Hello, On 2024/08/11 15:20:32 -0400, Chaz Kettleson <[email protected]> wrote: > On Sun, Aug 04, 2024 at 02:23:15PM GMT, Chaz Kettleson wrote: > > On Sat, Jul 27, 2024 at 09:11:57AM GMT, [email protected] wrote: > > > On Tue, Jul 23, 2024 at 08:02:08PM GMT, [email protected] wrote: > > > > On Tue, Jul 23, 2024 at 07:49:47PM GMT, [email protected] wrote: > > > > > On Sun, Jul 21, 2024 at 11:35:16AM GMT, [email protected] wrote: > > > > > > Hello, > > > > > > > > > > > > Attached is a new port HOPM. > > > > > > > > > > > > HOPM (Hybrid Open Proxy Monitor) is an open-proxy monitoring bot > > > > > > designed to monitor an individual server (all servers on the network > > > > > > have to run their own bot if the IRCd does not support the "far > > > > > > connect" user mode) with a local operator {} block and monitor > > > > > > connections. When a client connects to a server, HOPM will scan the > > > > > > connection for insecure proxies. Insecure proxies are determined > > > > > > by attempting to connect the proxy back to another host (usually > > > > > > the IRC server in question). > > > > > > > > > > > > HOPM is written ground-up in C language and it is an improved fork > > > > > > of BOPM (blitzed open proxy monitor), which is a concept derived > > > > > > from wgmon. It improves on wgmon with HTTP support, faster scanning > > > > > > (it can scan clients simultaneously), better layout (scalability) > > > > > > and DNSBL support. > > > > > > > > > > > > Looking for comments/feedback/testing to get this committed.
Some nits:
- we can use DIST_TUPLE instead of SITES since upstream doesn't provide
a distribution tarball.
- we can avoid patching the makefile and instead setting `sysconfdir' in
FAKE_FLAGS.
- some of the patches didn't apply, had to regen them.
> [...]
> > > > > > diff --git a/infrastructure/db/user.list
> > > > > > b/infrastructure/db/user.list
> > > > > > index 06bf2693c54..2189f6cd89e 100644
> > > > > > --- a/infrastructure/db/user.list
> > > > > > +++ b/infrastructure/db/user.list
> > > > > > @@ -408,3 +408,4 @@ id user group port
> > > > > > 897 _croc _croc sysutils/croc
> > > > > > 898 _icingadb _icingadb net/icinga/icingadb
> > > > > > 899 _openhab _openhab misc/openhab
> > > > > > +900 _hopm _hopm net/hopm
- Instead of using 900 we can reuse another UID, I'd prefer not to get
too close to 1000.
cvs blame user.list | awk '/#/{print $3, $7}' | sort -t- -k3
suggests _nginx that was retired in 2012.
> > > > > Added patches for pledge/unveil.
I'd postpone these for now if you agree. It'll require me more time to
feel confident about these changes, so let's get hopm in the tree and
then add pledge.
I'm attaching an updated tarball and the user.list diff that's ok op@ to
import. I don't run IRCd so can't really test this at runtime, but the
port now looks fine to me.
Index: user.list
===================================================================
RCS file: /home/cvs/ports/infrastructure/db/user.list,v
diff -u -p -r1.446 user.list
--- user.list 16 Jul 2024 20:25:49 -0000 1.446
+++ user.list 14 Aug 2024 09:25:04 -0000
@@ -101,7 +101,7 @@ id user group port
590 _smsd _smsd comms/smstools
591 _bacula _bacula sysutils/bacula
592 _imapproxy _imapproxy mail/imapproxy
-#593 _nginx _nginx www/nginx
+593 _hopm _hopm net/hopm
#594 _ejabberd _ejabberd net/ejabberd
595 _poppassd _poppassd sysutils/openpoppassd
#596 _heartbeat _heartbeat sysutils/heartbeat
hopm.tar.gz
Description: GNU Zip compressed data
