| | 1 | ############################################################################### |
| | 2 | # # |
| | 3 | # IPFire.org - A linux based firewall # |
| | 4 | # Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> # |
| | 5 | # # |
| | 6 | # This program is free software: you can redistribute it and/or modify # |
| | 7 | # it under the terms of the GNU General Public License as published by # |
| | 8 | # the Free Software Foundation, either version 3 of the License, or # |
| | 9 | # (at your option) any later version. # |
| | 10 | # # |
| | 11 | # This program is distributed in the hope that it will be useful, # |
| | 12 | # but WITHOUT ANY WARRANTY; without even the implied warranty of # |
| | 13 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # |
| | 14 | # GNU General Public License for more details. # |
| | 15 | # # |
| | 16 | # You should have received a copy of the GNU General Public License # |
| | 17 | # along with this program. If not, see <http://www.gnu.org/licenses/>. # |
| | 18 | # # |
| | 19 | ############################################################################### |
| | 20 | |
| | 21 | ############################################################################### |
| | 22 | # Definitions |
| | 23 | ############################################################################### |
| | 24 | |
| | 25 | include Config |
| | 26 | |
| | 27 | VER = ipfire |
| | 28 | |
| | 29 | THISAPP = configroot |
| | 30 | DIR_APP = $(DIR_SRC)/$(THISAPP) |
| | 31 | TARGET = $(DIR_INFO)/$(THISAPP) |
| | 32 | |
| | 33 | ############################################################################### |
| | 34 | # Top-level Rules |
| | 35 | ############################################################################### |
| | 36 | |
| | 37 | install : $(TARGET) |
| | 38 | |
| | 39 | check : |
| | 40 | |
| | 41 | download : |
| | 42 | |
| | 43 | b2 : |
| | 44 | |
| | 45 | ############################################################################### |
| | 46 | # Installation Details |
| | 47 | ############################################################################### |
| | 48 | |
| | 49 | $(TARGET) : |
| | 50 | @$(PREBUILD) |
| | 51 | |
| | 52 | # Create all directories |
| | 53 | for i in addon-lang auth backup ca captive certs connscheduler crls ddns dhcp dhcpc dns dnsforward \ |
| | 54 | ethernet extrahd/bin fwlogs fwhosts firewall ipblocklist key langs logging mac main \ |
| | 55 | menu.d modem optionsfw \ |
| | 56 | ovpn patches pakfire portfw ppp private proxy/advanced/cre \ |
| | 57 | proxy/calamaris/bin qos/bin red remote sensors suricata time \ |
| | 58 | updatexlrator/bin updatexlrator/autocheck urlfilter/autoupdate urlfilter/bin vpn \ |
| | 59 | wakeonlan wireless ; do \ |
| | 60 | mkdir -p $(CONFIG_ROOT)/$$i; \ |
| | 61 | done |
| | 62 | |
| | 63 | # Touch empty files |
| | 64 | for i in auth/users backup/include.user backup/exclude.user \ |
| | 65 | captive/settings captive/agb.txt captive/clients captive/voucher_out certs/index.txt certs/index.txt.attr ddns/config ddns/settings ddns/ipcache dhcp/settings \ |
| | 66 | dhcp/fixleases dhcp/advoptions dhcp/dhcpd.conf.local dns/settings dns/servers dnsforward/config ethernet/aliases ethernet/settings ethernet/known_nics ethernet/scanned_nics \ |
| | 67 | ethernet/wireless extrahd/scan extrahd/devices extrahd/partitions extrahd/settings firewall/settings firewall/locationblock firewall/input firewall/outgoing \ |
| | 68 | fwhosts/customnetworks fwhosts/customhosts fwhosts/customgroups fwhosts/customservicegrp fwhosts/customlocationgrp fwlogs/ipsettings fwlogs/portsettings ipblocklist/modified \ |
| | 69 | ipblocklist/settings mac/settings main/hosts main/routing main/security main/settings optionsfw/settings \ |
