Add unit file (#483602 by Ferenc Erki)

Package-Manager: portage-2.2.1/cvs/Linux x86_64
Manifest-Sign-Key: 0xA188FBD4

4 files changed, 119 insertions, 18 deletions

diff --git a/net-firewall/arno-iptables-firewall/ChangeLog b/net-firewall/arno-iptables-firewall/ChangeLog
index 659f3169d74c..1159cfecd6b7 100644
--- a/net-firewall/arno-iptables-firewall/ChangeLog
+++ b/net-firewall/arno-iptables-firewall/ChangeLog
@@ -1,6 +1,13 @@
 # ChangeLog for net-firewall/arno-iptables-firewall
 # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-firewall/arno-iptables-firewall/ChangeLog,v 1.7 2013/05/18 09:09:18 hwoarang Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-firewall/arno-iptables-firewall/ChangeLog,v 1.8 2013/09/06 19:54:18 pacho Exp $
+
+*arno-iptables-firewall-2.0.1d-r2 (06 Sep 2013)
+
+  06 Sep 2013; Pacho Ramos <pacho@gentoo.org>
+  +arno-iptables-firewall-2.0.1d-r2.ebuild,
+  +files/arno-iptables-firewall.service:
+  Add unit file (#483602 by Ferenc Erki)
 
 *arno-iptables-firewall-2.0.1d-r1 (18 May 2013)
 
diff --git a/net-firewall/arno-iptables-firewall/Manifest b/net-firewall/arno-iptables-firewall/Manifest
index 3baf186e274a..c59222a0bbca 100644
--- a/net-firewall/arno-iptables-firewall/Manifest
+++ b/net-firewall/arno-iptables-firewall/Manifest
@@ -2,6 +2,7 @@
 Hash: SHA256
 
