7 files changed, 83 insertions, 0 deletions

diff --git a/security/Makefile b/security/Makefile
index 59b0a7465fd2..ef21ba1128ff 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -164,6 +164,7 @@
     SUBDIR += ipfilter2dshield
     SUBDIR += ipfmeta
     SUBDIR += ipfw2dshield
+    SUBDIR += ipguard
     SUBDIR += isakmpd
     SUBDIR += its4
     SUBDIR += john
diff --git a/security/ipguard/Makefile b/security/ipguard/Makefile
new file mode 100644
index 000000000000..82057ab281ba
--- /dev/null
+++ b/security/ipguard/Makefile
@@ -0,0 +1,36 @@
+# New ports collection makefile for:    ipguard
+# Date created:                         2 Sep 2005
+# Whom:                                 SeaD
+#
+# $FreeBSD$
+#
+
+PORTNAME=	ipguard
+PORTVERSION=	0.04
+CATEGORIES=	security net
+MASTER_SITES=	http://ipguard.deep.perm.ru/files/
+
+MAINTAINER=	sead@mail.ru
+COMMENT=	Tool designed to protect LAN IP adress space by ARP spoofing
+
+BUILD_DEPENDS=	${LOCALBASE}/lib/libnet.a:${PORTSDIR}/net/libnet
+
+MAN8=		ipguard.8
+
+ETHERS?=	/etc/ethers
+
+MAKE_ARGS+=	ETHERS=${ETHERS}
+
+SUB_FILES=	pkg-message
+SUB_LIST=	ETHERS=${ETHERS}
+PKGMESSAGE=	${WRKDIR}/pkg-message
+
+do-install:
+	${INSTALL_PROGRAM} ${WRKSRC}/ipguard ${PREFIX}/sbin
+	${INSTALL_MAN} ${WRKSRC}/doc/ipguard.8 ${MANPREFIX}/man/man8
+	${INSTALL_SCRIPT} ${WRKSRC}/doc/ipguard.sh.sample ${PREFIX}/etc/rc.d
+
+post-install:
+	@${CAT} ${PKGMESSAGE}
+
+.include <bsd.port.mk>
diff --git a/security/ipguard/distinfo b/security/ipguard/distinfo
new file mode 100644
index 000000000000..fd464aedebb8
--- /dev/null
+++ b/security/ipguard/distinfo
@@ -0,0 +1 @@
+MD5 (ipguard-0.04.tar.gz) = 00bff6650e3908e9fa352d48d1574850
diff --git a/security/ipguard/files/patch-Makefile b/security/ipguard/files/patch-Makefile
new file mode 100644
index 000000000000..1a04c0ac32e5
--- /dev/null
+++ b/security/ipguard/files/patch-Makefile
@@ -0,0 +1,27 @@
+--- Makefile.orig	Mon Aug 22 17:34:48 2005
++++ Makefile	Sat Sep  3 19:27:19 2005
+@@ -3,18 +3,19 @@
+ ##  copyright (c) 2005 SeaD
+ ##
+ 
+-PREFIX=/usr/local
+-ETHERS=/etc/ethers
++PREFIX?=/usr/local
++LOCALBASE?=/usr/local
++ETHERS?=/etc/ethers
+ 
+ NAME=ipguard
+ VERSION=0.04
+-INCLUDES=-I/usr/local/include
+-LIBS=-lpcap `libnet-config --libs` -L/usr/local/lib
++INCLUDES=-I${LOCALBASE}/include
++LIBS=-lpcap `libnet-config --libs` -L${LOCALBASE}/lib
+ DEFINES=`libnet-config --defines`
+ STATIC=
+ CC=gcc
+ 
+-CFLAGS+=-g -Wall -O2 -DETHERS='"$(ETHERS)"'
++CFLAGS+=-g -Wall -DETHERS='"$(ETHERS)"'
+ 
+ OBJS=ethers.o ipguard.o packet.o system.o
+ DOCS=ethers.sample ipguard.sh.sample NEWS README TODO
diff --git a/security/ipguard/files/pkg-message.in b/security/ipguard/files/pkg-message.in
new file mode 100644
index 000000000000..69293c7c3be6
--- /dev/null
+++ b/security/ipguard/files/pkg-message.in
@@ -0,0 +1,8 @@
+
+===>  INSTALL NOTES:
+      Now create %%ETHERS%% file
+      (see ethers(5))
+      and then start ipguard:
+      (cd %%PREFIX%%/etc/rc.d
+      mv ipguard.sh.sample ipguard.sh
+      %%PREFIX%%/etc/rc.d/ipguard.sh start)
diff --git a/security/ipguard/pkg-descr b/security/ipguard/pkg-descr
new file mode 100644
index 000000000000..45d64b107b50
--- /dev/null
+++ b/security/ipguard/pkg-descr
@@ -0,0 +1,8 @@
+ipguard listens network for ARP packets. All permitted MAC/IP pairs
+listed in 'ethers' file. If it recieves one with MAC/IP pair, which is
+not listed in 'ethers' file, it will send ARP reply with configured
+fake address. This will prevent not permitted host to work properly
+in this ethernet segment. Especially Windows(TM) hosts.
+
+Author SeaD <sead@mail.ru>
+WWW: http://ipguard.deep.perm.ru/
diff --git a/security/ipguard/pkg-plist b/security/ipguard/pkg-plist
new file mode 100644
index 000000000000..af539868c3b0
--- /dev/null
+++ b/security/ipguard/pkg-plist
@@ -0,0 +1,2 @@
+sbin/ipguard
+etc/rc.d/ipguard.sh.sample