Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/usr.sbin/pf/Makefile

21 lines
336 B
Makefile
Raw Normal View History

pf needs to be started after the network is up, because some pf rules derive IP address(es) from the interface (e.g "... from any to fxp0"). This however, creates window for possible attacks from the network. Implement the solution proposed by YAMAMOTO Takashi: Add /etc/defaults/pf.boot.conf and load it with the /etc/rc.d/pf_boot script before starting the network. People who don't like the default rules can override it with their own /etc/pf.boot.conf. The default rules have been obtained from OpenBSD. No objections on: tech-security
2005-08-23 16:12:56 +04:00
# $NetBSD: Makefile,v 1.7 2005/08/23 12:12:56 peter Exp $
handle configinstall target correctly.
2004-11-14 23:27:13 +03:00
.include <bsd.own.mk>
move pf reachover makefiles into usr.sbin/pf. ok'ed by itojun. before: sbin/pfctl usr.sbin/authpf usr.sbin/spamdb libexec/ftp-proxy libexec/spamd libexec/spamd-setup libexec/spamlogd after: usr.sbin/pf/pfctl usr.sbin/pf/authpf usr.sbin/pf/spamdb usr.sbin/pf/ftp-proxy usr.sbin/pf/spamd usr.sbin/pf/spamd-setup usr.sbin/pf/spamlogd
2004-11-11 14:54:51 +03:00
SUBDIR= authpf
SUBDIR+= ftp-proxy
SUBDIR+= pfctl
Enable pflogd(8).
2005-04-04 23:11:18 +04:00
SUBDIR+= pflogd
move pf reachover makefiles into usr.sbin/pf. ok'ed by itojun. before: sbin/pfctl usr.sbin/authpf usr.sbin/spamdb libexec/ftp-proxy libexec/spamd libexec/spamd-setup libexec/spamlogd after: usr.sbin/pf/pfctl usr.sbin/pf/authpf usr.sbin/pf/spamdb usr.sbin/pf/ftp-proxy usr.sbin/pf/spamd usr.sbin/pf/spamd-setup usr.sbin/pf/spamlogd
2004-11-11 14:54:51 +03:00
merge after importing pf from openbsd 3.6. (userland part) some files were imported to the different places from the previous version. v3_5: etc/pf.conf etc/pf.os etc/spamd.conf share/man/man4/pf.4 share/man/man4/pflog.4 share/man/man5/pf.conf.5 share/man/man5/pf.os.5 share/man/man5/spamd.conf.5 v3_6: dist/pf/etc/pf.conf dist/pf/etc/pf.os dist/pf/etc/spamd.conf dist/pf/share/man/man4/pf.4 dist/pf/share/man/man4/pflog.4 dist/pf/share/man/man5/pf.conf.5 dist/pf/share/man/man5/pf.os.5 dist/pf/share/man/man5/spamd.conf.5
2004-11-14 14:26:43 +03:00
SUBDIR+= man
handle configinstall target correctly.
2004-11-14 23:27:13 +03:00
Install pf(4) examples. Reviewed by yamt@. Thanks to hubertf@ for the reminder.
2005-03-15 19:05:03 +03:00
.if (${MKSHARE} != "no")
SUBDIR+= examples
.endif
handle configinstall target correctly.
2004-11-14 23:27:13 +03:00
configinstall:
${MAKEDIRTARGET} etc configinstall
pf needs to be started after the network is up, because some pf rules derive IP address(es) from the interface (e.g "... from any to fxp0"). This however, creates window for possible attacks from the network. Implement the solution proposed by YAMAMOTO Takashi: Add /etc/defaults/pf.boot.conf and load it with the /etc/rc.d/pf_boot script before starting the network. People who don't like the default rules can override it with their own /etc/pf.boot.conf. The default rules have been obtained from OpenBSD. No objections on: tech-security
2005-08-23 16:12:56 +04:00
${MAKEDIRTARGET} etc/defaults configinstall
merge after importing pf from openbsd 3.6. (userland part) some files were imported to the different places from the previous version. v3_5: etc/pf.conf etc/pf.os etc/spamd.conf share/man/man4/pf.4 share/man/man4/pflog.4 share/man/man5/pf.conf.5 share/man/man5/pf.os.5 share/man/man5/spamd.conf.5 v3_6: dist/pf/etc/pf.conf dist/pf/etc/pf.os dist/pf/etc/spamd.conf dist/pf/share/man/man4/pf.4 dist/pf/share/man/man4/pflog.4 dist/pf/share/man/man5/pf.conf.5 dist/pf/share/man/man5/pf.os.5 dist/pf/share/man/man5/spamd.conf.5
2004-11-14 14:26:43 +03:00
move pf reachover makefiles into usr.sbin/pf. ok'ed by itojun. before: sbin/pfctl usr.sbin/authpf usr.sbin/spamdb libexec/ftp-proxy libexec/spamd libexec/spamd-setup libexec/spamlogd after: usr.sbin/pf/pfctl usr.sbin/pf/authpf usr.sbin/pf/spamdb usr.sbin/pf/ftp-proxy usr.sbin/pf/spamd usr.sbin/pf/spamd-setup usr.sbin/pf/spamlogd
2004-11-11 14:54:51 +03:00
.include <bsd.subdir.mk>