--- mason-1.0.0.orig/debian/postinst +++ mason-1.0.0/debian/postinst @@ -22,9 +22,25 @@ # installation fails and the `postinst' is called with `abort-upgrade', # `abort-remove' or `abort-deconfigure'. +# We now use debconf +. /usr/share/debconf/confmodule + case "$1" in configure) - /usr/sbin/update-rc.d mason defaults 19 > /dev/null + if [ `egrep '^[:space:]*NEWRULEPOLICY' /etc/masonrc | wc -l` -eq 0 ] + then + db_get mason/newrulepolicy + echo "NEWRULEPOLICY=$RET" >> /etc/masonrc + db_get mason/defaultpolicy + echo "DEFAULTPOLICY=$RET" >> /etc/masonrc + fi + update-rc.d -f mason remove > /dev/null + update-rc.d mason start 41 S . > /dev/null + # Garbage collection: Remove library mason-decide that was moved to /var/lib/mason in version 1.0.0-10 of this package + if [ -f /usr/bin/mason-decide ]; then + rm -f /usr/bin/mason-decide; + fi; + ;; abort-upgrade|abort-remove|abort-deconfigure) --- mason-1.0.0.orig/debian/copyright +++ mason-1.0.0/debian/copyright @@ -1,9 +1,9 @@ -This package was debianized by Jeff Licquia jeff@luci.org on +This package was debianized by Jeff Licquia on Wed, 31 Mar 1999 21:49:35 -0600. It was downloaded from http://www.pobox.com/~wstearns/mason/ -Upstream Author(s): William Stearns +Upstream Author: William Stearns Copyright (C) 1998-2002 William Stearns @@ -20,4 +20,4 @@ GNU General Public License for more details. --- On Debian GNU/Linux systems, the complete text of the GNU General -Public License can be found in /usr/doc/copyright/GPL'. +Public License can be found in /usr/share/common-licenses/GPL'. --- mason-1.0.0.orig/debian/postrm +++ mason-1.0.0/debian/postrm @@ -18,8 +18,14 @@ case "$1" in purge) - /usr/sbin/update-rc.d mason remove > /dev/null + update-rc.d mason remove > /dev/null /bin/rm -rf /var/lib/mason + /bin/rm -rf /var/log/mason + /bin/rm -rf /etc/mason.d + # Garbage collection: Remove library mason-decide that was moved to /var/lib/mason in version 1.0.0-10 of this package + if [ -f /usr/bin/mason-decide ]; then + rm -f /usr/bin/mason-decide; + fi; ;; remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear) --- mason-1.0.0.orig/debian/control +++ mason-1.0.0/debian/control @@ -1,13 +1,15 @@ Source: mason Section: net Priority: extra -Maintainer: Jeff Licquia -Standards-Version: 3.0.0 +Maintainer: Thomas Scheffczyk +Uploaders: Christoph Martin +Standards-Version: 3.8.0 +Build-Depends: debhelper (>= 5), po-debconf Package: mason Architecture: all -Depends: bash -Description: Interactively creates a Linux packet filtering firewall. +Depends: bash (>= 2.04-1), debconf (>= 1.2.0) | debconf-2.0 +Description: Interactively creates a Linux packet filtering firewall Mason creates a firewall that exactly matches the types of TCP/IP traffic flowing in, out and through a Linux computer. It can be used to create a full firewall or add rules to an --- mason-1.0.0.orig/debian/rules +++ mason-1.0.0/debian/rules @@ -19,9 +19,10 @@ dh_testdir dh_testroot rm -f build-stamp install-stamp + debconf-updatepo # Add here commands to clean up after the build process. - -$(MAKE) clean + #-$(MAKE) clean dh_clean @@ -33,30 +34,32 @@ dh_installdirs # Make directories - mkdir -p `pwd`/debian/tmp/usr/bin - mkdir -p `pwd`/debian/tmp/usr/share/man/man1 - mkdir -p `pwd`/debian/tmp/var/lib/mason - mkdir -p `pwd`/debian/tmp/etc/init.d - - # Add here commands to install the package into debian/tmp. - $(MAKE) install DESTDIR=`pwd`/debian/tmp \ - DOCDIR=`pwd`/debian/tmp/usr/share/doc/mason/ \ - MANDIR=`pwd`/debian/tmp/usr/share/man/man1/ \ - SYSVDIR=`pwd`/debian/tmp/etc/init.d/ + mkdir -p `pwd`/debian/mason/usr/bin + mkdir -p `pwd`/debian/mason/usr/share/man/man1 + mkdir -p `pwd`/debian/mason/var/lib/mason + mkdir -p `pwd`/debian/mason/etc/init.d + mkdir -p `pwd`/debian/mason/etc/mason.d/restart.d + mkdir -p `pwd`/debian/mason/var/log/mason + + # Add here commands to install the package into debian/mason. + $(MAKE) install DESTDIR=`pwd`/debian/mason \ + DOCDIR=`pwd`/debian/mason/usr/share/doc/mason/ \ + MANDIR=`pwd`/debian/mason/usr/share/man/man1/ \ + SYSVDIR=`pwd`/debian/mason/etc/init.d/ + + install samlib `pwd`/debian/mason/var/lib/mason/ # Miscellaneous cleanup - mv debian/tmp/etc/init.d/firewall debian/tmp/etc/init.d/mason - rm debian/tmp/usr/share/doc/mason/COPYING - chmod +x debian/tmp/var/lib/mason/regression-test + mv debian/mason/etc/init.d/firewall debian/mason/etc/init.d/mason + rm debian/mason/usr/share/doc/mason/COPYING + chmod +x debian/mason/var/lib/mason/regression-test + mv debian/mason/var/lib/mason/baserules debian/mason/etc/mason.baserules + ln -sf /etc/mason.baserules debian/mason/var/lib/mason/baserules touch install-stamp # Build architecture-independent files here. binary-indep: build install -# We have nothing to do by default. - -# Build architecture-dependent files here. -binary-arch: build install # dh_testversion dh_testdir dh_testroot @@ -69,6 +72,7 @@ # dh_installmanpages # dh_undocumented dh_installchangelogs + dh_installdebconf dh_strip dh_compress dh_fixperms @@ -80,6 +84,10 @@ dh_md5sums dh_builddeb +# Build architecture-dependent files here. +binary-arch: build install +# We have nothing to do by default. + source diff: @echo >&2 'source and diff are obsolete - use dpkg-source -b'; false --- mason-1.0.0.orig/debian/README.Debian +++ mason-1.0.0/debian/README.Debian @@ -5,3 +5,10 @@ minor, mostly dealing with issues with the FHS and Debian policy. Jeff Licquia , Wed, 28 Oct 1999 + +Starting from upstream version 1.0.0 the debian version includes +some additional functionality like the ability to save rule counters +prior flushing chains or to restart services after changing the +iptables rulesets. + + -- Thomas Scheffczyk , Thu, 26 Jun 2008 08:24:31 +0200 --- mason-1.0.0.orig/debian/po/POTFILES.in +++ mason-1.0.0/debian/po/POTFILES.in @@ -0,0 +1 @@ +[type: gettext/rfc822deb] templates --- mason-1.0.0.orig/debian/po/da.po +++ mason-1.0.0/debian/po/da.po @@ -0,0 +1,94 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans# +# Developers do not need to manually edit POT or PO files. +# Claus Hindsgaul , 2005. +# +msgid "" +msgstr "" +"Project-Id-Version: Mason debconf\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2005-07-20 18:14+0200\n" +"Last-Translator: Claus Hindsgaul \n" +"Language-Team: Danish \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-1\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.9.1\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "Acceptr, Afvis, Ngt" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Standardhandling for nye brandmurs-regler:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Nr Mason opdager en nye type trafik og laver en regel for det, hvilken " +"handling skal reglen s resultere i?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"\"Acceptr\"-handlingen vil lade pakke passere. \"Afvis\" vil stoppe pakken " +"med et afvisningssvar, imens \"Ngt\" vil smide pakken vk uden at melde " +"tilbage." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Standardhandling for regelst:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Hvad skal vre standardhandlingen for en pakke, der ikke passer til nogle af " +"de regler, Mason har sat op?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Igen vil \"Acceptr\"-handlingen lade pakken passere, \"Afvis\" vil stoppe " +"pakken med et afvisningssvar, mens \"Ngt\" vil smide pakken ud uden at " +"melde tilbage." + +#~ msgid "Which action should Mason use by default for new firewall rules?" +#~ msgstr "" +#~ "Hvilken handling skal Mason bruge som standard for nye firewall regler?" + +#~ msgid "Which action should be Mason's default action for rulesets?" +#~ msgstr "Hvilken handling skal vre Masons standard handling for regelst?" --- mason-1.0.0.orig/debian/po/cs.po +++ mason-1.0.0/debian/po/cs.po @@ -0,0 +1,86 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: mason\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2005-03-25 18:57+0100\n" +"Last-Translator: Miroslav Kure \n" +"Language-Team: Czech \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-2\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "povolit, odmtnout, zakzat" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Vchoz akce pro nov pravidla firewallu:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Kdy Mason rozpozn nov druh provozu a vytvo pro nj pravidlo, jak se m " +"pravidlo chovat?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"Akce \"povolit\" paket propust, akce \"odmtnout\" paket zastav s odpovd " +"zamtnuto a akce \"zakzat\" paket potichu zahod." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Vchoz akce:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Kter akce se m vykonat, jestlie paket nevyhovuje dnmu z pravidel " +"nastavench v programu Mason?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Analogicky: \"povolit\" paket propust, \"odmtnout\" paket zahod s " +"odpovd zamtnuto a \"zakzat\" paket zahod, ani by o tom dal protistran " +"vdt." --- mason-1.0.0.orig/debian/po/fr.po +++ mason-1.0.0/debian/po/fr.po @@ -0,0 +1,85 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: mason\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2005-03-25 08:27+0100\n" +"Last-Translator: Steve Petruzzello \n" +"Language-Team: French \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-15\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "accepter, rejeter, refuser" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Action par dfaut pour les nouvelles rgles du pare-feu:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Veuillez choisir l'action raliser quand Mason dtecte un nouveau type de " +"trafic et cre une rgle pour celui-ci." + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"accepter laisse passer le paquet. rejeter le rejette en mettant une " +"rponse de rejet, enfin refuser le rejette silencieusement." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Action par dfaut pour les jeux de rgles:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Veuillez choisir l'action par dfaut pour un paquet qui ne correspond " +"aucune rgle tablie par Mason." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"accepter laisse passer le paquet, rejeter le rejette en mettant une " +"rponse de rejet et refuser le rejette silencieusement." --- mason-1.0.0.orig/debian/po/nb.po +++ mason-1.0.0/debian/po/nb.po @@ -0,0 +1,75 @@ +# mason +# Copyright (C) 2001 Free Software Foundation, Inc. +# Hans Fredrik Nordhaug , 2005 +msgid "" +msgstr "" +"Project-Id-Version: mason\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2005-03-29 23:08+0100\n" +"Last-Translator: Hans Fredrik Nordhaug \n" +"Language-Team: Norwegian Bokml \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-1\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "tillat, avvis, nekt" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Standard handling for nye brannmurregler:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Nr Mason opdager en ny type trafikk og lager en regel for det, hvilken " +"handling skal regelen s ta?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"tillat-handlingen vil tillate pakken. avvis vil stoppe pakken med et " +"avvisningssvar, mens nekt vil droppe pakken uten melde tilbake." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Standard handling for regelsett:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Hva skal vre standard handling, nr en pakke ikke passer til noen av " +"reglene satt opp av Mason?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Igjen, tillat-handlingen vil tillate pakken. avvis vil stoppe pakken med " +"et avvisningssvar, mens nekt vil droppe pakken uten melde tilbake." --- mason-1.0.0.orig/debian/po/pt_BR.po +++ mason-1.0.0/debian/po/pt_BR.po @@ -0,0 +1,87 @@ +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# Developers do not need to manually edit POT or PO files. +# +# +msgid "" +msgstr "" +"Project-Id-Version: mason 1.0.0\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2005-03-25 05:09-0300\n" +"Last-Translator: Felipe Augusto van de Wiel (faw) \n" +"Language-Team: Portuguese/Brazil \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=iso-8859-1\n" +"Content-Transfer-Encoding: 8bit\n" +"pt_BR\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "aceitar, rejeitar, negar" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Ao \"default\" para novas regras de firewall:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Quando Mason detectar um novo tipo de trfego e criar uma nova regra para " +"ele, qual ao a regra deve tomar?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"A ao \"aceitar (accept)\" permitir que o pacote passe. \"Rejeitar (reject)" +"\" vai parar o pacote com uma resposta de rejeio, enquanto \"negar (deny)" +"\" vai descartar o pacote silenciosamente." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Ao \"default\" para os conjuntos de regras:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Qual dever ser a ao \"default\" quando um pacote no se encaixar em " +"nenhum dos conjuntos de regras configurados no Mason?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Novamente, \"aceitar (accept)\" permite que o pacote passe, \"rejeitar " +"(reject)\" descarta o pacote com uma resposta, e \"negar (deny)\" " +"silenciosamente descarta o pacote." --- mason-1.0.0.orig/debian/po/vi.po +++ mason-1.0.0/debian/po/vi.po @@ -0,0 +1,78 @@ +# Vietnamese Translation for mason. +# Copyright © 2005 Free Software Foundation, Inc. +# Clytie Siddall , 2005. +# +msgid "" +msgstr "" +"Project-Id-Version: mason 1.0.0-2.1\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2005-06-10 13:20+0930\n" +"Last-Translator: Clytie Siddall \n" +"Language-Team: Vietnamese \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "chấp nhận, bác bỏ, từ chối" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Hành động mặc định cho các quy tắc bức tường lửa mới:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Khi trình Mason phát hiện một cách truyền mới, và tạo một quy tắc cho nó, " +"quy tắc ấy nên làm gì?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"Hành động «chấp nhận» sẽ cho phép gói tin ấy đến qua. «Bác bỏ» sẽ ngừng gói " +"tin ấy, và trả lời như thế, và «Từ chối» sẽ bỏ gói tin này, không xuất thông " +"tin nào." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Hành động mặc định cho bộ quy tắc:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Khi một gói tin không khớp với quy tắc nào do trình Mason thiết lập, Mason " +"nên làm gì?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Lần nữa, «chấp nhận» cho phép gói tin ấy đến qua, «Bác bỏ» bỏ gói tin ấy với " +"một trả lời, và «Từ chối» chỉ bỏ nó thôi." --- mason-1.0.0.orig/debian/po/sv.po +++ mason-1.0.0/debian/po/sv.po @@ -0,0 +1,87 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: mason 1.0.0-4\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2005-10-20 00:13+0100\n" +"Last-Translator: Daniel Nylander \n" +"Language-Team: Swedish \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=iso-8859-1\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: swed\n" +"X-Poedit-Country: swed\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "acceptera, frkasta, neka" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Standardtgrd fr nya brandsvggsregler:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Nr Mason detekterar en ny sorts trafik och skapar en regel fr det, vilken " +"tgrd ska regeln ta?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"\"Acceptera\" slpper igenom paketet. \"Frkasta\" kastar paketet och " +"skickar ett svar medans \"neka\" kastar paketet utan att informera ngon." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Standardtgrd fr regeluppsttning:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Vad ska vara standardtgrden nr ett paket inte matchar ngon av de regler " +"i uppsttningen av Mason?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Igen, \"acceptera\" slpper igenom paketet, \"frkasta\" kastar paketet och " +"skickar ett svar och \"neka\" kastar paketet utan att informera ngon." --- mason-1.0.0.orig/debian/po/de.po +++ mason-1.0.0/debian/po/de.po @@ -0,0 +1,78 @@ +# Translation of mason debconf templates to German +# Copyright (C) Helge Kreutzmann , 2007. +# This file is distributed under the same license as the mason package. +# +msgid "" +msgstr "" +"Project-Id-Version: mason 1.0.0-4.1\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2006-11-04 18:30+0100\n" +"PO-Revision-Date: 2007-02-18 18:22+0100\n" +"Last-Translator: Helge Kreutzmann \n" +"Language-Team: German \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-15\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "akzeptieren, ablehnen, verweigern" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Standard-Aktion fr neue Firewall-Regeln:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Wenn Mason neuartigen Verkehr erkennt und eine Regel dafr erstellt, welche " +"Aktion soll diese Regel ausfhren?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"Die Aktion akzeptieren wird das Paket durchlassen. Ablehnen wird das " +"Paket anhalten mit einer Ablehnungsantwort, whrend verweigern das Paket " +"ohne Rckmeldung verschwinden lsst." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Standard-Aktion fr Regelstze:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Was soll die Standard-Aktion sein, wenn ein Paket auf keine der von Mason " +"eingerichteten Regeln passt?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Wie oben lsst die Aktion akzeptieren das Paket durch, ablehnen lsst das " +"Paket mit einer Ablehnungsantwort verschwinden, whrend verweigern das " +"Paket ohne Rckmeldung verschwinden lsst." --- mason-1.0.0.orig/debian/po/templates.pot +++ mason-1.0.0/debian/po/templates.pot @@ -0,0 +1,70 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR , YEAR. +# +#, fuzzy +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: FULL NAME \n" +"Language-Team: LANGUAGE \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=CHARSET\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" --- mason-1.0.0.orig/debian/po/pt.po +++ mason-1.0.0/debian/po/pt.po @@ -0,0 +1,78 @@ +# Portuguese translation of mason's debconf messages. +# Copyright (C) 2007 +# This file is distributed under the same license as the mason package. +# Luísa Lourenço , YEAR. +# +msgid "" +msgstr "" +"Project-Id-Version: mason 1.0.0-6\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2007-03-20 13:45+0000\n" +"Last-Translator: Luísa Lourenço \n" +"Language-Team: Portuguese \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "aceitar, rejeitar, recusar" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Acção por omissão para as novas regras de firewall:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Quando o Mason detecta um novo tipo de tráfego e cria uma regra para esse " +"tráfego, qual a acção que a regra deve tomar?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"A acção \"aceitar\" irá permitir o pacote continuar. \"Rejeitar\" irá parar " +"o pacote com uma resposta de rejeição, enquanto que \"recusar\" irá largar o " +"pacote silenciosamente." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Acção por omissão para o conjunto de regras:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Qual deve ser a acção por omissão quando um pacote não satisfaz nenhuma das " +"regras configuradas pelo Mason?