 AUX arno-iptables-firewall 403 SHA256 a345aaff1d7ab3c94bf67a653f4cb4bd6babc0b320874ed218f729402c1630c4 SHA512 0a32127ecdf36a2906ad3681afbace9ec0c3ebdc00ffd3f226f77c4ed7aa2217805fb2264ff92fb70b1525ac705a19f61002a0d5a2852078de4a025021e8db5a WHIRLPOOL 20090efbe04852499097c34e4e8ffdf3cb46fa4afe6cafa70b0c087d6c4e9cc85f826dcc9ab794f095aca34ab5aef194598c2a708d590a1d50688343cacafec5
+AUX arno-iptables-firewall.service 364 SHA256 520915c51d247ec88e9d494f1dfd0b10161373a1c859b363599d0f73cb4432ce SHA512 d4a649a4f017a604c28dbccb8e14b997a350cdf8f56ee52fd2ca8d802e48345f3eddf4cbece296779a72cfd4a32fd4119735d5a96846cf8929f4d49faac0d758 WHIRLPOOL 42dbed1b54fe89394aeea6c432cdffcb8c29565cdaa72357f80fa7158711f82763863085b7439f3fcc4d0f778ba8bc5b0ffc9da424861225a2a1a1a73414eb66
 AUX rc.firewall_replace_opts.patch 299 SHA256 73163088b2873a70bbc6dee814e260411ccee9cc0e8bd66e96da5e2def7dc7ed SHA512 eb5d266d4d7a48e5480268c6dc8da7ef242d45c4bdc537c3e81666d3d1720273bc21b325967b235765adf08ae5ddc6d6ab0ddce739aef811e02c16eac14d982c WHIRLPOOL 5b867e9b8844503c72739bebd4cff82271e54113b7d6e836c46e14af620cbd9609a9b8704b8f06ced13961c7cea2343b71254a73967d61ae828a79a2ac09bf9d
 DIST arno-iptables-firewall_1.9.2a.tar.gz 95858 SHA256 1412a28fafbe423d3e5bcf820c4f92265f01d38908eae0f3506e53b6d55a7906
 DIST arno-iptables-firewall_1.9.2d.tar.gz 97797 SHA256 2644299bffbf035bce28e5360a08941ce3fc773906fd7300e94cdf948cffd469
@@ -9,25 +10,14 @@ DIST arno-iptables-firewall_2.0.1d.tar.gz 125329 SHA256 177343362063125985e8b000
 EBUILD arno-iptables-firewall-1.9.2a.ebuild 2596 SHA256 2f95f61a49838eabccac7ec23e349a49977c299bfb99734a83bf5aeed28b3659 SHA512 4eb492d50e1262808a9b70726fb10939ba4f298e6e1d545fac41598bf53a80a6e0ae2ff4444f9b60b06fe030312f75930e9c841dfe6a58f7c971da09cd02dec0 WHIRLPOOL ae41b57611deac699843e2f9eb22af50af4dddda3ef0c868772b87b8d32418c0a93cbd4507bca7d702872701d6dcd1bb3e40a339edc84ccc45f36264ccf9ae40
 EBUILD arno-iptables-firewall-1.9.2d.ebuild 2772 SHA256 3cfbe389ad801ee33f4f78f3fddbb34c1e89adf39653be96708910d137753b85 SHA512 5ee67c3b389cc837d0ae60db5dcfd30edcb92c33f3b60b0b61f915134776dc91560a8052ffa7b3d2f0bad11514086aeb7102d8f8f109365ab3ef3bd5b8d9883d WHIRLPOOL ed745351c17184f6f59e8e9d81711f8c319d1a63ce597f1c7026336b08c99fd26edf7f12a0587d7a1501f77f7e516afa796640619e90ecaac146b935ad311610
