Add shorewall-lite package. (Shoreline Firewall Lite 
<http://www.shorewall.net/>)

I wrote this for my router running whiterussian, so some tweaks may be 
necessary for kamikaze. (The dependencies could also be refined.)

Signed-off-by: Jeffery To <[EMAIL PROTECTED]>
---
diff -Nru shorewall-lite.orig/files/hostname shorewall-lite/files/hostname
--- shorewall-lite.orig/files/hostname  1970-01-01 08:00:00.000000000 +0800
+++ shorewall-lite/files/hostname       2008-01-15 20:20:20.000000000 +0800
@@ -0,0 +1,2 @@
+#!/bin/sh
+cat /proc/sys/kernel/hostname
diff -Nru shorewall-lite.orig/files/shorewall-lite.init 
shorewall-lite/files/shorewall-lite.init
--- shorewall-lite.orig/files/shorewall-lite.init       1970-01-01 
08:00:00.000000000 +0800
+++ shorewall-lite/files/shorewall-lite.init    2008-01-15 22:32:28.000000000 
+0800
@@ -0,0 +1,16 @@
+#!/bin/sh /etc/rc.common
+
+START=46
+start() {
+       touch /var/log/messages
+       mkdir -p /var/lock/subsys
+       /sbin/shorewall-lite -qq start -f
+}
+
+stop() {
+       /sbin/shorewall-lite -qq stop
+}
+
+restart() {
+       /sbin/shorewall-lite -qq restart
+}
diff -Nru shorewall-lite.orig/files/vardir shorewall-lite/files/vardir
--- shorewall-lite.orig/files/vardir    1970-01-01 08:00:00.000000000 +0800
+++ shorewall-lite/files/vardir 2008-01-15 21:41:30.000000000 +0800
@@ -0,0 +1,2 @@
+# move state dir out of ram
+VARDIR=/etc/shorewall-lite/state
diff -Nru shorewall-lite.orig/Makefile shorewall-lite/Makefile
--- shorewall-lite.orig/Makefile        1970-01-01 08:00:00.000000000 +0800
+++ shorewall-lite/Makefile     2008-01-26 18:11:30.000000000 +0800
@@ -0,0 +1,61 @@
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=shorewall-lite
+PKG_VERSION:=4.0.8
+PKG_RELEASE:=1
+PKG_MD5SUM:=9eb449aed51d2f040c67baa23477b89c
+
+PKG_SOURCE_URL:=http://www.shorewall.net/pub/shorewall/4.0/shorewall-$(PKG_VERSION)/
 \
+       http://www1.shorewall.net/pub/shorewall/4.0/shorewall-$(PKG_VERSION)/ \
+       
http://slovakia.shorewall.net/pub/shorewall/4.0/shorewall-$(PKG_VERSION)/ \
+       http://shorewall.de/pub/shorewall/4.0/shorewall-$(PKG_VERSION)/ \
+       http://www.shorewall.com.au/4.0/shorewall-$(PKG_VERSION)/ \
+       
http://shorewall.infohiiway.com/pub/shorewall/4.0/shorewall-$(PKG_VERSION)/ \
+       
http://www.shorewall.com.ar/pub/shorewall/shorewall/4.0/shorewall-$(PKG_VERSION)/
+PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
+PKG_CAT=bzcat
+
+PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(PKG_VERSION)
+PKG_INSTALL_DIR:=$(PKG_BUILD_DIR)/ipkg-install
+
+include $(INCLUDE_DIR)/package.mk
+
+define Package/shorewall-lite
+  SECTION:=net
+  CATEGORY:=Network
+  DEPENDS:=+ip +iptables +iptables-utils
+  TITLE:=Shorewall Lite
+  DESCRIPTION:=Shoreline Firewall Lite is an iptables-based firewall for Linux 
systems.
+  URL:=http://www.shorewall.net/
+  SUBMENU:=firewall
+endef
+
+#define Package/shorewall-lite/description
+#      Shoreline Firewall Lite is an iptables-based firewall for Linux systems.
+#endef
+
+define Package/shorewall-lite/conffiles
+/etc/shorewall-lite/shorewall-lite.conf
+/etc/shorewall-lite/vardir
+endef
+
+define Build/Compile
