guarddog81.spec

linux系统下的一个防火墙guarddog

%define name guarddog
%define version 2.0.0
%define release 1mdk

Summary: Firewall Utility
Name: %{name}
Version: %{version}
Release: %{release}
Source: %{name}-%{version}.tar.gz
Copyright: GPL
Group: Networking/Utilities
URL: http://www.simonzone.com/software/guarddog/
Packager: Simon Edwards
Distribution: Linux-Mandrake
BuildRoot: %{_tmppath}/%{name}-buildroot
Requires: iptables kdebase gawk textutils sed
Prefix: %{_prefix}
%description
Guarddog is user friendly firewall generation and management utility for KDE
on Linux. It allows you to simply specify which protocols should be allowed
between which groups of computers and requires no knowledge of port numbers
or packets. Built on top of ipchains and/or iptables.

This RPM is for Mandrake 8.1.

%prep
rm -rf $RPM_BUILD_ROOT

%setup

%build
CXXFLAGS="$RPM_OPT_FLAGS"
./configure
make

%install
make install prefix=$RPM_BUILD_ROOT/%{prefix}

%clean
rm -rf $RPM_BUILD_ROOT

%files
%defattr(-,root,root,0755)
%doc README TODO AUTHORS COPYING ChangeLog
%{prefix}/bin/guarddog
%{prefix}/share/apps/guarddog/networkprotocoldb.xml
%{prefix}/share/apps/guarddog/pics/advanced.png
%{prefix}/share/apps/guarddog/pics/box_clear.png
%{prefix}/share/apps/guarddog/pics/box_checked.png
%{prefix}/share/apps/guarddog/pics/box_crossed.png
%{prefix}/share/apps/guarddog/pics/chat.png
%{prefix}/share/apps/guarddog/pics/dataserve.png
%{prefix}/share/apps/guarddog/pics/filetransfer.png
%{prefix}/share/apps/guarddog/pics/game.png
%{prefix}/share/apps/guarddog/pics/logging.png
%{prefix}/share/apps/guarddog/pics/mail.png
%{prefix}/share/apps/guarddog/pics/miscellaneous.png
%{prefix}/share/apps/guarddog/pics/multimedia.png
%{prefix}/share/apps/guarddog/pics/network.png
%{prefix}/share/apps/guarddog/pics/protocols.png
%{prefix}/share/apps/guarddog/pics/rate_limit.png
%{prefix}/share/apps/guarddog/pics/terminal.png
%{prefix}/share/apps/guarddog/pics/userdefined.png
%{prefix}/share/apps/guarddog/pics/warn.png
%{prefix}/share/apps/guarddog/pics/zones.png
%{prefix}/share/apps/guarddog/pics/laserwarn.png
%{prefix}/share/doc/HTML/en/guarddog/
%{prefix}/share/icons/locolor/32x32/apps/guarddog.png
%{prefix}/share/icons/hicolor/48x48/apps/guarddog.png
%{prefix}/share/icons/hicolor/32x32/apps/guarddog.png
%{prefix}/share/icons/locolor/16x16/apps/guarddog.png
%{prefix}/share/locale/da/LC_MESSAGES/guarddog.mo
%{prefix}/share/locale/de/LC_MESSAGES/guarddog.mo
%{prefix}/share/locale/it/LC_MESSAGES/guarddog.mo
%{prefix}/lib/menu/guarddog
%post

if [ ! -e /etc/rc.firewall ]; then
  echo "#!/bin/sh" > /etc/rc.firewall
  echo "# This is just a place holder rc.firewall file so that when the links" >> /etc/rc.firewall
  echo "# /sbin/ifup-local and /sbin/ifdown-local have something valid to  point to." >> /etc/rc.firewall
  echo "# It will be over written once the Guarddog configuration utility is used." >> /etc/rc.firewall
  echo "# --Guarddog, http://www.simonzone.com/software/guarddog/" >> /etc/rc.firewall
  chmod u+x /etc/rc.firewall
fi
if [ ! -x /sbin/ifup-local ]; then
  ln -s /etc/rc.firewall /sbin/ifup-local
else
  if [ ! -L /sbin/ifup-local ]; then
    echo "*** Warning: Could not make a link from /sbin/ifup-local to /etc/rc.firewall ***"
  fi
fi
if [ ! -x /sbin/ifdown-local ]; then
  ln -s /etc/rc.firewall /sbin/ifdown-local
else
  if [ ! -L /sbin/ifdown-local ]; then
    echo "*** Warning: Could not make a link from /sbin/ifdown-local to /etc/rc.firewall ***"
  fi
fi

