Import of abacus sentry v 0.61

Sentry is part of the Abacus Project suite of security tools.
It is a program designed to detect and respond to port scans
against a target host in real-time. There are other port scan
detectors that peform similar detection of scans,but the Sentry
has some unique features that may make it worth looking into.

PR:		ports/5475
Submitted by:	chris@still.whet.org

8 files changed, 99 insertions, 0 deletions

diff --git a/security/portsentry/Makefile b/security/portsentry/Makefile
new file mode 100644
index 000000000000..5edf8160be52
--- /dev/null
+++ b/security/portsentry/Makefile
@@ -0,0 +1,18 @@
+# Ports collection makefile for:	sentry
+# Version required:	0.61
+# Date created:		3 January 1998
+# Whom:			chris@still.whet.org
+#
+# $Id$
+#
+
+DISTNAME=	sentry-0.61
+CATEGORIES=	security
+MASTER_SITES=	http://www.psionic.com/tools/sentry/
+
+MAINTAINER=	chris@still.whet.org
+
+WRKSRC=		${WRKDIR}/sentry_beta
+ALL_TARGET=	bsd
+
+.include <bsd.port.mk>
diff --git a/security/portsentry/distinfo b/security/portsentry/distinfo
new file mode 100644
index 000000000000..e4f7b66a39e2
--- /dev/null
+++ b/security/portsentry/distinfo
@@ -0,0 +1 @@
+MD5 (sentry-0.61.tar.gz) = 57bf7e0caf99188018ef1ab6131faf4b
diff --git a/security/portsentry/files/patch-aa b/security/portsentry/files/patch-aa
new file mode 100644
index 000000000000..c60544fbe462
--- /dev/null
+++ b/security/portsentry/files/patch-aa
@@ -0,0 +1,43 @@
+--- Makefile.orig	Thu May 28 09:24:11 1998
++++ Makefile	Sat Dec 19 11:10:10 1998
+@@ -25,13 +25,13 @@
+ #CC = gcc 
+ 
+ # Normal systems flags
+-CFLAGS = -O  
++#CFLAGS = -O  
+ 
+ # Debug mode for sentry
+ #CFLAGS = -Wall -g -DDEBUG
+ 
+ 
+-INSTALLDIR = /usr/local/abacus
++INSTALLDIR = ${PREFIX}
+ 
+ 
+ all:
+@@ -54,18 +54,13 @@
+ 		/bin/rmdir $(INSTALLDIR)
+ 
+ install:	
+-		@echo "Creating abacus directory $(INSTALLDIR)"
+-		@if [ ! -d $(INSTALLDIR) ]; then /bin/mkdir $(INSTALLDIR); fi
+-		@echo "Setting directory permissions"
+-		chmod 700 $(INSTALLDIR)
+-		@echo "Copying files"
+-		cp ./sentry.conf $(INSTALLDIR)
+-		cp ./sentry.ignore $(INSTALLDIR)
+-		cp ./sentry $(INSTALLDIR)
++		cp ./sentry.conf $(INSTALLDIR)/etc
++		cp ./sentry.ignore $(INSTALLDIR)/etc
++		cp ./sentry $(INSTALLDIR)/bin
+ 		@echo "Setting permissions"
+-		chmod 600 $(INSTALLDIR)/sentry.ignore
+-		chmod 600 $(INSTALLDIR)/sentry.conf
+-		chmod 700 $(INSTALLDIR)/sentry
++		chmod 600 $(INSTALLDIR)/etc/sentry.ignore
++		chmod 600 $(INSTALLDIR)/etc/sentry.conf
++		chmod 700 $(INSTALLDIR)/bin/sentry
+ 		@echo ""
+ 		@echo ""
+ 		@echo "Edit $(INSTALLDIR)/sentry.conf and change"
diff --git a/security/portsentry/files/patch-ab b/security/portsentry/files/patch-ab
new file mode 100644
index 000000000000..08d52d3388a4
--- /dev/null
+++ b/security/portsentry/files/patch-ab
@@ -0,0 +1,17 @@
+--- sentry.conf.orig	Sat Dec 19 11:06:01 1998
++++ sentry.conf	Sat Dec 19 11:06:22 1998
+@@ -80,11 +80,11 @@
+ ######################
+ #
+ # Hosts to ignore
+-IGNORE_FILE="/usr/local/abacus/sentry.ignore"
++IGNORE_FILE="/usr/local/etc/sentry.ignore"
+ # Hosts that have been denied (running history)
+-HISTORY_FILE="/usr/local/abacus/sentry.history"
++HISTORY_FILE="/usr/local/etc/sentry.history"
+ # Hosts that have been denied this session only (temporary until next restart)
+-BLOCKED_FILE="/usr/local/abacus/sentry.blocked"
++BLOCKED_FILE="/usr/local/etc/sentry.blocked"
+ 
+ ###################
+ # Response Options#
diff --git a/security/portsentry/files/patch-ac b/security/portsentry/files/patch-ac
new file mode 100644
index 000000000000..58d6dcaa4aa5
--- /dev/null
+++ b/security/portsentry/files/patch-ac
@@ -0,0 +1,11 @@
+--- sentry_config.h.orig	Sat Dec 19 11:05:40 1998
++++ sentry_config.h	Sat Dec 19 11:05:52 1998
+@@ -32,7 +32,7 @@
+ 
+ /* These are probably ok. Be sure you change the Makefile if you */
+ /* change the path */
+-#define CONFIG_FILE "/usr/local/abacus/sentry.conf"
++#define CONFIG_FILE "/usr/local/etc/sentry.conf"
+ 
+ /* The location of Wietse Venema's TCP Wrapper hosts.deny file */
+ #define WRAPPER_HOSTS_DENY "/etc/hosts.deny"
diff --git a/security/portsentry/pkg-comment b/security/portsentry/pkg-comment
new file mode 100644
index 000000000000..12d6172f3fd2
--- /dev/null
+++ b/security/portsentry/pkg-comment
@@ -0,0 +1 @@
+Port scan detection and active defense
diff --git a/security/portsentry/pkg-descr b/security/portsentry/pkg-descr
new file mode 100644
index 000000000000..f393fe6a7241
--- /dev/null
+++ b/security/portsentry/pkg-descr
@@ -0,0 +1,5 @@
+Sentry is part of the Abacus Project suite of security tools.
+It is a program designed to detect and respond to port scans
+against a target host in real-time. There are other port scan
+detectors that peform similar detection of scans,but the Sentry
+has some unique features that may make it worth looking into.
diff --git a/security/portsentry/pkg-plist b/security/portsentry/pkg-plist
new file mode 100644
index 000000000000..5edb3a2385e9
--- /dev/null
+++ b/security/portsentry/pkg-plist
@@ -0,0 +1,3 @@
+bin/sentry
+etc/sentry.conf
+etc/sentry.ignore