--- /dev/null
+Summary: Firewall log analyzer, report generator and realtime response agent
+Summary(pl): Analizator logów firewalla, generator raportów i agent natychmiastowej odpowiedzi
+Name: fwlogwatch
+Version: 0.4
+Release: 1
+License: GPL
+Group: Applications/System
+Group(de): Applikationen/System
+Group(pl): Aplikacje/System
+Source0: http://www.kyb.uni-stuttgart.de/boris/sw/%{name}-%{version}.tar.bz2
+Source1: %{name}.init
+Source2: %{name}.sysconfig
+Patch0: %{name}-DESTDIR.patch
+Patch1: %{name}-config.patch
+URL: http://cert.uni-stuttgart.de/projects/fwlogwatch/
+BuildRequires: flex
+BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
+
+%description
+fwlogwatch produces ipchains, netfilter/iptables, ipfilter, Cisco IOS
+and Cisco PIX log summary reports in text and HTML form and has a lot
+of options to find and display relevant patterns in connection
+attempts. With the data found it can also generate customizable
+incident reports from a template and send them to abuse contacts at
+offending sites or CERT coordination centers. Finally, it can also run
+as daemon and report anomalies or start countermeasures.
+
+%description -l pl
+fwlogwatch produkuje sumaryczne raporty w formacie tekstowym oraz HTML
+z informacjami dostarczanymi przez logi ipchains, netfilter/iptables,
+ipfilter, Cisco IOS oraz Cisco PIX. fwlogwatch ma wiele opcji
+pozwalaj±cych znajdowaæ okre¶lone wzorce w próbach po³±czeñ. Na
+podstawie tych danych mo¿e generowaæ raporty o incydentach i wysy³aæ
+je na adres abuse lub do centrów koordynacji CERT. Mo¿e on równie¿
+pracowaæ jako daemon i informowaæ o anomaliach oraz podejmowaæ kroki
+zapobiegawcze.
+
+%prep
+%setup -q
+%patch0 -p1
+%patch1 -p1
+
+%build
+%{__make} \
+ CC="%{__cc}" OPT="%{rpmcflags}" LDFLAGS="%{rpmldflags}" \
+ SYSCONFDIR="%{_sysconfdir}/%{name}"
+
+%install
+rm -rf $RPM_BUILD_ROOT
+install -d $RPM_BUILD_ROOT%{_sysconfdir}/{%{name},rc.d/init.d,sysconfig}
+install -d $RPM_BUILD_ROOT{%{_sbindir},%{_mandir}/man8}
+
+%{__make} install install-config \
+ DESTDIR=$RPM_BUILD_ROOT \
+ SYSCONFDIR="%{_sysconfdir}/%{name}" \
+ PREFIX="%{_prefix}" \
+ MANDIR="%{_mandir}"
+
+install %{SOURCE1} $RPM_BUILD_ROOT%{_sysconfdir}/rc.d/init.d/%{name}
+install %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/sysconfig/%{name}
+
+gzip -9nf contrib/fw* AUTHORS CREDITS ChangeLog README
+
+%post
+/sbin/chkconfig --add %{name}
+if [ -f %{_var}/lock/subsys/%{name} ]; then
+ /etc/rc.d/init.d/%{name} restart 1>&2
+else
+ echo "Run \"/etc/rc.d/init.d/%{name} start\" to start %{name} daemon."
+fi
+
+%preun
+if [ "$1" = "0" -a -f %{_var}/lock/subsys/%{name} ]; then
+ /etc/rc.d/init.d/%{name} stop 1>&2
+fi
+/sbin/chkconfig --del %{name}
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+%files
+%defattr(644,root,root,755)
+%doc *.gz */*.gz
+%attr(700,root,root) %dir %{_sysconfdir}/%{name}
+%attr(600,root,root) %config(noreplace) %verify(not size mtime md5) %{_sysconfdir}/%{name}/*.*
+%attr(750,root,root) %config(noreplace) %verify(not size mtime md5) %{_sysconfdir}/%{name}/fwlw_*
+%attr(755,root,root) %{_sbindir}/*
+%attr(754,root,root) %{_sysconfdir}/rc.d/init.d/%{name}
+%attr(640,root,root) %config(noreplace) %verify(not size mtime md5) %{_sysconfdir}/sysconfig/%{name}
+%{_mandir}/man?/*