| | 70 | ovpn/ccd.conf ovpn/ccdroute ovpn/ccdroute2 pakfire/settings portfw/config ppp/settings-1 ppp/settings-2 ppp/settings-3 ppp/settings-4 \ |
| | 71 | ppp/settings-5 ppp/settings proxy/settings proxy/squid.conf proxy/advanced/settings proxy/advanced/cre/enable remote/settings qos/settings qos/classes qos/subclasses qos/level7config qos/portconfig \ |
| | 72 | qos/tosconfig suricata/settings vpn/config vpn/settings vpn/ipsec.conf \ |
| | 73 | vpn/ipsec.secrets vpn/caconfig wakeonlan/clients.conf wireless/config wireless/settings; do \ |
| | 74 | touch $(CONFIG_ROOT)/$$i; \ |
| | 75 | done |
| | 76 | |
| | 77 | # Copy initial configfiles |
| | 78 | cp $(DIR_SRC)/config/cfgroot/header.pl $(CONFIG_ROOT)/ |
| | 79 | cp $(DIR_SRC)/config/cfgroot/general-functions.pl $(CONFIG_ROOT)/ |
| | 80 | cp $(DIR_SRC)/config/cfgroot/network-functions.pl $(CONFIG_ROOT)/ |
| | 81 | cp $(DIR_SRC)/config/cfgroot/location-functions.pl $(CONFIG_ROOT)/ |
| | 82 | cp $(DIR_SRC)/config/cfgroot/ipblocklist-functions.pl $(CONFIG_ROOT)/ |
| | 83 | cp $(DIR_SRC)/config/cfgroot/ids-functions.pl $(CONFIG_ROOT)/ |
| | 84 | cp $(DIR_SRC)/config/cfgroot/lang.pl $(CONFIG_ROOT)/ |
| | 85 | cp $(DIR_SRC)/config/cfgroot/countries.pl $(CONFIG_ROOT)/ |
| | 86 | cp $(DIR_SRC)/config/cfgroot/graphs.pl $(CONFIG_ROOT)/ |
| | 87 | cp $(DIR_SRC)/config/cfgroot/modem-lib.pl $(CONFIG_ROOT)/ |
| | 88 | cp $(DIR_SRC)/config/cfgroot/advoptions-list $(CONFIG_ROOT)/dhcp/advoptions-list |
| | 89 | cp $(DIR_SRC)/config/cfgroot/connscheduler-lib.pl $(CONFIG_ROOT)/connscheduler/lib.pl |
| | 90 | cp $(DIR_SRC)/config/cfgroot/connscheduler.conf $(CONFIG_ROOT)/connscheduler |
| | 91 | cp $(DIR_SRC)/config/extrahd/* $(CONFIG_ROOT)/extrahd/bin/ |
| | 92 | cp $(DIR_SRC)/config/cfgroot/sensors-settings $(CONFIG_ROOT)/sensors/settings |
| | 93 | cp $(DIR_SRC)/config/menu/* $(CONFIG_ROOT)/menu.d/ |
| | 94 | cp $(DIR_SRC)/config/cfgroot/modem-defaults $(CONFIG_ROOT)/modem/defaults |
| | 95 | cp $(DIR_SRC)/config/cfgroot/modem-settings $(CONFIG_ROOT)/modem/settings |
| | 96 | cp $(DIR_SRC)/config/cfgroot/proxy-acl $(CONFIG_ROOT)/proxy/acl-1.4 |
| | 97 | cp $(DIR_SRC)/config/qos/* $(CONFIG_ROOT)/qos/bin/ |
| | 98 | cp $(DIR_SRC)/config/cfgroot/main-settings $(CONFIG_ROOT)/main/settings |
| | 99 | cp $(DIR_SRC)/config/cfgroot/manualpages $(CONFIG_ROOT)/main/ |
| | 100 | cp $(DIR_SRC)/config/cfgroot/ssh-settings $(CONFIG_ROOT)/remote/settings |
| | 101 | cp $(DIR_SRC)/config/cfgroot/time-settings $(CONFIG_ROOT)/time/settings |
| | 102 | cp $(DIR_SRC)/config/cfgroot/logging-settings $(CONFIG_ROOT)/logging/settings |
| | 103 | cp $(DIR_SRC)/config/cfgroot/ethernet-vlans $(CONFIG_ROOT)/ethernet/vlans |
| | 104 | cp $(DIR_SRC)/langs/list $(CONFIG_ROOT)/langs/ |
| | 105 | cp $(DIR_SRC)/config/firewall/config $(CONFIG_ROOT)/firewall/config |
| | 106 | cp $(DIR_SRC)/config/firewall/convert-xtaccess /usr/sbin/convert-xtaccess |
| | 107 | cp $(DIR_SRC)/config/firewall/convert-outgoingfw /usr/sbin/convert-outgoingfw |
| | 108 | cp $(DIR_SRC)/config/firewall/convert-dmz /usr/sbin/convert-dmz |
| | 109 | cp $(DIR_SRC)/config/firewall/convert-portfw /usr/sbin/convert-portfw |
| | 110 | cp $(DIR_SRC)/config/firewall/firewall-policy /usr/sbin/firewall-policy |
| | 111 | cp $(DIR_SRC)/config/fwhosts/icmp-types $(CONFIG_ROOT)/fwhosts/icmp-types |
| | 112 | cp $(DIR_SRC)/config/fwhosts/customservices $(CONFIG_ROOT)/fwhosts/customservices |
| | 113 | cp $(DIR_SRC)/config/fwhosts/customservices $(CONFIG_ROOT)/fwhosts/customservices.default |
| | 114 | # Oneliner configfiles |
| | 115 | echo "ENABLED=off" > $(CONFIG_ROOT)/vpn/settings |
| | 116 | echo "01" > $(CONFIG_ROOT)/certs/serial |
| | 117 | echo "nameserver 1.2.3.4" > $(CONFIG_ROOT)/ppp/fake-resolv.conf |
