Главная   Изменения   Спек   Патчи   Sources   Загрузить   Gear   Bugs and FR  Repocop 

Name: rcf
%define v_major 5.2.1
%define v_minor s1
Version: %v_major
Release: alt6%v_minor
%define srcname %name-%v_major%v_minor

Summary: A very secure, fast, and complete ipchains firewall for linux
License: GPL
Group: System/Base
Url: http://rcf.mvlan.net
BuildArch: noarch

Source: %url/dist/dev/%srcname.tar.bz2
Source1: firewall.init
Source2: firewall.logrotate

Patch1: rcf-5.2.1s1-cvs.patch
Patch2: rcf-5.2.1s1-alt-more-actions.patch
Patch3: rcf-5.2.1s1-alt-tracepath.patch
Patch4: rcf-5.2.1s1-alt-dots.patch
Patch5: rcf-5.2.1s1-alt-iana-reserved-networks.patch

Requires(post): chkconfig
Requires(preun): %preun_service
Requires: ipchains
Provides: firewall

%description
rcf (aka rc.firewall) is an ipchains-based firewall with support for
over 50 network service modules (including vtun, dhcp, nfs, smb,
napster, proxies, online games, etc.), masquerading, port forwarding,
and ip accounting.  All services are self-contained modules which can be
prioritized in the ipchains stack.  Protections include spoofing, stuffed
routing/masqerading, DoS, smurf attacks, outgoing port scans, and many
more. rcf also supports unlimited public, private (masqu'ed), dmz, and
mz (non-masqu'ed) interface and their subnets.  Access rules are defined
per interface and dmz/mz server "clusters".  rcf is compatible with most
of GNU/*/Linux distributions.

%prep
%setup -q -n %srcname
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1

%build
# SMP-incompatible.
make

%install
install -pD -m700 sbin/%name $RPM_BUILD_ROOT/sbin/%name
install -pD -m755 %SOURCE1 $RPM_BUILD_ROOT%_initdir/firewall
install -pD -m640 %SOURCE2 $RPM_BUILD_ROOT%_sysconfdir/logrotate.d/firewall

cp -a etc/firewall $RPM_BUILD_ROOT%_sysconfdir/

pushd usr/man
for m in 5 8; do
for f in *.$m; do
install -pD -m644 "$f" "$RPM_BUILD_ROOT%_mandir/man$m/$f"
done
done
popd

install -pD -m600 /dev/null $RPM_BUILD_ROOT%_sysconfdir/firewall.conf
install -pD -m600 /dev/null $RPM_BUILD_ROOT%_logdir/firewall.log

find $RPM_BUILD_ROOT%_sysconfdir/firewall -type d -print0 |
xargs -r0 chmod 700 --
find $RPM_BUILD_ROOT%_sysconfdir/firewall -type f -print0 |
xargs -r0 chmod 600 --

%post
if [ $1 = 1 ]; then
/sbin/chkconfig --add firewall
else
/sbin/%name --update-config
fi

%preun
%preun_service firewall

%files
/sbin/%name
%_initdir/firewall
%attr(600,root,root) %config(noreplace,missingok) %_sysconfdir/firewall.conf
%config(noreplace) %_sysconfdir/logrotate.d/firewall
%ghost %_logdir/firewall.log
%_mandir/man?/*
%doc ChangeLog FAQ.html INSTALL TODO
%defattr(-,root,root,700)
%_sysconfdir/firewall

%changelog
…
Полный changelog можно просмотреть здесь