Hi, I would like to introduce you Snortsam, plugin for Snort. SnortSam is a plugin that will block malicious activity based on a modified rule set. This package needs Snort to be patched - this patch was introduced in http://patchwork.openwrt.org/patch/2381/ .
Signed-off-by: Jiri Slachta <j...@slachta.eu> Index: feeds/packages/net/snortsam/Makefile =================================================================== --- feeds/packages/net/snortsam/Makefile (revision 0) +++ feeds/packages/net/snortsam/Makefile (revision 0) @@ -0,0 +1,56 @@ +# +# Copyright (C) 2012 OpenWrt +# +# This is free software, licensed under the GNU General Public License v2. +# See /LICENSE for more information. +# + +include $(TOPDIR)/rules.mk + +PKG_NAME:=snortsam +PKG_VERSION:=2.70 +PKG_RELEASE:=1 + +PKG_SOURCE_URL:=http://www.snortsam.net/files/snortsam/ +PKG_SOURCE:=$(PKG_NAME)-src-$(PKG_VERSION).tar.gz +PKG_MD5SUM:=8ffa32056152e089fbacd601090f941d +PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME) +MAKE_PATH:=src + +include $(INCLUDE_DIR)/package.mk + +define Package/snortsam + SECTION:=net + CATEGORY:=Network + TITLE:=Snortsam + URL:=https://www.snortsam.net/ + DEPENDS:=+libpthread +snort +endef + +define Package/snortsam/description + SnortSam is a plugin for Snort, an Intrusion Detection System (IDS). The plugin allows automated blocking of IP addresses. +endef + +define Build/Compile + $(MAKE) -C $(PKG_BUILD_DIR)/src \ + DESTDIR="$(PKG_INSTALL_DIR)" \ + $(MAKE_FLAGS) \ + all + $(MAKE) -C $(PKG_BUILD_DIR)/src \ + DESTDIR="$(PKG_INSTALL_DIR)" \ + $(MAKE_FLAGS) \ + samtool +endef + +define Package/snortsam/install + $(INSTALL_DIR) $(1)/usr/sbin + $(CP) $(PKG_BUILD_DIR)/snortsam $(PKG_BUILD_DIR)/samtool $(1)/usr/sbin/ + $(INSTALL_DIR) $(1)/etc + $(CP) $(PKG_BUILD_DIR)/conf/* $(1)/etc/ + $(CP) $(PKG_BUILD_DIR)/conf/snortsam.conf.sample $(1)/etc/snortsam.conf + $(INSTALL_DIR) $(1)/etc/init.d + $(INSTALL_BIN) ./files/snortsam.init $(1)/etc/init.d/snortsam +endef + +$(eval $(call BuildPackage,snortsam)) + Index: feeds/packages/net/snortsam/files/snortsam.init =================================================================== --- feeds/packages/net/snortsam/files/snortsam.init (revision 0) +++ feeds/packages/net/snortsam/files/snortsam.init (revision 0) @@ -0,0 +1,16 @@ +#!/bin/sh /etc/rc.common +# Copyright (C) 2012 OpenWrt.org +START=99 +APP=snortsam +BIN_FILE="/usr/sbin/"$APP +PID_FILE="/var/run/"$APP".pid" +PARAMS="/etc/snortsam.conf" + +start() { + start-stop-daemon -S -x $BIN_FILE -p $PID_FILE -b -m -- $PARAMS +} + +stop() { + start-stop-daemon -K -x $BIN_FILE -p $PID_FILE -q + rm -rf $PID_FILE +} _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
