ports/119512: [NEW PORT] security/shimmer

Felippe de Meirelles Motta lippemail at gmail.com
Thu Jan 10 01:10:01 UTC 2008


>Number:         119512
>Category:       ports
>Synopsis:       [NEW PORT] security/shimmer
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jan 10 01:10:01 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Felippe de Meirelles Motta
>Release:        FreeBSD 7.0-BETA4 amd64
>Organization:
>Environment:
System: FreeBSD 7.0-BETA4 #0: Sun Dec  2 16:34:41 UTC 2007
    root at myers.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC
>Description:
shimmer is a pair of small programs (a client and a server) to hide a valuable port (such as a hidden web server or SSH) on a public IP address.

shimmer works by cryptographically changing a set of 16 ports (one of which forwards to the real service, and 15 others that lead to a trap to blacklist attackers). The 16 ports change every minute frustrating an attacker, but a legimitate user with access to a secret shared between the client and server can determine the real port, avoid blacklisting, and get a connection.
>How-To-Repeat:

>Fix:


Patch attached with submission follows:

# This is a shell archive.  Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file".  Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
#	/home/ports/shimmer
#	/home/ports/shimmer/pkg-descr
#	/home/ports/shimmer/Makefile
#	/home/ports/shimmer/distinfo
#
echo c - /home/ports/shimmer
mkdir -p /home/ports/shimmer > /dev/null 2>&1
echo x - /home/ports/shimmer/pkg-descr
sed 's/^X//' >/home/ports/shimmer/pkg-descr << 'END-of-/home/ports/shimmer/pkg-descr'
Xshimmer is a pair of small programs (a client and a server) that provide an
Xalternative to port knocking program such as tumbler and are used to hide a
Xvaluable port (such as a hidden web server or SSH) on a public IP address.
X
XWWW:	http://shimmer.sourceforge.net/
END-of-/home/ports/shimmer/pkg-descr
echo x - /home/ports/shimmer/Makefile
sed 's/^X//' >/home/ports/shimmer/Makefile << 'END-of-/home/ports/shimmer/Makefile'
X# New ports collection makefile for:	shimmer
X# Date created:		2008-01-09
X# Whom:			Felippe de Meirelles Motta <lippemail at gmail.com>
X#
X# $FreeBSD$
X#
X
XPORTNAME=	shimmer
XPORTVERSION=	0.1.0
XCATEGORIES=	security
XMASTER_SITES=	SF
XDISTNAME=	${PORTNAME}
X
XMAINTAINER=	lippemail at gmail.com
XCOMMENT=	Perl implementation that hides a valuable port on your server
X
XNO_WRKSUBDIR=	yes
XNO_BUILD=	yes
X
XUSE_PERL5_RUN=	yes
X
XPLIST_FILES=	bin/shimmer \
X		bin/shimmerd \
X		etc/shimmer.conf
X
X.include <bsd.port.pre.mk>
X
Xdo-install:
X.if !defined(WITHOUT_CLIENT)
X	${INSTALL_SCRIPT} ${WRKSRC}/shimmer ${PREFIX}/bin/shimmer
X.endif
X.if !defined(WITHOUT_SERVER)
X	${INSTALL_SCRIPT} ${WRKSRC}/shimmerd ${PREFIX}/bin/shimmerd
X	${INSTALL_DATA} ${WRKSRC}/shimmer.conf ${PREFIX}/etc/shimmer.conf
X.endif
X
X.include <bsd.port.post.mk>
END-of-/home/ports/shimmer/Makefile
echo x - /home/ports/shimmer/distinfo
sed 's/^X//' >/home/ports/shimmer/distinfo << 'END-of-/home/ports/shimmer/distinfo'
XMD5 (shimmer.tar.gz) = 9b754321fa9ffa990f4307c2e7ad85e6
XSHA256 (shimmer.tar.gz) = d9ed67b8d15104beee36bbd3e3514bb98a81d6c1b1388ce4b4362a84ecd09ee3
XSIZE (shimmer.tar.gz) = 7488
END-of-/home/ports/shimmer/distinfo
exit



>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list