projects / people / pmueller / ipfire-2.x.git / blame
| Commit | Line | Data |
|---|---|---|
| cd1a2927 | 1 | ############################################################################### |
| cd1a2927 | 2 | # # |
| 70df8302 | 3 | # IPFire.org - A linux based firewall # |
| ee13f80e | 4 | # Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> # |
| 70df8302 MT |
5 | # # |
| 6 | # This program is free software: you can redistribute it and/or modify # | |
| cd1a2927 | 7 | # it under the terms of the GNU General Public License as published by # |
| 70df8302 | 8 | # the Free Software Foundation, either version 3 of the License, or # |
| cd1a2927 MT |
9 | # (at your option) any later version. # |
| 10 | # # | |
| 70df8302 | 11 | # This program is distributed in the hope that it will be useful, # |
| cd1a2927 MT |
12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of # |
| 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # | |
| 14 | # GNU General Public License for more details. # | |
| 15 | # # | |
| 16 | # You should have received a copy of the GNU General Public License # | |
| 70df8302 | 17 | # along with this program. If not, see <http://www.gnu.org/licenses/>. # |
| cd1a2927 | 18 | # # |
| cd1a2927 MT |
19 | ############################################################################### |
| 20 | ||
| 21 | ############################################################################### | |
| 22 | # Definitions | |
| 23 | ############################################################################### | |
| 24 | ||
| 25 | include Config | |
| 26 | ||
| 15679d9f MT |
27 | VER = ipfire |
| 28 | ||
| cd1a2927 MT |
29 | THISAPP = configroot |
| 30 | DIR_APP = $(DIR_SRC)/$(THISAPP) | |
| 31 | TARGET = $(DIR_INFO)/$(THISAPP) | |
| 32 | ||
| 33 | ############################################################################### | |
| 34 | # Top-level Rules | |
| 35 | ############################################################################### | |
| 36 | ||
| 37 | install : $(TARGET) | |
| 38 | ||
| 39 | check : | |
| 40 | ||
| 41 | download : | |
| 42 | ||
| 9a7e4d85 | 43 | b2 : |
| cd1a2927 MT |
44 | |
| 45 | ############################################################################### | |
| 46 | # Installation Details | |
| 47 | ############################################################################### | |
| 48 | ||
| 49 | $(TARGET) : | |
| 50 | @$(PREBUILD) | |
| 51 | ||
| 52 | # Create all directories | |
| 5ca163cd | 53 | for i in addon-lang auth backup ca captive certs connscheduler crls ddns dhcp dhcpc dns dnsforward \ |
| a0918657 | 54 | ethernet extrahd/bin fwlogs fwhosts firewall ipblocklist key langs logging mac main \ |
| 77729e5b | 55 | menu.d modem optionsfw \ |
| 9dafa928 | 56 | ovpn patches pakfire portfw ppp private proxy/advanced/cre \ |
| 72b2109c | 57 | proxy/calamaris/bin qos/bin red remote sensors suricata time \ |
| 06f03f5b | 58 | updatexlrator/bin updatexlrator/autocheck urlfilter/autoupdate urlfilter/bin vpn \ |
| 111c99dd | 59 | wakeonlan wireless ; do \ |
