--- portsentry-1.2.orig/README.install +++ portsentry-1.2/README.install @@ -93,7 +93,7 @@ ADVANCED_PORTS_TCP - A number indicating the highest port number to monitor down from. Any port *below* this number is then monitored. The default is 1024 (reserved port range), but can be made as large as 65535 -(system max). I don't recommend going over 1024 with this option. +(system max). It's not recommended going over 1024 with this option. ADVANCED_PORTS_UDP - Same as above, except for UDP. @@ -141,7 +141,7 @@ target host will get routed to this address so don't mess this up. More modern route commands will include a "-blackhole" or "-reject" flag. Check your man(1) pages and if your route command supports this feature -you should use it (although we recommend using packet filtering +you should use it (although it's recommended using packet filtering instead, see below). Also be aware that this creates what is known as an "asynchronous @@ -203,8 +203,8 @@ PORT_BANNER - A text banner you want displayed to the connecting host if the PortSentry is activated. Leave this commented out if you don't want this -feature. If you do use it, try not to taunt the person too badly. We -recommend keeping it professional and to the point. The banner is *not* +feature. If you do use it, try not to taunt the person too badly. It's +recommended keeping it professional and to the point. The banner is *not* displayed when stealth scan detection modes are used. @@ -213,7 +213,7 @@ Pull the portsentry.ignore file into your editor and add in any host you want to have ignored if it connects to a tripwired port. This should always contain at least the localhost (127.0.0.1) and the IP's of the local -interfaces. We would *not* recommend putting in every machine IP on your +interfaces. It's *not* recommend putting in every machine IP on your network, but you can use a netmask to do this. Format for this is: / @@ -222,7 +222,7 @@ 192.168.0.0/16 etc. -We don't recommend ignoring too much. It may be important for you to see +It's not recommended ignoring too much. It may be important for you to see who is connecting to you, even if it is a "friendly" machine. This can help you detect internal host compromises faster. To answer your paranoia, yes this does happen and we've had cases of admins ignoring too much and @@ -374,8 +374,7 @@ it should be screaming at you. If you do a netstat -rn you will see the suspect host pointed at the dead -route you supplied (unless using a packet filter, which is what we -recommend). +route you supplied (unless using a packet filter, which is recommended). Drop the PortSentry commands in a startup file and get back to work as you are done. @@ -466,7 +465,7 @@ Or you can simply flush your packet filters. -That's about it. We highly recommend you use Logcheck to keep an eye +That's about it. It's highly recommended you use Logcheck to keep an eye on things in the log files as well so you can detect other problems, and see what the PortSentry is saying to you. You can find this program at: --- portsentry-1.2.orig/portsentry_config.h +++ portsentry-1.2/portsentry_config.h @@ -23,6 +23,10 @@ /* These are probably ok. Be sure you change the Makefile if you */ /* change the path */ #define CONFIG_FILE "/usr/local/psionic/portsentry/portsentry.conf" +#ifdef DEBIAN +# undef CONFIG_FILE +# define CONFIG_FILE "/etc/portsentry/portsentry.conf" +#endif /* The location of Wietse Venema's TCP Wrapper hosts.deny file */ #define WRAPPER_HOSTS_DENY "/etc/hosts.deny" --- portsentry-1.2.orig/Makefile +++ portsentry-1.2/Makefile @@ -26,7 +26,7 @@ #CC = gcc # Normal systems flags -CFLAGS = -O -Wall +CFLAGS = -g -O -Wall # Debug mode for portsentry #CFLAGS = -Wall -g -DNODAEMON -DDEBUG @@ -60,7 +60,7 @@ @echo "Any existing files will be overwritten." clean: - /bin/rm ./portsentry + /bin/rm -f ./portsentry uninstall: /bin/rm $(INSTALLDIR)$(CHILDDIR)/* --- portsentry-1.2.orig/portsentry.conf.Debian +++ portsentry-1.2/portsentry.conf.Debian @@ -0,0 +1,303 @@ +# PortSentry Configuration +# +# $Id: portsentry.conf.Debian,v 1.6 2001/07/19 21:02:20 agx Exp $ +# +# Original portsentry.conf by Craig H. Rowland +# modified for Debian by Guido Guenther +# +# IMPORTANT NOTE: You CAN NOT put spaces between your port arguments. +# +# The default ports will catch a large number of common probes +# +# All entries must be in quotes. + + +####################### +# Port Configurations # +####################### +# +# +# Some example port configs for classic and basic Stealth modes +# +# I like to always keep some ports at the "low" end of the spectrum. +# This will detect a sequential port sweep really quickly and usually +# these ports are not in use (i.e. tcpmux port 1) +# +# ** X-Windows Users **: If you are running X on your box, you need to be sure +# you are not binding PortSentry to port 6000 (or port 2000 for OpenWindows users). +# Doing so will prevent the X-client from starting properly. +# +# These port bindings are *ignored* for Advanced Stealth Scan Detection Mode. +# + +# Un-comment these if you are really anal: +#TCP_PORTS="1,7,9,11,15,70,79,80,109,110,111,119,138,139,143,512,513,514,515,540,635,1080,1524,2000,2001,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320" +#UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321" +# +# Use these if you just want to be aware: +TCP_PORTS="1,11,15,79,111,119,143,540,635,1080,1524,2000,5742,6667,12345,12346,20034,27665,31337,32771,32772,32773,32774,40421,49724,54320" +UDP_PORTS="1,7,9,69,161,162,513,635,640,641,700,37444,34555,31335,32770,32771,32772,32773,32774,31337,54321" +# +# Use these for just bare-bones +#TCP_PORTS="1,11,15,110,111,143,540,635,1080,1524,2000,12345,12346,20034,32771,32772,32773,32774,49724,54320" +#UDP_PORTS="1,7,9,69,161,162,513,640,700,32770,32771,32772,32773,32774,31337,54321" + +########################################### +# Advanced Stealth Scan Detection Options # +########################################### +# +# This is the number of ports you want PortSentry to monitor in Advanced mode. +# Any port *below* this number will be monitored. Right now it watches +# everything below 1024. +# +# On many Linux systems you cannot bind above port 61000. This is because +# these ports are used as part of IP masquerading. I don't recommend you +# bind over this number of ports. Realistically: I DON'T RECOMMEND YOU MONITOR +# OVER 1024 PORTS AS YOUR FALSE ALARM RATE WILL ALMOST CERTAINLY RISE. You've been +# warned! Don't write me if you have have a problem because I'll only tell +# you to RTFM and don't run above the first 1024 ports. +# +# +ADVANCED_PORTS_TCP="1024" +ADVANCED_PORTS_UDP="1024" +# +# This field tells PortSentry what ports (besides listening daemons) to +# ignore. This is helpful for services like ident that services such +# as FTP, SMTP, and wrappers look for but you may not run (and probably +# *shouldn't* IMHO). +# +# By specifying ports here PortSentry will simply not respond to +# incoming requests, in effect PortSentry treats them as if they are +# actual bound daemons. The default ports are ones reported as +# problematic false alarms and should probably be left alone for +# all but the most isolated systems/networks. +# +# Default TCP ident and NetBIOS service +ADVANCED_EXCLUDE_TCP="113,139" +# Default UDP route (RIP), NetBIOS, bootp broadcasts. +ADVANCED_EXCLUDE_UDP="520,138,137,67" + + +###################### +# Configuration Files# +###################### +# +# Hosts to ignore +IGNORE_FILE="/etc/portsentry/portsentry.ignore" +# Hosts that have been denied (running history) +HISTORY_FILE="/var/lib/portsentry/portsentry.history" +# Hosts that have been denied this session only (temporary until next restart) +BLOCKED_FILE="/var/lib/portsentry/portsentry.blocked" + +############################## +# Misc. Configuration Options# +############################## +# +# DNS Name resolution - Setting this to "1" will turn on DNS lookups +# for attacking hosts. Setting it to "0" (or any other value) will shut +# it off. +RESOLVE_HOST = "0" + +################### +# Response Options# +################### +# Options to dispose of attacker. Each is an action that will +# be run if an attack is detected. If you don't want a particular +# option then comment it out and it will be skipped. +# +# The variable $TARGET$ will be substituted with the target attacking +# host when an attack is detected. The variable $PORT$ will be substituted +# with the port that was scanned. +# +################## +# Ignore Options # +################## +# These options allow you to enable automatic response +# options for UDP/TCP. This is useful if you just want +# warnings for connections, but don't want to react for +# a particular protocol (i.e. you want to block TCP, but +# not UDP). To prevent a possible Denial of service attack +# against UDP and stealth scan detection for TCP, you may +# want to disable blocking, but leave the warning enabled. +# I personally would wait for this to become a problem before +# doing though as most attackers really aren't doing this. +# The third option allows you to run just the external command +# in case of a scan to have a pager script or such execute +# but not drop the route. This may be useful for some admins +# who want to block TCP, but only want pager/e-mail warnings +# on UDP, etc. +# +# +# 0 = Do not block UDP/TCP scans. +# 1 = Block UDP/TCP scans. +# 2 = Run external command only (KILL_RUN_CMD) + +BLOCK_UDP="0" +BLOCK_TCP="0" + +################### +# Dropping Routes:# +################### +# This command is used to drop the route or add the host into +# a local filter table. +# +# The gateway (333.444.555.666) should ideally be a dead host on +# the *local* subnet. On some hosts you can also point this at +# localhost (127.0.0.1) and get the same effect. NOTE THAT +# 333.444.555.66 WILL *NOT* WORK. YOU NEED TO CHANGE IT!! +# +# ALL KILL ROUTE OPTIONS ARE COMMENTED OUT INITIALLY. Make sure you +# uncomment the correct line for your OS. If you OS is not listed +# here and you have a route drop command that works then please +# mail it to me so I can include it. ONLY ONE KILL_ROUTE OPTION +# CAN BE USED AT A TIME SO DON'T UNCOMMENT MULTIPLE LINES. +# +# NOTE: The route commands are the least optimal way of blocking +# and do not provide complete protection against UDP attacks and +# will still generate alarms for both UDP and stealth scans. I +# always recommend you use a packet filter because they are made +# for this purpose. +# + +# Generic +#KILL_ROUTE="/sbin/route add $TARGET$ 333.444.555.666" + +# Generic Linux +#KILL_ROUTE="/sbin/route add -host $TARGET$ gw 333.444.555.666" + +# Newer versions of Linux support the reject flag now. This +# is cleaner than the above option. +KILL_ROUTE="/sbin/route add -host $TARGET$ reject" + +# Generic BSD (BSDI, OpenBSD, NetBSD, FreeBSD) +#KILL_ROUTE="/sbin/route add $TARGET$ 333.444.555.666" + +# Generic Sun +#KILL_ROUTE="/usr/sbin/route add $TARGET$ 333.444.555.666 1" + +# NEXTSTEP +#KILL_ROUTE="/usr/etc/route add $TARGET$ 127.0.0.1 1" + +# FreeBSD +#KILL_ROUTE="route add -net $TARGET$ -netmask 255.255.255.255 127.0.0.1 -blackhole" + +# Digital UNIX 4.0D (OSF/1 / Compaq Tru64 UNIX) +#KILL_ROUTE="/sbin/route add -host -blackhole $TARGET$ 127.0.0.1" + +# Generic HP-UX +#KILL_ROUTE="/usr/sbin/route add net $TARGET$ netmask 255.255.255.0 127.0.0.1" + +## +# Using a packet filter is the PREFERRED. The below lines +# work well on many OS's. Remember, you can only uncomment *one* +# KILL_ROUTE option. +## + +# ipfwadm support for Linux +#KILL_ROUTE="/sbin/ipfwadm -I -i deny -S $TARGET$ -o" +# +# ipfwadm support for Linux (no logging of denied packets) +#KILL_ROUTE="/sbin/ipfwadm -I -i deny -S $TARGET$" +# +# ipchain support for Linux +#KILL_ROUTE="/sbin/ipchains -I input -s $TARGET$ -j DENY -l" +# +# ipchain support for Linux (no logging of denied packets) +#KILL_ROUTE="/sbin/ipchains -I input -s $TARGET$ -j DENY" +# +# iptables support for Linux +#KILL_ROUTE="/sbin/iptables -I INPUT -s $TARGET$ -j DROP" +# +# iptables support for Linux with limit and LOG support. Logs only +# a limited number of packets to avoid a denial of service attack. +# KILL_ROUTE="/sbin/iptables -I INPUT -s $TARGET$ -j DROP && /sbin/iptables -I INPUT -s $TARGET$ -m limit --limit 3/minute --limit-burst 5 -j LOG --log-level DEBUG --log-prefix 'Portsentry: dropping: '" +# +# For those of you running FreeBSD (and compatible) you can +# use their built in firewalling as well. +# +#KILL_ROUTE="/sbin/ipfw add 1 deny all from $TARGET$:255.255.255.255 to any" +# +# +# For those running ipfilt (OpenBSD, etc.) +# NOTE THAT YOU NEED TO CHANGE external_interface TO A VALID INTERFACE!! +# +#KILL_ROUTE="/bin/echo 'block in log on external_interface from $TARGET$/32 to any' | /sbin/ipf -f -" + + +############### +# TCP Wrappers# +############### +# This text will be dropped into the hosts.deny file for wrappers +# to use. There are two formats for TCP wrappers: +# +# Format One: Old Style - The default when extended host processing +# options are not enabled. +# +#KILL_HOSTS_DENY="ALL: $TARGET$" + +# Format Two: New Style - The format used when extended option +# processing is enabled. You can drop in extended processing +# options, but be sure you escape all '%' symbols with a backslash +# to prevent problems writing out (i.e. \%c \%h ) +# +KILL_HOSTS_DENY="ALL: $TARGET$ : DENY" + +################### +# External Command# +################### +# This is a command that is run when a