sshguard-maintainers — Support and announcements for package maintainers

[Sshguard-maintainers] Information about sshguard

[Ernesto N. C. A. <ec...@gm...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello.

I need follow information for Debian policy.


sshguard author and Copyright.



debian/copyright:

- ------------------------------------

Upstream Author(s):

    sshguard maintainers <ssh...@li...>

Copyright:

    Copyright (C)  sshguard Team
- ----------------------------

I only need that information for debian package.

Ernesto Crespo

- --
Ernesto Crespo
Linux Registered User: #418790
GNU/Linux Debian Etch- Kernel 2.6.20.6  #1 SMP PREEMPT
Fingerprint = 66CB 6BF4 7C7C EC0E DA60  06C8 87E8 9061 C97E 7015

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGa0akh+iQYcl+cBURAuBcAJoCP5xU1RTxAwKO1DlRKlmBHSlfUwCfSDyz
dhsiKLcmq0TcFlGRMyS4jUQ=
=AC5V
-----END PGP SIGNATURE-----

Re: [Sshguard-maintainers] sshguard 1.0

[mantra U. <uni...@gm...>]

Hello Mij,

I believe i have included what you are looking for;
  - Licence Type is changed to "BSD"
  - Package Group is set to be "Applications/System"
  - Added "--with-firewall=iptables"
  - Check for path to the "iptables", if not found in "/sbin/iptables" then
defaults to "/usr/sbin/iptables"
  - The yum URL is http://tantra.homelinux.net/yum/
     .../yum/sshguard/i386/ has the binary RPM
     .../yum/sshguard/source/ has the source

Regards,
mantra - Instrument of Thought

On 6/6/07, Mij <mi...@bi...> wrote:
>
> thank you
>
> Two more things:
> 1) what command do people use to this rpm? "yum $URL"?
> 2) had a quick look at the spec file in src.spm:
> # the license is BSD if it has any impact
> # if there is any more appropriate group than "Applications/
> Productivity"?
> I believe something with "security" or "system" in it would be good
> # if iptables is not in /sbin/iptables: does the build work for
> unprivileged users too? if not, I recommend appending
> --with-iptables=/usr/sbin/iptables
> to ./configure
>
> If you agree with these mods, please send me the final
> version; I will publish the bin rpm, the src rpm and the txt with the
> commands for using them
>
> thanks
>
>
> On 06/giu/07, at 07:15, mantra UNIX wrote:
>
> > mij,
> >
> > Attached are the Source and Binary RPM's built and tested for
> > 'Fedora Core 6', i386 Architecture. I can provide a web-link for
> > package downloads. Let me know.
> >
> > Nice job on version 1.0.
> >
> > Regards,
> > Tantra
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Sshguard-maintainers mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-maintainers
>



-- 
Regards,
mantra - Instrument of Thought

Re: [Sshguard-maintainers] sshguard 1.0

[Mij <mi...@bi...>]

thank you

Two more things:
1) what command do people use to this rpm? "yum $URL"?
2) had a quick look at the spec file in src.spm:
# the license is BSD if it has any impact
# if there is any more appropriate group than "Applications/ 
Productivity"?
I believe something with "security" or "system" in it would be good
# if iptables is not in /sbin/iptables: does the build work for
unprivileged users too? if not, I recommend appending
--with-iptables=/usr/sbin/iptables
to ./configure

If you agree with these mods, please send me the final
version; I will publish the bin rpm, the src rpm and the txt with the
commands for using them

thanks


On 06/giu/07, at 07:15, mantra UNIX wrote:

> mij,
>
> Attached are the Source and Binary RPM's built and tested for  
> 'Fedora Core 6', i386 Architecture. I can provide a web-link for  
> package downloads. Let me know.
>
> Nice job on version 1.0.
>
> Regards,
> Tantra

[Sshguard-maintainers] sshguard 1.0

[Mij <mi...@bi...>]

hello folks,

sshguard 1.0 stable has been finally released, see

http://sourceforge.net/forum/forum.php?forum_id=701923

There is a couple of relevant news for maintainers wrt 0.91:
1) paths can now be set during ./configure
For example, iptables path, or the path of /etc/hosts.allow file.
These are autodetected via $PATH if they're not specified manually.
If the package compiles on the user host, mind that some systems
exclude sbin from users PATH, so specifing the path manually is safer.