if [ ! -e /etc/ppp/ip-up.local ]; then
  echo "#!/bin/bash" > /etc/ppp/ip-up.local
  echo "#" >> /etc/ppp/ip-up.local
  echo "# This short script just runs any firewall script located at /etc/rc.firewall ." >> /etc/ppp/ip-up.local
  echo "# It will be called whenever a ppp interface comes up. Normally we would hook" >> /etc/ppp/ip-up.local
  echo "# our firewall script in via /sbin/ifup-local, but a bug in the" >> /etc/ppp/ip-up.local
  echo "# /etc/ppp/ip-up script prevents that from working. This script provides a" >> /etc/ppp/ip-up.local
  echo "# workaround." >> /etc/ppp/ip-up.local
  echo "#" >> /etc/ppp/ip-up.local
  echo "# cheers, Guardddog http://www.simonzone.com/software/guarddog/" >> /etc/ppp/ip-up.local
  echo "#" >> /etc/ppp/ip-up.local
  echo "[ -x /etc/rc.firewall ] && /etc/rc.firewall" >> /etc/ppp/ip-up.local
  chmod u+x /etc/ppp/ip-up.local
fi
if [ ! -e /etc/ppp/ip-down.local ]; then
  echo "#!/bin/bash" > /etc/ppp/ip-down.local
  echo "#" >> /etc/ppp/ip-down.local
  echo "# This short script just runs any firewall script located at /etc/rc.firewall ." >> /etc/ppp/ip-down.local
  echo "# It will be called whenever a ppp interface goes down. Normally we would hook" >> /etc/ppp/ip-down.local
  echo "# our firewall script in via /sbin/ifdown-local, but a bug in the" >> /etc/ppp/ip-down.local
  echo "# /etc/ppp/ip-down script prevents that from working. This script provides a" >> /etc/ppp/ip-down.local
  echo "# workaround." >> /etc/ppp/ip-down.local
  echo "#" >> /etc/ppp/ip-down.local
  echo "# cheers, Guardddog http://www.simonzone.com/software/guarddog/" >> /etc/ppp/ip-down.local
  echo "#" >> /etc/ppp/ip-down.local
  echo "[ -x /etc/rc.firewall ] && /etc/rc.firewall" >> /etc/ppp/ip-down.local
  chmod u+x /etc/ppp/ip-down.local
fi

if [ -x /usr/bin/update-menus ]; then
    /usr/bin/update-menus
fi

%postun
if [ "$1" = 0 ]; then
    if [ -x /usr/bin/update-menus ]; then
        /usr/bin/update-menus
    fi
fi
%changelog

* Tue Jul 9 2002 Simon Edwards <[e-mail]> 2.0.0-1mdk

- 2.0.0 release.
- Fixed a small bug that was stopping Guarddog from compiling on Qt2.
- Fixed a small bug in the kernel detection scipt/code. (Reported and
  patched by Jess Thrysoee).
- Reviewed and edited the manual.

* Thu Jun 20 2002 Simon Edwards <[e-mail]> 1.9.16-1mdk

- 1.9.16 release
- Fixed a major bug in the output script code concerning the use of &>
  redirection. This bug made most of the kernel tweaking code useless.
  (Thanks to Martin Matti Raivio for finding that one.)
- Fixed a bug in the SNMP support. (Thanks Michele Ferritto).
- Fixed a bug that was stopping ICQ direct messages.
- Fixed Yet Another SMB bug, affected network printers. (Thanks Jason
  Buberel).
- Bug fixes related to internationalisation and translation use in Guarddog.
- Additions and updates to the manual.
- Doing "Apply" and "Ok" now only tries to run the firewall script once.
- Added Italian translation of the program strings from Daniele Medri.
- Added Germany translation of the program strings and protocol text from
  Stephan Johach.
- Fixed a crash bug related to the import functionality.

* Sun Apr 28 2002 Simon Edwards <[e-mail]> 1.9.15-1mdk

- 1.9.15 release
- Changed the 'Apply' button behaviour a little. 'Apply'->'Cancel'->'Keep
  settings' is now permanent, unlike before. The previous behaviour was
  a little unexpected.
- Added Danish translation file from Gunner Poulsen.
- Added CVS-server, DICT support.
- It should now compile ok on KDE 2 and 3. (With KDE 3 you may have to
  specify to configure --enable-mt and --with-qt-dir=... )

* Mon Apr 1 2002 Simon Edwards <[e-mail]> 1.9.14-1mdk

- 1.9.14 release
- Now correctly detects which filter system is being using on 2.5 kernels.
- Moved NNTP to the Mail section.
- Small fix to Windows Networking (NETBIOS).
- Added Kerberos, klogin, kshell, NIS, IMAPS, POP3S, ISAKMP.

* Fri Mar 8 2002 Simon Edwards <[e-mail]> 1.9.13-1mdk

- 1.9.13 release
- Something happened when I made the last tar ball which corrupted
  the networkprotocoldb.xml file by one character. (honest!) I'm
  rereleasing 1.9.12 basically with this new version name to avoid
  confusion.

* Thu Mar 7 2002 Simon Edwards <[e-mail]> 1.9.12-1mdk

- 1.9.12 release.
- Should work ok with recent autoconf versions now, and will probably
  work on KDE3 too. (Thanks to Carsten Pfeiffer)
- No longer requires that packets creating a NEW tracked connection have
  thier SYN bit set. It can now pick up previously dropped (tracked)
  connections. (Blocking !SYN was causing too many log entries and a bit of
  trouble elsewhere).
- Added CDDB, MSN Messenger, VNC and PPTP support.

* Wed Feb 20 2002 Simon Edwards <[e-mail]> 1.9.11-1mdk

- 1.9.11 release
- Bugfix: Now doesn't try to enforce the Strong ES model. Linux 2.2 and 2.4
  as it turns out, use the weak model.