61 lines
1.9 KiB
Makefile
61 lines
1.9 KiB
Makefile
|
include $(TOPDIR)/rules.mk
|
||
|
|
|
||
|
|
PKG_NAME:=fwknopd
|
||
|
|
PKG_VERSION:=2.0.0rc2
|
||
|
|
PKG_RELEASE:=1
|
||
|
|
|
||
|
|
PKG_BUILD_DIR:=$(BUILD_DIR)/fwknop-$(PKG_VERSION)
|
||
|
|
PKG_SOURCE:=fwknop-$(PKG_VERSION).tar.gz
|
||
|
|
PKG_SOURCE_URL:=http://www.cipherdyne.org/fwknop/download
|
||
|
|
PKG_MD5SUM:=c78252216fa9627cacf61b453da915a8
|
||
|
|
PKG_CAT:=zcat
|
||
|
|
include $(INCLUDE_DIR)/package.mk
|
||
|
|
|
||
|
|
define Package/fwknopd
|
||
|
|
SECTION:=net
|
||
|
|
CATEGORY:=Network
|
||
|
|
TITLE:=Firewall Knock Operator Daemon
|
||
|
|
URL:=http://http://www.cipherdyne.org/fwknop/
|
||
|
|
MAINTAINER:=Jonathan Bennett <jbscience87@gmail.com>
|
||
|
|
DEPENDS:=+libpcap +libgdbm +iptables
|
||
|
|
endef
|
||
|
|
|
||
|
|
define Package/fwknopd/description
|
||
|
|
Firewall Knock Operator Daemon
|
||
|
|
Fwknop implements an authorization scheme known as Single Packet
|
||
|
|
Authorization (SPA) for Linux systems running iptables. This
|
||
|
|
mechanism requires only a single encrypted and non-replayed
|
||
|
|
packet to communicate various pieces of information including
|
||
|
|
desired access through an iptables policy. The main application
|
||
|
|
of this program is to use iptables in a default-drop stance to
|
||
|
|
protect services such as SSH with an additional layer
|
||
|
|
of security in order to make the exploitation of vulnerabilities
|
||
|
|
(both 0-day and unpatched code) much more difficult.
|
||
|
|
endef
|
||
|
|
|
||
|
|
define Package/conffiles
|
||
|
|
/etc/fwknop/fwknopd.conf
|
||
|
|
/etc/fwknop/access.conf
|
||
|
|
endef
|
||
|
|
|
||
|
|
CONFIGURE_ARGS += \
|
||
|
|
--disable-client \
|
||
|
|
--without-gpgme \
|
||
|
|
--with-iptables=/usr/sbin/iptables
|
||
|
|
|
||
|
|
define Package/fwknopd/install
|
||
|
|
$(INSTALL_DIR) $(1)/etc/init.d
|
||
|
|
$(INSTALL_BIN) $(PKG_BUILD_DIR)/extras/fwknop.init.openwrt \
|
||
|
|
$(1)/etc/init.d/fwknopd
|
||
|
|
$(INSTALL_DIR) $(1)/usr/sbin
|
||
|
|
$(INSTALL_BIN) $(PKG_BUILD_DIR)/server/.libs/fwknopd $(1)/usr/sbin/
|
||
|
|
$(INSTALL_DIR) $(1)/usr/lib
|
||
|
|
$(CP) $(PKG_BUILD_DIR)/lib/.libs/libfko.so* $(1)/usr/lib/
|
||
|
|
$(INSTALL_DIR) $(1)/etc/fwknop
|
||
|
|
$(INSTALL_CONF) $(PKG_BUILD_DIR)/server/fwknopd.conf $(1)/etc/fwknop/
|
||
|
|
$(INSTALL_CONF) $(PKG_BUILD_DIR)/server/access.conf $(1)/etc/fwknop/
|
||
|
|
|
||
|
|
endef
|
||
|
|
|
||
|
|
$(eval $(call BuildPackage,fwknopd))
|