adjust copyright year
This commit is contained in:
commit
229f91b71f
5
debian/README.Debian
vendored
Normal file
5
debian/README.Debian
vendored
Normal file
|
@ -0,0 +1,5 @@
|
||||||
|
postfwd for Debian
|
||||||
|
------------------
|
||||||
|
|
||||||
|
|
||||||
|
-- Jan Wagner <waja@cyconet.org> Mon, 10 Mar 2008 22:37:44 +0100
|
5
debian/changelog
vendored
Normal file
5
debian/changelog
vendored
Normal file
|
@ -0,0 +1,5 @@
|
||||||
|
postfwd (1.03-1) unstable; urgency=low
|
||||||
|
|
||||||
|
* Initial release (Closes: #470356).
|
||||||
|
|
||||||
|
-- Jan Wagner <waja@cyconet.org> Mon, 10 Mar 2008 22:37:44 +0100
|
1
debian/compat
vendored
Normal file
1
debian/compat
vendored
Normal file
|
@ -0,0 +1 @@
|
||||||
|
5
|
22
debian/control
vendored
Normal file
22
debian/control
vendored
Normal file
|
@ -0,0 +1,22 @@
|
||||||
|
Source: postfwd
|
||||||
|
Section: mail
|
||||||
|
Priority: optional
|
||||||
|
Maintainer: Jan Wagner <waja@cyconet.org>
|
||||||
|
Build-Depends: debhelper (>= 5), dpatch
|
||||||
|
Homepage: http://www.postfwd.org/
|
||||||
|
Vcs-Browser: https://trac.cyconet.org/debian/browser/debian/postfwd
|
||||||
|
Vcs-Svn: https://trac.cyconet.org/svn/debian/postfwd
|
||||||
|
Standards-Version: 3.7.3
|
||||||
|
|
||||||
|
Package: postfwd
|
||||||
|
Architecture: all
|
||||||
|
Depends: ${perl:Depends}, adduser, libnet-cidr-lite-perl, libnet-server-perl
|
||||||
|
Description: a Postfix policyd to combine complex restrictions in a ruleset
|
||||||
|
Postfwd is written in perl to combine complex postfix restrictions in a
|
||||||
|
ruleset similar to those of the most firewalls. The program uses the postfix
|
||||||
|
policy delegation protocol to control access to the mail system before a
|
||||||
|
message has been accepted (please visit
|
||||||
|
http://www.postfix.org/SMTPD_POLICY_README.html for more information). It
|
||||||
|
allows you to choose an action (e.g. reject, dunno) for a combination of
|
||||||
|
several smtp parameters (like sender and recipient address, size or the
|
||||||
|
client's TLS fingerprint).
|
36
debian/copyright
vendored
Normal file
36
debian/copyright
vendored
Normal file
|
@ -0,0 +1,36 @@
|
||||||
|
This package was debianized by Jan Wagner <waja@cyconet.org> on
|
||||||
|
Mon, 10 Mar 2008 22:37:44 +0100
|
||||||
|
|
||||||
|
It was downloaded from <http://www.postfwd.org/>
|
||||||
|
|
||||||
|
Upstream Author: Jan Peter Kessler <info@postfwd.org>
|
||||||
|
|
||||||
|
Copyright: (c) 2007, Jan Peter Kessler, All rights reserved.
|
||||||
|
|
||||||
|
License:
|
||||||
|
|
||||||
|
Redistribution and use in source and binary forms, with or without
|
||||||
|
modification, are permitted provided that the following conditions are met:
|
||||||
|
|
||||||
|
* Redistributions of source code must retain the above copyright notice,
|
||||||
|
this list of conditions and the following disclaimer.
|
||||||
|
* Redistributions in binary form must reproduce the above copyright notice,
|
||||||
|
this list of conditions and the following disclaimer in the documentation
|
||||||
|
and/or other materials provided with the distribution.
|
||||||
|
* Neither the name of the authors nor the names of his contributors may be
|
||||||
|
used to endorse or promote products derived from this software without
|
||||||
|
specific prior written permission.
