head	1.12;
access;
symbols
	RELEASE_7_4_0:1.8
	RELEASE_8_2_0:1.8
	RELEASE_6_EOL:1.8
	RELEASE_8_1_0:1.8
	RELEASE_7_3_0:1.8
	RELEASE_8_0_0:1.8
	RELEASE_7_2_0:1.8
	RELEASE_7_1_0:1.8
	RELEASE_6_4_0:1.8
	RELEASE_5_EOL:1.7
	RELEASE_7_0_0:1.6
	RELEASE_6_3_0:1.6
	PRE_XORG_7:1.6
	RELEASE_4_EOL:1.5
	RELEASE_6_2_0:1.4
	RELEASE_6_1_0:1.3
	RELEASE_5_5_0:1.3
	RELEASE_6_0_0:1.2;
locks; strict;
comment	@# @;


1.12
date	2011.10.09.16.57.06;	author dougb;	state dead;
branches;
next	1.11;

1.11
date	2011.09.23.22.25.18;	author amdmi3;	state Exp;
branches;
next	1.10;

1.10
date	2011.08.05.05.39.39;	author beech;	state Exp;
branches;
next	1.9;

1.9
date	2011.08.01.23.42.30;	author beech;	state Exp;
branches;
next	1.8;

1.8
date	2008.08.21.06.18.20;	author rafan;	state Exp;
branches;
next	1.7;

1.7
date	2008.04.24.01.38.20;	author beech;	state Exp;
branches;
next	1.6;

1.6
date	2007.01.29.19.05.06;	author gabor;	state Exp;
branches;
next	1.5;

1.5
date	2006.11.05.18.14.06;	author alepulver;	state Exp;
branches;
next	1.4;

1.4
date	2006.05.13.04.15.15;	author edwin;	state Exp;
branches;
next	1.3;

1.3
date	2005.11.14.17.07.04;	author sem;	state Exp;
branches;
next	1.2;

1.2
date	2005.05.31.07.43.47;	author pav;	state Exp;
branches;
next	1.1;

1.1
date	2005.05.28.11.06.39;	author pav;	state Exp;
branches;
next	;


desc
@@


1.12
log
@Remove security/snort_inline:

Does not build properly, no longer supported upstream

PR:		ports/161410
Approved by:	maintainer
@
text
@#/ New ports collection makefile for:	snort_inline
# Date created:        4 March 2005
# Whom:                nick@@rogness.net
#
# $FreeBSD: ports/security/snort_inline/Makefile,v 1.11 2011/09/23 22:25:18 amdmi3 Exp $
#

PORTNAME=	snort_inline
PORTVERSION=	2.6.1.5
CATEGORIES=	security
MASTER_SITES=	http://freebsd.rogness.net/ports/snort_inline/

MAINTAINER=	nick@@rogness.net
COMMENT=	An inline IPS system based on snort using ipfw

LIB_DEPENDS=	pcre.0:${PORTSDIR}/devel/pcre

GNU_CONFIGURE=	yes
CONFIGURE_ARGS+=	--enable-inline --enable-ipfw

LIB_DEPENDS+=		dnet:${PORTSDIR}/net/libdnet

USE_LDCONFIG=	yes

OPTIONS=		MYSQL "With MySQL support" off \
			ODBC "With ODBC support" off \
			POSTGRESQL "With POSTGRESQL support" off \
			FLEXRESP "With flexible responses (resp. w/packet resets)" off

BROKEN=		this port does not build properly
DEPRECATED=		no longer supported upstream
EXPIRATION_DATE=	2011/09/04

.include <bsd.port.pre.mk>

.if defined(WITH_MYSQL)
USE_MYSQL=		yes
CONFIGURE_ARGS+=	--with-mysql=${LOCALBASE}
.else
CONFIGURE_ARGS+=	--with-mysql=no
.endif

.if defined(WITH_ODBC)
LIB_DEPENDS+=		odbc.1:${PORTSDIR}/databases/unixODBC
CONFIGURE_ARGS+=	--with-odbc=${LOCALBASE}
LDFLAGS+=		${PTHREAD_LIBS}
.else
CONFIGURE_ARGS+=	--with-odbc=no
.endif

.if defined(WITH_POSTGRESQL)
USE_PGSQL=		yes
CONFIGURE_ARGS+=	--with-postgresql=${LOCALBASE}
.if exists(/usr/lib/libssl.a) && exists(/usr/lib/libcrypto.a)
LDFLAGS+=		-lssl -lcrypto
.endif
.else
CONFIGURE_ARGS+=	--with-postgresql=no
.endif

