Add sshblock, a tool to block abusive SSH login attempts.

svn path=/head/; revision=178740

security/Makefile

@@ -659,6 +659,7 @@
     SUBDIR += ssh2
     SUBDIR += ssh2-nox11
     SUBDIR += ssh_askpass_gtk2
+    SUBDIR += sshblock
     SUBDIR += sshit
     SUBDIR += sslproxy
     SUBDIR += sslsniffer

security/sshblock/Makefile

@@ -0,0 +1,42 @@
+# New ports collection makefile for:	sshblock
+# Date created:				03 December 2006
+# Whom:					Anders Nordby <anders@FreeBSD.org>
+#
+# $FreeBSD$
+#
+
+PORTNAME=	sshblock
+PORTVERSION=	1.0
+CATEGORIES=	security
+MASTER_SITES=	http://www.bsdconsulting.no/tools/
+EXTRACT_SUFX=	.pl
+
+MAINTAINER=	anders@FreeBSD.org
+COMMENT=	Block abusive SSH login attempts
+
+RUN_DEPENDS=	${SITE_PERL}/File/Tail.pm:${PORTSDIR}/devel/p5-File-Tail
+
+NO_BUILD=	yes
+NO_WRKSUBDIR=	yes
+PLIST_FILES=	sbin/sshblock
+USE_PERL5=	yes
+USE_RC_SUBR=	sshblock
+SUB_LIST=	PERL=${PERL}
+EXTRACT_CMD=	${CP}
+EXTRACT_BEFORE_ARGS=
+EXTRACT_AFTER_ARGS=	${WRKDIR}
+SUB_FILES+=	pkg-message
+#SUB_FILES=	sshblock.sh
+
+do-patch:
+	@${REINPLACE_CMD} -e "s@/usr/bin/perl@${PERL}@" \
+		${WRKSRC}/sshblock-${PORTVERSION}.pl
+
+do-install:
+	${INSTALL_SCRIPT} ${WRKSRC}/sshblock-${PORTVERSION}.pl \
+		${PREFIX}/sbin/sshblock
+
+post-install:
+	${CAT} ${PKGMESSAGE}
+
+.include <bsd.port.mk>

security/sshblock/distinfo

@@ -0,0 +1,3 @@
+MD5 (sshblock-1.0.pl) = 1e6f76d359d1dff528be96eaab66422b
+SHA256 (sshblock-1.0.pl) = 92a3be2ebc41456d5a69fea86f51f9e04ed199dd7a564148b1552441b6ee4667
+SIZE (sshblock-1.0.pl) = 6926

security/sshblock/files/pkg-message.in

@@ -0,0 +1,16 @@
+===========================================================================
+
+To enable and use the sshblock daemon, use the following in /etc/rc.conf or
+/etc/rc.conf.local:
+
+sshblock_enable="YES"
+
+To set flags/options (optional), add:
+
+sshblock_flags="<flags>"
+
+See %%PREFIX%%/sbin/sshblock -h for possible command line options.
+
+Use %%PREFIX%%/etc/rc.d/sshblock to stop and start it.
+
+===========================================================================

security/sshblock/files/sshblock.in

@@ -0,0 +1,25 @@
+#!/bin/sh
+#
+# $FreeBSD$
+#
+
+#
+# Add the following lines to /etc/rc.conf to enable sshblock:
+# sshblock_enable (bool):	Set to "NO" by default.
+#				Set it to "YES" to enable sshblock
+# sshblock_flags (string):	Set sshblock flags (optional)
+#
+
+. %%RC_SUBR%%
+
+name="sshblock"
+rcvar=`set_rcvar`
+
+command_interpreter=%%PERL%%
+command="%%PREFIX%%/sbin/sshblock"
+
+load_rc_config $name
+: ${sshblock_enable="NO"}
+: ${sshblock_flags=""}
+
+run_rc_command "$1"

security/sshblock/pkg-descr

@@ -0,0 +1,6 @@
+SSHBlock is a daemon to monitor a syslog log for break-in attempts using
+SSH, and to automatically block bad hosts by adding lines to /etc/hosts.allow
+(TCP Wrappers). Several thresholds are pre-defined, to be able to block those
+trying many attempts within a longer or shorter period.
+
+WWW: http://www.bsdconsulting.no/tools/