smeserver-ipsec/F/smeserver-ipsec.spec

Summary: IPSEC support for SME Server
%define name smeserver-ipsec
Name: %{name}
%define version 0.0.1
%define release 01
Version: %{version}
Release: %{release}
Copyright: Freely distributable
Group: Networking/Daemons
Source: %{name}-%{version}.tar.gz
BuildRoot: /var/tmp/e-smith-buildroot
BuildArchitectures: noarch
Requires: e-smith-release >= 7
Requires: ipsec-tools
AutoReqProv: no
Obsoletes: dmc-mitel-freeswan
Obsoletes: devinfo-freeswan

%changelog
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.1-01
- Package renamed to smeserver-ipsec (from devinfo-freeswan)

* Fri May 2 2003 Peter Schubert <psc@s-a-c-o.de>
- added template for /etc/sysctl.conf
- to set rp_filter to 0 as default
- added Funktion to change the PublicID of the Server

* Sat Apr 12 2003 Shad L. Lords <slords@mail.com>
- 1.99-6sme56
- fixed bug in ipsec-install script.  Thanks to Randy Brown.

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-5sme56
- added ipsec devices as trusted local networks

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-4sme56
- fixed many routing problems between networks
- added dependancy on e-smith-packetfilter

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-3sme56
- updated info mailed to admin

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-2sme56
- fixed bug in web panel

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-1sme56
- bumped to v1.99
- many fixes in _updown script
- cleanup of /etc/ipsec.conf script
- cleanup web interface a little more
- added id tag to ipsec db entry

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-3sme56
- fixed masq template for external interface

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-2sme56
- fixed remoteHost and remoteID in ipsec.conv script

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-1sme56
- changed configuration to no longer need nexthop information (now user %defaultroute)
- changed connection to allow hostnames
- changed description to be identification ID
- changed masq external interface to be ! internal
- added networking information to admin email
- code cleanup

* Sat Feb 14 2003 Peter Schubert <psc@s-a-c-o.de>
- some fixes in the _updown script
- thanks to Steve Bush (steve_at_bushinc.com> for the tests and fixes 

* Thu Feb 04 2003 Peter Schubert <psc@s-a-c-o.de>
- another "cosmetic" fix in post section of the SPEC

* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
- remove expand-template masq in post section

* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
- updated for freeswan 1.98 and iptables
- [1.98-1sme56]

* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
- panel updates
- [1.97-3sme55]

* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
- added mail-ipsec-key action
- added WINS server config to panel
- [1.97-2sme55]

* Sat Oct 19 2002 Darrell May <dmay@netsourced.com>
- updated for freeswan 1.97-07 and SME 5.5
- [1.97-1sme55]

* Sun Dec 23 2001 Darrell May <dmay@netsourced.com>
- changed ipsec InitscriptOrder from 47 to 99
- 0.4-12

* Fri Nov 9 2001 Darrell May <dmay@netsourced.com>
- release to 0.4-11
- added compress=yes to /etc/e-smith/templates/etc/ipsec.conf/20Default

* Wed Nov 7 2001 Darrell May <dmay@netsourced.com>
- release 0.4-10
- removed /usr/lib/ipsec/_updown script for ipchains
- added /usr/lib/ipsec/_updown_1.8 and _updown_1.91 scripts for ipchains

* Thu Nov 1 2001 Darrell May <dmay@netsourced.com>
- release 0.4-9
- updated /usr/lib/ipsec/_updown script for ipchains
- editing to virtualprivatedomain function

* Sat Oct 20 2001 Darrell May <dmay@netsourced.com>
- release 0.4-8
- updated for Mitel SME Server V5
- name changed to dmc-mitel-freeswan

* Wed Apr 4 2001 Andy Worthington <andy@rockcity.com>
- added another masq template fragment (45AllowIPSEC)
- fixed @name in ipsec.conf template

* Thu Mar 15 2001 Andy Worthington <andy@rockcity.com>
- add post script back
- fixed permissions in filelist
- fix rsasig entries in ipsec.conf templates
- fix spelling of vpn link in manager/cgi-bin
- fix perms on vpn web page

* Wed Mar 14 2001 Andy Worthington <andy@rockcity.com>
- change order of actions in ipsec-install
- fix masq template fragment

* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
- remove post script
- change masq template fragment to templates-custom dir

* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
- small fix in conf-ipsec-secrets and 10RSAKey
- changed order of actions in ipsec-install and added
  conf-masq and restart-masq