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"De novo, \"aceitar\" permite o pacote continuar, \"rejeitar\" larga o pacote " +"com uma resposta, e \"recusar\" larga o pacote silenciosamente." --- mason-1.0.0.orig/debian/po/nl.po +++ mason-1.0.0/debian/po/nl.po @@ -0,0 +1,63 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE 'S COPYRIGHT HOLDER +# This file is distributed under the same license as the package. +# FIRST AUTHOR , YEAR. +# +msgid "" +msgstr "" +"Project-Id-Version: mason\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2007-10-26 20:16+0100\n" +"Last-Translator: Bart Cornelis \n" +"Language-Team: debian-l10n-dutch \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Dutch\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 +#: ../templates:2001 +msgid "accept, reject, deny" +msgstr "aanvaarden, verwerpen, niet toelaten" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Standaardactie voor nieuwe firewall-regels:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "When Mason detects a new kind of traffic and creates a rule for it, what action should the rule take?" +msgstr "Welke actie moeten regels die door Mason voor nieuwe soorten verkeer aangemaakt worden nemen?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "The \"accept\" action will allow the packet through. \"Reject\" will stop the packet with a rejection reply, while \"deny\" will drop the packet silently." +msgstr "De 'aanvaarden'-actie laat het pakket door, 'verwerpen' houdt het pakket tegen en stuurt een overeenkomstig antwoord terug, terwijl 'niet toelaten' het pakket stilletjes weggooit." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Standaardactie voor regelsets:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "What should the default action be when a packet does not match any of the rules set up by Mason?" +msgstr "Wat dient de standaardactie te zijn wanneer een pakket niet overeenkomt met een door Mason gedefinieerde regel?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Again, \"accept\" allows the packet through, \"reject\" drops the packet with a reply, and \"deny\" silently drops the packet." +msgstr "Ook hier betekent 'aanvaarden' dat het pakket doorgelaten wordt, 'verwerpen' dat het pakket tegengehouden wordt en een overeenkomstig antwoord teruggestuurd, en 'niet toelaten' dat het pakket stilletjes weggegooid wordt." + --- mason-1.0.0.orig/debian/po/es.po +++ mason-1.0.0/debian/po/es.po @@ -0,0 +1,96 @@ +# Mason translation to Spanish +# Copyright (C) 2008 +# This file is distributed under the same license as the mason package. +# Changes: +# - Initial translation +# Maria Germana Oliveira , 2007. +# Traductores, si no conoce el formato PO, merece la pena leer la +# documentación de gettext, especialmente las secciones dedicadas a este +# formato, por ejemplo ejecutando: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Equipo de traducción al español, por favor lean antes de traducir +# los siguientes documentos: +# - El proyecto de traducción de Debian al español +# http://www.debian.org/intl/spanish/coordinacion +# especialmente las notas de traducción en +# http://www.debian.org/intl/spanish/notas +# - La guía de traducción de po's de debconf: +# /usr/share/doc/po-debconf/README-trans +# o http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# +msgid "" +msgstr "" +"Project-Id-Version: mason 1.0.0-8\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2008-02-28 18:49-0430\n" +"Last-Translator: Maria Germana Oliveira Blazetic \n" +"Language-Team: Spanish \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "aceptar, rechazar, denegar" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Acción predeterminada para las nuevas reglas del cortafuegos:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"¿Qué acción debería tomarse en el caso de que Mason detecte un nuevo tipo de " +"tráfico y cree una regla para éste?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"La acción «aceptar» dejará pasar el paquete, «rechazar» rechazará el paquete " +"con una respuesta de rechazo, mientras que «denegar» desechará el paquete " +"silenciosamente." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Acción predeterminada para el conjunto de reglas:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"¿Cuál será la acción predeterminada cuando un paquete no cumpla con ninguna " +"de las reglas definidas por Mason?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"De nuevo, «aceptar» permite pasar al paquete, «rechazar» rechaza el paquete " +"con una respuesta, y «denegar» rechaza el paquete silenciosamente." --- mason-1.0.0.orig/debian/po/fi.po +++ mason-1.0.0/debian/po/fi.po @@ -0,0 +1,59 @@ +msgid "" +msgstr "" +"Project-Id-Version: mason\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2008-03-30 11:00+0200\n" +"Last-Translator: Esko Arajärvi \n" +"Language-Team: Finnish \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Finnish\n" +"X-Poedit-Country: FINLAND\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 +#: ../templates:2001 +msgid "accept, reject, deny" +msgstr "hyväksy, hylkää, estä" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Uusien palomuurisääntöjen oletustoiminto:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "When Mason detects a new kind of traffic and creates a rule for it, what action should the rule take?" +msgstr "Määritä mitä tulisi oletuksena tehdä, kun Mason havaitsee uudenlaista liikennettä ja luo sille säännön." + +#. Type: select +#. Description +#: ../templates:1002 +msgid "The \"accept\" action will allow the packet through. \"Reject\" will stop the packet with a rejection reply, while \"deny\" will drop the packet silently." +msgstr "Toiminto ”hyväksy” päästää paketin läpi, toiminto ”hylkää” pysäyttää paketin lähettäen viestin hylkäämisestä vastauksena ja ”estä” vain pysäyttää paketin hiljaisesti." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Sääntöjoukkojen oletustoiminto:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "What should the default action be when a packet does not match any of the rules set up by Mason?" +msgstr "Määritä mitä tulisi oletuksena tehdä, kun paketti ei täsmää yhteenkään Masonin asettamaan sääntöön." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Again, \"accept\" allows the packet through, \"reject\" drops the packet with a reply, and \"deny\" silently drops the packet." +msgstr "Jälleen toiminto ”hyväksy” päästää paketin läpi, ”hylkää” pysäyttää paketin lähettäen vastauksen ja ”estä” tiputtaa paketin hiljaisesti." + --- mason-1.0.0.orig/debian/po/gl.po +++ mason-1.0.0/debian/po/gl.po @@ -0,0 +1,78 @@ +# Galician translation of mason's debconf templates +# This file is distributed under the same license as the mason package. +# Jacobo Tarrio , 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: mason\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2008-03-31 02:16+0100\n" +"Last-Translator: Jacobo Tarrio \n" +"Language-Team: Galician \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "aceptar, rexeitar, denegar" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Acción por defecto para as novas regras de devasa:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Cando Mason detecte un novo tipo de tráfico e cree unha regra para el, ¿cal " +"debe ser a acción que tome a regra?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"A acción \"aceptar\" ha permitir que o paquete atravese a devasa. \"Rexeitar" +"\" ha deter o paquete cunha resposta de paquete rexeitado, mentres que " +"\"denegar\" ha descartar o paquete en silencio." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Nome por defecto para os xogos de regras:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"¿Cal debe ser a acción por defecto cando un paquete non encaixe con ningunha " +"das regras establecidas por Mason?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"De novo, \"aceptar\" ha permitir que pase o paquete, \"rexeitar\" ha " +"descartar o paquete cunha resposta, e \"denegar\" ha descartar o paquete en " +"silencio." --- mason-1.0.0.orig/debian/po/ru.po +++ mason-1.0.0/debian/po/ru.po @@ -0,0 +1,83 @@ +# translation of ru.po to Russian +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Yuri Kozlov , 2008. +msgid "" +msgstr "" +"Project-Id-Version: mason 1.0.0-9\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2008-04-01 21:00+0400\n" +"Last-Translator: Yuri Kozlov \n" +"Language-Team: Russian \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "принимать пакеты, отклонять пакеты, отбрасывать пакеты" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Действие по умолчанию для новых правил межсетевого экрана:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Когда Mason обнаруживает новое направление трафика и создаёт правило для " +"него, какое должно быть действие для этого правила?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"Действие \"принимать\" позволяет пропустить пакеты. \"Отклонять\" " +"-- передача пакета останавливается и посылается ответ об остановке, а " +"\"отбрасывать\" -- пакет просто выбрасывается и ничего не сообщается." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Действие по умолчанию для наборов правил:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Каким должно быть действие по умолчанию, если пакет не подпадает " +"ни под одно правило, имеющееся в Mason?