host connects, it can be whatever +# you want it to be (pager, etc.). This command is executed before the +# route is dropped or after depending on the KILL_RUN_CMD_FIRST option below +# +# +# I NEVER RECOMMEND YOU PUT IN RETALIATORY ACTIONS AGAINST THE HOST SCANNING +# YOU! +# +# TCP/IP is an *unauthenticated protocol* and people can make scans appear out +# of thin air. The only time it is reasonably safe (and I *never* think it is +# reasonable) to run reverse probe scripts is when using the "classic" -tcp mode. +# This mode requires a full connect and is very hard to spoof. +# +# The KILL_RUN_CMD_FIRST value should be set to "1" to force the command +# to run *before* the blocking occurs and should be set to "0" to make the +# command run *after* the blocking has occurred. +# +#KILL_RUN_CMD_FIRST = "0" +# +# +#KILL_RUN_CMD="/some/path/here/script $TARGET$ $PORT$ $MODE$" +# for examples see /usr/share/doc/portsentry/examples/ + + +##################### +# Scan trigger value# +##################### +# Enter in the number of port connects you will allow before an +# alarm is given. The default is 0 which will react immediately. +# A value of 1 or 2 will reduce false alarms. Anything higher is +# probably not necessary. This value must always be specified, but +# generally can be left at 0. +# +# NOTE: If you are using the advanced detection option you need to +# be careful that you don't make a hair trigger situation. Because +# Advanced mode will react for *any* host connecting to a non-used +# port below your specified range, you have the opportunity to +# really break things. (i.e someone innocently tries to connect to +# you via SSL [TCP port 443] and you immediately block them). Some +# of you may even want this though. Just be careful. +# +SCAN_TRIGGER="0" + +###################### +# Port Banner Section# +###################### +# +# Enter text in here you want displayed to a person tripping the PortSentry. +# I *don't* recommend taunting the person as this will aggravate them. +# Leave this commented out to disable the feature +# +# Stealth scan detection modes don't use this feature +# +#PORT_BANNER="** UNAUTHORIZED ACCESS PROHIBITED *** YOUR CONNECTION ATTEMPT HAS BEEN LOGGED. GO AWAY." + +# EOF --- portsentry-1.2.orig/portsentry.c +++ portsentry-1.2/portsentry.c @@ -1581,8 +1581,8 @@ Usage (void) { printf ("PortSentry - Port Scan Detector.\n"); - printf ("Copyright 1997-2003 Craig H. Rowland \n"); + printf ("Copyright 1997-2003 Craig H. Rowland \n"); printf ("Licensing restrictions apply. Please see documentation\n"); printf ("Version: %s\n\n", VERSION); #ifdef SUPPORT_STEALTH --- portsentry-1.2.orig/portsentry.ignore.static +++ portsentry-1.2/portsentry.ignore.static @@ -0,0 +1,26 @@ +# /etc/portsentry/portsentry.ignore.static +# +# Keep 127.0.0.1 and 0.0.0.0 to keep people from playing games. +# Put hosts in here you never want blocked. This includes the IP addresses +# of all local interfaces on the protected host (i.e virtual host, mult-home) +# Keep 127.0.0.1 and 0.0.0.0 to keep people from playing games. +# +# Upon start of portsentry(8) via /etc/init.d/portsentry this file +# will be merged into portsentry.ignore. +# +# PortSentry can support full netmasks for networks as well. Format is: +# +# / +# +# Example: +# +# 192.168.2.0/24 +# 192.168.0.0/16 +# 192.168.2.1/32 +# Etc. +# +# If you don't supply a netmask it is assumed to be 32 bits. +# +# +127.0.0.1/32 +0.0.0.0 --- portsentry-1.2.orig/scripts/portsentry-rm-ip +++ portsentry-1.2/scripts/portsentry-rm-ip @@ -0,0 +1,40 @@ +#!/usr/bin/perl -w +# $Id: portsentry-rm-ip,v 1.3 2001/07/01 22:51:00 agx Exp $ +# +# remove an IP from portsentry.ignore.static file +# +# by Guido Guenther + +use File::Temp qw( tempfile ); + +$etcdir='/etc/portsentry'; +$static_file="$etcdir/portsentry.ignore.static"; +$tmpdir="/var/lib/portsentry"; +$ip_regexp='[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'; + +if( @ARGV == 0) { + die +"Remove an ip from portsentry.ignore.static. +usage: portsentry-add-ip ip-address\n"; +} else { + $rm_ip = $ARGV[0]; +} + +if ( $rm_ip !~ /^$ip_regexp$/) { + die "$rm_ip is not in aaa.bbb.ccc.ddd format!\n"; +} + +open( P, "$static_file") || die "Can't read $static_file: $!\n"; +@ignored_ips =

; +close( P); + +($th, $tfname) = tempfile("portsentry.ignore.static.XXXXXX", DIR => $tmpdir); + +# write out everything except the mathing ip +@tmp_ips=grep( !/^\s*$rm_ip[\s#]/, @ignored_ips); +print $th @tmp_ips; +close( $th); + +# move temp-file to portsentry.ignore.static +rename($tfname, $static_file); +chmod( 0644, $static_file ); --- portsentry-1.2.orig/scripts/portsentry-add-ip +++ portsentry-1.2/scripts/portsentry-add-ip @@ -0,0 +1,38 @@ +#!/usr/bin/perl -w +# $Id: portsentry-add-ip,v 1.3 2001/07/01 22:51:00 agx Exp $ +# +# add an IP to portsentry.ignore.static file +# by Guido Guenther + +$etcdir='/etc/portsentry'; +$static_file='portsentry.ignore.static'; +$ip_regexp='[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'; + +if( @ARGV == 0) {die "Adds an ip to portsentry.ignore.static.\ +usage: portsentry-add-ip ip-address\n";} +else { + $new_ip = $ARGV[0]; +} + +# do sanity check on given ip +if ( $new_ip !~ /^$ip_regexp$/) { + die "$new_ip is not in aaa.bbb.ccc.ddd format!\n"; +} +print "Debug: trying to add $new_ip\n" if defined($DEBUG); + +# read ignore file +open( P, "$etcdir/$static_file") || die "Can't read $etcdir/$static_file: $!\n"; +@ignored_ips =

; +close( P); + +# reopen it for writing +$mode='>>'; +open( P, "$mode$etcdir/$static_file") || die "Can't write to $etcdir/$static_file: $!\n"; + +# check if ip is already in the ignore file, if not append it +if( !grep( /^\s*$new_ip[\s#]/, @ignored_ips)) { + print "Debug: adding $new_ip!\n" if defined($DEBUG); + print P "$new_ip\n"; +} +close( P); + --- portsentry-1.2.orig/scripts/portsentry-build-ignore-file +++ portsentry-1.2/scripts/portsentry-build-ignore-file @@ -0,0 +1,50 @@ +#!/usr/bin/perl -w +# $Id: portsentry-build-ignore-file,v 1.9 2004/09/30 18:38:13 agx Exp $ +# +# build portsentry.ignore from portsentry.ignore.static and +# all other IPs found on this host +# +# by Guido Guenther +# +# it was inspired by ignore.csh provided with the original +# portsentry package (see /usr/share/doc/portsentry/examples/ignore.csh) + +use strict; +use File::Temp qw( tempfile ); + +my $etcdir="/etc/portsentry"; +my $static_file="$etcdir/portsentry.ignore.static";# static IPs +my $ignore_file="$etcdir/portsentry.ignore"; # build this one +my $tmpdir="/var/lib/portsentry"; +my $ip_re='[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'; +my $ipnm_re='[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}(/[0-9]{1,2})?'; + +(my $th, my $tfname) = tempfile("portsentry.ignore.static.XXXXXX", DIR => $tmpdir); +# build file header +print $th "# $ignore_file: Contains all IPs portsentry(8) +\# will never block. +\# +\# This file was generated by $0. +\# DO NOT EDIT - edit $static_file instead and use +\# \"/etc/init.d/portsentry restart\" to reload the configuration.\n\n"; + +# insert $static_file: +open( Q, "$static_file") || die "Cannot open $static_file: $!\n"; +my @static_ips = grep( /^\s*$ipnm_re\s*(#|$)/, ); +close(Q); +print $th "\# IPs from $static_file:\n"; +print $th @static_ips; + +# insert dynamic IPs +print $th "\n\# dynamically fetched IPs(via ifconfig -a):\n"; +my @dyn_ips = grep( /inet/, `LC_ALL=C /sbin/ifconfig -a`); +foreach my $i (@dyn_ips) { + if ($i =~ /addr:($ip_re)/) { +# XXX: this is too lax, need to check subnet matches here too + print $th "$1\n" if !grep( /^\s*$1[\s#]/, @static_ips); + } +} + +close( $th ) || die "Cannot close $tfname: $!\n"; +system( "/bin/mv","-f", $tfname, $ignore_file) && die "moving $ignore_file into place failed: $?\n"; +chmod( 0644, $ignore_file ); --- portsentry-1.2.orig/debian/dirs +++ portsentry-1.2/debian/dirs @@ -0,0 +1,7 @@ +usr/sbin +usr/lib/portsentry +var/lib/portsentry +etc/portsentry +etc/default +etc/ppp/ip-up.d +etc/ppp/ip-down.d --- portsentry-1.2.orig/debian/postrm +++ portsentry-1.2/debian/postrm @@ -0,0 +1,28 @@ +#!/bin/sh -e +# $Id: postrm,v 1.5 2001/07/11 21:12:47 agx Exp $ + +ETCDIR="/etc/portsentry" +VARDIR="/var/lib/portsentry" +STARTUP="/etc/default/portsentry" + +#DEBHELPER# + +# Be sure to clean up the history files upon purge +if [ "$1" = "purge" ] +then + if [ \( -e $ETCDIR \) -o \( -e $STARTUP \) ]; then + echo -n "Purging additional configuration files..." + rm -f $ETCDIR/portsentry.ignore + rmdir --ignore-fail-on-non-empty $ETCDIR + rm -f $STARTUP + echo "done." + fi + if [ -e $VARDIR ]; then + echo -n "Purging history files..." + rm -f $VARDIR/portsentry.blocked.*tcp + rm -f $VARDIR/portsentry.blocked.*udp + rm -f $VARDIR/portsentry.history + rmdir --ignore-fail-on-non-empty $VARDIR + echo "done." + fi +fi --- portsentry-1.2.orig/debian/portsentry.8 +++ portsentry-1.2/debian/portsentry.8 @@ -0,0 +1,151 @@ +.TH PORTSENTRY 8 +.\" NAME should be all caps, SECTION should be 1-8, maybe w/ subsection +.\" other parms are allowed: see man(7), man(1) +.SH NAME +portsentry \- detect portscan activity +.SH SYNOPSIS +.B portsentry +.I "[ \-tcp | \-stcp | \-atcp ]" +.br +.B portsentry +.I "[ \-udp | \-sudp | \-audp ]" +.SH "DESCRIPTION" +This manual page documents briefly the +.BR portsentry +command. +This manual page was written for the Debian GNU/Linux distribution +because the original program does not have a manual page. +.PP +.B portsentry +is a program that tries to detect portscans on network interfaces with the ability to detect stealth scans. On alarm portsentry can block the scanning machine via hosts.deny (see +.BR hosts_access (5), +firewall rule (see +.BR ipfwadm (8) , +.BR ipchains (8) +and +.BR iptables (8)) +or dropped route (see +.BR route (8)). +.SH OPTIONS +For details on the various modes see +.I /usr/share/doc/portsentry/README.install +. +.TP +.B \-tcp +tcp portscan detection on ports specified under +.I TCP_PORTS +in the config file +.IR /etc/portsentry/portsentry.conf . +.TP +.B \-stcp +As above but additionally detect stealth scans. +.TP +.B \-atcp +Advanced tcp or inverse mode. Portsentry binds to all unused ports below +.I ADVANCED_PORTS_TCP +given in the config file +.IR /etc/portsentry/portsentry.conf . + +.TP +.B \-udp +udp portscan detection on ports specified under +.I UDP_PORTS +in the config file +.IR /etc/portsentry/portsentry.conf . +.TP +.B \-sudp +As above but additionally detect "stealth" scans. +.TP +.B \-audp +Advanced udp or inverse mode. Portsentry binds to all unused ports below +.I ADVANCED_PORTS_UDP +given in the config file +.IR /etc/portsentry/portsentry.conf . + +.SH "CONFIGURATION FILES" +.B portsentry +keeps all its configuration files in +.BR /etc/portsentry. +.B portsentry.conf +is +.BR portsentry 's +main configuration file. See +.BR portsentry.conf (5) +for details. + +The file +.BR portsentry.ignore +contains a list of all hosts that are ignored, if they connect to a tripwired +port. It should contain at least the localhost(127.0.0.1), 0.0.0.0 and the IP addresses of all local interfaces. You can ignore whole subnets by using a notation /. It is *not* recommend putting in every machine IP on your network. It may be important for you to see who is connecting to you, even if it is a "friendly" machine. This can help you detect internal host compromises faster. + +If you use the +.IR /etc/init.d/portsentry +script to start the daemon, +.BR portsentry.ignore +is rebuild on each start of the daemon using +.BR portsentry.ignore.static +and all the IP addresses found on the machine via +.BR ifconfig . + +.BR /etc/default/portsentry +specifies in which protocol modes +.B portsentry +should be startet from +.IR /etc/init.d/portsentry +There are currently two options: +.TP +.B TCP_MODE= +either +.BR tcp ", " stcp " or " atcp " (see " OPTIONS " above)." +.TP +.B UDP_MODE= +either +.BR udp ", " sudp " or " audp " (see " OPTIONS " above)." + +.PP +The options above correspond to portsentry's commandline arguments. For example +.B TCP_MODE="atcp" +has the same effect as to start portsentry using +.BR portsentry " " -atcp. +Only one mode per protocol can be started at a time (i.e. one tcp and one udp mode). + +.SH "FILES" +.BR /etc/portsentry/portsentry.conf +main configuration file +.TP +.BR /etc/portsentry/portsentry.ignore +IP addresses to ignore +.TP +.BR /etc/portsentry/portsentry.ignore.static +static IP addresses to ignore +.TP +.BR /etc/default/portsentry +startup options +.TP +.BR /etc/init.d/portsentry +script responsible for starting and stopping the daemon +.TP +.BR /var/lib/portsentry/portsentry.blocked.* +blocked hosts(cleared upon reload) +.TP +.BR /var/lib/portsentry/portsentry.history +history file +.LP +.SH "SEE ALSO" +.BR portsentry.conf(5), +.BR hosts_access(5), +.BR hosts_options(5), +.BR route(8), +.BR ipfwadm(8), +.BR ipchains(8), +.BR iptables(8), +.BR ifconfig(8) + +.BR /usr/share/doc/portsentry/README.install +.LP +.SH AUTHOR +.B portsentry +was written by Craig H. Howland +.B . + +This manual page was stitched together by Guido Guenther , for the Debian GNU/Linux system (but may be used by others). Some parts are just a cut and paste from the original documentation. --- portsentry-1.2.orig/debian/rules +++ portsentry-1.2/debian/rules @@ -0,0 +1,104 @@ +#!