 EBUILD arno-iptables-firewall-2.0.1d-r1.ebuild 2239 SHA256 cf75acd6e8414d4d496485ebbae1a4ca1a08af5a75aa49b0cdebb429e512c3d6 SHA512 15dd2a7049d7e11e787778682f99aba6799d289f255a2b49b68c3d48d9a22752f671bc644d9627559ed3baa6e9d6f3479ab8b23ac9d6386f28abdf93aaf35f5f WHIRLPOOL 305f2f4d38557a6c106fb1127c83d2138de210b21eccd53b6a6309087a84caf5d7dde11196ffccf8ceef67871ca4c1e5bb5f6a8b51913167333e210d92b968f9
+EBUILD arno-iptables-firewall-2.0.1d-r2.ebuild 2386 SHA256 ed155ce5b8c2e99ad351691aa2e15d068018ff21953bc489e1c7ce45dba29eff SHA512 2977410b71c7f91851c892457e268895db8251caa40041f28467083f626f7b777953a8c670053d2fc7260e43b15b36c3b17dd6e3b4e738ac2c5cab5f7c914637 WHIRLPOOL 30f82b61d470c7318378f7fdd7f8869e5e93deb324b50d4d3af3750081a1fa03e7709bd126cea8fd112c89e2340b2d4985ebfea0084ba86454ec4f9020ba57d2
 EBUILD arno-iptables-firewall-2.0.1d.ebuild 2827 SHA256 ef6a6edaf882a0e859195d115ff3e8211c594fa4fe874c6fe23021e491ff8338 SHA512 b718e895c949343aa3e0019d247bf5f8d45904f0337e7f7f634af7fd848b75a0cddde52db6a7d17b1411c46571e5d62afd87e8318486c675644e406abee82e8f WHIRLPOOL fe58229a6b1cf89a0257eaed6361ba9e98a092569b4fad126095a6c103c6188cc47da60826234a0272e0c5fb247e0a648cd6c065405ccc3384cb7c0d00c42253
-MISC ChangeLog 1849 SHA256 c710033cb9a885512c01e1665a077d6f8d62b6ea90e0c886c5da765f104f92e3 SHA512 91f93de70e39f0b615c915b016a47417b141fa262abce3eb51eec53123f93da6e60d9ab3397eea5e21cf266442b7f74dc0c5884c6c66e293132284f490e804c5 WHIRLPOOL 4b640f7a184ca9211ac35ae0a7ec3cee5763248a6f14605ea73aaf8fd684beb6610a3fceeb782cdf1f1f688fa8da66e87ec431056398dc95119ad381a4646cc0
+MISC ChangeLog 2068 SHA256 8bba9194e82b864eef769989a275fe50dea265f55e195c706d9f40e297602419 SHA512 da3697a7195dc7a7e67729f82b9b700dde447a84a6ecc54874e011c1b2081a4c8d3a707cc15205a47e5338fde8aa4bb2132ccd42e69d7836c6990abf96538c9e WHIRLPOOL ffdfdf5b5f8ae7e66bb77b052befa759f95b5beda122afb9775bdb6f3f71854faa4acbbe7c1fcaee51e42b7ee1a3d9983a8a8853833eb492d45f01ae0889ab0c
 MISC metadata.xml 327 SHA256 51bfcccddfa15dee0e7319ea4ec01fd810be47612abba45196558ad492dfe966 SHA512 aca4ad309dddc381e87586be74ec5aed21caf525ebdbce48c452b7ac9701b36dc756cf6fb48b790ca8bc81332803e92ed63ac30d0a21a5f2bdd56cb4a76e5e0a WHIRLPOOL 1c15aa80e063313cffcc77ac63d3e58fadf4e5abfe75addf2d28991e6bb5f1b259735e1a7668717de7618a2e9b59df98cd173e49803bb0669624db006d8a401e
 -----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.19 (GNU/Linux)
+Version: GnuPG v2.0.20 (GNU/Linux)
 