2) there is now a man page to install (man/sshguard.8)
It is installed automatically during make install

3) there is an example file for whitelisting in exmples/ 
whitelistfile.example.
Depending on the policy of the system, decide whether (and where)
to copy this example file into the system.

4) a thorough setup guide covering all the setup combos is available at
	http://sshguard.sourceforge.net/doc/setup/setup.html
Unless your package makes the software "up and running" (which is
preferred, when possible), I recommend to show it off as feedback after
a successful installation.

I remind to use the syslog+sshguard or syslog-ng+sshguard whenever
possible; avoid the tail+sshguard combo which is just a working hack.



Last but not least, there is a new "policy" for maintainerships:
- I have freed slots on http://sshguard.sourceforge.net/doc/ 
sshguardpackages.html
for sshguard 1.0
- if you intend to build a package for an OS, please send a message  
to the
sshguard-maintainers ml containing:
	- the target OS or OSes
	- the URL of the package, or the package content itself if you want  
mirroring
	- possibly a brief TXT or HTML file with notes for users to install  
the package if it's not
	trivial on default setups (for example on unofficial APT sources, or  
gentoo sunrise etc).
	If what you need to say is already explained somewhere else, feel  
free to redirect there.
	I will publish your file on the website for better user feedback.


Your help is appreciated, thanks

Re: [Sshguard-maintainers] Fedora RPM packages

[mantra U. <uni...@gm...>]

sure.

On 5/25/07, Mij <mi...@bi...> wrote:
>
>
> On 25/mag/07, at 22:59, mantra UNIX wrote:
>
> > Hi there,
> > Is there a 'sshgaurd' RPM  for 'Fedora Core' ? If not i would like
> > to create one.
>
> there is not a fedora package so far.
> A fedora rpm is definitely appealing, but I would suggest to wait for
> 1.0 final to be
> released.
> This should happen within a month, as beta3 is essentially a release
> candidate.
>
> thank you
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Sshguard-maintainers mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-maintainers
>

Re: [Sshguard-maintainers] Fedora RPM packages

[Mij <mi...@bi...>]

On 25/mag/07, at 22:59, mantra UNIX wrote:

> Hi there,
> Is there a 'sshgaurd' RPM  for 'Fedora Core' ? If not i would like  
> to create one.

there is not a fedora package so far.
A fedora rpm is definitely appealing, but I would suggest to wait for  
1.0 final to be
released.
This should happen within a month, as beta3 is essentially a release  
candidate.

thank you

[Sshguard-maintainers] Fedora RPM packages

[mantra U. <uni...@gm...>]

Hi there,
Is there a 'sshgaurd' RPM  for 'Fedora Core' ? If not i would like to create
one.

- Tantra

Re: [Sshguard-maintainers] Redhat/Centos RPM maintainer?

[Mij <mi...@bi...>]

On 17/apr/07, at 01:34, Nathan Paquin wrote:

> Has anyone volunteered to maintain an RPM for Redhat/Centos?

my mua just marked this message as spam...

not yet, I would appreciate one. Mind that RedHat has iptables in / 
usr/sbin, not /sbin AFAIK


> Regards,
>
> Nathan

[Sshguard-maintainers] Redhat/Centos RPM maintainer?

[Nathan P. <np...@cc...>]

Has anyone volunteered to maintain an RPM for Redhat/Centos?

Regards,

Nathan

[Sshguard-maintainers] some news

[Mij <mi...@bi...>]

sshguard v. 1.0 is coming in some weeks, with a couple of relevant 
changes that
maintainers should be aware of:

1) attack recognition is no longer done by mean of regular 
expressions, but
with a yacc/bison grammar specification.