/usr/bin/make -f +# MAde with the aid of dh_make, by Craig Small +# Sample debian/rules that uses debhelper. GNU copyright 1997 by Joey Hess. +# Some lines taken from debmake, by Cristoph Lameter. +# modified for portsentry by Guido Guenther +# +# $Id: rules,v 1.9 2003/10/26 18:14:07 agx Exp $ + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + +DEST=`pwd`/debian/`dh_listpackages` +ETCDIR=$(DEST)/etc/portsentry +PPP=$(DEST)/etc/ppp +SCRIPTS=$(DEST)/usr/lib/portsentry +BINDIR = $(DEST)/usr/sbin + +INSTALL=install +INSTALL_PROGRAM = $(INSTALL) -p -o root -g root -m 755 +CFLAGS=-Wall -g + +ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) + CFLAGS += -O0 +else + CFLAGS += -O2 +endif +ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) + INSTALL_PROGRAM += -s +endif + +# auto update .po files +debian/po/templates.pot: debian/templates + @debconf-updatepo + +build: build-stamp debian/po/templates.pot +build-stamp: + dh_testdir + + # Add here commands to compile the package. + $(MAKE) CFLAGS="$(CFLAGS)" -f Makefile debian-linux + + touch build-stamp + +clean: + dh_testdir + dh_testroot + rm -f build-stamp + + # Add here commands to clean up after the build process. + [ ! -f Makefile ] || $(MAKE) -f Makefile clean + + dh_clean + +install: build + dh_testdir + dh_testroot + dh_prep + dh_installdirs + + # Add here commands to install the package into debian/portsentry. + $(INSTALL_PROGRAM) portsentry $(BINDIR) + # install Debian specific stuff + $(INSTALL) --mode=644 portsentry.ignore.static $(ETCDIR) + $(INSTALL) --mode=644 portsentry.conf.Debian $(ETCDIR)/portsentry.conf + $(INSTALL) scripts/portsentry-* $(SCRIPTS) + +# Build architecture-independent files here. +binary-indep: build install +# We have nothing to do by default. + +# Build architecture-dependent files here. +binary-arch: build install + dh_testdir + dh_testroot + dh_installdebconf + dh_installdocs + dh_installexamples + dh_installppp +# dh_installmenu +# dh_installlogrotate +# dh_installemacsen + dh_installinit -u"defaults 99" +# dh_installcron + dh_installman debian/portsentry.8 debian/portsentry.conf.5 + dh_installinfo +# dh_undocumented + dh_installchangelogs + dh_link + dh_strip + dh_compress + dh_fixperms +# dh_makeshlibs + dh_installdeb +# dh_perl + dh_shlibdeps + dh_gencontrol + dh_md5sums + dh_builddeb + +source diff: + @echo >&2 'source and diff are obsolete - use dpkg-source -b'; false + +binary: binary-indep binary-arch +.PHONY: build clean binary-indep binary-arch binary --- portsentry-1.2.orig/debian/portsentry.ppp.ip-up +++ portsentry-1.2/debian/portsentry.ppp.ip-up @@ -0,0 +1,14 @@ +#! /bin/sh -e +# $Id: portsentry.ppp.ip-up,v 1.1 2003/10/26 18:15:02 agx Exp $ +# +# rebuilds /etc/portsentry/portsentry.ignore and restarts the daemon +# reload would be cleaner, but portsentry does not support this + +INIT_SCRIPT=/etc/init.d/portsentry +DAEMON=/usr/sbin/portsentry + +if [ -x $INIT_SCRIPT -a -x $DAEMON ]; then + if [ "`pidof /usr/sbin/portsentry`" ]; then + $INIT_SCRIPT restart + fi +fi --- portsentry-1.2.orig/debian/control +++ portsentry-1.2/debian/control @@ -0,0 +1,22 @@ +Source: portsentry +Section: net +Priority: optional +Maintainer: Bruno Barrera C. +Build-Depends: debhelper (>=7) +Standards-Version: 3.6.2 + +Package: portsentry +Architecture: any +Depends: ${shlibs:Depends}, net-tools, procps, libfile-temp-perl, debconf (>= 1.2.9) | debconf-2.0 +Recommends: tcpd +Suggests: logcheck +Description: Portscan detection daemon + PortSentry has the ability to detect portscans(including stealth scans) on + the network interfaces of your machine. Upon alarm it can block the + attacker via hosts.deny, dropped route or firewall rule. It is part of the + Abacus program suite. + . + Note: If you have no idea what a port/stealth scan is, It's recommended to + have a look at http://sf.net/projects/sentrytools/ before installing this + package. Otherwise you might easily block hosts you'd better not (e.g. your + NFS-server, name-server, etc.). --- portsentry-1.2.orig/debian/compat +++ portsentry-1.2/debian/compat @@ -0,0 +1 @@ +7 --- portsentry-1.2.orig/debian/templates +++ portsentry-1.2/debian/templates @@ -0,0 +1,23 @@ +Template: portsentry/warn_no_block +Type: note +_Description: PortSentry does not block anything by default. + Please note that by default PortSentry takes no action against potential + attackers. It only dumps messages into /var/log/syslog. To change this + edit /etc/portsentry/portsentry.conf. + . + You may also want to check: + /etc/default/portsentry (daemon startup options) and + /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore) + . + For further details see the portsentry(8) and portsentry.conf(5) manpages. + +Template: portsentry/startup_conf_obsolete +Type: note +_Description: startup.conf is obsolete - use /etc/default/portsentry instead + /etc/portsentry/startup.conf is no longer used and /etc/default/portsentry + is used instead. In order to ease the transition I'll do my best to + preserve your settings while copying them over to the new location. + Please check /etc/default/portsentry against /etc/portsentry/startup.conf + and remove it after the installation has finished. + . + Sorry for any inconvenience. --- portsentry-1.2.orig/debian/portsentry.links +++ portsentry-1.2/debian/portsentry.links @@ -0,0 +1 @@ +/usr/share/doc/portsentry/CHANGES.gz /usr/share/doc/portsentry/changelog.gz --- portsentry-1.2.orig/debian/portsentry.ppp.ip-down +++ portsentry-1.2/debian/portsentry.ppp.ip-down @@ -0,0 +1,14 @@ +#! /bin/sh -e +# $Id: portsentry.ppp.ip-down,v 1.1 2003/10/26 18:15:02 agx Exp $ +# +# rebuilds /etc/portsentry/portsentry.ignore and restarts the daemon +# reload would be cleaner, but portsentry does not support this + +INIT_SCRIPT=/etc/init.d/portsentry +DAEMON=/usr/sbin/portsentry + +if [ -x $INIT_SCRIPT -a -x $DAEMON ]; then + if [ "`pidof /usr/sbin/portsentry`" ]; then + $INIT_SCRIPT restart + fi +fi --- portsentry-1.2.orig/debian/copyright +++ portsentry-1.2/debian/copyright @@ -0,0 +1,312 @@ +This package was debianized by Guido Guenther guido.guenther@uni-konstanz.de on +Wed, 8 Sep 1999 16:28:02 +0200. + +It was downloaded from http://sf.net/projects/sentrytools + +Upstream Author: Craig H. Rowland + +© 1997-2003 Craig Rowland + + Common Public License - v 1.0 + + + + THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF + THIS COMMON PUBLIC LICENSE ("AGREEMENT"). ANY USE, + REPRODUCTION OR DISTRIBUTION OF THE PROGRAM CONSTITUTES + RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT. + + + 1. DEFINITIONS + + + "Contribution" means: + + + a) in the case of the initial Contributor, the + initial code and documentation distributed under + this Agreement, and + + b) in the case of each subsequent Contributor: + + + i) changes to the Program, and + + + ii) additions to the Program; + + + where such changes and/or additions to the Program + originate from and are distributed by that + particular Contributor. A Contribution 'originates' + + from a Contributor if it was added to the Program + by such Contributor itself or anyone acting on such + Contributor's behalf. Contributions do not include + + additions to the Program which: (i) are separate + modules of software distributed in conjunction with + + the Program under their own license agreement, and + (ii) are not derivative works of the Program. + + "Contributor" means any person or entity that distributes + the Program. + + "Licensed Patents " mean patent claims licensable by a + Contributor which are necessarily infringed by the use or + sale of its Contribution alone or when combined with the + Program. + + "Program" means the Contributions distributed in + accordance with this Agreement. + + "Recipient" means anyone who receives the Program under + this Agreement, including all Contributors. + + + 2. GRANT OF RIGHTS + + + a) Subject to the terms of this Agreement, each + Contributor hereby grants Recipient a + non-exclusive, worldwide, royalty-free copyright + license to reproduce, prepare derivative works of, + publicly display, publicly perform, distribute and + sublicense the Contribution of such Contributor, if + any, and such derivative works, in source code and + object code form. + + b) Subject to the terms of this Agreement, each + Contributor hereby grants Recipient a + non-exclusive, worldwide, royalty-free patent + license under Licensed Patents to make, use, sell, + offer to sell, import and otherwise transfer the + Contribution of such Contributor, if any, in source + code and object code form. This patent license + shall apply to the combination of the Contribution + and the Program if, at the time the Contribution is + added by the Contributor, such addition of the + Contribution causes such combination to be covered + by the Licensed Patents. The patent license shall + not apply to any other combinations which include + the Contribution. No hardware per se is licensed + hereunder. + + c) Recipient understands that although each + Contributor grants the licenses to its + Contributions set forth herein, no assurances are + provided by any Contributor that the Program does + not infringe the patent or other intellectual + property rights of any other entity. Each + Contributor disclaims any liability to Recipient + for claims brought by any other entity based on + infringement of intellectual property rights or + otherwise. As a condition to exercising the rights + and licenses granted hereunder, each Recipient + hereby assumes sole responsibility to secure any + other intellectual property rights needed, if any. + + For example, if a third party patent license is + required to allow Recipient to distribute the + Program, it is Recipient's responsibility to + acquire that license before distributing the + Program. + + d) Each Contributor represents that to its + knowledge it has sufficient copyright rights in its + Contribution, if any, to grant the copyright + license set forth in this Agreement. + + + 3. REQUIREMENTS + + + A Contributor may choose to distribute the Program in + object code form under its own license agreement, provided + that: + + a) it complies with the terms and conditions of + this Agreement; and + + b) its license agreement: + + i) effectively disclaims on behalf of all + + Contributors all warranties and conditions, express + and implied, including warranties or conditions of + title and non-infringement, and implied warranties + or conditions of merchantability and fitness for a + particular purpose; + + ii) effectively excludes on behalf of all + Contributors all liability for damages, including + direct, indirect, special, incidental and + consequential damages, such as lost profits; + + iii) states that any provisions which differ from + this Agreement are offered by that Contributor + alone and not by any other party; and + + iv) states that source code for the Program is + available from such Contributor, and informs + licensees how to obtain it in a reasonable manner + on or through a medium customarily used for + software exchange. + + When the Program is made available in source code form: + + a) it must be made available under this Agreement; + and + + b) a copy of this Agreement must be included with + each copy of the Program. + + Contributors may not remove or alter any copyright notices + contained within the Program. + + Each Contributor must identify itself as the originator of + its Contribution, if any, in a manner that reasonably + allows subsequent Recipients to identify the originator of + the Contribution. + + + 4. COMMERCIAL DISTRIBUTION + + + Commercial distributors of software may accept certain + responsibilities with respect to end users, business + partners and the like. While this license is intended to + facilitate the commercial use of the Program, the + Contributor who includes the Program in a commercial + product offering should do so in a manner which does not + create potential liability for other Contributors. + Therefore, if a Contributor includes the Program in a + commercial product offering, such Contributor ("Commercial + Contributor") hereby agrees to defend and indemnify every + other Contributor ("Indemnified Contributor") against any + losses, damages and costs (collectively "Losses") arising + from claims, lawsuits and other legal actions brought by a + third party against the Indemnified Contributor to the + extent caused by the acts or omissions of such Commercial + Contributor in connection with its distribution of the + + Program in a commercial product offering. The obligations + in this section do not apply to any claims or Losses + relating to any actual or alleged intellectual property + infringement. In order to qualify, an Indemnified + Contributor must: a) promptly notify the Commercial + Contributor in writing of such claim, and b) allow the + + Commercial Contributor to control, and cooperate with the + Commercial Contributor in, the defense and any related + settlement negotiations. The Indemnified Contributor may + participate in any such claim at its own expense. + + For example, a Contributor might include the Program in a + commercial product offering, Product X. That Contributor + is then a Commercial Contributor. If that Commercial + Contributor then makes performance claims, or offers + warranties related to Product X, those performance claims + and warranties are such Commercial Contributor's + responsibility alone. Under this section, the Commercial + Contributor would have to defend claims against the other + Contributors related to those performance claims and + warranties, and if a court requires any other Contributor + to pay any damages as a result, the Commercial Contributor + must pay those