- added support for chconfig (firewall-chconfig.patch and %post{un}

[packages/firewall-init.git] / firewall-init.spec

Summary:   Firewall SysV-init style start-up script
Name:      firewall-init
Version:   1.2
Release:   6
Copyright: BSD
Group:     Networking/Admin
Source:    ftp://ftp.redhat.com/pub/home/bandregg/%{name}-%{version}.tar.gz
Patch0:    firewall-init.patch
Patch1:    firewall-chkconfig.patch
Prereq:    /sbin/chkconfig
Requires:  ipfwadm
Buildarch: noarch
Buildroot: /tmp/%{name}-%{version}-root

%description
Firewall-init is meant to provide an easy to use interface to start and
stopping the kernel IP packet filters and accounting through ipfwadm(8).

%prep
%setup -q
%patch0 -p1
%patch1 -p1

%install
rm -rf $RPM_BUILD_ROOT
install -d $RPM_BUILD_ROOT/etc/{sysconfig/firewall-rules,rc.d/{init,rc{0,1,2,3,4,5,6}}.d}
install firewall $RPM_BUILD_ROOT/etc/sysconfig/
for i in input output forward; do
	echo '#<policy> <proto> <s_addr/s_mask> <s_port> <d_addr/d_mask> <d_port> <options>' > \
		$RPM_BUILD_ROOT/etc/sysconfig/firewall-rules/${i}
done
echo '#<direction> <proto> <s_addr/s_mask> <s_port> <d_addr/d_mask> <d_port> <options>' > \
	$RPM_BUILD_ROOT/etc/sysconfig/firewall-rules/account
install firewall.init $RPM_BUILD_ROOT/etc/rc.d/init.d/firewall

%post
/sbin/chkconfig --add firewall

%postun
if [ $1 = 0 ]; then
   /sbin/chkconfig --del firewall
fi

%clean
rm -rf $RPM_BUILD_ROOT

%files
%defattr(644, root, root, 755)
%doc README input.example
%attr(600, root, root) %verify(not size mtime md5) %config(noreplace) /etc/sysconfig/firewall
%attr(600, root, root) %verify(not size mtime md5) %config(noreplace) /etc/sysconfig/firewall-rules/*
%attr(700, root, root) %dir /etc/sysconfig/firewall-rules
%attr(700, root, root) /etc/rc.d/init.d/firewall

%changelog