1 |
Summary: IPSEC support for SME Server |
2 |
%define name smeserver-ipsec |
3 |
Name: %{name} |
4 |
%define version 0.0.2 |
5 |
%define release 01 |
6 |
Version: %{version} |
7 |
Release: %{release} |
8 |
Copyright: Freely distributable |
9 |
Group: Networking/Daemons |
10 |
Source: %{name}-%{version}.tar.gz |
11 |
BuildRoot: /var/tmp/e-smith-buildroot |
12 |
BuildArchitectures: noarch |
13 |
Requires: e-smith-release >= 7 |
14 |
Requires: ipsec-tools |
15 |
AutoReqProv: no |
16 |
Obsoletes: dmc-mitel-freeswan |
17 |
Obsoletes: devinfo-freeswan |
18 |
|
19 |
%changelog |
20 |
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-01 |
21 |
- Removed symlinks from imported tarball |
22 |
|
23 |
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.1-01 |
24 |
- Package renamed to smeserver-ipsec (from devinfo-freeswan) |
25 |
|
26 |
* Fri May 2 2003 Peter Schubert <psc@s-a-c-o.de> |
27 |
- added template for /etc/sysctl.conf |
28 |
- to set rp_filter to 0 as default |
29 |
- added Funktion to change the PublicID of the Server |
30 |
|
31 |
* Sat Apr 12 2003 Shad L. Lords <slords@mail.com> |
32 |
- 1.99-6sme56 |
33 |
- fixed bug in ipsec-install script. Thanks to Randy Brown. |
34 |
|
35 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
36 |
- 1.99-5sme56 |
37 |
- added ipsec devices as trusted local networks |
38 |
|
39 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
40 |
- 1.99-4sme56 |
41 |
- fixed many routing problems between networks |
42 |
- added dependancy on e-smith-packetfilter |
43 |
|
44 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
45 |
- 1.99-3sme56 |
46 |
- updated info mailed to admin |
47 |
|
48 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
49 |
- 1.99-2sme56 |
50 |
- fixed bug in web panel |
51 |
|
52 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
53 |
- 1.99-1sme56 |
54 |
- bumped to v1.99 |
55 |
- many fixes in _updown script |
56 |
- cleanup of /etc/ipsec.conf script |
57 |
- cleanup web interface a little more |
58 |
- added id tag to ipsec db entry |
59 |
|
60 |
* Thu Apr 10 2003 Shad L. Lords <slords@mail.com> |
61 |
- 1.98b-3sme56 |
62 |
- fixed masq template for external interface |
63 |
|
64 |
* Thu Apr 10 2003 Shad L. Lords <slords@mail.com> |
65 |
- 1.98b-2sme56 |
66 |
- fixed remoteHost and remoteID in ipsec.conv script |
67 |
|
68 |
* Thu Apr 10 2003 Shad L. Lords <slords@mail.com> |
69 |
- 1.98b-1sme56 |
70 |
- changed configuration to no longer need nexthop information (now user %defaultroute) |
71 |
- changed connection to allow hostnames |
72 |
- changed description to be identification ID |
73 |
- changed masq external interface to be ! internal |
74 |
- added networking information to admin email |
75 |
- code cleanup |
76 |
|
77 |
* Sat Feb 14 2003 Peter Schubert <psc@s-a-c-o.de> |
78 |
- some fixes in the _updown script |
79 |
- thanks to Steve Bush (steve_at_bushinc.com> for the tests and fixes |
80 |
|
81 |
* Thu Feb 04 2003 Peter Schubert <psc@s-a-c-o.de> |
82 |
- another "cosmetic" fix in post section of the SPEC |
83 |
|
84 |
* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de> |
85 |
- remove expand-template masq in post section |
86 |
|
87 |
* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de> |
88 |
- updated for freeswan 1.98 and iptables |
89 |
- [1.98-1sme56] |
90 |
|
91 |
* Sun Oct 20 2002 Darrell May <dmay@netsourced.com> |
92 |
- panel updates |
93 |
- [1.97-3sme55] |
94 |
|
95 |
* Sun Oct 20 2002 Darrell May <dmay@netsourced.com> |
96 |
- added mail-ipsec-key action |
97 |
- added WINS server config to panel |
98 |
- [1.97-2sme55] |
99 |
|
100 |
* Sat Oct 19 2002 Darrell May <dmay@netsourced.com> |
101 |
- updated for freeswan 1.97-07 and SME 5.5 |
102 |
- [1.97-1sme55] |
103 |
|
104 |
* Sun Dec 23 2001 Darrell May <dmay@netsourced.com> |
105 |