|
||||||
|
|
||||||
|
THIS SOFTWARE IS PROVIDED BY ME ``AS IS'' AND ANY EXPRESS OR IMPLIED
|
||||||
|
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||||
|
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
||||||
|
EVENT SHALL BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
|
||||||
|
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
||||||
|
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
||||||
|
OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
||||||
|
WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
||||||
|
OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
||||||
|
ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
|
The Debian packaging is (C) 2008 Jan Wagner <waja@cyconet.org> and
|
||||||
|
is licensed under the GPL, see `/usr/share/common-licenses/GPL'.
|
15
debian/default
vendored
Normal file
15
debian/default
vendored
Normal file
|
@ -0,0 +1,15 @@
|
||||||
|
# Global options for postfwd(8).
|
||||||
|
|
||||||
|
# Set to '1' to enable startup (daemon mode)
|
||||||
|
#STARTUP=1
|
||||||
|
|
||||||
|
# Config file
|
||||||
|
CONF=/etc/postfix/postfwd.cf
|
||||||
|
# IP where listen to
|
||||||
|
INET=127.0.0.1
|
||||||
|
# Port where listen to
|
||||||
|
PORT=10040
|
||||||
|
# run as user postfwd
|
||||||
|
RUNAS="postfw"
|
||||||
|
# Arguments passed on start (--daemon implied)
|
||||||
|
ARGS="--summary=600 --cache=600 --cache-rdomain-only --cache-no-size"
|
2
debian/docs
vendored
Normal file
2
debian/docs
vendored
Normal file
|
@ -0,0 +1,2 @@
|
||||||
|
doc/postfwd.html
|
||||||
|
doc/postfwd.txt
|
108
debian/example-cfg.txt
vendored
Normal file
108
debian/example-cfg.txt
vendored
Normal file
|
@ -0,0 +1,108 @@
|
||||||
|
# downloaded from http://postfwd.org/example-cfg.txt
|
||||||
|
# check for more recent versions!
|
||||||
|
|
||||||
|
##
|
||||||
|
## Definitions
|
||||||
|
##
|
||||||
|
|
||||||
|
# Maintenance times
|
||||||
|
&&MAINTENANCE { \
|
||||||
|
date=15.01.2007 ; \
|
||||||
|
date=15.04.2007 ; \
|
||||||
|
date=15.07.2007 ; \
|
||||||
|
date=15.10.2007 ; \
|
||||||
|
time=03:00:00-04:00:00 ; \
|
||||||
|
};
|
||||||
|
|
||||||
|
# Whitelists
|
||||||
|
&&TRUSTED_NETS { \
|
||||||
|
client_address=192.168.1.0/22 ; \
|
||||||
|
client_address=172.16.128.32/27 ; \
|
||||||
|
};
|
||||||
|
&&TRUSTED_HOSTS { \
|
||||||
|
client_name~=\.domain1\.net$ ; \
|
||||||
|
client_name~=\.domain2\.de$ ; \
|
||||||
|
};
|
||||||
|
&&TRUSTED_USERS { \
|
||||||
|
sasl_username==bob ; \
|
||||||
|
sasl_username==alice ; \
|
||||||
|
};
|
||||||
|
&&TRUSTED_TLS { \
|
||||||
|
ccert_fingerprint==11:22:33:44:55:66:AA:BB:CC:DD:EE:FF ; \
|
||||||
|
ccert_fingerprint==AA:BB:CC:DD:EE:FF:11:22:33:44:55:66 ; \
|
||||||
|
encryption_keysize>=64 ; \
|
||||||
|
};