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Опять же, действие \"принимать\" позволяет пропустить пакеты. " +"\"Отклонять\" -- передача пакета останавливается и посылается ответ об " +"остановке, а \"отбрасывать\" -- пакет просто выбрасывается и ничего " +"не сообщается." + --- mason-1.0.0.orig/debian/po/eu.po +++ mason-1.0.0/debian/po/eu.po @@ -0,0 +1,80 @@ +# translation of mason-eu.po to Euskara +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Piarres Beobide , 2008. +msgid "" +msgstr "" +"Project-Id-Version: mason-eu\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2008-04-02 13:21+0200\n" +"Last-Translator: Piarres Beobide \n" +"Language-Team: Euskara \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 ../templates:2001 +msgid "accept, reject, deny" +msgstr "onartu, baztertu, ukatu" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Suebaki arau berrien lehenetsiriko ekintza:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"When Mason detects a new kind of traffic and creates a rule for it, what " +"action should the rule take?" +msgstr "" +"Masonek trafiko mota barri bat antzematean arau berri bat sortzen du berarentzat, " +"zein ekintza hartu behar du arau horrek?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "" +"The \"accept\" action will allow the packet through. \"Reject\" will stop " +"the packet with a rejection reply, while \"deny\" will drop the packet " +"silently." +msgstr "" +"\"Onartu\" ekintzak paketeari aurrera jarraitze utziko dio. \"Ukatu\" " +"hautuaz paketeak ukatze erantzun bat jasoko du, \"baztertu\" erabiliaz " +"berriz paketea erantzunik gabe baztertuko du." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Arau gabeko trafikoaren lehenetsiriko ekintza:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"What should the default action be when a packet does not match any of the " +"rules set up by Mason?" +msgstr "" +"Zein da pakete batek Masonek ezarritako arauetako bat ere betetzen ez duenean " +"lehenetsiriko ekintza?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "" +"Again, \"accept\" allows the packet through, \"reject\" drops the packet " +"with a reply, and \"deny\" silently drops the packet." +msgstr "" +"Berriz, \"onartu\"-k paketea pasatzen utziko du, \"ukatu\"-k paketea " +"erantzun batez ukatuko du eta \"baztertu\"-k erantzunik gabe egingo du." + --- mason-1.0.0.orig/debian/po/tr.po +++ mason-1.0.0/debian/po/tr.po @@ -0,0 +1,64 @@ +# Turkish translation of mason debconf template +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# Mert Dirik , 2008. +# +msgid "" +msgstr "" +"Project-Id-Version: mason\n" +"Report-Msgid-Bugs-To: thomas.scheffczyk@verwaltung.uni-mainz.de\n" +"POT-Creation-Date: 2007-03-14 10:38+0000\n" +"PO-Revision-Date: 2008-06-17 00:19+0200\n" +"Last-Translator: Mert Dirik \n" +"Language-Team: Debian L10n Turkish \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0;\n" +"X-Poedit-Language: Turkish\n" + +#. Type: select +#. Choices +#. Type: select +#. Choices +#: ../templates:1001 +#: ../templates:2001 +msgid "accept, reject, deny" +msgstr "kabul et, reddet, inkâr et" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "Default action for new firewall rules:" +msgstr "Yeni güvenlik duvarı kurallarının öntanımlı eylemi:" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "When Mason detects a new kind of traffic and creates a rule for it, what action should the rule take?" +msgstr "Mason öncekilerden farklı türde bir trafik tespit edip bu yeni trafik için bir kural oluşturduğunda, yeni oluşturulacak bu kuralın tanımlaması gereken eylem ne olmalıdır?" + +#. Type: select +#. Description +#: ../templates:1002 +msgid "The \"accept\" action will allow the packet through. \"Reject\" will stop the packet with a rejection reply, while \"deny\" will drop the packet silently." +msgstr "\"Kabul et\", paketin geçişine izin verir. \"Reddet\", paketin geçişini engeller ve bir ret yanıtı gönderir, \"inkâr et\" ise paketin geçişini sessiz sedasız engeller." + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Default action for rulesets:" +msgstr "Kural setlerinin öntanımlı eylemi:" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "What should the default action be when a packet does not match any of the rules set up by Mason?" +msgstr "Bir paket Mason tarafından oluşturulmuş hiç bir kuralla eşleşmiyorsa bu pakete uygulanacak öntanımlı eylem ne olmalı?" + +#. Type: select +#. Description +#: ../templates:2002 +msgid "Again, \"accept\" allows the packet through, \"reject\" drops the packet with a reply, and \"deny\" silently drops the packet." +msgstr "Tekrar, \"kabul et\" paketlerin geçişine izin verir, \"reddet\" paketleri geçirmez ve yanıt gönderir; ve son olarak \"inkâr et\" ise paketin geçişini sessiz sedasız engeller." + --- mason-1.0.0.orig/debian/config +++ mason-1.0.0/debian/config @@ -0,0 +1,15 @@ +#!/bin/sh -e + +. /usr/share/debconf/confmodule + +db_input medium mason/newrulepolicy || true +db_go + +db_input medium mason/defaultpolicy || true +db_go + +db_input medium mason/savepacketstats || true +db_go + +db_input medium mason/service2restart || true +db_go --- mason-1.0.0.orig/debian/changelog +++ mason-1.0.0/debian/changelog @@ -1,3 +1,168 @@ +mason (1.0.0-11) unstable; urgency=low + + * Minor changes to fix warnings reported by lintian for version 1.0.0-10 + * Change the order of preferred editors to avoid problems reported with + mcedit, the prior standard. Preferred editor if installed is now emacs, + followed by vi and nano. + * New option for mason-gui-text: When started with the option "--force" + it will try to stop other instances of itself instead of exiting. + + -- Thomas Scheffczyk Fri, 27 Jun 2008 10:28:23 +0200 + +mason (1.0.0-10) unstable; urgency=low + + * Added finnish debconf template translation. (Thanks to Esko Arajaervi) + (closes: #473372) + * Added galician debconf template translation. (Thanks to Jacobo Tarrio) + (closes: #473502) + * Added russian debconf template translation. (Thanks to Yuri Kozlov) + (closes: #473790) + * Added basque debconf template translation. (Thanks to Piarres Beobide) + (closes: #473968) + * Added turkish debconf template translation. (Thanks to Mert Dirik) + (closes: #486566) + * New functionality: mason can now restart services after resetting the + iptables rules. (Necessary for services that manipulate or add own + iptables rules, e.g. fail2ban) + * Added documentation for additional properties of the debian version + of mason (see masonrc) + * Moved not interactively usable script mason-decide from /usr/bin to + /var/lib/mason + * Minor changes to fix warnings reported by lintian for version 1.0.0-9 + * Changed Standards-Version from 3.7.3 to 3.8.0; no changes required. + + -- Thomas Scheffczyk Mon, 23 Jun 2008 14:05:09 +0200 + +mason (1.0.0-9) unstable; urgency=low + + * Added spanish debconf template translation. (Thanks to Maria Germana Oliveira) + (closes: #469341) + * Fixed a small typo in the spanish translation (Thanks to Alvaro Herrera) + * Changed behaviour: When mason is purged, the init.d link will be removed now, too + * Added the '-n' switch to the call of 'iptables -L' when flushing chains + to avoid DNS calls when merely checking for the exisitence of a chain. + * Changed Standards-Version from 3.7.2 to 3.7.3; no changes required. + + -- Thomas Scheffczyk Tue, 25 Mar 2008 12:29:34 +0100 + +mason (1.0.0-8) unstable; urgency=low + + * Added dutch debconf template translation. (Thanks to cobaco (aka Bart Cornelis)) + (closes: #448932) + * Removed national encoding in changelog of 1.0.0-7 + * Changed property 'Build-Depends-Indep' to 'Build-Depends' in the rules file + + -- Thomas Scheffczyk Fri, 2 Nov 2007 10:53:00 +0100 + +mason (1.0.0-7) unstable; urgency=low + + * Added functionality again, to save the packet counters for filter rules + automatically when the rules are changed to allow long time statistics + (undo reverting changes done in 1.0.0-6) + * Added checks for running klogd and for a recently used logfile + (both necessary for mason to learn new rules) + * Added Portuguese debconf template translation. (Thanks to Luisa Lourenco) + (closes: #415631) + * Changed deprecated sort syntax used in masonlib ("sort +" to "sort -k ") + + -- Thomas Scheffczyk Fri, 23 Mar 2007 10:25:10 +0100 + +mason (1.0.0-6) unstable; urgency=low + + * revert undokumented changes to masonlib which prevent mason from going + into etch + + -- Christoph Martin Fri, 16 Mar 2007 09:43:10 +0100 + +mason (1.0.0-5) unstable; urgency=low + + * Changed the dependency from debconf to debconf|debconf-2.0 (closes #332022) + * Changed the po file for the danish translation from da_DK.po to da.po + (closes #349955) + * Added Swedish debconf template translation. (Thanks to Daniel Nylander) + (closes: #334799) + * integrate changes from NMU -4.1 + from Ana Beatriz Guerrero Lopez + * Added the compat file, bumped compat to 5 and remove the conffile since + it is not necessary anymore + * Bumped Standards-Version to 3.7.2, no changes required. + * Removed full stop "." character from the "Description" field. + * added German debconf template translation (closes: #411390) + + -- Christoph Martin Wed, 14 Mar 2007 11:31:08 +0100 + +mason (1.0.0-4) unstable; urgency=low + + * Added an update of the danish template translation (Thanks to Claus Hindsgaul) (closes: #319233) + + -- Thomas Scheffczyk Fri, 22 Jul 2005 07:46:17 +0200 + +mason (1.0.0-3) unstable; urgency=low + + * Incorporated NMU changes (Thanks to Lucas Wall) (closes: #250264, + #301321) + * fix postinst to correctly install startup links (closes: #222384) + * upgrade to policy 3.6.1.0 + * Added Vietnamese debconf template translation (Thanks to Clytie + Siddall) (closes: #312752) + + -- Thomas Scheffczyk Fri, 24 Jun 2005 11:41:10 +0200 + +mason (1.0.0-2.1) unstable; urgency=low + + * Non-maintainer upload + * Switched to po-debconf. (closes: #250264) + * Added Brazilian Portuguese debconf template translation. (closes: #301321) + * Added Czech debconf template translation. + * Added French debconf template translation. + * Added Norwegian debconf template translation. + + -- Lucas