* Thu Mar 08 2001 Andy Worthington <andy@rockcity.com>
- added file to disable source address verification in masq
  so KLIPS will function correctly
  
* Tue Mar 06 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.4
- added to post event signal

* Wed Feb 28 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.3

* Fri Feb 23 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.2

* Wed Feb 21 2001 Andy Worthington <andy@rockcity.com>
- initial release

%description
Mitel SME Server enhancement to configure ipsec connections
through the web manager

%prep
%setup

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT

(cd root   ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f e-smith-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
%files -f %{name}-%{version}-filelist

%defattr(-,root,root)

%clean
rm -rf $RPM_BUILD_ROOT

%pre

%preun

%post
if [ -f /etc/ipsec.conf ]
then
   cp -f --backup=t /etc/ipsec.conf /etc/ipsec.conf.prerpm > /dev/null 2> /dev/null
fi
if [ -f /etc/ipsec.secrets ]
then
   cp -f --backup=t /etc/ipsec.secrets /etc/ipsec.secrets.prerpm > /dev/null 2> /dev/null
fi
if [ -f /usr/local/lib/ipsec/_updown ]
then
   cp -f --backup=t /usr/local/lib/ipsec/_updown /usr/local/lib/ipsec/_updown.prerpm > /dev/null 2> /dev/null
fi
/bin/cp /usr/local/lib/ipsec/_updown_1.99 /usr/local/lib/ipsec/_updown
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq     
/sbin/e-smith/expand-template /etc/sysctl.conf