|
||||||
|
&&FREEMAIL { \
|
||||||
|
client_name~=\.gmx\.net$ ; \
|
||||||
|
client_name~=\.web\.de$ ; \
|
||||||
|
client_name~=\.(aol|yahoo|h(ush|ot)mail)\.com$ ; \
|
||||||
|
};
|
||||||
|
&&STATIC { \
|
||||||
|
# contains freemailers
|
||||||
|
&&FREEMAIL ; \
|
||||||
|
client_name~=[\.\-]static[[\.\-] ; \
|
||||||
|
client_name~=^(mail|smtp|mout|mx)[\-]*[0-9]*\. ; \
|
||||||
|
};
|
||||||
|
|
||||||
|
# Spamchecks
|
||||||
|
&&BADHELO { \
|
||||||
|
client_name~=!!($$(helo_name)) ; \
|
||||||
|
};
|
||||||
|
&&DYNAMIC { \
|
||||||
|
client_name~=^unknown$ ; \
|
||||||
|
client_name~=(\-.+){4} ; \
|
||||||
|
client_name~=\d{5} ; \
|
||||||
|
client_name~=[_\.\-]([axt]{0,1}dsl|br(e|oa)dband|ppp|pppoe|dynamic|dynip|ADSL|dial(up|in)|pool|dhcp|leased)[_\.\-] ; \
|
||||||
|
};
|
||||||
|
&&RBLS { \
|
||||||
|
rbl=zen.spamhaus.org ; \
|
||||||
|
rbl=list.dsbl.org ; \
|
||||||
|
rbl=bl.spamcop.net ; \
|
||||||
|
rbl=dnsbl.sorbs.net ; \
|
||||||
|
rbl=ix.dnsbl.manitu.net ; \
|
||||||
|
};
|
||||||
|
&&RHSBLS { \
|
||||||
|
rhsbl=rddn.dnsbl.net.au ; \
|
||||||
|
rhsbl=rhsbl.ahbl.org ; \
|
||||||
|
rhsbl=rhsbl.sorbs.net ; \
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
|
##
|
||||||
|
## Ruleset
|
||||||
|
##
|
||||||
|
|
||||||
|
# temporary reject and drop connection during maintenance window
|
||||||
|
id=M_001 ; &&MAINTENANCE ; action=421 maintenance - please try again later
|
||||||
|
|
||||||
|
# stress-friendly behaviour (will not match on postfix version pre 2.5)
|
||||||
|
id=STRESS ; stress==yes ; action=dunno
|
||||||
|
|
||||||
|
# Whitelists
|
||||||
|
id=WL_001 ; &&TRUSTED_NETS ; action=dunno
|
||||||
|
id=WL_002 ; &&TRUSTED_HOSTS ; action=dunno
|
||||||
|
id=WL_003 ; &&TRUSTED_USERS ; action=dunno
|
||||||
|
id=WL_004 ; &&TRUSTED_TLS ; action=dunno
|
||||||
|
|
||||||
|
# DNSBL checks
|
||||||
|
id=RBL_001 ; &&RHSBLS ; &&RBLS ; \
|
||||||
|
rhsblcount=all ; rblcount=all ; \
|
||||||
|
action=set(HIT_rhls=$$rhsblcount,HIT_rbls=$$rblcount)
|
||||||
|
id=RBL_002 ; HIT_rhls>=1 ; HIT_rbls>=1 ; action=554 5.7.1 blocked using $$HIT_rhls RHSBLs and $$HIT_rbls RBLs
|
||||||
|
id=RBL_003 ; HIT_rhls>=2 ; action=554 5.7.1 blocked using $$HIT_rhls RHSBLs
|
||||||
|
id=RBL_004 ; HIT_rbls>=2 ; action=554 5.7.1 blocked using $$HIT_rbls RBLs
|
||||||
|
id=RBL_005 ; HIT_rbls>=1 ; &&DYNAMIC ; action=REJECT listed on RBL and $$client_name looks like dynip
|
||||||
|
id=RBL_006 ; HIT_rhls>=1 ; &&DYNAMIC ; action=REJECT listed on RHSBL and $$client_name looks like dynip
|
||||||
|
id=RBL_007 ; HIT_rbls>=1 ; &&BADHELO ; action=REJECT listed on RBL and $$helo_name does not match $$client_name
|
||||||
|
id=RBL_008 ; HIT_rhls>=1 ; &&BADHELO ; action=REJECT listed on RHSBL and $$helo_name does not match $$client_name