| cd1a2927 MT |
60 | mkdir -p $(CONFIG_ROOT)/$$i; \ |
| 61 | done | |
| 62 | ||
| 63 | # Touch empty files | |
| 64 | for i in auth/users backup/include.user backup/exclude.user \ | |
| e6f7f8e7 | 65 | captive/settings captive/agb.txt captive/clients captive/voucher_out certs/index.txt certs/index.txt.attr ddns/config ddns/settings ddns/ipcache dhcp/settings \ |
| b48379d5 | 66 | dhcp/fixleases dhcp/advoptions dhcp/dhcpd.conf.local dns/settings dns/servers dnsforward/config ethernet/aliases ethernet/settings ethernet/known_nics ethernet/scanned_nics \ |
| 726c4b0f | 67 | ethernet/wireless extrahd/scan extrahd/devices extrahd/partitions extrahd/settings firewall/settings firewall/locationblock firewall/input firewall/outgoing \ |
| 763efaf6 | 68 | fwhosts/customnetworks fwhosts/customhosts fwhosts/customgroups fwhosts/customservicegrp fwhosts/customlocationgrp fwlogs/ipsettings fwlogs/portsettings ipblocklist/modified \ |
| a0918657 | 69 | ipblocklist/settings mac/settings main/hosts main/routing main/security main/settings optionsfw/settings \ |
| 51379603 | 70 | ovpn/ccd.conf ovpn/ccdroute ovpn/ccdroute2 pakfire/settings portfw/config ppp/settings-1 ppp/settings-2 ppp/settings-3 ppp/settings-4 \ |
| dfb1bfaf | 71 | ppp/settings-5 ppp/settings proxy/settings proxy/squid.conf proxy/advanced/settings proxy/advanced/cre/enable remote/settings qos/settings qos/classes qos/subclasses qos/level7config qos/portconfig \ |
| 06f03f5b | 72 | qos/tosconfig suricata/settings vpn/config vpn/settings vpn/ipsec.conf \ |
| 4e565351 | 73 | vpn/ipsec.secrets vpn/caconfig wakeonlan/clients.conf wireless/config wireless/settings; do \ |
| 111c99dd | 74 | touch $(CONFIG_ROOT)/$$i; \ |
| cd1a2927 MT |
75 | done |
| 76 | ||
| 77 | # Copy initial configfiles | |
| 78 | cp $(DIR_SRC)/config/cfgroot/header.pl $(CONFIG_ROOT)/ | |
| 79 | cp $(DIR_SRC)/config/cfgroot/general-functions.pl $(CONFIG_ROOT)/ | |
| 4e9a2b57 | 80 | cp $(DIR_SRC)/config/cfgroot/network-functions.pl $(CONFIG_ROOT)/ |
| 59725878 PM |
81 | cp $(DIR_SRC)/config/cfgroot/location-functions.pl $(CONFIG_ROOT)/ |
| 82 | cp $(DIR_SRC)/config/cfgroot/ipblocklist-functions.pl $(CONFIG_ROOT)/ | |
| 8dcebe53 | 83 | cp $(DIR_SRC)/config/cfgroot/ids-functions.pl $(CONFIG_ROOT)/ |
| cd1a2927 | 84 | cp $(DIR_SRC)/config/cfgroot/lang.pl $(CONFIG_ROOT)/ |
| 111c99dd | 85 | cp $(DIR_SRC)/config/cfgroot/countries.pl $(CONFIG_ROOT)/ |
| 341ff36c | 86 | cp $(DIR_SRC)/config/cfgroot/graphs.pl $(CONFIG_ROOT)/ |
| c5e3d520 | 87 | cp $(DIR_SRC)/config/cfgroot/modem-lib.pl $(CONFIG_ROOT)/ |
| 4e565351 | 88 | cp $(DIR_SRC)/config/cfgroot/advoptions-list $(CONFIG_ROOT)/dhcp/advoptions-list |
| 4e565351 | 89 | cp $(DIR_SRC)/config/cfgroot/connscheduler-lib.pl $(CONFIG_ROOT)/connscheduler/lib.pl |
| 1fde937c | 90 | cp $(DIR_SRC)/config/cfgroot/connscheduler.conf $(CONFIG_ROOT)/connscheduler |
| aa2870e6 | 91 | cp $(DIR_SRC)/config/extrahd/* $(CONFIG_ROOT)/extrahd/bin/ |
| 958d26ac | 92 | cp $(DIR_SRC)/config/cfgroot/sensors-settings $(CONFIG_ROOT)/sensors/settings |