Wall Tue, 12 Apr 2005 10:17:05 -0300 + +mason (1.0.0-2) unstable; urgency=low + + * fix masonlib to support iptables static in kernel + * fix init.d levels so that mason will be startet directly after + configuring the interfaces and will not be stopped on shutdown + + -- Thomas Scheffczyk Thu, 8 May 2003 13:57:43 +0200 + +mason (1.0.0-1) unstable; urgency=low + + * New maintainer upload (closes: #143724) + * Exit if another instance of mason-gui-text is running (closes: + #186599, #169221) + * fix duplicate text in README.Debian (closes: #171709) + * add Danish debconf template (closes: #174789) + + -- Thomas Scheffczyk Tue, 15 Apr 2003 14:49:58 +0200 + +mason (1.0.0-0.1) unstable; urgency=low + + * new upstream + + -- Christoph Martin Wed, 22 May 2002 17:46:26 +0200 + +mason (0.13.0.92-2) unstable; urgency=low + + * Added config questions for default policies to prevent boot-time + questions. (closes bug #50745) + * Changed maintainer address to jive with other packages. + * Fixed problem with *-ips files being created in current directory + instead of /var/lib/mason. + * Moved baserules from /var/lib/mason to /etc/mason.baserules (by request; + so config backups of /etc work properly). + * Fixed pristine source problem (it's uploaded now :-). + + -- Jeff Licquia Wed, 24 Nov 1999 23:55:13 -0600 + +mason (0.13.0.92-1) unstable; urgency=low + + * Newer upstream version. + * Real working package, this time. :-) + + -- Jeff Licquia Thu, 28 Oct 1999 16:30:12 -0500 + mason (0.13.0.92-1) unstable; urgency=low * Newer upstream version. @@ -11,7 +176,3 @@ -- Jeff Licquia Wed, 31 Mar 1999 21:49:35 -0600 -Local variables: -mode: debian-changelog -add-log-mailing-address: "jeff@luci.org" -End: --- mason-1.0.0.orig/debian/templates +++ mason-1.0.0/debian/templates @@ -0,0 +1,21 @@ +Template: mason/newrulepolicy +Type: select +_Choices: accept, reject, deny +Default: accept +_Description: Default action for new firewall rules: + When Mason detects a new kind of traffic and creates a rule for it, what + action should the rule take? + . + The "accept" action will allow the packet through. "Reject" will stop the + packet with a rejection reply, while "deny" will drop the packet silently. + +Template: mason/defaultpolicy +Type: select +_Choices: accept, reject, deny +Default: accept +_Description: Default action for rulesets: + What should the default action be when a packet does not match any of the + rules set up by Mason? + . + Again, "accept" allows the packet through, "reject" drops the packet with + a reply, and "deny" silently drops the packet. --- mason-1.0.0.orig/debian/compat +++ mason-1.0.0/debian/compat @@ -0,0 +1 @@ +5 --- mason-1.0.0.orig/debian/watch +++ mason-1.0.0/debian/watch @@ -0,0 +1,11 @@ +version=3 +# ------------------------------------------------- +# watch control file for mason +# ------------------------------------------------- +# The upstream version of mason is not actively +# maintained. All changes since 2002 were made +# in the debian version of mason, only. +# This file was created to satisfy the debian +# policy (4.11) +# ------------------------------------------------- +# http://www.stearns.org/mason/mason-(.*)\.tar\.gz --- mason-1.0.0.orig/Makefile +++ mason-1.0.0/Makefile @@ -35,11 +35,13 @@ #No quotes around multi file specs. BINDIR=$(DESTDIR)/usr/bin/ -BINFILES=mason mason-gui-text mason-decide +BINFILES=mason mason-gui-text CONFDIR=$(DESTDIR)/etc/ CONFFILE=masonrc LIBDIR=$(DESTDIR)/var/lib/mason/ -LIBFILES=masonlib baserules.sample graffiti-services moreservices nmap-services portsdb-services regression-test all-ip-numbers.txt +LIBFILES=baserules.sample graffiti-services moreservices nmap-services portsdb-services regression-test all-ip-numbers.txt +LIBSCRIPTDIR=$(DESTDIR)/var/lib/mason/ +LIBSCRIPTFILES=masonlib mason-decide DOCDIR=$(DESTDIR)/usr/doc/mason-${MASONVER}/ DOCFILES=COPYING index.html mason.sgml mason.txt mason.html mason-1.html mason-2.html mason-3.html mason-4.html mason-5.html mason-6.html mason-7.html mason-8.html mason-9.html mason-10.html mason-11.html toc.gif prev.gif next.gif mason-banner.gif #DOCDIR=$(DESTDIR)/usr/doc/mason/ @@ -59,6 +61,8 @@ @install -o root -g root -m 0755 -d ${LIBDIR} @echo -n "${LIBFILES}... " @install -o root -g root -m 0644 ${LIBFILES} ${LIBDIR} + @echo -n "${LIBSCRIPTFILES}... " + @install -o root -g root -m 0755 ${LIBSCRIPTFILES} ${LIBSCRIPTDIR} @echo -n "doc directory... " @install -o root -g root -m 0755 -d ${DOCDIR} @echo -n "${DOCFILES}... " @@ -90,7 +94,7 @@ docs: sgml2html --imagebuttons mason.sgml \ && sgml2txt -f mason.sgml \ - && makedoc mason.txt mason.pdb 'The Mason HOWTO' +# && makedoc mason.txt mason.pdb 'The Mason HOWTO' regress: @if ./regression-test ; then \ --- mason-1.0.0.orig/baserules.sample +++ mason-1.0.0/baserules.sample @@ -1,31 +1,45 @@ -#Put any fixed rules you wish here. Example: - -#if [ -f /proc/net/ip_fwchains ]; then -# #Place the ipchains versions of your rules here -# /sbin/ipchains -A forward -s 172.16.0.0/24 -j MASQ #Masquerade from internal lan out -#elif [ -f /proc/net/ip_input ]; then -# #Place the ipfwadm versions of your rules here. -# /sbin/ipfwadm -F -a accept -m -S 172.16.0.0/24 #Masquerade from internal lan out -#else #The old >>>elif [ -n "`lsmod | grep '^ip_tables '`" ]; then<<<< doesn't work as iptables can be kernel-resident. Cross your fingers. -# #Place the iptables versions of your rules here -# #The following loads all netfilter modules - this may or may not be appropriate for you -# MODDIR="/lib/modules/`uname -r`" -# for MOD in \ -# $MODDIR/ipv4/ip_* \ -# $MODDIR/ipv4/ipt_* \ -# $MODDIR/ipv4/iptable_* \ -# $MODDIR/kernel/net/ipv4/netfilter/ip_* \ -# $MODDIR/kernel/net/ipv4/netfilter/ipt_* \ -# $MODDIR/kernel/net/ipv4/netfilter/iptable_* ; do -# insmod $MOD >/dev/null 2>/dev/null ; modprobe $MOD >/dev/null 2>/dev/null -# done -# #Masquerade from internal lan out - syntax from iptables howto; thanks, Rusty. -# iptables -A POSTROUTING -t nat -s 172.16.0.0/24 -o ppp0 -j MASQUERADE -# #The following will allow the response packets back in/out/through your firewall. -# #This, too, may or may not be appropriate for you and should not be taken as a suggestion. -# #It is only here as a convience. If you use these, Mason will build a firewall -# #of opening packets only. -# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -# iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT -# iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -#fi +##!/bin/sh +##============================================================================= +## Example of a mason firewall script +##============================================================================= +# +## --------------------------------------------------------------------- +## Allow all local connections +## --------------------------------------------------------------------- +#/sbin/iptables -A INPUT -i lo -j ACCEPT +#/sbin/iptables -A OUTPUT -o lo -j ACCEPT +# +## --------------------------------------------------------------------- +## Allow ESTABLISHED and RELATED packets globally, to drastically reduce +## the number of reported rules in learning mode +## --------------------------------------------------------------------- +## Hint: "There is a certain feature in iptables that is not so well +## documented and may therefore be overlooked by a lot of people [...] +## If you use state NEW, packets with the SYN bit unset will get through +## your firewall." Cited from: +## http://iptables-tutorial.frozentux.net/iptables-tutorial.html#NEWNOTSYN +## --------------------------------------------------------------------- +#/sbin/iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT +#/sbin/iptables -A INPUT -m state --state RELATED -j ACCEPT +#/sbin/iptables -A INPUT -m state --state INVALID -j DROP +# +#/sbin/iptables -A OUTPUT -m state --state ESTABLISHED -j ACCEPT +#/sbin/iptables -A OUTPUT -m state --state RELATED -j ACCEPT +#/sbin/iptables -A OUTPUT -m state --state INVALID -j DROP +# +## --------------------------------------------------------------------- +## Drop all new new tcp-connections without a sys-flag +## --------------------------------------------------------------------- +## Info: "There is a certain feature in iptables that is not so well +## documented and may therefore be overlooked by a lot of people [...] +## If you use state NEW, packets with the SYN bit unset will get through +## your firewall." Cited from: +## http://iptables-tutorial.frozentux.net/iptables-tutorial.html#NEWNOTSYN +## --------------------------------------------------------------------- +#/sbin/iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP +#/sbin/iptables -A OUTPUT -p tcp ! --syn -m state --state NEW -j DROP +# +## --------------------------------------------------------------------- +## Allowed connections +## --------------------------------------------------------------------- +# --- mason-1.0.0.orig/firewall +++ mason-1.0.0/firewall @@ -3,12 +3,22 @@ # firewall Starts a Mason firewall. # # +### BEGIN INIT INFO +# Provides: mason +# Required-Start: $network +# Required-Stop: $network +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: Starts the mason firewall script +# Description: Starts the firewall script /etc/mason.baserules. The script was created with the mason firewall builder. +### END INIT INFO +# # chkconfig: 2345 18 92 # description: firewall starts the firewall created by the Mason \ # firewall builder. As a firewall is important to system security, \ # it should be always turned on. -# Debian init script derived from original script by Jeff Licquia. +# Debian init script derived from original script by Jeff Licquia # Debian flags for runlevels - similar to RH's chkconfig. FLAGS="defaults 19" --- mason-1.0.0.orig/mason +++ mason-1.0.0/mason @@ -146,7 +146,7 @@ echo "export ${ONEIF}ADDR=\"0/0\" ${CMNT} ${CMNT}Use this if you want to match any address on $ONEIF." fi if [ "$DYNIFMODE" != "SPECIFICIP" ]; then echo -n "$CMNT $CMNT" ; fi - echo "export ${ONEIF}ADDR=\"\`ifconfig $ONEIF 2>/dev/null | awk '/inet addr/{print substr($2,6)}'\`$SINGLEMACHSPEC\" ${CMNT} ${CMNT}Use this if you want to match a single address on $ONEIF." + echo "export ${ONEIF}ADDR=\"\`LC_ALL=C ifconfig $ONEIF 2>/dev/null | awk '/inet addr/{print substr(\$2,6)}'\`$SINGLEMACHSPEC\" ${CMNT} ${CMNT}Use this if you want to match a single address on $ONEIF." if [ "$DYNIFMODE" != "SMALLESTRANGE" ]; then echo -n "$CMNT $CMNT" ; fi #FIXME - what if the file is empty? echo "export ${ONEIF}ADDR=\"$(encompassingnetworkof $(cat ${MASONDIR}${ONEIF}-ips | sort | uniq) || logfail $LINENO return encompassing network for $ONEIF)\" ${CMNT} ${CMNT}Use this if you want to match all addresses seen so far on $ONEIF." --- mason-1.0.0.orig/mason-decide +++ mason-1.0.0/mason-decide @@ -176,7 +176,7 @@ echo $ENH "${WARN}$0: Can't create temp file.