-iQJ8BAEBCABmBQJRl0U+XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
-ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzNTVDNDczOUYzRjJEMTRGNDRGMzU2RkMw
-OUJGNEY1NEMyQkE3RjNDAAoJEAm/T1TCun88rLkP/RREMaN2UqIU98FnWHZMM6Ku
-hBeiZ4wFmzV3dzFu6zt5M14rMaiqRonB761EMmXYIlJbB17qsL75nfNCspQ0MehP
-m96jqrdCU3s/9lkm2F0UudnQANMiEbneH8qYldZzwbI2h10Wo5CZExVQ6IO6RceP
-5bNqUPEAXdGSgrzjIwrikBvhrC4yICz+87i0fMdRRMw+4RDRNJVkOTidr6EdacBZ
-VEhRT8JE/e0BVAoeAjdevI/EdKTWuYJxl1bQTnbs8l4nTDhNYHlwgjqoAVnUsGLC
-Xhi6smPLTFexZ+ayB/qEuolsqvYMvHrC4455o15f/SwhhoBUBEhMESua8xKJMmnj
-27kLnuKK+Uabeex+ni8UfIEeWIH2VkIlIu/sKgPulJbTF8wq7vkToMF6G12qikFE
-eyKnfo9EyI4fnLy8F7o0X5xx15OM9+lKFwOVDP+Wy6V8mhhWAsn2v8Kk6Rw/SINr
-K6UQt5plv4Gh91GItTxoaRbq6eJk+Roub8CAJad22+8m7Qeq3lR5PzfWeptss+Z+
-UyDv3vEXJIj4CR7BeWZVp1+OVzUjBHJX/tAU8kAJzxmiPK8kaR8EG+tJz7OCRClR
-44+aEhAq1vi8fqLdONUkgFyu8RBsFMgEPj/khJruyaF4ribTM3ubuZYb3Cm8eKis
-BrhyLsDeAMD22hfMTQ07
-=klCV
+iEYEAREIAAYFAlIqMusACgkQCaWpQKGI+9Q25wCfREDbzOSuzjsiNAuQPJ3L138g
+55AAn155LecqkENLQQC8fNWXueB0Rz/+
+=KcFz
 -----END PGP SIGNATURE-----
diff --git a/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.0.1d-r2.ebuild b/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.0.1d-r2.ebuild
new file mode 100644
index 000000000000..282b98d547cb
--- /dev/null
+++ b/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.0.1d-r2.ebuild
@@ -0,0 +1,90 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-firewall/arno-iptables-firewall/arno-iptables-firewall-2.0.1d-r2.ebuild,v 1.1 2013/09/06 19:54:18 pacho Exp $
+
+EAPI=5
+inherit readme.gentoo systemd
+
+DESCRIPTION="Arno's iptables firewall script"
+HOMEPAGE="http://rocky.eld.leidenuniv.nl"
+SRC_URI="http://rocky.eld.leidenuniv.nl/${PN}/${PN}_${PV}.tar.gz"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+IUSE="+plugins"
+
+# sys-apps/coreutils dependency wrt
+# https://bugs.gentoo.org/show_bug.cgi?id=448716
+
+DEPEND=""
+RDEPEND="net-firewall/iptables
+	|| ( <sys-apps/coreutils-8.20 >sys-apps/coreutils-8.20-r1 )
+	sys-apps/iproute2
+	plugins? ( net-dns/bind-tools )"
+
+S="${WORKDIR}/${PN}_${PV}"
+
+DISABLE_AUTOFORMATTING="yes"
+DOC_CONTENTS="You will need to configure /etc/${PN}/firewall.conf
+before using this package. To start the script, run:
+
+/etc/init.d/${PN} start (for openRC)
+systemctl start ${PN} (for Systemd)
+
+If you want to start this script at boot, run:
+
+rc-update add ${PN} default (for openRC)
+systemctl enable ${PN} (for Systemd)"
+
+src_prepare() {
+	sed -i -e 's:/usr/local/share/:/usr/libexec/:' \
+		etc/"${PN}"/firewall.conf || die "Sed failed!"
+}
+
+src_install() {
+
+	insinto /etc/"${PN}"
+	doins etc/"${PN}"/firewall.conf
+	doins etc/"${PN}"/custom-rules
+
+	doinitd "${FILESDIR}/${PN}"
+	systemd_dounit "${FILESDIR}/${PN}.service"
+
+	dobin bin/arno-fwfilter
+	dosbin bin/"${PN}"
+
+	insinto /usr/libexec/"${PN}"
+	doins share/"${PN}"/environment
+
+	dodoc CHANGELOG README
+	readme.gentoo_create_doc
+
+	if use plugins
+	then
+		insinto /etc/"${PN}"/plugins
+		doins etc/"${PN}"/plugins/*
+
+		insinto /usr/libexec/"${PN}"/plugins
+		doins share/"${PN}"/plugins/*.plugin
+
+		exeinto /usr/libexec/"${PN}"/plugins
+		doexe share/"${PN}"/plugins/dyndns-host-open-helper
+		doexe share/"${PN}"/plugins/traffic-accounting-helper
+		doexe share/"${PN}"/plugins/traffic-accounting-log-rotate
+		doexe share/"${PN}"/plugins/traffic-accounting-show
+
+		docinto plugins
+		dodoc share/"${PN}"/plugins/*.CHANGELOG
+	fi
+
+	doman share/man/man1/arno-fwfilter.1 \
+		share/man/man8/"${PN}".8
+}
+
+pkg_postinst () {
+	ewarn "When you stop this script, all firewall rules are flushed!"
+	ewarn "Make sure to not use multiple firewall scripts simultaneously"
+	ewarn "unless you know what you are doing!"
+	readme.gentoo_print_elog
+}
diff --git a/net-firewall/arno-iptables-firewall/files/arno-iptables-firewall.service b/net-firewall/arno-iptables-firewall/files/arno-iptables-firewall.service
new file mode 100644
index 000000000000..e663f08a08eb
--- /dev/null
+++ b/net-firewall/arno-iptables-firewall/files/arno-iptables-firewall.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=A secure stateful firewall for both single and multi-homed machine
+Before=network.target
+Wants=network.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/sbin/arno-iptables-firewall start
+ExecStop=/usr/sbin/arno-iptables-firewall stop
+ExecReload=/usr/sbin/arno-iptables-firewall force-reload
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target