| 111c99dd | 93 | cp $(DIR_SRC)/config/menu/* $(CONFIG_ROOT)/menu.d/ |
| cd1a2927 MT |
94 | cp $(DIR_SRC)/config/cfgroot/modem-defaults $(CONFIG_ROOT)/modem/defaults |
| 95 | cp $(DIR_SRC)/config/cfgroot/modem-settings $(CONFIG_ROOT)/modem/settings | |
| 96 | cp $(DIR_SRC)/config/cfgroot/proxy-acl $(CONFIG_ROOT)/proxy/acl-1.4 | |
| 59725878 | 97 | cp $(DIR_SRC)/config/qos/* $(CONFIG_ROOT)/qos/bin/ |
| 0009de91 | 98 | cp $(DIR_SRC)/config/cfgroot/main-settings $(CONFIG_ROOT)/main/settings |
| 4f6ef735 | 99 | cp $(DIR_SRC)/config/cfgroot/manualpages $(CONFIG_ROOT)/main/ |
| 111c99dd | 100 | cp $(DIR_SRC)/config/cfgroot/ssh-settings $(CONFIG_ROOT)/remote/settings |
| cd1a2927 | 101 | cp $(DIR_SRC)/config/cfgroot/time-settings $(CONFIG_ROOT)/time/settings |
| 59725878 | 102 | cp $(DIR_SRC)/config/cfgroot/logging-settings $(CONFIG_ROOT)/logging/settings |
| d23fc912 | 103 | cp $(DIR_SRC)/config/cfgroot/ethernet-vlans $(CONFIG_ROOT)/ethernet/vlans |
| 59725878 | 104 | cp $(DIR_SRC)/langs/list $(CONFIG_ROOT)/langs/ |
| 726c4b0f | 105 | cp $(DIR_SRC)/config/firewall/config $(CONFIG_ROOT)/firewall/config |
| 59725878 | 106 | cp $(DIR_SRC)/config/firewall/convert-xtaccess /usr/sbin/convert-xtaccess |
| 6921f0ea | 107 | cp $(DIR_SRC)/config/firewall/convert-outgoingfw /usr/sbin/convert-outgoingfw |
| 59725878 PM |
108 | cp $(DIR_SRC)/config/firewall/convert-dmz /usr/sbin/convert-dmz |
| 109 | cp $(DIR_SRC)/config/firewall/convert-portfw /usr/sbin/convert-portfw | |
| 110 | cp $(DIR_SRC)/config/firewall/firewall-policy /usr/sbin/firewall-policy | |
| 111c99dd | 111 | cp $(DIR_SRC)/config/fwhosts/icmp-types $(CONFIG_ROOT)/fwhosts/icmp-types |
| af8bc0d0 | 112 | cp $(DIR_SRC)/config/fwhosts/customservices $(CONFIG_ROOT)/fwhosts/customservices |
| a3f2459f | 113 | cp $(DIR_SRC)/config/fwhosts/customservices $(CONFIG_ROOT)/fwhosts/customservices.default |
| cd1a2927 MT |
114 | # Oneliner configfiles |
| 115 | echo "ENABLED=off" > $(CONFIG_ROOT)/vpn/settings | |
| cd1a2927 MT |
116 | echo "01" > $(CONFIG_ROOT)/certs/serial |
| 117 | echo "nameserver 1.2.3.4" > $(CONFIG_ROOT)/ppp/fake-resolv.conf | |
| 02001624 | 118 | echo "DROPNEWNOTSYN=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 5595bc03 | 119 | echo "DROPINPUT=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| c0ec1996 | 120 | echo "DROPFORWARD=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 9dafa928 | 121 | echo "FWPOLICY=DROP" >> $(CONFIG_ROOT)/optionsfw/settings |
| 4e62b47f | 122 | echo "FWPOLICY1=DROP" >> $(CONFIG_ROOT)/optionsfw/settings |
| 36e9534f | 123 | echo "FWPOLICY2=DROP" >> $(CONFIG_ROOT)/optionsfw/settings |
| 5595bc03 | 124 | echo "DROPPORTSCAN=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 4e62b47f | 125 | echo "DROPOUTGOING=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 409cd018 MT |
126 | echo "DROPSAMBA=off" >> $(CONFIG_ROOT)/optionsfw/settings |
| 127 | echo "DROPPROXY=off" >> $(CONFIG_ROOT)/optionsfw/settings | |
| 5aa8edf6 | 128 | echo "SHOWREMARK=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 4f3bd0ca AM |