|
||||||
|
|
||||||
|
# Selective greylisting
|
||||||
|
id=GREY_001 ; action=dunno ; &&STATIC
|
||||||
|
id=GREY_002 ; action=dunno ; $$client_name~=$$(sender_domain)$
|
||||||
|
id=GREY_003 ; action=greylisting ; &&DYNAMIC
|
||||||
|
id=GREY_004 ; action=greylisting ; HIT_rhls>=1
|
||||||
|
id=GREY_005 ; action=greylisting ; HIT_rbls>=1
|
||||||
|
# greylisting should be safe during out-of-office times
|
||||||
|
id=GREY_006 ; action=greylisting ; days=Sat-Sun
|
||||||
|
id=GREY_007 ; action=greylisting ; days=Mon-Fri ; time=!!06:00:00-20:00:00
|
||||||
|
|
103
debian/example-cfg2.txt
vendored
Normal file
103
debian/example-cfg2.txt
vendored
Normal file
|
@ -0,0 +1,103 @@
|
||||||
|
# downloaded from http://hege.li/howto/spam/etc/postfwd/postfwd.conf
|
||||||
|
# check for more recent versions!
|
||||||
|
|
||||||
|
## Check DNS Whitelisting
|
||||||
|
|
||||||
|
id=OK_DNSWL; \
|
||||||
|
rbl=list.dnswl.org/127/43200; \
|
||||||
|
rbl=hostkarma.junkemailfilter.com/127.0.0.[13]; \
|
||||||
|
action=OK
|
||||||
|
|
||||||
|
## Check HELO and reverse DNS
|
||||||
|
|
||||||
|
id=SET_HELO; \
|
||||||
|
helo_name=^(\[|[^.]+$|.*?[0-9.-]{8}); \
|
||||||
|
action=set(HIT_helo=1)
|
||||||
|
|
||||||
|
id=SET_NODNS; \
|
||||||
|
client_name=^unknown$; \
|
||||||
|
action=set(HIT_nodns=1)
|
||||||
|
|
||||||
|
id=REJECT_HELO_NODNS; \
|
||||||
|
HIT_helo==1; HIT_nodns==1; \
|
||||||
|
action=REJECT Your HELO is suspicious and no reverse DNS
|
||||||
|
|
||||||
|
## Check ZEN for immediate blocking
|
||||||
|
|
||||||
|
id=REJECT_RBL_ZEN; \
|
||||||
|
rbl=zen.spamhaus.org; \
|
||||||
|
action=REJECT You are listed in zen.spamhaus.org DNSBL
|
||||||
|
|
||||||
|
## Check DNSBLs
|
||||||
|
|
||||||
|
&&DNSBLS { \
|
||||||
|
rbl=bl.spamcop.net; \
|
||||||
|
rbl=dnsbl-1.uceprotect.net; \
|
||||||
|
rbl=psbl.surriel.org; \
|
||||||
|
rbl=dnsbl.ahbl.org; \
|
||||||
|
rbl=dnsbl.njabl.org; \
|
||||||
|
rbl=list.dsbl.org; \
|
||||||
|
rbl=dnsbl.sorbs.net; \
|
||||||
|
rbl=ix.dnsbl.manitu.net; \
|
||||||
|
rbl=hostkarma.junkemailfilter.com/127.0.0.2; \
|
||||||
|
};
|
||||||
|
|
||||||
|
id=EVAL_DNSBLS; \
|
||||||
|
&&DNSBLS; rblcount=all; \
|
||||||
|
action=set(HIT_rbls=$$rblcount)
|
||||||
|
|
||||||
|
id=REJECT_RBL_MULTI; \
|
||||||
|
HIT_rbls>=2; \
|
||||||
|
action=REJECT You are listed in several DNSBLs
|
||||||
|
|
||||||
|
## Check RHSBLs
|
||||||
|
|
||||||
|
&&RHSBLS_REVERSE { \
|
||||||
|
rhsbl_reverse_client=l1.apews.org; \
|
||||||
|
rhsbl_reverse_client=rddn.dnsbl.net.au; \
|
||||||
|
rhsbl_reverse_client=dynamic.rhs.mailpolice.com; \
|
||||||
|
};
|
||||||
|
|
||||||
|
&&RHSBLS_SENDER { \
|
||||||
|
rhsbl_sender=multi.uribl.com; \