.if defined(WITH_FLEXRESP)
LIBNET_CONFIG?=		${LOCALBASE}/bin/libnet10-config

.if exists(${LIBNET_CONFIG})
LIBNET_CFLAGS!=	${LIBNET_CONFIG} --cflags
LIBNET_LIBS!=	${LIBNET_CONFIG} --libs
LIBNET_INCDIR=	${LIBNET_CFLAGS:M-I*:S/-I//}
LIBNET_LIBDIR=	${LIBNET_LIBS:M-L*:S/-L//}
.endif

BUILD_DEPENDS+=		${LIBNET_CONFIG}:${PORTSDIR}/net/libnet10
CONFIGURE_ARGS+=	--enable-flexresp \
			--with-libnet-includes=${LIBNET_INCDIR} \
			--with-libnet-libraries=${LIBNET_LIBDIR}
.endif

MAN8=		snort.8 snort_inline.8
DOCS=		ChangeLog doc/AUTHORS doc/BUGS doc/CREDITS doc/faq* doc/NEWS \
		doc/README* doc/TODO doc/USAGE doc/*.pdf

RULE_PATH=	${DATADIR}/rules

USE_RC_SUBR=	snort.sh

post-patch:
	${REINPLACE_CMD} "s,%%PREFIX%%,${PREFIX}," ${WRKSRC}/src/snort.c
	${REINPLACE_CMD} "s,/etc/snort_inline/drop-rules,${RULE_PATH}," ${WRKSRC}/etc/snort_inline.conf
	${REINPLACE_CMD} "s,$RULE_PATH/classification.config,${DATADIR}/classification.config," ${WRKSRC}/etc/snort_inline.conf
	${REINPLACE_CMD} "s,$RULE_PATH/reference.config,${DATADIR}/reference.config," ${WRKSRC}/etc/snort_inline.conf
	${REINPLACE_CMD} -e "s/^unicode.map/\/usr\/local\/share\/snort_inline\/unicode.map/" ${WRKSRC}/etc/snort_inline.conf
.if defined(WITH_FLEXRESP)
	${REINPLACE_CMD} -e 's|libnet-config|${LIBNET_CONFIG}|g' ${WRKSRC}/configure
.endif

post-install:
	@@${MKDIR} ${DATADIR}
	@@${MKDIR} ${RULE_PATH}
	${INSTALL_DATA} ${WRKSRC}/etc/classification.config \
		${DATADIR}/classification.config-sample
	[ -f ${DATADIR}/classification.config ] || \
		${CP} ${DATADIR}/classification.config-sample \
		${DATADIR}/classification.config
	${INSTALL_DATA} ${WRKSRC}/etc/reference.config \
		${DATADIR}/reference.config-sample
	[ -f ${DATADIR}/reference.config ] ||  \
		${CP} ${DATADIR}/reference.config-sample ${DATADIR}/reference.config
	${INSTALL_DATA} ${WRKSRC}/etc/threshold.conf \
		${DATADIR}/threshold.conf-sample
	[ -f ${DATADIR}/threshold.conf ] ||  \
		${CP} ${DATADIR}/threshold.conf-sample ${DATADIR}/threshold.conf
	${INSTALL_DATA} ${WRKSRC}/etc/unicode.map \
		${DATADIR}/unicode.map
.for f in snort.conf snort_inline.conf
	${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}-sample
	[ -f ${PREFIX}/etc/${f} ] || \
		${INSTALL_DATA} ${WRKSRC}/etc/${f} ${PREFIX}/etc/${f}
.endfor
.if !defined(NOPORTDOCS)
	@@${MKDIR} ${DOCSDIR}
	cd ${WRKSRC} && ${INSTALL_DATA} ${DOCS} ${DOCSDIR}
.endif
	@@${CAT} ${PKGMESSAGE}

.include <bsd.port.post.mk>
@


1.11
log
@- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
@
text
@d5 1
a5 1
# $FreeBSD$
@


1.10
log
@- Mark BROKEN and DEPRECATED

Approved by:	nick@@rogness.net (maintainer)
@
text
@a18 1
CONFIGURE_ENV=	LDFLAGS="${LDFLAGS}"
@