129 | echo "SHOWCOLORS=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 130 | echo "SHOWTABLES=off" >> $(CONFIG_ROOT)/optionsfw/settings | |
| ec329c06 | 131 | echo "SHOWDROPDOWN=off" >> $(CONFIG_ROOT)/optionsfw/settings |
| a1fdbdac AF |
132 | echo "DROPWIRELESSINPUT=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 133 | echo "DROPWIRELESSFORWARD=on" >> $(CONFIG_ROOT)/optionsfw/settings | |
| 02001624 | 134 | echo "DROPSPOOFEDMARTIAN=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 55f6e62c | 135 | echo "DROPHOSTILE=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| ee13f80e AB |
136 | echo "LOGDROPHOSTILEIN=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 137 | echo "LOGDROPHOSTILEOUT=on" >> $(CONFIG_ROOT)/optionsfw/settings | |
| 8269c831 | 138 | echo "LOGDROPCTINVALID=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| 6d8eb5de AM |
139 | echo "POLICY=MODE2" >> $(CONFIG_ROOT)/firewall/settings |
| 140 | echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings | |
| c919b15c | 141 | echo "USE_ISP_NAMESERVERS=on" >> $(CONFIG_ROOT)/dns/settings |
| 040160c7 | 142 | echo "TREE=$(PAKFIRE_TREE)" >> $(CONFIG_ROOT)/pakfire/settings |
| 73372ed4 | 143 | |
| 85a62b05 SS |
144 | # Install snort to suricata converter. |
| 145 | cp $(DIR_SRC)/config/suricata/convert-snort /usr/sbin/convert-snort | |
| a5ba473c | 146 | cp $(DIR_SRC)/config/suricata/convert-ids-modifysids-file /usr/sbin/convert-ids-modifysids-file |
| 77b373d6 | 147 | cp $(DIR_SRC)/config/suricata/convert-ids-multiple-providers /usr/sbin/convert-ids-multiple-providers |
| 85a62b05 | 148 | |
| 99e698d0 AM |
149 | # set converters executable |
| 150 | chmod 755 /usr/sbin/convert-* | |
| 73372ed4 | 151 | |
| 36f253d2 MT |
152 | # Make extrahd.pl executable |
| 153 | chmod 755 /var/ipfire/extrahd/bin/extrahd.pl | |
| 154 | ||
| cd1a2927 MT |
155 | # Modify variables in header.pl |
| 156 | sed -i -e "s+CONFIG_ROOT+$(CONFIG_ROOT)+g" \ | |
| 157 | -e "s+VERSION+$(VERSION)+g" \ | |
| 158 | $(CONFIG_ROOT)/header.pl | |
| 159 | ||
| 160 | # Modify variables in general-functions.pl | |
| 161 | sed -i -e "s+CONFIG_ROOT+$(CONFIG_ROOT)+g" \ | |
| 162 | -e "s+VERSION+$(VERSION)+g" \ | |
| 163 | $(CONFIG_ROOT)/general-functions.pl | |
| 164 | ||
| 165 | # Modify CONFIG_ROOT in lang.pl | |
| 166 | sed -i -e "s+CONFIG_ROOT+$(CONFIG_ROOT)+g" \ | |
| 167 | $(CONFIG_ROOT)/lang.pl | |
| 168 | ||
| 169 | # Language files | |
| 462515e4 | 170 | cp $(DIR_SRC)/langs/*/cgi-bin/*.pl $(CONFIG_ROOT)/langs/ |
| 231499fc | 171 | |
| cd1a2927 | 172 | # Configroot permissions |
| 2689789e PM |
173 | chown -Rv nobody:nobody $(CONFIG_ROOT) |
| 174 | chown root:root $(CONFIG_ROOT) | |
| c8274d4c | 175 | for i in backup/exclude.user backup/include.user connscheduler/lib.pl *.pl addon-lang/ langs/ menu.d/; do \ |
| 2689789e | 176 | chown -Rv root:root $(CONFIG_ROOT)/$$i; \ |
| cd1a2927 | 177 | done |
| 7b906cb2 | 178 | chown -Rv root:root $(CONFIG_ROOT)/*/bin |
| cd1a2927 MT |
179 | chown root:nobody $(CONFIG_ROOT)/dhcpc |
| 180 | ||
| 181 | @$(POSTBUILD) |