|
||||||
|
rhsbl_sender=multi.surbl.org; \
|
||||||
|
rhsbl_sender=rhsbl.ahbl.org; \
|
||||||
|
rhsbl_sender=rhsbl.sorbs.net; \
|
||||||
|
rhsbl_sender=dsn.rfc-ignorant.org; \
|
||||||
|
};
|
||||||
|
|
||||||
|
id=EVAL_RHSBLS; \
|
||||||
|
&&RHSBLS_REVERSE; &&RHSBLS_SENDER; rhsblcount=all; \
|
||||||
|
action=set(HIT_rhsbls=$$rhsblcount)
|
||||||
|
|
||||||
|
id=REJECT_RHSBL_MULTI; \
|
||||||
|
HIT_rhsbls>=2; \
|
||||||
|
action=REJECT You are listed in several RHSBLs
|
||||||
|
|
||||||
|
## Combined checks
|
||||||
|
|
||||||
|
id=REJECT_RBL_RHSBL; \
|
||||||
|
HIT_rbls>=1; HIT_rhsbls>=1; \
|
||||||
|
action=REJECT You are DNSBL and RHSBL listed
|
||||||
|
|
||||||
|
id=REJECT_RBL_HELO; \
|
||||||
|
HIT_rbls>=1; HIT_helo==1; \
|
||||||
|
action=REJECT You are DNSBL listed and HELO is suspicious
|
||||||
|
|
||||||
|
id=REJECT_RBL_NODNS; \
|
||||||
|
HIT_rbls>=1; HIT_nodns==1; \
|
||||||
|
action=REJECT You are DNSBL listed and no reverse DNS
|
||||||
|
|
||||||
|
id=REJECT_RHSBL_HELO; \
|
||||||
|
HIT_rhsbls>=1; HIT_helo==1; \
|
||||||
|
action=REJECT You are RHSBL listed and HELO is suspicious
|
||||||
|
|
||||||
|
id=REJECT_RHSBL_NODNS; \
|
||||||
|
HIT_rhsbls>=1; HIT_nodns==1; \
|
||||||
|
action=REJECT You are RHSBL listed and no reverse DNS
|
||||||
|
|
||||||
|
## Greylist suspicious
|
||||||
|
|
||||||
|
id=GREY_RBL; HIT_rbls>=1; action=check_postgrey
|
||||||
|
id=GREY_RHSBL; HIT_rhsbls>=1; action=check_postgrey
|
||||||
|
|
101
debian/init.d
vendored
Normal file
101
debian/init.d
vendored
Normal file
|
@ -0,0 +1,101 @@
|
||||||
|
#! /bin/sh
|
||||||
|
# Written by Miquel van Smoorenburg <miquels@cistron.nl>.
|
||||||
|
# Modified for Debian
|
||||||
|
# by Ian Murdock <imurdock@gnu.ai.mit.edu>.
|
||||||
|
#
|
||||||
|
# Version: @(#)skeleton 1.9 26-Feb-2001 miquels@cistron.nl
|
||||||
|
# /etc/init.d/postfwd: v1 2008/03/12 Jan Wagner <waja@cyconet.org>
|
||||||
|
|
||||||
|
### BEGIN INIT INFO
|
||||||
|
# Provides: postfwd
|
||||||
|
# Required-Start: $local_fs $network $remote_fs $syslog
|
||||||
|
# Required-Stop: $local_fs $network $remote_fs $syslog
|
||||||
|
# Default-Start: 2 3 4 5
|
||||||
|
# Default-Stop: 0 1 6
|
||||||
|
# Short-Description: start and stop the postfw daemon
|
||||||
|
# Description: a Perl policy daemon for the Postfix MTA
|
||||||
|
### END INIT INFO
|
||||||
|
|
||||||
|
PATH=/sbin:/bin:/usr/sbin:/usr/bin
|
||||||
|
NAME=postfwd
|
||||||
|
DAEMON=/usr/sbin/${NAME}
|
||||||
|
DESC=postfwd
|
||||||
|
|
||||||
|
test -x $DAEMON || exit 0
|
||||||
|
|
||||||
|
not_configured () {
|
||||||
|
echo "#### WARNING ####"
|
||||||
|
echo "${NAME} won't be started/stopped unless it is configured."