${NORM}" else echo "$CURRLINE" >$TMPFILE - $EDITOR $TMPFILE <&10 + eval $EDITOR $TMPFILE <&10 CURRLINE=`cat $TMPFILE` rm -f $TMPFILE || : fi ;; --- mason-1.0.0.orig/mason-gui-text +++ mason-1.0.0/mason-gui-text @@ -4,6 +4,25 @@ #See top of Mason script for copyright and licensing information. #Last YYYY code used: 0019, use 0020 next +# --------------------------------------------------------------------- +# Kill another instance of mason if this programm is started with +# the option "--force" - 2008-06-27 - Scheffczyk +# --------------------------------------------------------------------- +if [ "$$"x != "`/bin/pidof -x /usr/bin/mason-gui-text`"x ]; then + if [ "$1"x == "--force"x ]; then + echo "Told to stop another instance of $0 ..." + kill -9 `ps aux | grep mason | egrep -v "(grep mason|$$)" | awk '{ print $2 }'` + if [ "$$"x != "`/bin/pidof -x /usr/bin/mason-gui-text`"x ]; then + echo "Unable to stop another instance of $0. Exiting ..."; + exit 1; + fi; + else + echo "Another instance of $0 is running. Exiting ..."; + exit 1; + fi; +fi; + + CKPTMGT=" mgt: Ground0" ; #ckpt $CKPTMGT MASONDIR=${MASONDIR:-"/var/lib/mason/"} @@ -118,21 +137,41 @@ while [ ! "$EXITCONTROL" = "YES" ]; do clear - echo $ENH "${HEADER}---- ${BLUE}Mason${HEADER} firewall builder for Linux ----$NORM" - echo $ENH "${HEADER}---- Learning shell for Mason. ----$NORM" - echo $ENH "${HEADER}---- see http://www.pobox.com/~wstearns/mason/ for more info. ----$NORM" - echo $ENH "${HEADER}---- William Stearns ----$NORM" + echo "------------------------------------------------------------------" + echo $ENH "${HEADER}${BLUE}Mason${HEADER} firewall builder for Linux $NORM" + echo "------------------------------------------------------------------" + echo $ENH "${HEADER}---- Learning shell for Mason. $NORM" + echo $ENH "${HEADER}---- see http://www.pobox.com/~wstearns/mason/ for more info. $NORM" + echo $ENH "${HEADER}---- Originally from William Stearns $NORM" if [ -n "$MASONVER" ]; then - echo $ENH "${HEADER}(This is release $MASONVER)$NORM" + echo $ENH "${HEADER}---- This is release $MASONVER $NORM" fi + echo "------------------------------------------------------------------" + if [ -z "`/bin/pidof -x /sbin/klogd`" ]; then + echo "Warning: No instance of klogd (kernel log deamon) is running," + echo " mason will not be able to learn new rules." + echo "------------------------------------------------------------------" + fi + if [ ! -f "$PACKETLOGFILE" ]; then + echo "Warning: The syslog file $PACKETLOGFILE does not exist," + echo " mason will not be able to learn new rules." + echo "------------------------------------------------------------------" + else + if [ -z "` find $PACKETLOGFILE -cmin -60`" ]; then + echo "Warning: No messages was written to the syslog file $PACKETLOGFILE" + echo " the last hour, the file is probably not in use by a" + echo " syslog deamon. Mason will not be able to learn new rules." + echo "------------------------------------------------------------------" + fi + fi if [ -n "$MASONPID$MASONTAILPID" ]; then echo Mason is currently in learn mode. - echo + echo "------------------------------------------------------------------" echo $ENH ${KEY}EL${NORM}: ${KEY}E${NORM}nd ${KEY}L${NORM}earning. showstate 'Mason-gui-text: Main menu, learning in the background' else echo Mason IS NOT currently learning. - echo + echo "------------------------------------------------------------------" echo $ENH ${KEY}BL${NORM}: ${KEY}B${NORM}egin ${KEY}L${NORM}earning. showstate 'Mason-gui-text: Main menu, not learning' fi @@ -357,6 +396,12 @@ killrunningmason flushfirewall runfirewall STANDARD + # --------------------------------------------------------------------- + # Restart services that modify iptables rules - 2008-04-02 - Scheffczyk + # --------------------------------------------------------------------- + wrap Restarting services ... + RestartServices + wrap Done! ;; *) wrap ${WARN}Unknown choice. Please enter the one or two character code.${NORM} ;; --- mason-1.0.0.orig/mason-gui-text.1 +++ mason-1.0.0/mason-gui-text.1 @@ -1,20 +1,18 @@ -.TH MASON-GUI-TEXT 1 .\" NAME should be all caps, SECTION should be 1-8, maybe w/ subsection .\" other parms are allowed: see man(7), man(1) -.SH NAME +.TH "MASON-GUI-TEXT" "1" "" "" "" +.SH "NAME" mason\-gui\-text \- front end to mason -.SH SYNOPSIS -.B mason\-gui\-text +.SH "SYNOPSIS" +.B \fBmason\-gui\-text\fR [\fB\-\-force\fR] .SH "DESCRIPTION" .B mason\-gui\-text -is a "textual GUI" front end to mason, the interactive firewall -builder. When it is run, it allows you to control mason's behavior -through simple keystroke commands. It can start and stop mason, allow -you to edit the rules generated (and re-merge them into the currently -running rule set), and change mason's settings. It also has a -"console lock" setting for locking the console down if necessary. +is a "textual GUI" front end to mason, the interactive firewall builder. When it is run, it allows you to control mason's behavior through simple keystroke commands. It can start and stop mason, allow you to edit the rules generated (and re\-merge them into the currently running rule set), and change mason's settings. It also has a "console lock" setting for locking the console down if necessary. +.SH "OPTIONS" +Default behaviour of mason\-gui\-text ist to exit if another instance of it is already running. +.IP "\fB\-\-force\fR +Try to stop other instances of mason\-gui\-text and continue running .SH "SEE ALSO" -.B "QuickStart, mason(1)" -.SH AUTHOR -This manual page was written by Jeff Licquia , -for the Debian GNU/Linux system (but may be used by others). +.B "mason(1)" +.SH "AUTHOR" +This manual page was written by Jeff Licquia for the Debian GNU/Linux system (but may be used by others) and supplemented by Thomas Scheffczyk . --- mason-1.0.0.orig/mason.1 +++ mason-1.0.0/mason.1 @@ -1,17 +1,17 @@ -.TH MASON 1 .\" NAME should be all caps, SECTION should be 1-8, maybe w/ subsection .\" other parms are allowed: see man(7), man(1) -.SH NAME +.TH "MASON" "1" "" "" "" +.SH "NAME" mason \- interactively create a firewall -.SH SYNOPSIS +.SH "SYNOPSIS" .B mason .I "< logfile > rulefile" -.br +.br .SH "DESCRIPTION" This manual page briefly documents the .BR mason command. -.PP +.PP .B mason interactively generates a set of firewall rules for a Linux\-based firewall. This is done by turning on full IP logging, watching the @@ -21,20 +21,20 @@ is familiar with most of the quirks of various connection types (such as ftp and IRC), and can output rules for 2.0.x ipfwadm, 2.2.x ipchains, and Cisco packet filters. -.PP +.PP .B mason operates by reading in log file information from standard input and writing firewall rules to standard output. This allows .B mason -to work offline or on a separate system. Real-time firewall +to work offline or on a separate system. Real\-time firewall generation can be achieved with a command like tail(1). -.PP +.PP Most users will want to run mason with a user\-friendly interface such as mason\-gui\-text(1). -.SH ENVIRONMENT +.SH "ENVIRONMENT" .B mason is configured using the following environment variables. -.TP +.TP .B ECHOCOMMAND Sets the type of firewall rules that .B mason @@ -43,7 +43,7 @@ .B mason outputs whatever kind of rules are supported by the currently running Linux kernel. -.TP +.TP .B DOCOMMAND Sets the type of firewall rules that .B mason @@ -52,20 +52,20 @@ .B mason outputs whatever kind of rules are supported by the currently running Linux kernel. -.TP +.TP .B HEARTBEAT If set to "yes", .B mason -will output a "+" or "-" to standard error whenever a rule generated +will output a "+" or "\-" to standard error whenever a rule generated by .B mason has been triggered. -.TP +.TP .B DYNIP Set this to the list of interfaces that have dynamically assigned addresses, separated by spaces. .SH "SEE ALSO" -.B "mason.txt, mason\-gui\-text(1)" -.SH AUTHOR +.B "mason\-gui\-text(1)" +.SH "AUTHOR" This manual page was written by Jeff Licquia , for the Debian GNU/Linux system (but may be used by others). --- mason-1.0.0.orig/masonlib +++ mason-1.0.0/masonlib @@ -26,10 +26,10 @@ # || logfail $LINENO masonlib: YYYY #### the_command_that_was_supposed_to_run #Last YYYY code used: 0149, use 0150 next -if [ -f /usr/lib/samlib/samlib ]; then - . /usr/lib/samlib/samlib +if [ -f /var/lib/mason/samlib ]; then + . /var/lib/mason/samlib else - echo "/usr/lib/samlib/samlib is missing - please get it from" >/dev/stderr + echo "/var/lib/mason/samlib is missing - please get it from" >/dev/stderr echo "http://www.stearns.org/samlib/" >/dev/stderr echo "Exiting." >/dev/stderr