+       rm -rf $(PKG_INSTALL_DIR)
+       mkdir -p $(PKG_INSTALL_DIR)
+       PREFIX=$(PKG_INSTALL_DIR) $(PKG_BUILD_DIR)/install.sh
+endef
+
+define Package/shorewall-lite/install
+       $(INSTALL_DIR) $(1)/sbin
+       $(INSTALL_DIR) $(1)/etc/init.d
+       $(INSTALL_DIR) $(1)/etc/shorewall-lite
+       $(INSTALL_DIR) $(1)/usr/share
+       $(INSTALL_BIN) ./files/shorewall-lite.init 
$(1)/etc/init.d/shorewall-lite
+       $(INSTALL_BIN) $(PKG_INSTALL_DIR)/sbin/shorewall-lite $(1)/sbin
+       $(CP) $(PKG_INSTALL_DIR)/usr/share/shorewall-lite $(1)/usr/share
+       $(INSTALL_BIN) ./files/hostname $(1)/usr/share/shorewall-lite
+       $(CP) $(PKG_INSTALL_DIR)/etc/shorewall-lite $(1)/etc
+       $(CP) ./files/vardir $(1)/etc/shorewall-lite
+endef
+
+$(eval $(call BuildPackage,shorewall-lite))
diff -Nru shorewall-lite.orig/patches/100-hostname.patch 
shorewall-lite/patches/100-hostname.patch
--- shorewall-lite.orig/patches/100-hostname.patch      1970-01-01 
08:00:00.000000000 +0800
+++ shorewall-lite/patches/100-hostname.patch   2008-01-26 18:06:11.000000000 
+0800
@@ -0,0 +1,12 @@
+diff -Nru shorewall-lite-4.0.8.orig/shorewall-lite 
shorewall-lite-4.0.8/shorewall-lite
+--- shorewall-lite-4.0.8.orig/shorewall-lite   2007-12-15 07:13:36.000000000 
+0800
++++ shorewall-lite-4.0.8/shorewall-lite        2008-01-26 18:05:13.000000000 
+0800
+@@ -153,7 +153,7 @@
+ 
+     export VERBOSE
+ 
+-    [ -n "${HOSTNAME:=$(hostname)}" ]
++    [ -n "${HOSTNAME:=$(${SHAREDIR}/hostname)}" ]
+ 
+ }
+ 
diff -Nru shorewall-lite.orig/patches/110-MODULESDIR.patch 
shorewall-lite/patches/110-MODULESDIR.patch
--- shorewall-lite.orig/patches/110-MODULESDIR.patch    1970-01-01 
08:00:00.000000000 +0800
+++ shorewall-lite/patches/110-MODULESDIR.patch 2008-01-26 18:08:56.000000000 
+0800
@@ -0,0 +1,21 @@
+diff -Nru shorewall-lite-4.0.8.orig/lib.base shorewall-lite-4.0.8/lib.base
+--- shorewall-lite-4.0.8.orig/lib.base 2008-01-26 05:40:32.000000000 +0800
++++ shorewall-lite-4.0.8/lib.base      2008-01-26 18:08:32.000000000 +0800
+@@ -251,7 +251,7 @@
+ 
+     [ -n "${MODULE_SUFFIX:=o gz ko o.gz ko.gz}" ]
+ 
+-    [ -z "$MODULESDIR" ] && MODULESDIR=/lib/modules/$(uname 
-r)/kernel/net/ipv4/netfilter:/lib/modules/$(uname -r)/kernel/net/netfilter
++    [ -z "$MODULESDIR" ] && MODULESDIR=/lib/modules/$(uname 
-r)/kernel/net/ipv4/netfilter:/lib/modules/$(uname 
-r)/kernel/net/netfilter:/lib/modules/$(uname -r)
+     MODULES=$(lsmod | cut -d ' ' -f1)
+ 
+     for directory in $(split $MODULESDIR); do
+@@ -283,7 +283,7 @@
+     [ -n "${MODULE_SUFFIX:=o gz ko o.gz ko.gz}" ]
+ 
+     [ -z "$MODULESDIR" ] && \
+-      MODULESDIR=/lib/modules/$(uname 
-r)/kernel/net/ipv4/netfilter:/lib/modules/$(uname -r)/kernel/net/netfilter
++      MODULESDIR=/lib/modules/$(uname 
-r)/kernel/net/ipv4/netfilter:/lib/modules/$(uname 
-r)/kernel/net/netfilter:/lib/modules/$(uname -r)
+ 
+     for directory in $(split $MODULESDIR); do
+       [ -d $directory ] && moduledirectories="$moduledirectories $directory"
_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
http://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

Reply via email to