damages. + + 5. NO WARRANTY + + EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE + PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT + WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR + IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR + CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR + FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is solely + responsible for determining the appropriateness of using + and distributing the Program and assumes all risks + associated with its exercise of rights under this + Agreement, including but not limited to the risks and + costs of program errors, compliance with applicable laws, + damage to or loss of data, programs or equipment, and + unavailability or interruption of operations. + + 6. DISCLAIMER OF LIABILITY + + EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER + RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY + FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, + OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION + LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF + LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT + OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE + OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGES. + + 7. GENERAL + + If any provision of this Agreement is invalid or + unenforceable under applicable law, it shall not affect + the validity or enforceability of the remainder of the + terms of this Agreement, and without further action by the + parties hereto, such provision shall be reformed to the + minimum extent necessary to make such provision valid and + enforceable. + + If Recipient institutes patent litigation against a + Contributor with respect to a patent applicable to + software (including a cross-claim or counterclaim in a + lawsuit), then any patent licenses granted by that + Contributor to such Recipient under this Agreement shall + terminate as of the date such litigation is filed. In + addition, if Recipient institutes patent litigation + against any entity (including a cross-claim or + counterclaim in a lawsuit) alleging that the Program + itself (excluding combinations of the Program with other + software or hardware) infringes such Recipient's + patent(s), then such Recipient's rights granted under + Section 2(b) shall terminate as of the date such + litigation is filed. + + All Recipient's rights under this Agreement shall + terminate if it fails to comply with any of the material + terms or conditions of this Agreement and does not cure + such failure in a reasonable period of time after becoming + aware of such noncompliance. If all Recipient's rights + under this Agreement terminate, Recipient agrees to cease + use and distribution of the Program as soon as reasonably + practicable. However, Recipient's obligations under this + Agreement and any licenses granted by Recipient relating + to the Program shall continue and survive. + + Everyone is permitted to copy and distribute copies of + this Agreement, but in order to avoid inconsistency the + Agreement is copyrighted and may only be modified in the + following manner. The Agreement Steward reserves the right + to publish new versions (including revisions) of this + Agreement from time to time. No one other than the + Agreement Steward has the right to modify this Agreement. + IBM is the initial Agreement Steward. IBM may assign the + responsibility to serve as the Agreement Steward to a + suitable separate entity. Each new version of the + Agreement will be given a distinguishing version number. + The Program (including Contributions) may always be + distributed subject to the version of the Agreement under + which it was received. In addition, after a new version of + the Agreement is published, Contributor may elect to + distribute the Program (including its Contributions) under + the new version. Except as expressly stated in Sections + 2(a) and 2(b) above, Recipient receives no rights or + licenses to the intellectual property of any Contributor + under this Agreement, whether expressly, by implication, + estoppel or otherwise. All rights in the Program not + expressly granted under this Agreement are reserved. + + This Agreement is governed by the laws of the State of New + York and the intellectual property laws of the United + States of America. No party to this Agreement will bring a + legal action under this Agreement more than one year after + the cause of action arose. Each party waives its rights to + a jury trial in any resulting litigation. --- portsentry-1.2.orig/debian/init.d +++ portsentry-1.2/debian/init.d @@ -0,0 +1,105 @@ +#! /bin/sh +### BEGIN INIT INFO +# Provides: portsentry +# Required-Start: $remote_fs $syslog $all +# Required-Stop: $remote_fs $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: # start and stop portsentry +### END INIT INFO +# +# $Id: init.d,v 1.7 2002/01/05 14:52:14 agx Exp $ + +PATH=/bin:/usr/bin:/sbin:/usr/sbin +DAEMON=/usr/sbin/portsentry +CONFIG=/etc/default/portsentry +BUILDSCRIPT=/usr/lib/portsentry/portsentry-build-ignore-file + +test -f $DAEMON || exit 0 +test -f $CONFIG || exit 0 +test -f $BUILDSCRIPT || exit 0 + +# source the config file +. $CONFIG + +startup () { + +if [ \( ! "$TCP_MODE" \) -a \( ! "$UDP_MODE" \) ]; then +echo "Not starting anti portscan daemon (no modes in $CONFIG)." + exit 0 +fi + +echo -n "Starting anti portscan daemon: " +# populate portsentry.ignore first +$BUILDSCRIPT + +case "$TCP_MODE" in + "tcp"|"stcp"|"atcp") +# Make sure we're not already listening for tcp scans + if ! ps awx | grep -q "$DAEMON -[as]*tcp" + then + $DAEMON -$TCP_MODE + echo -n "portsentry in $TCP_MODE" + else + TCP_MODE="" + fi + ;; +# do nothing if TCP_MODE is not set + "") + ;; + *) + echo "$TCP_MODE is not a valid mode." + exit 1; + ;; +esac + +case "$UDP_MODE" in + "udp"|"sudp"|"audp") + if ! ps awx | grep -q "$DAEMON -[as]*udp" + then + $DAEMON -$UDP_MODE + if [ "$TCP_MODE" ]; then + echo -n " &" + else + echo -n "portsentry in" + fi + echo -n " $UDP_MODE" + else + UDP_MODE="" + fi + ;; +# do nothing if UDP_MODE is not set + "") + ;; + *) + echo "$UDP_MODE is not a valid mode." + exit 1; + ;; +esac +if [ "$TCP_MODE" -o "$UDP_MODE" ]; then + echo " mode." +fi +} + +case "$1" in + start) + startup + ;; + stop) + echo -n "Stopping anti portscan daemon: portsentry" + start-stop-daemon --stop --quiet --oknodo --exec $DAEMON + echo "." + ;; + restart|force-reload) + echo -n "Stopping anti portscan daemon: portsentry" + start-stop-daemon --stop --quiet --oknodo --exec $DAEMON + echo "." + startup + ;; + *) + echo "Usage: /etc/init.d/portsentry {start|stop|restart|force-reload}" + exit 1 + ;; +esac + +exit 0 --- portsentry-1.2.orig/debian/changelog +++ portsentry-1.2/debian/changelog @@ -0,0 +1,354 @@ +portsentry (1.2-11.3) unstable; urgency=low + + * Non-maintainer upload to fix release goal. + * Fix incorrect provides in init.d script (Closes: #542600). + * Make init.d script depend on $all to start last in the boot sequence + (Closes: #539257). + * Fix typo in portsentry(8) manual page (Closes: #431304). + * Remove redundant code from postinst. The same code is inserted + by dh_installinit. + * Make sure errors are not ignored in prerm. + * Move to debhelper versjon 7. + + -- Petter Reinholdtsen Thu, 17 Sep 2009 00:13:57 +0200 + +portsentry (1.2-11.2) unstable; urgency=low + + * Non-maintainer upload to fix pending l10n issues. + * Add LSB headers to init script. Closes: #462220 + * Debconf translations: + - Vietnamese. Closes: #426849 + - Romanian. Closes: #411385 + - Norwegian Bokmål. Closes: #414463 + - Dutch. Closes: #419404 + - Finnish. Closes: #448189 + - Italian. Closes: #422006 + * [Lintian] Add a copyright mention in debian/copyright + * [Lintian] Do not ignore errors from "make distclean" in + debian/rules + + -- Christian Perrier Wed, 20 Feb 2008 20:02:49 +0100 + +portsentry (1.2-11.1) unstable; urgency=low + + * Non-maintainer upload to fix pending l10n issues. + * Debconf translations: + - German. Closes: #411333 + - Swedish. Closes: #411335 + - Czech. Closes: #411342 + - Galician. Closes: #411384 + - Japanese. Closes: #411389 + - Italian. Closes: 411412 + - Basque. Closes: #411464 + - Russian. Closes: #411539 + - French. Closes: #411570 + - Catalan. Closes: #411750 + + -- Christian Perrier Wed, 21 Feb 2007 07:41:46 +0100 + +portsentry (1.2-11) unstable; urgency=low + + * Updated German (de.po) translation. (closes: #396090) + * Updated Japanese (ja.po) translation. (closes: #393207) + * Added Spanish (es.po) translation. (closes: #404617) + * Added Portuguese (pt.po) translation. (closes: #401276) + * Changed the chown usage in the postinst script. + * Not using first person mode in files anymore. + * Added the #DEBHELPER# token in postinst and prerm. + * Fixed long description in the control file. + + -- Bruno Barrera C. Sun, 29 Oct 2006 18:54:13 -0300 + +portsentry (1.2-10) unstable; urgency=low + + * Added Swedish (sv.po) translation. (closes: #331182) + + -- Bruno Barrera C. Sun, 12 Mar 2006 03:19:16 -0400 + +portsentry (1.2-9) unstable; urgency=low + + * Updated {fr.po,cz.po,vi.po} translations. + (closes: #322928,#322429,#322294) + * Added dependency on debconf-2.0 + * Updated Standars-Version to 3.6.2 + + -- Bruno Barrera C. Sun, 4 Sep 2005 07:59:40 -0400 + +portsentry (1.2-8) unstable; urgency=low + + * Fixed typo in debian/templates. (closes: #316984) + * Added Vietnamese translation. (closes: #316985) + + -- Bruno Barrera C. Sun, 31 Jul 2005 10:57:37 -0400 + +portsentry (1.2-7) unstable; urgency=high + + * Fixed reference to README.Install in manpage. (closes: #307854) + * Fixed typo in scan-detect. (closes: #300793) + * Added Czech debconf translation. (closes: #309229) + + -- Bruno Barrera C. Sun, 5 Jun 2005 09:27:30 -0400 + +portsentry (1.2-6) unstable; urgency=low + + * New Maintainer. + * Fixed typo in portsentry.conf (closes: #283211) + + -- Bruno Barrera C. Sat, 12 Feb 2005 19:45:57 -0300 + +portsentry (1.2-5) unstable; urgency=low + + * add brasilian translation by Tiago Bortoletto Vaz, thanks! + (Closes: #267409) + * fix perl warning in portsentry-build-ignore-file and 'use strict;' + + -- Guido Guenther Mon, 23 Aug 2004 08:44:33 +0200 + +portsentry (1.2-4) unstable; urgency=low + + * add japanese translation by Hideki Yamane, thanks! (Closes: #224173) + * fix portsentry.8 manpage to display properly in UTF8 locales + + -- Guido Guenther Sat, 27 Dec 2003 18:12:30 +0100 + +portsentry (1.2-3) unstable; urgency=low + + * fix URL in copyright file (Closes: #211378) + * us dh_installppp to install ip-{up,down} scripts, thanks to Thomas + Hood for pointing this out (Closes: #212907) + + -- Guido Guenther Sun, 26 Oct 2003 19:10:04 +0100 + +portsentry (1.2-2) unstable; urgency=low + + * echo 4 > debian/compat + * use invoke-rc.d when possible + * add french translation by Michel Grentzinger , + thanks! (Closes: #207110) + * remove obsolete /etc/portsentry/startup.conf from debconf message + * bump Standards-Version to 3.6.1 + * properly match IPs if portsentry.ignore.static doesn't end with a newline + (Closes: #209222) + * use '-e' in the ppp scripts + + -- Guido Guenther Mon, 8 Sep 2003 19:20:45 +0200 + +portsentry (1.2-1) unstable; urgency=low + + * new upstream version + * upstream license change to "common public license 1.0", so we can finally + move to main - yay! (Closes: #201730) + * upstream homepage has moved (Closes: #196397) + * fix upstream email in manpages + * remove multiline strings to make gcc-3.3 happy + * honor DEB_BUILD_OPTIONS + * bump standards version to 3.6.0 + * move to po-debconf (and therefore build-depend on debhelper >=4.1.16) + * finally add catalan translation (Closes: #139738) + * postinst: don't create /usr/doc/portsentry symlink anymore + * debian/copyright: remove (s) from Author(s) to shut up lintian + + -- Guido Guenther Wed, 6 Aug 2003 22:14:38 +0200 + +portsentry (1.1-3) unstable; urgency=low + + * make init.d script more consistent with other startup scripts + (Closes: #121943) + + -- Guido Guenther Sun, 16 Dec 2001 03:12:03 +0100 + +portsentry (1.1-2) unstable; urgency=low + + * move - don't rename - portsentry.ignore (Closes: #112801) + * only restart portsentry if it's already running, when bringing + up ppp + + -- Guido Guenther Wed, 31 Oct 2001 22:41:32 +0100 + +portsentry (1.1-1) unstable; urgency=low + + * new upstream version (Closes: #83858, #89162, #96627, #92946) + * synced manpages + * update kill_cmd-example to honor $MODE$ + * "/e/init.d/portsentry start" gave a confusing message when + portsentry was already running - fixed + * compile with -g as per policy + + -- Guido Guenther Thu, 19 Jul 2001 22:45:41 +0200 + +portsentry (1.0-2) unstable; urgency=low + + * readded proper prerm-script to avoid long downtimes(see #70756) + * got rid of old(<0.99.1-0.40) cruft in preinst + * fixed alignment in debconf templates + * moved startup.conf to /etc/default/portsentry and added a + debconf dialog to explain what's happening + * bumped standards version to 3.5.5 + + -- Guido Guenther Thu, 12 Jul 2001 01:04:28 +0200 + +portsentry (1.0-1.9) unstable; urgency=low + + * moved to debhelper v3 (this handles all conffiles in /etc + automagically) + * cleanup of perl scripts in /u/l/portsentry thereby added + better temp file handling + * added german debconf translation(thanks to Sebastian Feltel) + (Closes: #100516) + * fixed problem in portsentry-build-ignore-file when $LANG!