| | 118 | echo "DROPNEWNOTSYN=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 119 | echo "DROPINPUT=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 120 | echo "DROPFORWARD=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 121 | echo "FWPOLICY=DROP" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 122 | echo "FWPOLICY1=DROP" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 123 | echo "FWPOLICY2=DROP" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 124 | echo "DROPPORTSCAN=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 125 | echo "DROPOUTGOING=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 126 | echo "DROPSAMBA=off" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 127 | echo "DROPPROXY=off" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 128 | echo "SHOWREMARK=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 129 | echo "SHOWCOLORS=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 130 | echo "SHOWTABLES=off" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 131 | echo "SHOWDROPDOWN=off" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 132 | echo "DROPWIRELESSINPUT=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 133 | echo "DROPWIRELESSFORWARD=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 134 | echo "DROPSPOOFEDMARTIAN=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 135 | echo "DROPHOSTILE=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 136 | echo "LOGDROPHOSTILEIN=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 137 | echo "LOGDROPHOSTILEOUT=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 138 | echo "LOGDROPCTINVALID=on" >> $(CONFIG_ROOT)/optionsfw/settings |
| | 139 | echo "POLICY=MODE2" >> $(CONFIG_ROOT)/firewall/settings |
| | 140 | echo "POLICY1=MODE2" >> $(CONFIG_ROOT)/firewall/settings |
| | 141 | echo "USE_ISP_NAMESERVERS=on" >> $(CONFIG_ROOT)/dns/settings |
| | 142 | echo "TREE=$(PAKFIRE_TREE)" >> $(CONFIG_ROOT)/pakfire/settings |
| | 143 | |
| | 144 | # Install snort to suricata converter. |
| | 145 | cp $(DIR_SRC)/config/suricata/convert-snort /usr/sbin/convert-snort |
| | 146 | cp $(DIR_SRC)/config/suricata/convert-ids-modifysids-file /usr/sbin/convert-ids-modifysids-file |
| | 147 | cp $(DIR_SRC)/config/suricata/convert-ids-multiple-providers /usr/sbin/convert-ids-multiple-providers |
| | 148 | |
| | 149 | # set converters executable |
| | 150 | chmod 755 /usr/sbin/convert-* |
| | 151 | |
| | 152 | # Make extrahd.pl executable |
| | 153 | chmod 755 /var/ipfire/extrahd/bin/extrahd.pl |
| | 154 | |
| | 155 | # Modify variables in header.pl |
| | 156 | sed -i -e "s+CONFIG_ROOT+$(CONFIG_ROOT)+g" \ |
| | 157 | -e "s+VERSION+$(VERSION)+g" \ |
| | 158 | $(CONFIG_ROOT)/header.pl |
| | 159 | |
| | 160 | # Modify variables in general-functions.pl |
| | 161 | sed -i -e "s+CONFIG_ROOT+$(CONFIG_ROOT)+g" \ |
| | 162 | -e "s+VERSION+$(VERSION)+g" \ |
| | 163 | $(CONFIG_ROOT)/general-functions.pl |
| | 164 | |
| | 165 | # Modify CONFIG_ROOT in lang.pl |
| | 166 | sed -i -e "s+CONFIG_ROOT+$(CONFIG_ROOT)+g" \ |
| | 167 | $(CONFIG_ROOT)/lang.pl |
| | 168 | |
| | 169 | # Language files |
| | 170 | cp $(DIR_SRC)/langs/*/cgi-bin/*.pl $(CONFIG_ROOT)/langs/ |
| | 171 | |
| | 172 | # Configroot permissions |
| | 173 | chown -Rv nobody:nobody $(CONFIG_ROOT) |
| | 174 | chown root:root $(CONFIG_ROOT) |
| | 175 | for i in backup/exclude.user backup/include.user connscheduler/lib.pl *.pl addon-lang/ langs/ menu.d/; do \ |
| | 176 | chown -Rv root:root $(CONFIG_ROOT)/$$i; \ |
| | 177 | done |
| | 178 | chown -Rv root:root $(CONFIG_ROOT)/*/bin |
| | 179 | chown root:nobody $(CONFIG_ROOT)/dhcpc |
| | 180 | |
| | 181 | @$(POSTBUILD) |
projects / people / pmueller / ipfire-2.x.git / blame_incremental