 +1,11 @@
-./install.pl --Defaults $FWKNOP_SERVER
+default_install &&
+
+if list_find "$FWKNOP_OPTS" "--enable-server"; then
+ install -vm 755 -d "$INSTALL_ROOT/etc/fwknop" &&
+
+ install_config_file "$SOURCE_DIRECTORY/server/access.conf" \
+ "$INSTALL_ROOT/etc/fwknop/access.conf" &&
+
+ install_config_file "$SOURCE_DIRECTORY/server/fwknopd.conf" \
+ "$INSTALL_ROOT/etc/fwknop/fwknopd.conf"
+fi
diff --git a/security/fwknop/PRE_BUILD b/security/fwknop/PRE_BUILD
index 7870077..2f7639a 100755
--- a/security/fwknop/PRE_BUILD
+++ b/security/fwknop/PRE_BUILD
@@ -1,17 +1,5 @@
-default_pre_build &&
-cd "$SOURCE_DIRECTORY" &&
+default_pre_build &&
+cd "$SOURCE_DIRECTORY" &&
-#
-# Prevent client-only installation from putting files under /root
-#
-patch -p0 < "$SCRIPT_DIRECTORY/homedir_hack.diff" &&
-
-#
-# Prevent init script installation
-#
-patch -p0 < "$SCRIPT_DIRECTORY/init_hack.diff" &&
-
-#
-# Change client-only installation's lib path from /lib to /usr/lib
-#
-sed -i "s|\$homedir/lib|\$homedir/usr/lib|g" install.pl
+# don't trash fwknopd configs (without castfs)
+sed -i "s:install-dist_fwknopdDATA install-man:install-man:"
server/Makefile.in
diff --git a/security/fwknop/homedir_hack.diff
b/security/fwknop/homedir_hack.diff
deleted file mode 100644
index 7abaf95..0000000
--- a/security/fwknop/homedir_hack.diff
+++ /dev/null
@@ -1,18 +0,0 @@
---- install.pl~ 2007-06-04 02:13:34.000000000 +0000
-+++ install.pl 2007-08-21 11:57:27.000000000 +0000
-@@ -224,15 +224,7 @@
-
- if ($client_install) {
-
-- ### we are installing as a normal user instead of root, so see
-- ### if it is ok to install within the user's home directory
- $homedir = '';
-- if ($config_homedir) {
-- $homedir = $config_homedir;
-- } else {
-- $homedir = $ENV{'HOME'} or die '[*] Could not get home ',
-- "directory, set the $config_homedir var.";
-- }
-
- print
- " The fwknop client will be installed at $homedir/bin/fwknop, and a
few\n",
diff --git a/security/fwknop/init.d/fwknopd b/security/fwknop/init.d/fwknopd
old mode 100644
new mode 100755
index 3b135ad..00731a1
--- a/security/fwknop/init.d/fwknopd
+++ b/security/fwknop/init.d/fwknopd
@@ -1,24 +1,33 @@
+#!/bin/bash
+
PROGRAM=/usr/sbin/fwknopd
RUNLEVEL=3
NEEDS="+network"