=C + * changed ADVANCED_PORTS_* to 1024. This mostly fixes + #92946 but I leave it open since there is still a bug + in portsentry.c(patch submitted upstream) + * added support for iptables to portsentry.conf(thanks to Dan + Christensen) (Closes: #93244) + * clarified comments in /etc/portsentry.ignore.static + + -- Guido Guenther Sun, 1 Jul 2001 23:54:11 +0200 + +portsentry (1.0-1.8) unstable; urgency=low + + * remove dh_suidregister call in debian/rules + * change references from /usr/doc to /usr/share/doc in manpages + (Closes: #92945) + * fix typo in portsentry-build-ignore-file + * fix wrong filename in first line of portsentry.ignore + * use /var/lib/portsentry instead of /tmp for temporary files + * remove empty subdirs on purge (Closes: #96626) + * install missing credits file + + -- Guido Guenther Sun, 10 Jun 2001 14:01:25 +0200 + +portsentry (1.0-1.7) unstable; urgency=low + + * fix dependencies (Closes: #76878) + + -- Guido Guenther Mon, 13 Nov 2000 00:25:13 +0100 + +portsentry (1.0-1.6) unstable; urgency=low + + * made init.d-script more verbose + * checked policy and bumped standards version to 3.2.1 + * removed various .ex files from debian directory + * do not stop portsentry on upgrades to avoid long downtimes + (see prerm & postinst) (Closes #70756). + + -- Guido Guenther Sat, 16 Sep 2000 09:35:58 +0200 + +portsentry (1.0-1.5) unstable; urgency=low + + * display debconf message only upon first install + * fixed typos and changed maintainer address + + -- Guido Guenther Sun, 13 Aug 2000 22:58:30 +0200 + +portsentry (1.0-1.4) unstable; urgency=low + + * fixed preinst to shut up lintian complaining about missing debhelper token + * the package now uses debconf to display messages during installation + * the kill_cmd example created an unsafe tmpfile - fixed. + + -- Guido Guenther (agx) Sun, 26 Mar 2000 17:33:49 +0200 + +portsentry (1.0-1.3) unstable; urgency=low + + * removed unnecessary echo-calls from postinst + * portsentry-build-ignore-file unsafely created a file in /tmp - fixed. + * debian/rules now uses install instead of cp/chown + * fixed various typos in manpages, scripts, etc. + + -- Guido Guenther (agx) Fri, 24 Mar 2000 08:18:58 +0100 + +portsentry (1.0-1.2) unstable; urgency=low + + * removed "shouldn't" from package description. Closes: #58591 + * renamed portsentry-built-ignore-file to portsentry-build-ignore-file + * postrm did not remove portsentry.ignore upon purge, fixed. + + -- Guido Guenther (agx) Mon, 28 Feb 2000 01:34:54 +0100 + +portsentry (1.0-1.1) unstable; urgency=low + + * fixed the copyright file + + -- Guido Guenther (agx) Tue, 11 Jan 2000 05:44:27 +0100 + +portsentry (1.0-1) unstable; urgency=low + + * moved Build-Depends to source section in control file + * removed perl-base from dependencies since it's an essential package + * changed portsentry.conf.Debian to not block any hosts by default + + -- Guido Guenther (agx) Wed, 8 Dec 1999 21:10:44 +0000 + +portsentry (1.0-0.1) unstable; urgency=low + + * new upstream version + + -- Guido Guenther (agx) Fri, 3 Dec 1999 10:13:57 +0100 + +portsentry (0.99.1-0.42) unstable; urgency=low + + * Makefile.Debian is now obsolete + * cleaned up portsentry-built-ignore-file a bit + + -- Guido Guenther (agx) Wed, 24 Nov 1999 23:28:00 +0100 + +portsentry (0.99.1-0.41) unstable; urgency=low + + * fixed wrong dependency on netstd + * fixed postrm script to also remove dynamically build portsentry.ignore + * added ppp scripts + * changed rules script to set permissions correctly + * switched to cvs + * moved debian specific installation part from Makefile to rules script + * added scan_detect script by Ben Gertzfield to examples + + -- Guido Guenther (agx) Sat, 20 Nov 1999 11:00:48 +0100 + +portsentry (0.99.1-0.40) unstable; urgency=low + + * /etc/init.d/portsentry now checks for dynamic IPs. + * moved to non-free/net + * added /usr/lib/portsentry/portsentry-* scripts + * made startup.conf's format similar to portsentry.conf & logcheck.conf + * adapted manpages to reflect these changes + * again fixed some typos in the manpage :-) + + -- Guido Guenther (agx) Wed, 10 Nov 1999 21:29:56 +0100 + +portsentry (0.99.1-0.32) unstable; urgency=low + + * first build for potato + * switched to gnupg + * fixed some more typos + + -- Guido Guenther (agx) Thu, 30 Sep 1999 22:44:06 +0200 + +portsentry (0.99.1-0.31) unstable; urgency=low + + * Fixed a bad(stupid) link in /usr/doc/portsentry + + -- Guido Guenther Wed, 22 Sep 1999 18:44:54 +0200 + +portsentry (0.99.1-0.3) unstable; urgency=low + + * Fixes typos in the manual page + * renamed portd.conf to startup.conf + * added portsentry.conf(5) manual page + + -- Guido Guenther Wed, 22 Sep 1999 13:18:00 +0200 + +portsentry (0.99.1-0.2) unstable; urgency=low + + * Fixed a bad typo(affecting atcp-mode) in init.d script and portd.conf + + -- Guido Guenther Mon, 20 Sep 1999 11:44:24 +0200 + +portsentry (0.99.1-0.1) unstable; urgency=low + + * Initial Release. + * made Makefile.Debian and portsentry.conf.Debian from original ones + and changed portsentry_config.h to meet debians directory structure + + -- Guido Guenther Wed, 8 Sep 1999 16:28:02 +0200 + --- portsentry-1.2.orig/debian/README.Debian +++ portsentry-1.2/debian/README.Debian @@ -0,0 +1,19 @@ +portsentry for Debian +---------------------- + +See README.install for the various detection modes. + +Note: if you use dynamic IPs (e.g. dhcp), be sure to restart the daemon, after +you received your IP using "/etc/init.d/portsentry restart". The +portsentry.ignore file is then rebuild using "ifconfig -a". If you use ppp +there is no need to do so, since scripts in /etc/ppp/ip-*.d/ handle this for +you. + +PCMCIA users should add "/etc/init.d/portsentry restart" to their +/etc/pcmcia/network.opt's {start,stop}_fn to make sure portsentry's +idea about local interfaces gets updated. + +The blocking of hosts is disabled by default. Change BLOCK_UDP & BLOCK_TCP +in portsentry.conf to enable blocking. + +Guido Guenther , Sun, 1 Jul 2001 04:31:56 +0200 --- portsentry-1.2.orig/debian/TODO +++ portsentry-1.2/debian/TODO @@ -0,0 +1,6 @@ +* portsentry should use pid-files(portsentry.tcp.pid/portsentry.udp.pid) + (patch submitted upstream) +* make portsentry aware of SIGHUP to reread configuration files +* get rid of explicit db_stop in postinst +* debconf: ipchains || iptables, tcp || stcp || atcp +* update portsentry-* scripts to better support netmasks --- portsentry-1.2.orig/debian/portsentry.conf.5 +++ portsentry-1.2/debian/portsentry.conf.5 @@ -0,0 +1,217 @@ +.TH PORTSENTRY.CONF 5 +.\" NAME should be all caps, SECTION should be 1-8, maybe w/ subsection +.\" other parms are allowed: see man(7), man(1) +.SH NAME +portsentry.conf \- portsentrys main configuration file +.SH "DESCRIPTION" +This manual page documents briefly the format of +.BR portsentry s(8) +configuration file. +.SH OPTIONS +.TP +.B TCP_PORTS +A comma delimited string of TCP ports you want PortSentry to +listen to. This string can NOT have any spaces in it. You can put in as +many sockets as you want. PortSentry will try to bind them all up until +the default limit of 64. + +For the stealth scan detection modes, the ports are not "bound" per se, +but they are monitored at the socket level for connections. + +For the Advanced Stealth Scan Detection (see below) this list is *ignored* +.TP +.B UDP_PORTS +The same as above, except for UDP ports. You need to be +very careful with UDP mode as an attacker can forge a port sweep and +make you block any number of hosts. Use this option with caution, or +not at all if your host is a well-known Internet connected system. + +For the Advanced Stealth Scan Detection (see below) this list is *ignored* + +.TP +.B ADVANCED_PORTS_TCP +A number indicating the highest port number to +monitor down from. Any port *below* this number is then monitored. The +default is 1024 (reserved port range), but can be made as large as 65535 +(system max). It's recommended going over 1024 with this option. + +.TP +.B ADVANCED_PORTS_UDP +Same as above, except for UDP. + +.TP +.B ADVANCED_EXCLUDE_TCP +A comma delimited string of TCP ports that should +be manually excluded from monitoring in Advanced mode. These are normally +ports that may get hit by mistake by remote clients and shouldn't cause +alarms (ident, SSL, etc). + +.TP +.B ADVANCED_EXCLUDE_UDP +Same as above, except for UDP. + +.TP +.B IGNORE_FILE +The path to the file that contains IP addresses of hosts you +want to always be ignored. + +.TP +.B BLOCKED_FILE +The path to the file that contains the IP addresses of +blocked hosts. + +.TP +.B RESOLVE_HOST - This option turns off DNS resolution for +hosts. If you have a slow DNS server it may be more effective +to turn off resolution. + +.TP +.B BLOCK_UDP +This option disables all automatic responses to UDP probes. +Because UDP can be easily forged, it may allow an attacker to start a +denial of service attack against the protected host, causing it to block +all manner of hosts that should normally be left alone. Setting this option +to "0" will disable all responses, although the connects are still logged. +This option is mainly useful for Internet exposed hosts. For internal hosts +you should leave this enabled. If someone internally is firing spoofed +packets at you, then you have a much bigger problem than a denial of service. + +.TP +.B BLOCK_TCP +Same as above, but for TCP. Packet forgery is not as big a problem +though because PortSentry waits for a full connect to occur and this is much +harder to forge in the basic modes. Leave this enabled, even for +Internet connected hosts. For stealth scan detection modes the UDP warning +applies: + + An attacker can cause you to block hosts you don't want to + through packet forgery. I wouldn't worry about this until it is a + problem, but you should be aware of it. + +.TP +.B KILL_ROUTE +This is the command to run to drop the offending route(see +.BR route (8)) +if an attack is detected. This is the *full path* to the route command +along with the necessary parameters to make the command work. The macro +.B $TARGET$ +will be substituted with the attacking host IP and is +REQUIRED in this option. Your gateway should be a *dead host* on the +local subnet. On some systems though you can just put in the localhost +address (127.0.0.1) and this will probably work. All packets from the +target host will get routed to this address so don't mess this up. +More modern route commands will include a "-blackhole" or "-reject" flag. +Check your man(1) pages and if your route command supports this feature +you should use it (although it's recommend using packet filtering +instead, see below). + +Also be aware that this creates what is known as an "asynchronous +route" which basically means packets enter your host via one route +and are sent out on another (dead) route. This works OK for full +TCP connect requests, but for UDP and stealth scan modes it +still allows packets to activate PortSentry and you may get a +series of "already blocked" alarms by PortSentry. For UDP scans +this method prevents ICMP messages from returning to the attacker +so all ports appear open. However, if the attacker is performing +an actual exploit with UDP the drop route method will not work. +The asynchronous route allows the packet to hit the system and the +attacker could perform a "blind" attack with UDP if they know what +the responses are going to be. + +By far the best method is to use the local packet filter (see +.BR ipfwadm (8), +.BR ipchains (8), +or +.BR iptables (8)). +This is a much cleaner solution and is +detailed in the config file. The macro +.B $PORT$ +will substitute the port +that was connected to by the attacker, but this is NOT required for this +option. The macro $MODE$ reports what mode the blocking occurred in +(tcp, udp, stcp, sudp, atcp, audp) but is also NOT required. + +.TP +.B KILL_HOSTS_DENY +This is the format of the string to drop into the +hosts.deny file that TCP wrappers uses(see +.BR hosts_access (5), +and +.BR hosts_options (5)). +Again the +.B $TARGET$ +macro is +expanded out to be the IP of the attacker and is required. You can +also drop in any TCP wrapper escape codes here as well (%h, twist, +etc). The macro +.B $PORT$ +will substitute the port that was connected to +by the attacker, but this is NOT required for this option. +The macro $MODE$ reports what mode the blocking occurred in +(tcp, udp, stcp, sudp, atcp, audp) but is also NOT required. + +.TP +.B KILL_RUN_CMD +This is a command you want run *before* the route +is dropped to the attacker. You can put in any program/script you want +executed when an attack is detected. WE NEVER RECOMMEND PUTTING IN +RETALIATORY ACTION AGAINST AN ATTACKING HOST. Virtually every time you're +are port scanned the host doing the scanning has been compromised itself. +Therefore, if you retaliate you are probably attacking an innocent(?) +party. Also the goal of security is to make the person GO AWAY. You don't +want to irritate them into making a personal vendetta against you. +Remember, even a 13 year old can run a [insert favorite D.O.S. program +here] attack against you from their Windows box to make your life +miserable. As above, the +.BR $TARGET$ , +.B $PORT$ +and +.B $MODE$ +macros are available to you but they are not required with this option as above. + +.TP +.B KILL_RUN_CMD_FIRST +Setting this to "1" makes the command above run before the route is +dropped. Setting it to "0" makes the command run aftter the blocking +has occurred. + +.TP +.B SCAN_TRIGGER +PortSentry has a state engine that will remember hosts +that connected to it. Setting this value will tell PortSentry to allow X +number of grace port hits before it reacts. This will detect both +sequential and random port sweeps. The default is 0 which will react +immediately. A setting of 1 or 2 will reduce false alarms, anything +higher is probably too much as anything more than 3 hits to different +ports is pretty suspicious behavior. Usually you can leave this at 0 +without any consequence, with the exception of Advanced stealth scan +detection modes where you may create a "hair trigger" if you aren't +careful. Use your own discretion. + +.TP +.B PORT_BANNER +A text banner you want displayed to the connecting host if +the PortSentry is activated. Leave this commented out if you don't want this +feature. If you do use it, try not to taunt the person too badly. It's +recommended keeping it professional and to the point. The banner is *not* +displayed when stealth scan detection modes are used. + +.LP +.SH "SEE ALSO" +.BR portsentry(8), +.BR hosts_access(5), +.BR hosts_options(5), +.BR route(8), +.BR ipfwadm(8), +.BR ipchains(8) + +.BR /usr/share/doc/portsentry/README.install +.LP +.SH AUTHOR +.B portsentry +was written by Craig H. Howland +.B . + +This manual page is essentially just a "cut and paste" from the README.install file and was done by Guido Guenther (hopefully without adding too many errors), for the Debian GNU/Linux system (but may be used by others). + + --- portsentry-1.2.orig/debian/portsentry.examples +++ portsentry-1.2/debian/portsentry.examples @@ -0,0 +1,3 @@ +ignore.csh +debian/examples/kill_cmd +debian/examples/scan-detect --- portsentry-1.2.orig/debian/prerm +++ portsentry-1.2/debian/prerm @@ -0,0 +1,30 @@ +#!