%postun
1	gordonr	1.1	Summary: IPSEC support for SME Server
2			%define name smeserver-ipsec
3			Name: %{name}
4			%define version 0.0.1
5			%define release 01
6			Version: %{version}
7			Release: %{release}
8			Copyright: Freely distributable
9			Group: Networking/Daemons
10			Source: %{name}-%{version}.tar.gz
11			BuildRoot: /var/tmp/e-smith-buildroot
12			BuildArchitectures: noarch
13			Requires: e-smith-release >= 7
14			Requires: ipsec-tools
15			AutoReqProv: no
16			Obsoletes: dmc-mitel-freeswan
17			Obsoletes: devinfo-freeswan
18
19			%changelog
20			* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.1-01
21			- Package renamed to smeserver-ipsec (from devinfo-freeswan)
22
23			* Fri May 2 2003 Peter Schubert <psc@s-a-c-o.de>
24			- added template for /etc/sysctl.conf
25			- to set rp_filter to 0 as default
26			- added Funktion to change the PublicID of the Server
27
28			* Sat Apr 12 2003 Shad L. Lords <slords@mail.com>
29			- 1.99-6sme56
30			- fixed bug in ipsec-install script. Thanks to Randy Brown.
31
32			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
33			- 1.99-5sme56
34			- added ipsec devices as trusted local networks
35
36			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
37			- 1.99-4sme56
38			- fixed many routing problems between networks
39			- added dependancy on e-smith-packetfilter
40
41			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
42			- 1.99-3sme56
43			- updated info mailed to admin
44
45			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
46			- 1.99-2sme56
47			- fixed bug in web panel
48
49			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
50			- 1.99-1sme56
51			- bumped to v1.99
52			- many fixes in _updown script
53			- cleanup of /etc/ipsec.conf script
54			- cleanup web interface a little more
55			- added id tag to ipsec db entry
56
57			* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
58			- 1.98b-3sme56
59			- fixed masq template for external interface
60
61			* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
62			- 1.98b-2sme56
63			- fixed remoteHost and remoteID in ipsec.conv script
64
65			* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
66			- 1.98b-1sme56
67			- changed configuration to no longer need nexthop information (now user %defaultroute)
68			- changed connection to allow hostnames
69			- changed description to be identification ID
70			- changed masq external interface to be ! internal
71			- added networking information to admin email
72			- code cleanup
73
74			* Sat Feb 14 2003 Peter Schubert <psc@s-a-c-o.de>
75			- some fixes in the _updown script
76			- thanks to Steve Bush (steve_at_bushinc.com> for the tests and fixes
77
78			* Thu Feb 04 2003 Peter Schubert <psc@s-a-c-o.de>
79			- another "cosmetic" fix in post section of the SPEC
80
81			* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
82			- remove expand-template masq in post section
83
84			* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
85			- updated for freeswan 1.98 and iptables
86			- [1.98-1sme56]
87
88			* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
89			- panel updates
90			- [1.97-3sme55]
91
92			* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
93			- added mail-ipsec-key action
94			- added WINS server config to panel
95			- [1.97-2sme55]
96
97			* Sat Oct 19 2002 Darrell May <dmay@netsourced.com>
98			- updated for freeswan 1.97-07 and SME 5.5
99			- [1.97-1sme55]
100
101			* Sun Dec 23 2001 Darrell May <dmay@netsourced.com>
102			- changed ipsec InitscriptOrder from 47 to 99
103			- 0.4-12
104
105			* Fri Nov 9 2001 Darrell May <dmay@netsourced.com>
106			- release to 0.4-11
107			- added compress=yes to /etc/e-smith/templates/etc/ipsec.conf/20Default
108
109			* Wed Nov 7 2001 Darrell May <dmay@netsourced.com>
110			- release 0.4-10
111			- removed /usr/lib/ipsec/_updown script for ipchains
112			- added /usr/lib/ipsec/_updown_1.8 and _updown_1.91 scripts for ipchains
113
114			* Thu Nov 1 2001 Darrell May <dmay@netsourced.com>
115			- release 0.4-9
116			- updated /usr/lib/ipsec/_updown script for ipchains
117			- editing to virtualprivatedomain function
118
119			* Sat Oct 20 2001 Darrell May <dmay@netsourced.com>
120			- release 0.4-8
121			- updated for Mitel SME Server V5
122			- name changed to dmc-mitel-freeswan
123
124			* Wed Apr 4 2001 Andy Worthington <andy@rockcity.com>
125			- added another masq template fragment (45AllowIPSEC)
126			- fixed @name in ipsec.conf template
127
128			* Thu Mar 15 2001 Andy Worthington <andy@rockcity.com>
129			- add post script back
130			- fixed permissions in filelist
131			- fix rsasig entries in ipsec.conf templates
132			- fix spelling of vpn link in manager/cgi-bin
133			- fix perms on vpn web page
134
135			* Wed Mar 14 2001 Andy Worthington <andy@rockcity.com>
136			- change order of actions in ipsec-install
137			- fix masq template fragment
138
139			* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
140			- remove post script
141			- change masq template fragment to templates-custom dir
142
143			* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
144			- small fix in conf-ipsec-secrets and 10RSAKey
145			- changed order of actions in ipsec-install and added
146			conf-masq and restart-masq
147
148			* Thu Mar 08 2001 Andy Worthington <andy@rockcity.com>
149			- added file to disable source address verification in masq
150			so KLIPS will function correctly
151
152			* Tue Mar 06 2001 Andy Worthington <andy@rockcity.com>
153			- updated to version 0.4
154			- added to post event signal
155
156			* Wed Feb 28 2001 Andy Worthington <andy@rockcity.com>
157			- updated to version 0.3
158
159			* Fri Feb 23 2001 Andy Worthington <andy@rockcity.com>
160			- updated to version 0.2
161
162			* Wed Feb 21 2001 Andy Worthington <andy@rockcity.com>
163			- initial release
164
165			%description
166			Mitel SME Server enhancement to configure ipsec connections
167			through the web manager
168
169			%prep
170			%setup
171
172			%build
173			perl createlinks
174
175			%install
176			rm -rf $RPM_BUILD_ROOT
177
178			(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
179			rm -f e-smith-%{version}-filelist
180			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
181			%files -f %{name}-%{version}-filelist
182
183			%defattr(-,root,root)
184
185			%clean
186			rm -rf $RPM_BUILD_ROOT
187
188			%pre
189
190			%preun
191
192			%post
193			if [ -f /etc/ipsec.conf ]
194			then
195			cp -f --backup=t /etc/ipsec.conf /etc/ipsec.conf.prerpm > /dev/null 2> /dev/null
196			fi
197			if [ -f /etc/ipsec.secrets ]
198			then
199			cp -f --backup=t /etc/ipsec.secrets /etc/ipsec.secrets.prerpm > /dev/null 2> /dev/null
200			fi
201			if [ -f /usr/local/lib/ipsec/_updown ]
202			then
203			cp -f --backup=t /usr/local/lib/ipsec/_updown /usr/local/lib/ipsec/_updown.prerpm > /dev/null 2> /dev/null
204			fi
205			/bin/cp /usr/local/lib/ipsec/_updown_1.99 /usr/local/lib/ipsec/_updown
206			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
207			/sbin/e-smith/expand-template /etc/sysctl.conf
208
209			%postun