exit 1 @@ -44,7 +44,7 @@ fi done -MASONVER="1.0.0, 5/12/2002" +MASONVER="1.0.0-11 - 2008-06-27" #------------------------------------------------------------------------- # addcounts procedure, adds the packet counts to the rules in a file. @@ -289,7 +289,7 @@ #SYSTEMRULEFILE=${SYSTEMRULEFILE:-"${MASONDIR}systemrules"} ; if [ ! -f $SYSTEMRULEFILE ]; then touch $SYSTEMRULEFILE || logfail $LINENO masonlib: 0015 touch $SYSTEMRULEFILE ; fi PACKETLOGFILE=${PACKETLOGFILE:-"/var/log/messages"} MASONEXE=${MASONEXE:-"/usr/bin/mason"} - MASONDECIDE=${MASONDECIDE:-"/usr/bin/mason-decide"} + MASONDECIDE=${MASONDECIDE:-"/var/lib/mason/mason-decide"} CKPTCHECKCONF=" checkconf: Set up ANSI escape codes" ; #ckpt $CKPTCHECKCONF if [ "$USEANSI" != "NO" ]; then @@ -301,7 +301,8 @@ BLUE="\033[1;34m" PINK="\033[1;35m" TURQUOISE="\033[1;36m" - NORM="\033[1;37m" +# NORM="\033[1;37m" + NORM="`tput sgr0 2`" BRIGHT="\033[1;39m" else ENH="" @@ -448,7 +449,7 @@ [Nn][Oo]|[Nn][Oo][Nn][Ee]) ECHOCOMMAND="none" ;; *) if [ -f /proc/net/ip_fwchains ]; then ECHOCOMMAND="ipchains" elif [ -f /proc/net/ip_input ]; then ECHOCOMMAND="ipfwadm" - elif [ -n "`lsmod | grep '^ip_tables '`" ]; then ECHOCOMMAND="iptables" + elif [ -f /proc/net/ip_tables_names ]; then ECHOCOMMAND="iptables" else ECHOCOMMAND="ipchains" #Set default here fi ;; esac @@ -478,7 +479,7 @@ [Ii][Pp][Tt][Aa][Bb][Ll][Ee][Ss]) DOCOMMAND="iptables" #FIXME - how to reliably test for kernel iptables support - #if [ -z "`lsmod | grep '^ip_tables '`" ]; then + #if -z "`lsmod | grep '^ip_tables '`" ]; then # wrap ${WARN}WARNING! User has requested iptables, but it appears to be unavailable. Proceeding, but this is not likely to work.${NORM} >/dev/stderr # sleep 10 #fi @@ -682,10 +683,15 @@ CKPTCHECKCONF=" checkconf: Check editor" ; #ckpt $CKPTCHECKCONF if [ -z "$EDITOR" ]; then - for TRYEDITOR in `type -path mcedit || :` `type -path pico || :` `type -path vi || :` `type -path jove || :` `type -path nedit || :` `type -path emacs || :` ; do + for TRYEDITOR in `type -path emacs || :` `type -path vi || :` `type -path nano || :` `type -path mcedit || :` `type -path pico || :` `type -path jove || :` `type -path nedit || :` ; do + # 2008-06-27 - Scheffczyk: Added the -nw switch if emacs is choosen as an editor if [ -z "$EDITOR" ]; then + if [ "$TRYEDITOR"x == "emacs"x ]; then + EDITOR="emacs -nw"; + else EDITOR=$TRYEDITOR - wrap Editor default of $EDITOR taken. >/dev/stderr + fi + wrap Editor default of $EDITOR taken. >/dev/stderr fi done unset TRYEDITOR || : @@ -716,7 +722,7 @@ exit 0 fi - if [ ! -f /proc/net/ip_fwchains ] && [ ! -f /proc/net/ip_input ] && [ -z "`lsmod | grep '^ip_tables '`" ]; then + if [ ! -f /proc/net/ip_fwchains ] && [ ! -f /proc/net/ip_input ] && [ ! -f /proc/net/ip_tables_names ]; then wrap ${WARN}This kernel does not support ipchains, ipfwadm or iptables!${NORM} >/dev/stderr #DOCOMMAND="none" #Should we force to none? fi @@ -1199,13 +1205,12 @@ esac #Case $1=action } #End of dorule - - #------------------------------------------------------------------------- #Flush the existing rules so we start with a clean slate. #------------------------------------------------------------------------- flushfirewall () { #SUDO checked CKPTFLUSHFIREWALL=" flushfirewall: Start" ; #ckpt $CKPTFLUSHFIREWALL + savepacketstats updatecounts echo -n Flushing... >/dev/stderr @@ -1229,7 +1234,7 @@ dorule f "$ONECHAIN" '' '' '' '' '' '' '' '' '' '' '' '' '' || logfail $LINENO masonlib: 0039/0041/0043/0048/0050/0052 done - if [ -f /proc/net/ip_fwchains ] || [ -n "`lsmod | grep '^ip_tables '`" ]; then + if [ -f /proc/net/ip_fwchains ] || [ -f /proc/net/ip_tables_names ]; then #Flush the nolog chains if they exist, create them if not. CKPTFLUSHFIREWALL=" flushfirewall: Create or flush nolog chains." ; #ckpt $CKPTFLUSHFIREWALL if [ -n "$NOLOGSUFFIX" ]; then @@ -1257,15 +1262,19 @@ if [ -f /proc/net/ip_fwchains ]; then #REMOVEME #if [ `$SUDO $IPCHAINSBIN -L -n | grep "^Chain $CHAINNAME" | wc -l` -gt 0 ]; then - if $SUDO $IPCHAINSBIN -L $CHAINNAME >/dev/null 2>/dev/null ; then #If chain exists + # 2008-03-25 - Scheffczyk: Added the '-n' switch to the call of 'iptables -L' + # to avoid DNS calls when merely checking for the exisitence of a chain. + if $SUDO $IPCHAINSBIN -n -L $CHAINNAME >/dev/null 2>/dev/null ; then #If chain exists $SUDO $IPCHAINSBIN -F $CHAINNAME >/dev/null 2>/dev/null || logfail $LINENO masonlib: 0044/0070/0089/0134 $IPCHAINSBIN -F $CHAINNAME else $SUDO $IPCHAINSBIN -N $CHAINNAME >/dev/null 2>/dev/null || logfail $LINENO masonlib: 0045/0071/0090 $IPCHAINSBIN -N $CHAINNAME fi - elif [ -n "`lsmod | grep '^ip_tables '`" ]; then + elif [ -f /proc/net/ip_tables_names ]; then #FIXME, check everywhere. #if iptables -L -n >/dev/null 2>/dev/null ; then echo iptables successful ; fi - if $SUDO $IPTABLESBIN -L $CHAINNAME >/dev/null 2>/dev/null ; then #If chain exists + # 2008-03-25 - Scheffczyk: Added the '-n' switch to the call of 'iptables -L' + # to avoid DNS calls when merely checking for the exisitence of a chain. + if $SUDO $IPTABLESBIN -n -L $CHAINNAME >/dev/null 2>/dev/null ; then #If chain exists $SUDO $IPTABLESBIN -F $CHAINNAME >/dev/null 2>/dev/null || logfail $LINENO masonlib: 0135 $IPTABLESBIN -F $CHAINNAME else $SUDO $IPTABLESBIN -N $CHAINNAME >/dev/null 2>/dev/null || logfail $LINENO masonlib: 0136 $IPTABLESBIN -N $CHAINNAME @@ -1901,7 +1910,7 @@ done else echo -n No Blockedhost blocks... ; fi - if [ -f /proc/net/ip_fwchains ] || [ -n "`lsmod | grep '^ip_tables '`" ]; then + if [ -f /proc/net/ip_fwchains ] || [ -f /proc/net/ip_tables_names ]; then CKPTRUNFIREWALL=" runfirewall: ipchains/iptables spoofblocks" ; #ckpt $CKPTRUNFIREWALL if [ "$SPOOFBLOCKS" = "YES" ]; then echo -n Spoof blocks... @@ -1913,7 +1922,7 @@ #$IPCHAINSBIN -I input -j NoSpoof || logfail $LINENO masonlib: YYYY 0072 dorule i input '' '' '' '' '' '' '' '' '' "NoSpoof" '' '' '' || logfail $LINENO masonlib: YYYY 0072 #In iptables, we have to check for spoofing on the forward chain as well. - if [ -n "`lsmod | grep '^ip_tables '`" ]; then + if [ -f /proc/net/ip_tables_names ]; then dorule i forward '' '' '' '' '' '' '' '' '' "NoSpoof" '' '' '' || logfail $LINENO masonlib: YYYY 0137 fi @@ -2313,7 +2322,9 @@ for SECTION in `seqfunc 0 $FILECOUNT` ; do if [ -f "$ONEFILE.$SECTION" ]; then if [ `grep '#\^' $ONEFILE.$SECTION | wc -l` -gt 0 ]; then - sort -t '^' +1 -n -r $ONEFILE.$SECTION >>$ONEFILE.new || logfail $LINENO masonlib: YYYY 0120 + # 2007-03-23 Scheffczyk + # Original line was: sort -t '^' +1 -n -r $ONEFILE.$SECTION >>$ONEFILE.new || logfail $LINENO masonlib: YYYY 0120 + sort -t '^' -k 1 -n -r $ONEFILE.$SECTION >>$ONEFILE.new || logfail $LINENO masonlib: YYYY 0120 else cat $ONEFILE.$SECTION >>$ONEFILE.new || logfail $LINENO masonlib: YYYY 0121 fi @@ -2350,12 +2361,14 @@ cp -pf $1 $1.bak || logfail $LINENO masonlib: YYYY 0125 #sort -t '#' +1 $1 | uniq >$1.sorted #This worked until we had mark values. CKPTUNIQRULEFILE=" uniqrulefile: main pipeline" ; #ckpt $CKPTUNIQRULEFILE + # 2007-03-23 Scheffczyk + # Original line was: sort -t '#' +1 | \ cat $1 | \ sed -e 's/^/!!! /' \ -e 's/^!!! \(.* -m \)\([0-9][0-9]*\)\( .*\)/\2 \1ZzMaRkZz\3/' | \ sort +1 | \ uniq -1 | \ - sort -t '#' +1 | \ + sort -t '#' -k 1 | \ uniq -1 | \ sed -e 's/^\([0-9][0-9]*\) \(.* -m \)ZzMaRkZz\( .*\)/\2\1\3/' \ -e 's/^!!! //' >$1.sorted || logfail $LINENO masonlib: YYYY 0126 @@ -2419,3 +2432,49 @@ } #End of updatecounts +#------------------------------------------------------------------------- +# Save packet stats to a file for each chain - 2008-04-03 - Scheffczyk +#------------------------------------------------------------------------- +savepacketstats () { + if [ "$PACKETSTATS_SAVE"x = "yes"x ] + then + if [ -z "$PACKETSTATS_LOGDIR" ]; then + $PACKETSTATS_LOGDIR="/var/log/mason"; + fi; + if [ ! -d "$PACKETSTATS_LOGDIR" ]; then + mkdir -p $PACKETSTATS_LOGDIR; + fi; + if [ -z "$PACKETSTATS_MAX_AGE" ] + then + find $PACKETSTATS_LOGDIR/ -mtime +$PACKETSTATS_MAX_AGE -exec rm {} \; + fi + PACKETSTATS_TIMESTAMP=$(date +%Y.%m.%d.%H.%M.%S) + TABLES="nat filter" + for TABLE in $TABLES + do + CHAINS=`$IPTABLESBIN -L -n -t $TABLE | fgrep Chain | awk '{ print $2; }'` + for CHAIN in $CHAINS + do + $IPTABLESBIN -n -x -v -t $TABLE -L $CHAIN > $PACKETSTATS_LOGDIR/$TABLE.$CHAIN.$PACKETSTATS_TIMESTAMP + done + done + fi +} + +# --------------------------------------------------------------------- +# Restart services that modify iptables rules - 2008-04-02 - Scheffczyk +# --------------------------------------------------------------------- +RestartServices() { + unset SERVICE; + if [ -z "$SERVICE_RESTART_DIR" ]; then + SERVICE_RESTART_DIR="/etc/mason.d/restart.d"; + fi; + if [ ! -d "$SERVICE_RESTART_DIR" ]; then + mkdir -p $SERVICE_RESTART_DIR; + fi; + if [ $(ls -1 "$SERVICE_RESTART_DIR/" | wc -l) -ne 0 ]; then + for SERVICE in $(ls -1 $SERVICE_RESTART_DIR/*| egrep -v "[#~]"); do + $SERVICE restart + done; + fi; +} --- mason-1.0.0.orig/masonrc +++ mason-1.0.0/masonrc @@ -1,5 +1,8 @@ -#WARNING - If you are upgrading from a previous version, the uncommented -#lines in your old masonrc have been appended to the end of this file. +#=========================================================== +# WARNING - If you are upgrading from a previous version, the uncommented +# lines in your old masonrc have been appended to the end of this file. +#=========================================================== + #Please note that the NAMECACHE, NETCACHE, and SERVICES fields are no longer used. #For instructions on how to set the parameters in this file, refer to @@ -60,6 +63,59 @@ #FLUSHEDPOLICY="reject" #FLUSHEDPOLICY="deny" +#=========================================================== +# New settings for the debian version of mason - BEGIN +#=========================================================== +# Property: SERVICE_RESTART_DIR +#----------------------------------------------------------- +# Type : string +# value : the name of a directory +# Default : /etc/mason.d/restart.d +# Descr. : All scripts in this directory will be executed +# with the command line parameter 'restart'. +# Hints : - A common way to use this feature is to link to +# init scripts, for example: +# ln -s /etc/init.d/fail2ban /etc/mason.d/restart.d/ +#----------------------------------------------------------- +# SERVICE_RESTART_DIR="/etc/mason.d/restart.d" + +#----------------------------------------------------------- +# Property: PACKETSTATS_SAVE +#----------------------------------------------------------- +# Type : string +# value : "yes" or "no" +# Default : "no" +# Descr. : If the value of this property is set to "yes" +# the counters for each rule a saved before the +# iptables chains are flushed +#----------------------------------------------------------- +# PACKETSTATS_SAVE="no" + +#----------------------------------------------------------- +# Property: PACKETSTATS_MAX_AGE +#----------------------------------------------------------- +# Type : integer +# value : maximum age of saved saved counters in days +# Default : 30 +# Descr. : If the value of this property is set, saved +# counters are deleted when older as set here +#----------------------------------------------------------- +# PACKETSTATS_MAX_AGE=30 + +#----------------------------------------------------------- +# Property: PACKETSTATS_LOGDIR +#----------------------------------------------------------- +# Type : string +# value : the name of a directory +# Default : /var/log/mason +# Descr. : The directory where the counters are saved +#----------------------------------------------------------- +# PACKETSTATS_LOGDIR="/var/log/mason" + +#=========================================================== +# New settings for the debian version of mason - END +#=========================================================== + #----------------------------------------------------------- # Moderate likelihood you may wish to tune these, probably once. #----------------------------------------------------------- @@ -154,6 +210,7 @@ #Use ANSI escape sequences to enhance display. Default YES. #Set this to no if your terminal doesn't support ANSI colors, etc. #USEANSI="YES" +USEANSI="NO" # The range of ports considered to be IRC server ports. # Default: 6666 to 6671 @@ -458,7 +515,7 @@ #Location of runtime changeable files and configuration. #Make sure you include the trailing slash. # Default: "/var/lib/mason/" -#MASONDIR="/var/lib/mason/" +MASONDIR="/var/lib/mason/" #This is the configuration file mason uses. It can be changed while #Mason is running as long as the SIGUSR1 signal is sent to Mason afterwards. @@ -507,7 +564,7 @@ #/etc/rc.d/init.d/firewall start # #MASONEXE="/usr/bin/mason" -#MASONDECIDE="/usr/bin/mason-decide" +#MASONDECIDE="/var/lib/mason/mason-decide" #IPFWADMBIN="/sbin/ipfwadm" #IPCHAINSBIN="/sbin/ipchains" #Note - ipnatctl is not used any more. --- mason-1.0.0.orig/samlib +++ mason-1.0.0/samlib @@ -617,7 +617,7 @@ requireutil ifconfig awk || exit 1 #Checks done on the following function: ipof () { #SUDO checked - ifconfig $1 2>/dev/null | awk '/inet addr/{print substr($2,6)}' + LC_ALL=C ifconfig $1 2>/dev/null | awk '/inet addr/{print substr($2,6)}' } #End of ipof if [ "$DOREGRESSIONTEST" = "YES" ]; then echo -n ipof... --- mason-1.0.0.orig/ttt +++ mason-1.0.0/ttt @@ -0,0 +1,167 @@ +mason (1.0.0-10) unstable; urgency=low + + * Added finnish debconf template translation. (Thanks to Esko Arajaervi) + (closes: #473372) + * Added galician debconf template translation. (Thanks to Jacobo Tarrio) + (closes: #473502) + * Added russian debconf template translation. (Thanks to Yuri Kozlov) + (closes: #473790) + * Added basque debconf template translation. (Thanks to Piarres Beobide) + (closes: #473968) + * Added turkish debconf template translation. (Thanks to Mert Dirik) + (closes: #486566) + * New functionality: mason can now restart services after resetting the + iptables rules. (Necessary for services that manipulate or add own + iptables rules, e.g. fail2ban) + * Added documentation for additional properties of the debian version + of mason (see masonrc) + * Moved not interactively usable script mason-decide from /usr/bin to + /var/lib/mason + * Changed encoding of this changelog file to utf-8 + * Minor changes to fix warnings reported by lintian for version 1.0.0-9 + + -- Thomas Scheffczyk Mon, 23 Jun 2008 13:38:36 +0200 + +mason (1.0.0-9) unstable; urgency=low + + * Added spanish debconf template translation. (Thanks to Maria Germana Oliveira) + (closes: #469341) + * Fixed a small typo in the spanish translation (Thanks to Alvaro Herrera) + * Changed behaviour: When mason is purged, the init.d link will be removed now, too + * Added the '-n' switch to the call of 'iptables -L' when flushing chains + to avoid DNS calls when merely checking for the exisitence of a chain. + * Changed Standards-Version from 3.7.2 to 3.7.3; no changes required. + + -- Thomas Scheffczyk Tue, 25 Mar 2008 12:29:34 +0100 + +mason (1.0.0-8) unstable; urgency=low + + * Added dutch debconf template translation. (Thanks to cobaco (aka Bart Cornelis)) + (closes: #448932) + * Removed national encoding in changelog of 1.0.0-7 + * Changed property 'Build-Depends-Indep' to 'Build-Depends' in the rules file + + -- Thomas Scheffczyk Fri, 2 Nov 2007 10:53:00 +0100 + +mason (1.0.0-7) unstable; urgency=low + + * Added functionality again, to save the packet counters for filter rules + automatically when the rules are changed to allow long time statistics + (undo reverting changes done in 1.0.0-6) + * Added checks for running klogd and for a recently used logfile + (both necessary for mason to learn new rules) + * Added Portuguese debconf template translation. (Thanks to Luisa Lourenco) + (closes: #415631) + * Changed deprecated sort syntax used in masonlib ("sort +" to "sort -k ") + + -- Thomas Scheffczyk Fri, 23 Mar 2007 10:25:10 +0100 + +mason (1.0.0-6) unstable; urgency=low + + * revert undokumented changes to masonlib which prevent mason from going + into etch + + -- Christoph Martin Fri, 16 Mar 2007 09:43:10 +0100 + +mason (1.0.0-5) unstable; urgency=low + + * Changed the dependency from debconf to debconf|debconf-2.0 (closes #332022) + * Changed the po file for the danish translation from da_DK.po to da.po + (closes #349955) + * Added Swedish debconf template translation. (Thanks to Daniel Nylander) + (closes: #334799) + * integrate changes from NMU -4.1 + from Ana Beatriz Guerrero Lopez + * Added the compat file, bumped compat to 5 and remove the conffile since + it is not necessary anymore + * Bumped Standards-Version to 3.7.2, no changes required. + * Removed full stop "." character from the "Description" field. + * added German debconf template translation (closes: #411390) + + -- Christoph Martin Wed, 14 Mar 2007 11:31:08 +0100 + +mason (1.0.0-4) unstable; urgency=low + + * Added an update of the danish template translation (Thanks to Claus Hindsgaul) (closes: #319233) + + -- Thomas Scheffczyk Fri, 22 Jul 2005 07:46:17 +0200 + +mason (1.0.0-3) unstable; urgency=low + + * Incorporated NMU changes (Thanks to Lucas Wall) (closes: #250264, + #301321) + * fix postinst to correctly install startup links (closes: #222384) + * upgrade to policy 3.6.1.0 + * Added Vietnamese debconf template translation (Thanks to Clytie + Siddall) (closes: #312752) + + -- Thomas Scheffczyk Fri, 24 Jun 2005 11:41:10 +0200 + +mason (1.0.0-2.1) unstable; urgency=low + + * Non-maintainer upload + * Switched to po-debconf. (closes: #250264) + * Added Brazilian Portuguese debconf template translation. (closes: #301321) + * Added Czech debconf template translation. + * Added French debconf template translation. + * Added Norwegian debconf template translation. + + -- Lucas Wall Tue, 12 Apr 2005 10:17:05 -0300 + +mason (1.0.0-2) unstable; urgency=low + + * fix masonlib to support iptables static in kernel + * fix init.d levels so that mason will be startet directly after + configuring the interfaces and will not be stopped on shutdown + + -- Thomas Scheffczyk Thu, 8 May 2003 13:57:43 +0200 + +mason (1.0.0-1) unstable; urgency=low + + * New maintainer upload (closes: #143724) + * Exit if another instance of mason-gui-text is running (closes: + #186599, #169221) + * fix duplicate text in README.Debian (closes: #171709) + * add Danish debconf template (closes: #174789) + + -- Thomas Scheffczyk Tue, 15 Apr 2003 14:49:58 +0200 + +mason (1.0.0-0.1) unstable; urgency=low + + * new upstream + + -- Christoph Martin Wed, 22 May 2002 17:46:26 +0200 + +mason (0.13.0.92-2) unstable; urgency=low + + * Added config questions for default policies to prevent boot-time + questions. (closes bug #50745) + * Changed maintainer address to jive with other packages. + * Fixed problem with *-ips files being created in current directory + instead of /var/lib/mason. + * Moved baserules from /var/lib/mason to /etc/mason.baserules (by request; + so config backups of /etc work properly). + * Fixed pristine source problem (it's uploaded now :-). + + -- Jeff Licquia Wed, 24 Nov 1999 23:55:13 -0600 + +mason (0.13.0.92-1) unstable; urgency=low + + * Newer upstream version. + * Real working package, this time. :-) + + -- Jeff Licquia Thu, 28 Oct 1999 16:30:12 -0500 + +mason (0.13.0.92-1) unstable; urgency=low + + * Newer upstream version. + * Real working package, this time. :-) + + -- Jeff Licquia Thu, 28 Oct 1999 16:30:12 -0500 + +mason (0.12.0-1) unstable; urgency=low + + * Initial Release. + + -- Jeff Licquia Wed, 31 Mar 1999 21:49:35 -0600 +