ports/110000: security/bruteblock Package does not install correctly
Roger Gujord
roger at gujord.com
Tue Mar 6 17:00:12 UTC 2007
>Number: 110000
>Category: ports
>Synopsis: security/bruteblock Package does not install correctly
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Tue Mar 06 17:00:11 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator: Roger Gujord
>Release: FreeBSD 6.2-RELEASE
>Organization:
>Environment:
FreeBSD XXX.XXXX.XXX 6.2-RELEASE FreeBSD 6.2-RELEASE #0: Fri Jan 12 10:40:27 UTC 2007 root at dessler.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
>Description:
# pkg_add -r bruteblock
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.2-release/Latest/bruteblock.tbz... Done.
Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-6.2-release/All/pcre-6.7.tbz... Done.
cp: /usr/local/etc/bruteblock/bruteblock/proftpd.conf: No such file or directory
pkg_add: command 'if [ ! -f /usr/local/etc/bruteblock/proftpd.conf ]; then cp -p /usr/local/etc/bruteblock/proftpd.conf.dist /usr/local/etc/bruteblock/bruteblock/proftpd.conf; fi' failed
cp: /usr/local/etc/bruteblock/bruteblock/ssh.conf: No such file or directory
pkg_add: command 'if [ ! -f /usr/local/etc/bruteblock/ssh.conf ]; then cp -p /usr/local/etc/bruteblock/ssh.conf.dist /usr/local/etc/bruteblock/bruteblock/ssh.conf; fi' failed
===> CONFIGURATION NOTE:
Configuration of the bruteblock is done via configuration files
located at /usr/local/etc/bruteblock/
To run the script, append following lines to /etc/syslog.conf:
!*
auth.info;authpriv.info |exec /usr/local/sbin/bruteblock -f /usr/local/etc/bruteblock/ssh.conf
and restart syslogd.
Also you should add ipfw2 table and the corresponding deny rule.
For example,
# ipfw add deny ip from table(1) to any
Next, you'll want to setup periodical cleanup of ipfw2 table. Add following
lines to /etc/rc.conf:
bruteblockd_enable="YES"
bruteblockd_table="1"
bruteblockd_flags="-s 5"
and start bruteblockd: /usr/local/etc/rc.d/bruteblockd.sh start
See bruteblock(8) for more detailts.
>How-To-Repeat:
DO:
pkg_add -r bruteblock
without having proftpd installed
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list