|
||||||
|
echo "If you want to start ${NAME} as daemon, see /etc/default/${NAME}."
|
||||||
|
echo "#################"
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
no_configfile () {
|
||||||
|
echo "#### WARNING ####"
|
||||||
|
echo "${NAME} won't be started/stopped unless a rules file is provided at $CONF."
|
||||||
|
echo "#################"
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
|
||||||
|
# check if postfwd is configured or not
|
||||||
|
if [ -f "/etc/default/$NAME" ]
|
||||||
|
then
|
||||||
|
. /etc/default/$NAME
|
||||||
|
if [ "$STARTUP" != "1" ]
|
||||||
|
then
|
||||||
|
not_configured
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
not_configured
|
||||||
|
fi
|
||||||
|
|
||||||
|
# check if rules file is there
|
||||||
|
if [ ! -f $CONF ]
|
||||||
|
then
|
||||||
|
no_configfile
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Check whether we have to drop privileges.
|
||||||
|
if [ -n "$RUNAS" ]; then
|
||||||
|
if ! getent passwd "$RUNAS" >/dev/null; then
|
||||||
|
RUNAS=""
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
case "$1" in
|
||||||
|
start)
|
||||||
|
echo -n "Starting $DESC: "
|
||||||
|
start-stop-daemon --start --quiet \
|
||||||
|
--name ${RUNAS} \
|
||||||
|
--exec $DAEMON -- ${ARGS} --daemon --file=${CONF} --interface=${INET} --port=${PORT} --user=${RUNAS} --group=${RUNAS}
|
||||||
|
echo "$NAME."
|
||||||
|
;;
|
||||||
|
stop)
|
||||||
|
echo -n "Stopping $DESC: "
|
||||||
|
start-stop-daemon --stop --quiet --oknodo \
|
||||||
|
--exec $DAEMON
|
||||||
|
echo "$NAME."
|
||||||
|
rm -f /var/run/$NAME.pid
|
||||||
|
;;
|
||||||
|
reload)
|
||||||
|
echo "Reloading $DESC configuration files."
|
||||||
|
for pid in `pidof ${NAME}`; do kill -HUP ${pid}; done ;
|
||||||
|
;;
|
||||||
|
restart|force-reload)
|
||||||
|
echo -n "Restarting $DESC (incl. cache): "
|
||||||
|
$0 stop
|
||||||
|
sleep 1
|
||||||
|
$0 start
|
||||||
|
echo "$NAME."