Effects:
- sensible improvement in power of recognition (from regular languages 
to context-free ones)
- can recognize hostnames ("UseDNS no" sshd setting recommendation now 
superseded)
- can recognize IPv6 addresses
- any customization made to the regexp recognizing attacks on your 
system is lost
(I recommend reporting any unrecognized attack pattern to me for 
inclusion in the original source.
You can do it directly or via 
http://sshguard.sourceforge.net/newattackpatt.php )

2) the path of iptables can be set with ./configure 
--with-iptables=/path.../iptables

[Sshguard-maintainers] recommendations

[Mij <mi...@bi...>]

Some up to date recommendations when packaging sshguard:

- always use sshguard v. 0.91
- when a URL to the project is to be included, use 
http://sshguard.sourceforge.net
- make sshguard run in syslog / syslog-ng whenever possible
- if you run sshguard standalone, use "tail -n -F src_logfile" (not -f 
as pointed in README),
and determine the correct src_logfile that gets ssh entries in the 
target system
- if you run sshguard with syslog-ng, mind to use the following filter:

filter sshlogs { facility(auth, authpriv) and match("ssh"); };

(add "auth, " to the filter reported in README)
- LINUX: sshguard wants iptables in /sbin/ by default. If the target 
system has iptables somewhere
else, mind to adjust paths in file fwalls/command_iptables.h before 
configuring

Re: [Sshguard-maintainers] wrap up

[Mij <mi...@bi...>]

Thank you Ali

I will mark "work in progress" the gentoo package and the debian 
package from
Ernesto (of which I lost the announcement mail for some reason), and 
associate
you as maintainers.

Please notify when the packages are commited upstream (I will mark 
them done then).


On 2007-03-15 22:58:24 +0100 Ali Polatel <po...@ne...> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi,
> I've written an ebuild for portage, it has a maintainer-wanted bug
> right now ( https://bugs.gentoo.org/show_bug.cgi?id=169754 ) and the
> ebuild is in the official Gentoo Sunrise overlay.
> (http://gentoo-sunrise.org/svn/reviewed/net-misc/sshguard/ )
> 
> You can put a notice on the webpage saying the gentoo users can get it
> through the sunrise overlay by :
> 
> -> First add sunrise to overlays using layman:
> layman -A sunrise
> -> Then emerge sshguard
> emerge sshguard
> 
> The package has to be maintained by a gentoo developer to get into the
> official portage tree and hopefully that'll happen soon.
> 
> Ali
> 
> * Mij (mi...@bi...) wrote:
>> dear maintainers,
>> 
>> some of you wrote me in in the past days for notifying they are 
>> creating a
>> package for sshguard.
>> 
>> I would like to summarize here who is doing what and for which 
>> platform.
>> 
>> For example, I am most interested in a debian or ubuntu package, and 
>> a
>> gentoo portage.
>> Anyone is taking these?
>> 
>> bye
>> 
>> _______________________________________________
>> Sshguard-maintainers mailing list
>> Ssh...@li...
>> https://lists.sourceforge.net/lists/listinfo/sshguard-maintainers
>> 
> 
> - -- Ali Polatel (hawking) <po...@ne...>
> http://hawking.nonlogic.org/
> gpg: F0186CA2 fp: 7110 01E2 F8B6 83A2 AC52  1D9F 986B 76E1 F018 6CA2
> ()  ascii ribbon campaign - against html mail
> /\
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.3 (GNU/Linux)
> 
> iD8DBQFF+cGAmGt24fAYbKIRAjMAAKCGH0RW/EiEd8PF5uzwbBnTp0KjwQCeLikT
> nFMoIdkwTOyrnVUizIVx2x4=
> =yoad
> -----END PGP SIGNATURE-----
> 
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to 
> share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Sshguard-maintainers mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-maintainers
> 

Re: [Sshguard-maintainers] wrap up

[Ali P. <po...@ne...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 Hi,
 I've written an ebuild for portage, it has a maintainer-wanted bug
right now ( https://bugs.gentoo.org/show_bug.cgi?id=169754 ) and the
ebuild is in the official Gentoo Sunrise overlay.
(http://gentoo-sunrise.org/svn/reviewed/net-misc/sshguard/ )
 
 You can put a notice on the webpage saying the gentoo users can get it
 through the sunrise overlay by :

 -> First add sunrise to overlays using layman:
 layman -A sunrise
 -> Then emerge sshguard
 emerge sshguard

 The package has to be maintained by a gentoo developer to get into the
official portage tree and hopefully that'll happen soon.