1.9
log
@- Update to 2.6.1.5

PR:		ports/158905
Submitted by:	Jin-Sih Lin <linpct@@gmail.com>
Approved by:	Maintainer Timeout (> Two Weeks)
@
text
@d1 1
a1 1
# New ports collection makefile for:	snort_inline
d31 4
@


1.8
log
@Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
@
text
@d9 1
a9 2
PORTVERSION=	2.4.5
PORTREVISION=	1
d24 2
@


1.7
log
@- Add flexible response (v1) support to snort_inline. It borrows heavily from
  the snort port, which also has this feature. Adds libnet10 as a dependency if
  this is chosen.
- Add options, ODBC, POSTGRESQL, and MySQL support (plus flexible responses).
- Add dependency on libnet10 if flexible responses is defined.
- Bump portrevision

- Note that flexible response v2 (needing libnet11) is unsupported due to libnet11
  patches not applying cleanly. When this is cleared up for snort, it can be
  ported to snort_inline.

PR:		ports/121710
Submitted by:	Yousif Hassan <yousif@@alumni.jmu.edu>
Approved by:	maintainer timeout (1+ months)
@
text
@a20 1
CONFIGURE_TARGET=	--build=${MACHINE_ARCH}-portbld-freebsd${OSREL}
@


1.6
log
@Remove USE_GPG from all effected ports. This knob is a no-op and the way it
was supposed to work is useless, because if we can't trust the distfile from
the remote machine, we can't trust the signature from the same machine either.
Our MD5 and SHA256 are good for checking both the sanity and the
trustiness of distfiles.

Approved by:	portmgr (erwin), erwin (mentor)
@
text
@d10 1
d26 7
d58 16
d88 3
a90 6

pre-configure:
	@@${ECHO} ""
	@@${ECHO} "Set WITH_MYSQL, WITH_ODBC or WITH_POSTGRESQL"
	@@${ECHO} "to get additional support."
	@@${ECHO} ""
d121 1
a121 1
.include <bsd.port.mk>
@


1.5
log
@- Update to version 2.4.5.

PR:		ports/104730
Submitted by:	Nick Rogness <nick@@rogness.net> (maintainer)
@
text
@a17 2
USE_GPG=	yes
SIG_SUFFIX=	.asc
@


1.4
log
@Remove USE_REINPLACE from all categories starting with S
@
text
@d9 1
a9 2
PORTVERSION=	2.3.0
PORTREVISION=	1
a11 1
DISTNAME=	snort_inline-2.3.0-RC1
a17 2
WRKSRC=		${WRKDIR}/snort_inline-2.3.0-RC1

d25 1
a25 3
BUILD_DEPENDS+=		libnet*<=1.1.0,1:${PORTSDIR}/net/libnet10
CONFIGURE_ARGS+=	--with-libnet-includes=${LOCALBASE}/include \
			--with-libnet-libraries=${LOCALBASE}/lib
d52 1
a52 1
MAN8=		snort.8
d56 2
d62 4
d75 1
a75 1
	${INSTALL_DATA} ${WRKSRC}/rules/*.rules ${DATADIR}
d85 7
a91 1
.for f in snort.conf snort_inline.conf unicode.map threshold.conf
@


1.3
log
@libnet update:
- move 1.0 obsoleted version to net/libnet10
  net/libnet is latest Stable Version
  net/libnet is latest Beta Version

- Fix all depended ports with a new DEPENDS scheme

- While I'm here fix security/yersinia build on 4.x
  (getopt_long and ncurses issues)

PR:		ports/85519 (based on)
Submitted by:	Stas Yakovlev <stas.yakovlev_at_gmail.com>
@
text
@a23 1
USE_REINPLACE=	yes
@


1.2
log
@- Fix WITH_PGSQL knob

PR:		ports/81700
Submitted by:	Ulrich Spoerlein <q@@galgenberg.net>
Pointy hat to:	pav
@
text
@d10 1
d30 1
a30 1
BUILD_DEPENDS+=		${LOCALBASE}/lib/libnet.a:${PORTSDIR}/net/libnet
@


1.1
log
@An inline IPS system based on snort using ipfw.

PR:		ports/81378
Submitted by:	Nick Rogness <nick@@rogness.net>
@
text
@d49 1
a49 2
POSTGRESQL_PORT?=	databases/postgresql7
LIB_DEPENDS+=		pq.3:${PORTSDIR}/${POSTGRESQL_PORT}
@