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
N=/etc/init.d/$NAME
|
||||||
|
echo "Usage: $N {start|stop|restart|reload|force-reload}" >&2
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
exit 0
|
1
debian/patches/00list
vendored
Normal file
1
debian/patches/00list
vendored
Normal file
|
@ -0,0 +1 @@
|
||||||
|
10_fix_manpage.dpatch
|
21
debian/patches/10_fix_manpage.dpatch
vendored
Executable file
21
debian/patches/10_fix_manpage.dpatch
vendored
Executable file
|
@ -0,0 +1,21 @@
|
||||||
|
#!/bin/sh /usr/share/dpatch/dpatch-run
|
||||||
|
## 10_fix_manpage.dpatch by Jan Wagner <waja@cyconet.org>
|
||||||
|
##
|
||||||
|
## DP: Fix manpage section
|
||||||
|
|
||||||
|
@DPATCH@
|
||||||
|
|
||||||
|
diff -Nur postfwd-1.03.orig/man/man1/postfwd.1 postfwd-1.03/man/man1/postfwd.1
|
||||||
|
--- postfwd-1.03.orig/man/man1/postfwd.1 2007-10-29 09:29:15.000000000 +0100
|
||||||
|
+++ postfwd-1.03/man/man1/postfwd.1 2008-03-12 01:10:48.000000000 +0100
|
||||||
|
@@ -128,8 +128,8 @@
|
||||||
|
.rm #[ #] #H #V #F C
|
||||||
|
.\" ========================================================================
|
||||||
|
.\"
|
||||||
|
-.IX Title "POSTFWD 1"
|
||||||
|
-.TH POSTFWD 1 "2007-10-29" "perl v5.8.5" "User Contributed Perl Documentation"
|
||||||
|
+.IX Title "POSTFWD 8"
|
||||||
|
+.TH POSTFWD 8 "2007-10-29" "perl v5.8.5" "User Contributed Perl Documentation"
|
||||||
|
.SH "NAME"
|
||||||
|
postfwd \- postfix firewall daemon
|
||||||
|
.SH "SYNOPSIS"
|
57
debian/postinst
vendored
Normal file
57
debian/postinst
vendored
Normal file
|
@ -0,0 +1,57 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# based on arpwatch.postinst: v11 2004/09/15 KELEMEN Peter <fuji@debian.org>
|
||||||
|
# postinst: v1 2006/01/12 Jan Wagner <waja@cyconet.org>
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
NUSER="postfw"
|
||||||
|
NGROUP="postfw"
|
||||||
|
NHOME="/var/lib/$NUSER"
|
||||||
|
NGECOS="postfwd user"
|
||||||
|
|
||||||
|
case "$1" in
|
||||||
|
configure)
|
||||||
|
# Take care of group.
|
||||||
|
if NGROUP_ENTRY=`getent group $NGROUP`; then
|
||||||
|
# group exists
|
||||||
|
:
|
||||||
|
else
|
||||||
|
# group does not exist yet
|
||||||
|
addgroup --quiet --system $NGROUP
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Take care of user.
|
||||||
|
if NUSER_ENTRY=`getent passwd $NUSER`; then
|
||||||
|
# user exists
|
||||||
|
adduser --quiet $NUSER $NGROUP
|
||||||
|
#
|
||||||
|
else
|
||||||
|
# user does not exist yet
|
||||||
|
adduser --quiet --system \
|
||||||
|
--ingroup $NGROUP \
|
||||||
|
--gecos "$NGECOS" \
|
||||||
|
--home $NHOME \
|
||||||
|
--no-create-home \
|
||||||
|
--shell /bin/sh \
|
||||||
|
--disabled-login \
|
||||||
|
--disabled-password \
|
||||||
|
--shell /bin/false \
|
||||||
|
$NUSER
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Set up home directory.
|
||||||
|
if [ -d $NHOME ]; then
|
||||||
|
chown -R ${NUSER}:${NGROUP} $NHOME
|
||||||
|
chmod -R o-rwX $NHOME
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
|
||||||
|
abort-upgrade|abort-remove|abort-deconfigure)
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "postinst called with unknown argument \`$1'" >&2
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
#DEBHELPER#
|
53
debian/postrm
vendored
Normal file
53
debian/postrm
vendored
Normal file
|
@ -0,0 +1,53 @@
|
||||||
|