/bin/sh +#$Id: prerm,v 1.4 2003/09/08 18:09:03 agx Exp $ + +set -e + +# rm symbolic link to /usr/doc/portsentry when package gets removed or +# upgraded +# keep this for one stable release to get rid of the symlink +if [ \( "$1" = "upgrade" -o "$1" = "remove" \) -a -L /usr/doc/portsentry ]; then + rm -f /usr/doc/portsentry +fi + +# to avoid long downtimes upon mass upgrades do not stop the daemon. +# Unfortunately maintainer scripts prior to 1.0-1.2 don't know anything +# about this. So we have to stop the daemon on downgrades. +if [ -n "$2" ] && dpkg --compare-versions $2 lt 1.0-2 ; then + if [ -x /usr/sbin/invoke-rc.d ]; then + invoke-rc.d portsentry stop + else + /etc/init.d/portsentry stop + fi +elif [ "$1" != "upgrade" ]; then + if [ -x /usr/sbin/invoke-rc.d ]; then + invoke-rc.d portsentry stop + else + /etc/init.d/portsentry stop + fi +fi + +#DEBHELPER# --- portsentry-1.2.orig/debian/docs +++ portsentry-1.2/debian/docs @@ -0,0 +1 @@ +CHANGES README.COMPAT README.install README.methods README.stealth CREDITS --- portsentry-1.2.orig/debian/postinst +++ portsentry-1.2/debian/postinst @@ -0,0 +1,50 @@ +#!/bin/sh +# $Id: postinst,v 1.7 2003/09/08 18:09:03 agx Exp $ + +set -e + +# Source debconf library. +. /usr/share/debconf/confmodule + +PS_DEFAULT="/etc/default/portsentry" +if [ "$1" = "configure" -a ! -e $PS_DEFAULT ]; then + # copy over the settings from /e/portsentry/startup.conf + # when upgrading from versions < 1.0-2 + if [ -n "$2" ] && dpkg --compare-versions $2 lt 1.0-2 ; then + if [ -e /etc/portsentry/startup.conf ]; then + . /etc/portsentry/startup.conf + fi + # create /e/d/portsentry if it doesn't exist on first time installs + elif [ -z "$2" ]; then + TCP_MODE=tcp + UDP_MODE=udp + fi + if [ -n "$TCP_MODE" -o -n "$UDP_MODE" ]; then + cat >$PS_DEFAULT < +# and Guido Guenther +# +# $Id: kill_cmd,v 1.3 2001/07/19 21:02:34 agx Exp $ + +# grep into /etc/services to check which port was scanned +MODE=${3/[sa]/} # get rid of s and a +SERVICEINFO=`grep "[[:space:]]$2/$MODE" /etc/services` + +# can we get some info about the attacker? +FINGERINFO=`/usr/sbin/safe_finger -l @$1 2>/dev/null` + +cat < +# This work is released under the GNU GPL, version 2 or later. + +use Sys::Hostname; + +die "Usage: $0 host port\n" if (@ARGV != 2); + +my ($target, $port) = @ARGV; + +my $to = 'root'; + +my $subject = "WARNING: portscan from $target:$port"; + +open MAIL, qq(|mail -s "$subject" $to) or die "Couldn't open pipe to mail: $!\n"; + +my $time = scalar localtime; +my $hostname = hostname; + +print MAIL <<"__EOF__"; +This is a mail from $0 on $hostname. + +Portsentry has detected a portscan at $time +from the host `$target' and the port `$port'. + +If portsentry has been configured to do so, incoming packets from +`$target' will now be dropped automatically. If this is not what you +wish, you may want to make sure there are no routes, ipchains rules, +or ipfwadm rules dropping traffic from that host. + +__EOF__ + +close MAIL or die "Couldn't close pipe to mail: $!\n"; + --- portsentry-1.2.orig/debian/po/pt.po +++ portsentry-1.2/debian/po/pt.po @@ -0,0 +1,86 @@ +# Portuguese translation for portsentry debconf messages. +# Copyright (C) Tiago Fernandes , 2006 +# This file is distributed under the same license as the Portsentry package. +# Tiago Fernandes , 2006. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry 1.2-10\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2006-12-01 13:36-0000\n" +"Last-Translator: Tiago Fernandes \n" +"Language-Team: Portuguese \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Portuguese\n" +"X-Poedit-Country: PORTUGAL\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "O PortSentry não bloqueia nada por omissão." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Por favor, repare que por omissão o PortSentry não toma nenhuma acção contra " +"potenciais atacantes. Apenas despeja mensagens para /var/log/syslog. Para " +"alterar isto, edite /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +"Pode também querer verificar:\n" +"/etc/default/portsentry (opções de arranque do daemon ) e\n" +"/etc/portsentry/portsentry.ignore.static (máquinas/interfaces a ignorar)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Para mais detalhes ver portsentry(8) e portsentry.conf(5) nas páginas do " +"manual." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" +"startup.conf está obsoleto - usar /etc/default/portsentry no seu lugar." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf já não é usado, é usado /etc/default/portsentry " +"no seu lugar. De maneira a facilitar a transição vou fazer o melhor para " +"preservar as suas opções enquanto as copio para a nova localização. Por " +"favor verifique /etc/default/portsentry com /etc/porsentry/startup.conf e " +"remova-o depois da instalação ter terminado. " + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Desculpe algum inconveniente." --- portsentry-1.2.orig/debian/po/templates.pot +++ portsentry-1.2/debian/po/templates.pot @@ -0,0 +1,71 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR , YEAR. +# +#, fuzzy +msgid "" +msgstr "" +"Project-Id-Version: PACKAGE VERSION\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" +"Last-Translator: FULL NAME \n" +"Language-Team: LANGUAGE \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=CHARSET\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "" --- portsentry-1.2.orig/debian/po/es.po +++ portsentry-1.2/debian/po/es.po @@ -0,0 +1,107 @@ +# portsentry translation to spanish +# Copyright (C) 2006 Free Software Foundation, Inc. +# This file is distributed under the same license as the package. +# +# Changes: +# - Initial translation +# Javier Ruano Ruano , 2006 +# +# +# Traductores, si no conoce el formato PO, merece la pena leer la +# documentación de gettext, especialmente las secciones dedicadas a este +# formato, por ejemplo ejecutando: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Equipo de traducción al español, por favor lean antes de traducir +# los siguientes documentos: +# +# - El proyecto de traducción de Debian al español +# http://www.debian.org/intl/spanish/ +# especialmente las notas y normas de traducción en +# http://www.debian.org/intl/spanish/notas +# +# - La guía de traducción de po's de debconf: +# /usr/share/doc/po-debconf/README-trans +# o http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Si tiene dudas o consultas sobre esta traducción consulte con el último +# traductor (campo Last-Translator) y ponga en copia a la lista de +# traducción de Debian al español () +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry 1.2\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2006-12-14 12:00+0200\n" +"Last-Translator: Javier Ruano Ruano \n" +"Language-Team: Debian L10n Spanish \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry no bloquea nada por omisión." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Tenga en cuenta, que por omisión, PortSentry no toma acciones contra " +"atacantes potenciales. Sólo reporta mensajes en /var/log/syslog. Para " +"cambiar esto, edite /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Tal vez también quiera comprobar:\n" +" /etc/default/portsentry (opciones de inicio del demonio) y\n" +" /etc/portsentry/portsentry.ignore.static (servidores/interfaces a ignorar)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "Véanse las páginas de manual portsentry(8) y portsentry.conf(5)" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf está obsoleto, en su lugar use /etc/default/portsentry" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf no se utilizará en adelante y /etc/default/" +"portsentry ocupará su lugar. Para facilitar la transición, haré lo posible " +"por preservar su configuración mientras se copian a la nueva ubicación. Por " +"favor, compare /etc/default/portsentry con /etc/portsentry/startup.conf, y " +"bórrelo cuando la instalación haya finalizado." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Lamento cualquier inconveniente." --- portsentry-1.2.orig/debian/po/it.po +++ portsentry-1.2/debian/po/it.po @@ -0,0 +1,85 @@ +# ITALIAN TRANSLATION OF PORTSENTRY. +# TRADUZIONE ITALIANA DI PORTSENTRY. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PORTSENTRY package. +# +# Gianluca Cotrino , 2007. +msgid "" +msgstr "" +"Project-Id-Version: PortSentry\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-05-02 22:09+0200\n" +"Last-Translator: ospite \n" +"Language-Team: Italian \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=2; plural=(n != 1);\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry non blocca nulla che non sia esplicitamente specificato." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Si noti che, se non specificato, PortSentry non prende nessun'azione contro " +"potenziali intrusi. Esso registra solo dei messaggi in /var/log/syslog. Per " +"cambiare impostazione modificare /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +"È possibile anche controllare:\n" +" /etc/default/portsentry (opzioni di avvio del demone) e\n" +" /etc/portsentry/portsentry.ignore.static (computer/interfacce da ignorare)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Per ulteriori informazioni vedere le pagine di manuale di portsentry(8) e " +"portsentry.conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf è obsoleto - usare piuttosto /etc/default/portsentry" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf non è più usato e /etc/default/portsentry è " +"usato al suo posto. Al fine di facilitare la transizione, si farà il " +"possibile per preservare le impostazioni mentre si copia nella nuova " +"posizione. Finita l'installazione confrontare /etc/default/portsentry con /" +"etc/portsentry/startup.conf e rimuovere quest'ultimo." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Spiacente per ogni inconveniente." --- portsentry-1.2.orig/debian/po/ro.po +++ portsentry-1.2/debian/po/ro.po @@ -0,0 +1,93 @@ +# translation of ro.po to Romanian +# Romanian translations for PACKAGE package +# Traducerea în limba română pentru pachetul PACKAGE. +# Copyright (C) 2007 THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Eddy Petrisor , 2007. +# Eddy Petrișor , 2007. +msgid "" +msgstr "" +"Project-Id-Version: ro\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-18 18:03+0200\n" +"Last-Translator: Eddy Petrișor \n" +"Language-Team: Romanian \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=3; plural=n==1 ? 0 : (n==0 || (n%100 > 0 && n%100 < " +"20)) ? 1 : 2;\n" +"X-Generator: KBabel 1.11.4\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "Implicit, PortSentry nu blochează nimic." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"A se observa că, implicit, PortSentry nu acţionează în nici un fel împotriva " +"evntualelor atacuri. Doar adaugă mesaje în /var/log/syslog. Pentru a schimba " +"acest lucru editaţi /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Probabil că şi următoarele vor trebui verificate:\n" +" /etc/default/portsentry (opţiunile implicite de pornire ale serviciului) " +"şi\n" +" /etc/portsentry/portsentry.ignore.static (calculatoarele/interfeţele care " +"trebuie ignorate)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Pentru mai multe detalii a se vedea paginile de manual portsentry(8) şi " +"portsentry.conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" +"startup.conf este depăşit - folosiţi /etc/default/portsentry în locul " +"acestuia" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf nu mai este folosit iar /etc/default/portsentry " +"e folosit în locul acestuia. Pentru a uşura tranziţia se va încerca tot " +"posibilul să se păstreze configuraţia dumneavoastră la trecerea la noul " +"fişier. Comparaţi /etc/default/portsentry cu /etc/portsentry/startup.conf şi " +"ştergeţi-l pe cel din urmă după finalizarea instalării." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Ne pare rău pentru eventualele probleme." --- portsentry-1.2.orig/debian/po/vi.po +++ portsentry-1.2/debian/po/vi.po @@ -0,0 +1,85 @@ +# Vietnamese translation for Port Sentry. +# Copyright © 2007 Free Software Foundation, Inc. +# Clytie Siddall , 2007. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry 1.2-11.1\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2005-08-10 16:22+0930\n" +"Last-Translator: Clytie Siddall \n" +"Language-Team: Vietnamese \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"Plural-Forms: nplurals=1; plural=0\n" +"X-Generator: LocFactoryEditor 1.2.2\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "Mặc định là trình PortSentry không chặn gì." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Ghi chú rằng mặc định là trình PortSentry không làm gì để bảo vệ máy của " +"bạn. Nó chỉ đổ thông điệp vào « /var/log/syslog ». Để thay đổi ứng xử này, " +"sửa tập tin cấu hình « /etc/portsentry/portsentry.conf »." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +"Cũng có thể kiểm tra tập tin:\n" +" • /etc/default/portsentry (tùy chọn khởi chạy trình nền) và\n" +" • /etc/portsentry/portsentry.ignore.static (máy/giao diện cần bỏ qua)." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Để tìm chi tiết, xem trang hướng dẫn portsentry(8) và portsentry.conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" +"Tập tin « startup.conf » quá cũ — sử dụng tập tin « /etc/default/portsentry » " +"thay vào đó." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"Tập tin « /etc/portsentry/startup.conf » không còn được dùng lại: có dùng « /" +"etc/default/portsentry » thay vào đó. Để làm cho dễ dàng việc chuyển đổi, " +"trình này sẽ thử bảo quản các thiết lập của bạn trong khi sao chép chúng " +"sang vị trí mới. Bạn hãy so sánh tập tin « /etc/default/portsentry » với « /" +"etc/portsentry/startup.conf » và gỡ bỏ tập tin cũ một khi cài đặt xong." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Xin lỗi đã làm phiền bạn." --- portsentry-1.2.orig/debian/po/fi.po +++ portsentry-1.2/debian/po/fi.po @@ -0,0 +1,80 @@ +msgid "" +msgstr "" +"Project-Id-Version: portsentry_1.2-11.1\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-10-26 22:36+0200\n" +"Last-Translator: Esko Arajärvi \n" +"Language-Team: Finnish \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Finnish\n" +"X-Poedit-Country: FINLAND\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry ei estä mitään oletuksena." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Huomaa, että oletuksena PortSentry ei tee mitään potentiaalisia hyökkääjiä " +"vastaan. Se vain laittaa viestejä tiedostoon /var/log/syslog. Vaihtaaksesi " +"toimintamallia muokkaa tiedostoa /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +"Saatat myös haluta tarkastaa tiedostot /etc/default/portsentry " +"(taustaohjelman käynnistysvalitsimet) ja /etc/portsentry/portsentry.ignore." +"static (koneet ja liitännät, joita ei huomioida)." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Lisätietoja (englanniksi) löytyy man-ohjesivuilta portsentry(8) ja " +"portsentry.conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf on vanhentunut - sen korvaa /etc/default/portsentry" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"Tiedostoa /etc/portsentry/startup.conf ei enää käytetä vaan sen tilalla on /" +"etc/default/portsentry. Siirtymisen helpottamiseksi yritetään asetukset " +"säilyttää, kun ne kopioidaan uuteen sijaintiinsa. Vertaa tiedostoja /etc/" +"default/portsentry ja /etc/portsentry/startup.conf ja poista jälkimmäinen, " +"kun asennus on valmis." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Pahoittelut vaivasta." --- portsentry-1.2.orig/debian/po/ru.po +++ portsentry-1.2/debian/po/ru.po @@ -0,0 +1,86 @@ +# translation of portsentry_1.2-11_debconf_ru.po to Russian +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# +# Yuri Kozlov , 2007. +msgid "" +msgstr "" +"Project-Id-Version: 1.2-11\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-19 21:25+0300\n" +"Last-Translator: Yuri Kozlov \n" +"Language-Team: Russian \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: KBabel 1.11.4\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2);\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry по умолчанию ничего не блокирует." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Заметим, что по умолчанию PortSentry не предпринимает никаких " +"действий против возможных атак. Производится только запись " +"сообщений в /var/log/syslog. Чтобы изменить такое поведение, отредактируйте " +"файл /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Вероятно, также вы захотите посмотреть:\n" +" /etc/default/portsentry (параметры запуска демона) и\n" +" /etc/portsentry/portsentry.ignore.static (игнорируемые хосты/интерфейсы)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Подробней об этом описано на страницах руководств portsentry(8) " +"и portsentry.conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "Файл startup.conf устарел -- вместо него используйте /etc/default/portsentry" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"Файл /etc/portsentry/startup.conf больше не используется, вместо " +"него используется /etc/default/portsentry. Чтобы облегчить переход, " +"старые настройки будут скопированы в новый файл. Сравните " +"файлы /etc/default/portsentry и /etc/portsentry/startup.conf и удалите " +"его после завершения установки." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Извините за предоставленные неудобства." + --- portsentry-1.2.orig/debian/po/gl.po +++ portsentry-1.2/debian/po/gl.po @@ -0,0 +1,83 @@ +# Galician translation of portsentry's debconf templates +# This file is distributed under the same license as the portsentry package. +# Jacobo Tarrio , 2007. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-18 16:54+0100\n" +"Last-Translator: Jacobo Tarrio \n" +"Language-Team: Galician \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry non bloquea nada por defecto." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Teña en conta que, por defecto, PortSentry non emprende ningunha acción " +"contra atacantes potenciais. Só grava mensaxes en /var/log/syslog. Para " +"cambiar isto, edite /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Tamén pode verificar:\n" +" /etc/default/portsentry (opcións de inicio do servizo) e\n" +" /etc/portsentry/portsentry.ignore.static (máquinas/interfaces a ignorar)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Para máis detalles, consulte as páxinas de manual portsentry(8) e portsentry." +"conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" +"startup.conf está obsoleto - empregue /etc/default/portsentry no seu canto" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf xa non se emprega, e emprégase /etc/default/" +"portsentry no seu canto. Para facilitar a transición hase procurar conservar " +"a configuración mentres se copia á nova ubicación. Compare /etc/default/" +"portsentry con /etc/portsentry/startup.conf e elimíneo despois de que remate " +"a instalación." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Desculpe as molestias." --- portsentry-1.2.orig/debian/po/ca.po +++ portsentry-1.2/debian/po/ca.po @@ -0,0 +1,89 @@ +# +# Catalan translation for portsentry package. +# Copyright (C) 2007 Bruno Barrera C. +# This file is distributed under the same license as the portsentry +# package. +# +# Jordà Polo , 2007. +# +msgid "" +msgstr "" +"Project-Id-Version: 1.2-11\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-20 19:43+0100\n" +"Last-Translator: Jordà Polo \n" +"Language-Team: Català \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry no bloqueja res per defecte." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Si us plau, fixeu-vos que amb els valors predeterminats PortSentry no " +"realitza cap acció contra atacs potencials. PortSentry només escriu " +"missatges de registre a /var/log/syslog. Per a canviar això, editeu /etc/" +"portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Tal vegada us interessi comprovar també:\n" +" /etc/default/portsentry (opcions d'inici del dimoni) i\n" +" /etc/portsentry/portsentry.ignore.static (màquines/interfícies a ignorar)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Per a més detalls, vegeu les pàgines del manual portsentry(8) i portsentry." +"conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" +"startup.conf està obsolet - utilitzeu /etc/default/portsentry en lloc seu" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"Ja no s'utilitza /etc/portsentry/startup.conf, i a partir d'ara " +"s'utilitzarà /etc/default/portsentry. Per tal de facilitar la transició, es " +"farà el possible per conservar la configuració mentre s'està copiant a la " +"nova ubicació. Si us plau, comproveu el contingut de /etc/default/portsentry " +"respecte el que teníeu a /etc/portsentry/startup.conf, i esborreu-lo una " +"vegada finalitzi la instal·lació." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Disculpeu les molèsties." --- portsentry-1.2.orig/debian/po/sv.po +++ portsentry-1.2/debian/po/sv.po @@ -0,0 +1,72 @@ +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# Developers do not need to manually edit POT or PO files. +# , fuzzy +# +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry 1.2-9\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-18 11:30+0100\n" +"Last-Translator: Daniel Nylander \n" +"Language-Team: Swedish \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=iso-8859-1\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "Som standard blockerar PortSentry ingenting." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "Please note that by default PortSentry takes no action against potential attackers. It only dumps messages into /var/log/syslog. To change this edit /etc/portsentry/portsentry.conf." +msgstr "Observera att som standard gr PortSentry ingenting mot potentiella attackerare. Den bara dumpar meddelanden i /var/log/syslog. Fr att ndra detta, redigera /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Du kanske ocks vill kontrollera:\n" +" /etc/default/portsentry (uppstartsinstllningar fr demonen) och\n" +" /etc/portsentry/portsentry.ignore.static (vrdar/grnssnitt att ignorera)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "Fr mer information se manualsidorna portsentry(8) och portsentry.conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf r frldrad - anvnd /etc/default/portsentry istllet" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry is used instead. In order to ease the transition I'll do my best to preserve your settings while copying them over to the new location. Please check /etc/default/portsentry against /etc/portsentry/startup.conf and remove it after the installation has finished." +msgstr "/etc/portsentry/startup.conf anvnds inte lngre, istllet anvnds /etc/default/portsentry. Fr att gra vergngen lttare ska jag gra mitt bsta fr att behlla dina gamla instllningar nr de kopieras ver till den nya platsen. Kontrollera /etc/default/portsentry och jmfr mot /etc/portsentry/startup.conf och sedan ta bort den efter att installationen r frdig." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Urskta fr olgenheten." + --- portsentry-1.2.orig/debian/po/ja.po +++ portsentry-1.2/debian/po/ja.po @@ -0,0 +1,94 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry 1.2-11\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-19 01:36+0900\n" +"Last-Translator: Hideki Yamane (Debian-JP) \n" +"Language-Team: Japanese \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry は標準では何もブロックしません。" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"標準状態の PortSentry は攻撃の可能性があるものに対して何もアクションをしない" +"ことに留意してください。/var/log/syslog へメッセージを吐き出すだけです。これ" +"を変更するには /etc/portsentry/portsentry.conf を編集してください。" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +"以下についてもチェックしたほうが良いでしょう: \n" +" /etc/default/portsentry (デーモン起動時のオプション) および\n" +" /etc/portsentry/portsentry.ignore.static (無視をするホストおよびインターフェ" +"イス)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"より詳細については portsentry(8) と portsentry.conf(5) の man ページを参照し" +"てください。" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" +"startup.conf は廃止されています。代わりに /etc/default/portsentry を使用して" +"ください" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf はもはや利用されなくなっており、代わりに /etc/" +"default/portsentry を使います。移行を容易にするため、設定を新しい場所へ移" +"す際に元の設定を保持するよう、できる限り努力します。/etc/default/portsentry " +"と /etc/portsentry/startup.conf を比較してから、インストール完了後に /etc/" +"portsentry/startup.conf を削除してください。" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "お手数を掛けさせてしまい申し訳ありません。" --- portsentry-1.2.orig/debian/po/cs.po +++ portsentry-1.2/debian/po/cs.po @@ -0,0 +1,91 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-18 12:32+0100\n" +"Last-Translator: Miroslav Kure \n" +"Language-Team: Czech \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry ve výchozím nastavení nic neblokuje." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Ve výchozím nastavení neprovádí PortSentry vůči potenciálním útočníkům " +"žádnou protiakci, pouze zaznamená zprávy do /var/log/syslog. Chování můžete " +"změnit v souboru /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Také můžete zkontrolovat:\n" +" /etc/default/portsentry (volby pro start daemona)\n" +" /etc/portsentry/portsentry.ignore.static (ignorované počítače/rozhraní)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Další informace naleznete v manuálových stránkách portsentry(8) a portsentry." +"conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf je zastaralý - použijte /etc/default/portsentry" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"Místo zastaralého /etc/portsentry/startup.conf se nyní používá soubor /etc/" +"default/portsentry. Pro usnadnění přechodu se pokusím zachovat vaše " +"stávající nastavení. Po instalaci zkontrolujte /etc/default/portsentry vůči /" +"etc/portsentry/startup.conf a bude-li vše přeneseno správně, starý soubor " +"smažte." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Omlouváme se za nepříjemnosti." --- portsentry-1.2.orig/debian/po/eu.po +++ portsentry-1.2/debian/po/eu.po @@ -0,0 +1,74 @@ +# Basque translations for PACKAGE package. +# Copyright (C) 2007 THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# pi , 2007. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry-debconf\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-19 10:24+0100\n" +"Last-Translator: Piarres Beobide \n" +"Language-Team: Euskara \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=UTF-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Generator: Pootle 0.10.1\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry-ek ez du ezer blokeatzen lehenespen bezala." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "Mesedez kontutan izan Portsentry-k lehenespen bezala ez duela eraso potentzialen aurrean ezer egiten. /var/log/syslog-en mezuak irauli bakarrik egiten du. Hau aldatzeko /etc/portsentry/portsentry.conf eraldatu." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +"Hauek ere begiratu beharko zenituzke:\n" +"/etc/default/portsentry (deabru abiarazte aukerak) eta\n" +"/etc/portsentry/portsentry.ignore.static (alde batetara utziko diren ostalari/interfazeak)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "Xeheteasun gehiagorako portsentry(8) eta portsentry.conf(5) manual orriak begiratu." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf zaharkiturik dago - /etc/default/portsentry erabili horren ordez" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "/etc/portsentry/startup.conf ez da gehiago erabiliko eta /etc/default/portsentry erabiliko da horren ordez. Aldaketa erraz bat ziurtatzeko ahal den guztia egingo da zure ezarpenak kokaleku berrira mugitzeko. Mesedez konparatu /etc/default/portsentry eta /etc/portsentry/startup.conf eta bigarren hau ezabatu behin instalazioa amaitu denean." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Barkatu eragozpenengatik." --- portsentry-1.2.orig/debian/po/POTFILES.in +++ portsentry-1.2/debian/po/POTFILES.in @@ -0,0 +1 @@ +[type: gettext/rfc822deb] templates --- portsentry-1.2.orig/debian/po/nl.po +++ portsentry-1.2/debian/po/nl.po @@ -0,0 +1,85 @@ +# SOME DESCRIPTIVE TITLE. +# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER +# This file is distributed under the same license as the PACKAGE package. +# FIRST AUTHOR , YEAR. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-03-15 18:34+0100\n" +"Last-Translator: Bart Cornelis \n" +"Language-Team: debian-l10n-dutch \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=utf-8\n" +"Content-Transfer-Encoding: 8bit\n" +"X-Poedit-Language: Dutch\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "Standaard blokkeert PortSentry niets. " + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Merk op dat PortSentry standaard geen actie onderneemt tegen potentiële " +"aanvallers. Standaard worden enkel berichten in /var/log/syslog " +"geregistreerd. U kunt dit veranderen door /etc/portsentry/portsentry.conf " +"aan te passen." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +"Verder kunt u best volgende bestanden bekijken:\n" +"/etc/default/portsentry (opstartopties voor de achtergronddienst) en\n" +"/etc/portsentry/portsentry.ignore.static (welke hosts en interfaces " +"genegeerd moeten worden." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Meer details vindt u in de portsentry(8) en portsentry.conf(5) man-pagina's." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf is verouderd, /etc/default/portsentry wordt nu gebruikt." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf is vervangen door /etc/default/portsentry en " +"wordt niet langer gebruikt. Om de overgang gemakkelijk te maken doen we ons " +"best om uw instellingen te bewaren bij het overzetten naar de nieuwe " +"locatie. Gelieve /etc/default/portsentry te vergelijken et /etc/portsentry/" +"startup.conf en deze laatste te verwijderen nadat de installatie klaar is." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Onze excuses voor het ongemak." --- portsentry-1.2.orig/debian/po/pt_BR.po +++ portsentry-1.2/debian/po/pt_BR.po @@ -0,0 +1,92 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans +# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2004-08-22 09:03-0300\n" +"Last-Translator: Tiago Bortoletto Vaz tiagovaz@im.ufba.br\n" +"Language-Team: Debian-BR Project \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-1\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "Portsentry no bloqueia nada por padro." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Note que por padro o PortSentry no realiza nenhuma ao contra potenciais " +"atacantes. Ele apenas registra as mensagens em /var/log/syslog. Para mudar " +"isso, edite o arquivo /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Voc pode tambm querer checar:\n" +" /etc/default/portsentry (opes de inicializaao do daemon) e\n" +"/etc/portsentry/portsentry.ignore.static (hosts/interfaces a ignorar)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Para mais detalhes veja as pginas de manual portsentry(8) e portsentry.conf" +"(5)" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf est obsoleto - use /etc/default/portsentry no seu lugar" + +#. Type: note +#. Description +#: ../templates:2001 +#, fuzzy +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf no mais utilizado e /etc/default/portsentry " +" utilizado no seu lugar. De forma a facilitar a transio eu estarei " +"fazendo o melhor para preservar suas configuraes enquanto feita a cpia " +"para a nova localizao. Por favor verifique /etc/default/portsentry e " +"remova o /etc/portsentry/startup.conf depois que a instalao for finalizada." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Desculpe por algum inconveniente" --- portsentry-1.2.orig/debian/po/nb.po +++ portsentry-1.2/debian/po/nb.po @@ -0,0 +1,82 @@ +# portsentry +# Copyright (C) 2007 +# This file is distributed under the same license as the portsentry package. +# Hans Fredrik Nordhaug , 2007 +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-03-12 00:56+0100\n" +"Last-Translator: Hans Fredrik Nordhaug \n" +"Language-Team: Norwegian Bokml \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-1\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry blokkerer ingenting som standard." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Legg merke til at PortSentry som standard ikke gjr noe med potensielle\n" +"angripere. Det bare skriver meldinger inn i /var/log/syslog. For endre " +"dette,\n" +"rediger /etc/portsentry/portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +"Du vil kanskje ogs sjekke:\n" +" /etc/default/portsentry (nisseoppstartsinnstillinger) og\n" +" /etc/portsentry/portsentry.ignore.static (tjenere/grensesnitt ignorere)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "For flere detaljer, se mansidene portsentry(8) og portsentry.conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "startup.conf er foreldet - bruk /etc/default/portsentry i steden for" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf brukes ikke lenger og istedenfor brukes\n" +"/etc/default/portsentry. For lette overgangen, vil jeg gjre mitt beste \n" +"ved bevare dine innstillnger nr jeg kopierer dem over til den nye file.\n" +"Sjekk /etc/default/portsentry mot /etc/portsentry/startup.conf, og fjern\n" +"startup.conf etter at installasjonen er fullfrt." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Beklager bryderiet." --- portsentry-1.2.orig/debian/po/fr.po +++ portsentry-1.2/debian/po/fr.po @@ -0,0 +1,92 @@ +# +# Translators, if you are not familiar with the PO format, gettext +# documentation is worth reading, especially sections dedicated to +# this format, e.g. by running: +# info -n '(gettext)PO Files' +# info -n '(gettext)Header Entry' +# Some information specific to po-debconf are available at +# /usr/share/doc/po-debconf/README-trans +# or http://www.debian.org/intl/l10n/po-debconf/README-trans# +# Developers do not need to manually edit POT or PO files. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry_1.2-10\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-18 13:25+0100\n" +"Last-Translator: Michel Grentzinger \n" +"Language-Team: French \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-15\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry ne bloque rien par dfaut" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Veuillez noter que PortSentry ne prend aucune mesure par dfaut contre les " +"attaquants potentiels. Il se contente de dupliquer les messages dans /var/" +"log/syslog. Pour modifier ce comportement, veuillez modifier /etc/portsentry/" +"portsentry.conf." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Vous devriez galement vrifier:\n" +" /etc/default/portsentry (options de dmarrage) et\n" +" /etc/portsentry/portsentry.ignore.static (htes/interfaces ignorer)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Pour davantage de dtails, consultez les pages de manuel portsentry(8) et " +"portsentry.conf(5)." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" +"startup.conf est obsolte - utilisez /etc/default/portsentry la place" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf n'est plus utilis et /etc/default/portsentry " +"est maintenant utilis en remplacement. Afin de faciliter la transition, vos " +"paramtres seront copis avec le plus grand soin vers leur nouvel " +"emplacement. Veuillez comparer /etc/default/portsentry et /etc/portsentry/" +"startup.conf puis supprimer ce dernier une fois l'installation termine." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "" +"Veuillez accepter les excuses du responsable du paquet pour ces dsagrments." --- portsentry-1.2.orig/debian/po/de.po +++ portsentry-1.2/debian/po/de.po @@ -0,0 +1,86 @@ +# Translation of portsentry debconf templates to German +# Copyright (C) Helge Kreutzmann , 2006, 2007. +# This file is distributed under the same license as the portsentry package. +# +msgid "" +msgstr "" +"Project-Id-Version: portsentry\n" +"Report-Msgid-Bugs-To: bruno@debian.org\n" +"POT-Creation-Date: 2006-10-29 19:45-0300\n" +"PO-Revision-Date: 2007-02-18 11:16+0100\n" +"Last-Translator: Helge Kreutzmann \n" +"Language-Team: German \n" +"MIME-Version: 1.0\n" +"Content-Type: text/plain; charset=ISO-8859-15\n" +"Content-Transfer-Encoding: 8bit\n" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "PortSentry does not block anything by default." +msgstr "PortSentry blockt standardmig nichts." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"Please note that by default PortSentry takes no action against potential " +"attackers. It only dumps messages into /var/log/syslog. To change this edit /" +"etc/portsentry/portsentry.conf." +msgstr "" +"Bitte beachten Sie, dass PortSentry standardmig keine Aktionen gegen " +"potenzielle Angreifer durchfhrt. Er schreibt nur Informationen nach /var/" +"log/syslog. Um dies zu ndern, passen Sie bitte die Datei /etc/portsentry/" +"portsentry.conf entsprechend an." + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +" You may also want to check:\n" +" /etc/default/portsentry (daemon startup options) and\n" +" /etc/portsentry/portsentry.ignore.static (hosts/interfaces to ignore)" +msgstr "" +" Bitte beachten Sie auch folgende Dateien:\n" +" /etc/default/portsentry (Daemon Start-Optionen) und\n" +" /etc/portsentry/portsentry.ignore.static (zu ignorierende Rechner/" +"Schnittstellen)" + +#. Type: note +#. Description +#: ../templates:1001 +msgid "" +"For further details see the portsentry(8) and portsentry.conf(5) manpages." +msgstr "" +"Fr weitere Informationen lesen Sie bitte die portsentry(8)- und portsentry." +"conf(5)-Handbuchseiten." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "startup.conf is obsolete - use /etc/default/portsentry instead" +msgstr "" +"startup.conf ist berholt - verwenden Sie stattdessen /etc/default/portsentry" + +#. Type: note +#. Description +#: ../templates:2001 +msgid "" +"/etc/portsentry/startup.conf is no longer used and /etc/default/portsentry " +"is used instead. In order to ease the transition I'll do my best to preserve " +"your settings while copying them over to the new location. Please check /" +"etc/default/portsentry against /etc/portsentry/startup.conf and remove it " +"after the installation has finished." +msgstr "" +"/etc/portsentry/startup.conf wird nicht mehr benutzt und stattdessen wird /" +"etc/default/portsentry verwendet. Um den bergang zu erleichtern, werde ich " +"mein Bestes tun, Ihre Einstellungen zu bewahren whrend ich sie an den neuen " +"Ort kopiere. Bitte berprfen Sie /etc/default/portsentry gegenber /etc/" +"portsentry/startup.conf und entfernen sie es nachdem die Installation " +"beendet wurde." + +#. Type: note +#. Description +#: ../templates:2001 +msgid "Sorry for any inconvenience." +msgstr "Entschuldigen Sie eventuelle Unannehmlichkeiten."