 Ali

* Mij (mi...@bi...) wrote:
> dear maintainers,
> 
> some of you wrote me in in the past days for notifying they are creating a
> package for sshguard.
> 
> I would like to summarize here who is doing what and for which platform.
> 
> For example, I am most interested in a debian or ubuntu package, and a
> gentoo portage.
> Anyone is taking these?
> 
> bye
> 
> _______________________________________________
> Sshguard-maintainers mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-maintainers
> 

- -- 
Ali Polatel (hawking) <po...@ne...>
http://hawking.nonlogic.org/
gpg: F0186CA2 fp: 7110 01E2 F8B6 83A2 AC52  1D9F 986B 76E1 F018 6CA2
()  ascii ribbon campaign - against html mail
/\
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.3 (GNU/Linux)

iD8DBQFF+cGAmGt24fAYbKIRAjMAAKCGH0RW/EiEd8PF5uzwbBnTp0KjwQCeLikT
nFMoIdkwTOyrnVUizIVx2x4=
=yoad
-----END PGP SIGNATURE-----

[Sshguard-maintainers] startup script (linux)

[Mij <mi...@bi...>]

dear maintainers,

Jérôme Lemaire sent me this startup script for sshguard. I did not review
this contribution.

While my recommendation is definitely to have sshguard run by syslog, I
hope it can be useful for those of you who decide to make sshguard run
standalone.

[Sshguard-maintainers] recommendations: version and setuid

[Mij <mi...@bi...>]

dear maintainers,

First of all, I would recommend anyone to use v. 0.91 for packaging,
not 0.9. I am aware v. 0.9 has been "default download" up to recently; I
just forgot to update the download page which is not automatic w/ new
releases.

Besides this, I am aware of an article at linux.com about sshguard

http://www.linux.com/article.pl?sid=07/02/27/1957242

this also suggest to use v. 0.9 whereas 0.91 was already available at the
time of writing.

But there is another, major mistake in this article, because it suggests
to make sshguard setuid. Besides the deep pointlessness of this, it opens
a serious security threat, as any user can craft a couple of plaintext
lines and give them to sshguard to block any IP address it likes.

[Sshguard-maintainers] wrap up

[Mij <mi...@bi...>]

dear maintainers,

some of you wrote me in in the past days for notifying they are creating a
package for sshguard.

I would like to summarize here who is doing what and for which platform.

For example, I am most interested in a debian or ubuntu package, and a
gentoo portage.
Anyone is taking these?

bye

[Sshguard-maintainers] maintainership

[Ali P. <po...@ne...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi everyone,
	I want to help sshguard development. I wrote an ebuild for sshguard,
it's now in the Gentoo sunrise overlay ( and its maintainer-needed bug
is https://bugs.gentoo.org/show_bug.cgi?id=169754 ) and I plan to
maintain it.
  I also want to help with the code.

	Regards,
	Ali
- -- 
Ali Polatel (hawking) <po...@ne...>
http://hawking.nonlogic.org/
gpg: F0186CA2 fp: 7110 01E2 F8B6 83A2 AC52  1D9F 986B 76E1 F018 6CA2
()  ascii ribbon campaign - against html mail
/\
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.3 (GNU/Linux)

iD8DBQFF9cVPmGt24fAYbKIRAhD9AKDdKSaDKQUALNTJbZOx0BUzgD7f/wCgyE13
mbos9ybsZEu5qpp2zn6VsTU=
=fNIU
-----END PGP SIGNATURE-----

[Sshguard-maintainers] sshguard debian/ubuntu package

[Ernesto N. C. A. <ec...@gm...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi.
My Name is Ernesto Crespo.

I'am Debian Maintainer.
http://qa.debian.org/developer.php?login=ec...@de...

I can build debian package.

I can send Intend To Package for WNPP.



Ernesto Crespo

- --
Ernesto Crespo
Linux Registered User: #418790
GNU/Linux Debian Etch- Kernel 2.6.18  #1 SMP PREEMPT
Fingerprint = 66CB 6BF4 7C7C EC0E DA60  06C8 87E8 9061 C97E 7015

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFF9M4Vh+iQYcl+cBURAsx7AJwNtQVKKIn/Rd/LyKQj26GOi94FUgCeJYNa
MtVYULdo6UFTjBBXuycLUg0=
=ib1Z
-----END PGP SIGNATURE-----