#!/bin/sh
|
||||||
|
# based on arpwatch.postrm: v2 2004/09/15 KELEMEN Peter <fuji@debian.org>
|
||||||
|
# postrm: v1 2006/10/12 Jan Wagner <waja@cyconet.org>
|
||||||
|
|
||||||
|
NUSER="postfw"
|
||||||
|
NGROUP="postfw"
|
||||||
|
|
||||||
|
set -e
|
||||||
|
|
||||||
|
case "$1" in
|
||||||
|
purge)
|
||||||
|
# find first and last SYSTEM_UID numbers
|
||||||
|
for LINE in `grep SYSTEM_UID /etc/adduser.conf | grep -v "^#"`; do
|
||||||
|
case $LINE in
|
||||||
|
FIRST_SYSTEM_UID*)
|
||||||
|
FIST_SYSTEM_UID=`echo $LINE | cut -f2 -d '='`
|
||||||
|
;;
|
||||||
|
LAST_SYSTEM_UID*)
|
||||||
|
LAST_SYSTEM_UID=`echo $LINE | cut -f2 -d '='`
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
# remove system account if necessary
|
||||||
|
if [ -n "$FIST_SYSTEM_UID" ] && [ -n "$LAST_SYSTEM_UID" ]; then
|
||||||
|
if USERID=`getent passwd $NUSER | cut -f 3 -d ':'`; then
|
||||||
|
if [ -n "$USERID" ]; then
|
||||||
|
if [ "$FIST_SYSTEM_UID" -le "$USERID" ] && \
|
||||||
|
[ "$USERID" -le "$LAST_SYSTEM_UID" ]; then
|
||||||
|
|
||||||
|
deluser --quiet $NUSER || true
|
||||||
|
# And then remove the group
|
||||||
|
GROUPID=`getent group $NGROUP | cut -f 3 -d ':'`
|
||||||
|
if [ -n "$GROUPID" ] ; then
|
||||||
|
delgroup --quiet $NGROUP || true
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
|
||||||
|
remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear)
|
||||||
|
;;
|
||||||
|
|
||||||
|
*)
|
||||||
|
echo "postrm called with unknown argument \`$1'" >&2
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
|
||||||
|
#DEBHELPER#
|
47
debian/rules
vendored
Executable file
47
debian/rules
vendored
Executable file
|
@ -0,0 +1,47 @@
|
||||||
|
#!/usr/bin/make -f
|
||||||
|
# written by Jan Wagner <waja@cyconet.org>
|
||||||
|
#
|
||||||
|
# Uncomment this to turn on verbose mode.
|
||||||
|
#export DH_VERBOSE=1
|
||||||
|
|
||||||
|
include /usr/share/dpatch/dpatch.make
|
||||||
|
|
||||||
|
build: patch-stamp
|
||||||
|
|
||||||
|
clean: unpatch
|
||||||
|
dh_testdir
|
||||||
|
dh_testroot
|
||||||
|
dh_clean
|
||||||
|
|
||||||
|
install: build
|
||||||
|
dh_testdir
|
||||||
|
dh_testroot
|
||||||
|
dh_clean -k
|
||||||
|
dh_installdirs
|
||||||
|
|
||||||
|
install -D -m 644 sbin/postfwd debian/postfwd/usr/sbin/postfwd
|
||||||
|
install -d -m 0755 debian/postfwd/usr/share/doc/postfwd/examples/
|
||||||
|
cp debian/example-cfg*.txt debian/postfwd/usr/share/doc/postfwd/examples/
|
||||||
|
|
||||||
|
# Build architecture-independent files here.
|
||||||
|
binary-indep: build install
|
||||||
|
dh_testdir
|
||||||
|
dh_testroot
|
||||||
|
dh_installchangelogs doc/CHANGELOG
|
||||||
|
dh_installdocs tools
|
||||||
|
dh_installinit -- defaults 19 21
|
||||||
|
dh_installman man/man1/postfwd.1
|
||||||
|
dh_link
|
||||||
|
dh_compress
|
||||||
|
dh_fixperms
|
||||||
|
dh_perl
|
||||||
|
dh_installdeb
|
||||||
|
dh_gencontrol
|
||||||
|
dh_md5sums
|
||||||
|
dh_builddeb
|
||||||
|
|
||||||
|
# Build architecture-dependent files here.
|
||||||
|
binary-arch: build install
|
||||||
|
|
||||||
|
binary: binary-indep binary-arch
|
||||||
|
.PHONY: build clean binary-indep binary-arch binary install
|
2
debian/watch
vendored
Normal file
2
debian/watch
vendored
Normal file
|
@ -0,0 +1,2 @@
|
||||||
|
version=3
|
||||||
|
http://www.postfwd.org/postfwd-(.*)\.tar\.gz
|
Loading…
Reference in a new issue