- changed ipsec InitscriptOrder from 47 to 99 |
106 |
- 0.4-12 |
107 |
|
108 |
* Fri Nov 9 2001 Darrell May <dmay@netsourced.com> |
109 |
- release to 0.4-11 |
110 |
- added compress=yes to /etc/e-smith/templates/etc/ipsec.conf/20Default |
111 |
|
112 |
* Wed Nov 7 2001 Darrell May <dmay@netsourced.com> |
113 |
- release 0.4-10 |
114 |
- removed /usr/lib/ipsec/_updown script for ipchains |
115 |
- added /usr/lib/ipsec/_updown_1.8 and _updown_1.91 scripts for ipchains |
116 |
|
117 |
* Thu Nov 1 2001 Darrell May <dmay@netsourced.com> |
118 |
- release 0.4-9 |
119 |
- updated /usr/lib/ipsec/_updown script for ipchains |
120 |
- editing to virtualprivatedomain function |
121 |
|
122 |
* Sat Oct 20 2001 Darrell May <dmay@netsourced.com> |
123 |
- release 0.4-8 |
124 |
- updated for Mitel SME Server V5 |
125 |
- name changed to dmc-mitel-freeswan |
126 |
|
127 |
* Wed Apr 4 2001 Andy Worthington <andy@rockcity.com> |
128 |
- added another masq template fragment (45AllowIPSEC) |
129 |
- fixed @name in ipsec.conf template |
130 |
|
131 |
* Thu Mar 15 2001 Andy Worthington <andy@rockcity.com> |
132 |
- add post script back |
133 |
- fixed permissions in filelist |
134 |
- fix rsasig entries in ipsec.conf templates |
135 |
- fix spelling of vpn link in manager/cgi-bin |
136 |
- fix perms on vpn web page |
137 |
|
138 |
* Wed Mar 14 2001 Andy Worthington <andy@rockcity.com> |
139 |
- change order of actions in ipsec-install |
140 |
- fix masq template fragment |
141 |
|
142 |
* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com> |
143 |
- remove post script |
144 |
- change masq template fragment to templates-custom dir |
145 |
|
146 |
* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com> |
147 |
- small fix in conf-ipsec-secrets and 10RSAKey |
148 |
- changed order of actions in ipsec-install and added |
149 |
conf-masq and restart-masq |
150 |
|
151 |
* Thu Mar 08 2001 Andy Worthington <andy@rockcity.com> |
152 |
- added file to disable source address verification in masq |
153 |
so KLIPS will function correctly |
154 |
|
155 |
* Tue Mar 06 2001 Andy Worthington <andy@rockcity.com> |
156 |
- updated to version 0.4 |
157 |
- added to post event signal |
158 |
|
159 |
* Wed Feb 28 2001 Andy Worthington <andy@rockcity.com> |
160 |
- updated to version 0.3 |
161 |
|
162 |
* Fri Feb 23 2001 Andy Worthington <andy@rockcity.com> |
163 |
- updated to version 0.2 |
164 |
|
165 |
* Wed Feb 21 2001 Andy Worthington <andy@rockcity.com> |
166 |
- initial release |
167 |
|
168 |
%description |
169 |
Mitel SME Server enhancement to configure ipsec connections |
170 |
through the web manager |
171 |
|
172 |
%prep |
173 |
%setup |
174 |
|
175 |
%build |
176 |
perl createlinks |
177 |
|
178 |
%install |
179 |
rm -rf $RPM_BUILD_ROOT |
180 |
|
181 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
182 |
rm -f e-smith-%{version}-filelist |
183 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist |
184 |
%files -f %{name}-%{version}-filelist |
185 |
|
186 |
%defattr(-,root,root) |
187 |
|
188 |
%clean |
189 |
rm -rf $RPM_BUILD_ROOT |
190 |
|
191 |
%pre |
192 |
|
193 |
%preun |
194 |
|
195 |
%post |
196 |
if [ -f /etc/ipsec.conf ] |
197 |
then |
198 |
cp -f --backup=t /etc/ipsec.conf /etc/ipsec.conf.prerpm > /dev/null 2> /dev/null |
199 |
fi |
200 |
if [ -f /etc/ipsec.secrets ] |
201 |
then |
202 |
cp -f --backup=t /etc/ipsec.secrets /etc/ipsec.secrets.prerpm > /dev/null 2> /dev/null |
203 |
fi |
204 |
if [ -f /usr/local/lib/ipsec/_updown ] |
205 |
then |
206 |
cp -f --backup=t /usr/local/lib/ipsec/_updown /usr/local/lib/ipsec/_updown.prerpm > /dev/null 2> /dev/null |
207 |
fi |
208 |
/bin/cp /usr/local/lib/ipsec/_updown_1.99 /usr/local/lib/ipsec/_updown |
209 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
210 |
/sbin/e-smith/expand-template /etc/sysctl.conf |
211 |
|
212 |
%postun |