| 1 | # $Id: |
|---|
| 2 | |
|---|
| 3 | PortSystem 1.0 |
|---|
| 4 | name sshguard-ipfw |
|---|
| 5 | version 1.4 |
|---|
| 6 | categories net security |
|---|
| 7 | platforms darwin |
|---|
| 8 | maintainers nefar@otherware.org |
|---|
| 9 | |
|---|
| 10 | description Protects hosts from brute force attacks against ssh and other services using ipfw |
|---|
| 11 | |
|---|
| 12 | long_description Sshguard monitors services from their logging activity. It \ |
|---|
| 13 | reacts to messages about dangerous activity by blocking the \ |
|---|
| 14 | source address with the local firewall. \ |
|---|
| 15 | \ |
|---|
| 16 | Sshguard employs a clever parser that can recognize several \ |
|---|
| 17 | logging formats at once transparently (syslog, syslog-ng, \ |
|---|
| 18 | metalog, multilog, raw messages), and detects attacks for \ |
|---|
| 19 | many services out of the box, including SSH, FreeBSD's ftpd \ |
|---|
| 20 | and dovecot. It can operate all the major firewalling \ |
|---|
| 21 | systems, including PF, netfilter/iptables, IPFIREWALL/ipfw, \ |
|---|
| 22 | IPFILTER. \ |
|---|
| 23 | \ |
|---|
| 24 | Sshguard has several relevant features like support for \ |
|---|
| 25 | IPv6, whitelisting, suspension, log message authentication. \ |
|---|
| 26 | It is reliable, easy to set up and demands very few \ |
|---|
| 27 | resources to the system. |
|---|
| 28 | |
|---|
| 29 | distname sshguard-${version} |
|---|
| 30 | homepage http://sshguard.sourceforge.net |
|---|
| 31 | master_sites sourceforge:sshguard |
|---|
| 32 | checksums md5 76ec42919089c51a64df1cd5caa27e08 \ |
|---|
| 33 | sha1 afd1134199ba41721b3d4032239529040e5dd367 \ |
|---|
| 34 | rmd160 1a34d29d8849ea279049a8eb24ddef839dafdbf7 |
|---|
| 35 | use_bzip2 yes |
|---|
| 36 | configure.args --with-ipfw=/sbin/ipfw --with-firewall=ipfw |
|---|
| 37 | startupitem.create yes |
|---|
| 38 | startupitem.start "tail -n0 -F /var/log/secure.log | ${prefix}/sbin/sshguard 2>&1 > /dev/null &" |
|---|
| 39 | startupitem.stop "ps wuax | grep sshguard | grep -v daemondo | grep -v grep | grep sshguard| kill `awk '{ print \$2}'`" |
|---|
