The idea is that IPFilter in its current state can already do a simple L4
round-robin in its NAT rules. However, it does not detect or sense when a
service and/or host is down. It will continue to send requests to a downed
service/host.
However, IPFilter lets us add and remove rules on-the-fly so it should be
possible to build a daemon that lets you specify "clusters". In each cluster
you would specify its members/hosts and services. As well as a health-check
for the service to determine its current state.
Once a service was deemed "up" we would add a Round-Robin rule to the NAT
table, and naturally, the reverse once we detect a service as being "down".
In addition to this, this program can optionally add ipf rules to log for RST
(reset) packets coming from the members of your clusters. In the situations
where the software/port goes down, but the host itself is still working, we
would detect failure instantly. (Since the forwarded connections to the service
would trigger a RST packet back). If this option is enabled, l4ip spawns the
"ipmon" command to monitor for the "log" entries given when such a packet is
detected. l4ip will then mark the service down. This is an add-on feature and
is strictly not necessary for functional usage. It is currently only supported
for TCP.
WWW: http://www.lundman.net/unix/l4ip.php
- Drop NEURAL_NET (removed upstream) and TRAIN_SCRIPT (now always
installed and depend on PERL5 for it).
- Fix removal of EXAMPLESDIR on pkg-plist
- Fix spelling in pkg-message and UPDATING
- Some Makefile cleanup
- drop RC_SUFX in Makefile, USE_RC_SUBR= ${PORTNAME} and move
files/dspam.sh.in ---> files/dspam.in
PR: ports/93361
Submitted by: maintainer
* add support for flash 7 plugin [1]
* add ${X11BASE} to the plugins' search path [1]
* changed the order that 'linkfarm' script searches for plugins, so that
jdk 1.4 instead of jdk 1.3 is found if both are installed [1]
* bump PORTREVISION
* portlint
PR: ports/87523 [1]
Submitted by: Simun Mikecin <numisemis@yahoo.com> [1]
Approved by: garga (mentor)
.include <Makefile.inc> causes errors when make is not invoked from
port's directory on RELENG_4
PR: ports/92669
Submitted by: vd
Approved by: garga (mentor, implicitly), maintainer timeout
- Add WITH_LOCAL_CLAMAV[_DEVEL] to run-depend on security/clamav[-devel];
default LOCAL_CLAMAV on to restore the way port behaved until last update.
Depend on installed package rather that clamd to register depends correctly.
- If one of the clam options is on, make rc.d script to REQUIRE: clamd
Actually use clamsmtp_debug var.
Also make rc.d script to look more like the example in PH.
- Install example script in EXAMPLESDIR rather that DOCSDIR;
- Moved: pkg-message --> files/pkg-message.in
- Drop USE_REINPLACE while here.
PR: 93157
Submitted by: Ion-Mihai Tetcu <itetcu AT people dot tecnik93 dot com>
Given that the port needs 4.x compat libraries and is i386 binary, the
only other arch it could run is amd64. But as it also needs X11 libraries
and there is no port that would install 32bit versions of those yet for
amd64, only i386 is left.
Noticed by: pointyhat via kris
Approved by: maintainer
- Pass PTHREAD_{LIBS,CFLAGS} via CONFIGURE_ARGS instead of REINPLACE_CMD. configure support it.
- PORTDOCS does not need of defined(NOPORTDOCS) check
- Reorganize rc.d script
PR: 93439
Submitted by: mnag
Approved by: maintainer
According to the official announcement:
This release fixes a security issue that allows an attacker to perform
injection attacks against the underlying storage containers. Upgrading
is strongly recommended!
See changelog at <http://pear.php.net/package/Auth/download/1.2.4>.
PR: 93406
Submitted by: /me
Approved by: maintainer
Security: see changelog.
compatible version in sys/ipmi.h if it exists. Enable OpenIPMI mode.
Initial patches by me, polishing by Dmitry (maintainer). Dmitry will
be submitting these changes to the ipmitool developers.
Approved by: Maintainer
JDBC driver and supports a rich subset of ANSI-92 SQL (BNF tree format) plus
SQL 99 and 2003 enhancements. It offers a small (less than 100k in one version
for applets), fast database engine which offers both in-memory and disk-based
tables and supports embedded and server modes. Additionally, it includes tools
such as a minimal web server, in-memory query and management tools (can be run
as applets) and a number of demonstration examples.
WWW: http://hsqldb.org/
PR: 93320
Submitted by: Michael Winking <mwfp@foldl.net>
JDBC resource cleanup code is mundane, error prone work so these classes
abstract out all of the cleanup tasks from your code leaving you with what
you really wanted to do with JDBC in the first place: query and update data.
WWW: http://jakarta.apache.org/commons/dbutils/
PR: 93324
Submitted by: Michael Winking <mwfp@foldl.net>
Also, document the rename of files/twpol.txt to files/twpol.m4 through
a repocopy. M4 is now used to conditionally build the initial copy of the
Tripwire policy file based on the version of FreeBSD this port is being
installed on.
