| /alcasar.sh |
|---|
| 991,10 → 991,10 |
| $SED "s?^[\t ]*\$INCLUDE proxy.conf.*?#\$INCLUDE proxy.conf?g" /etc/raddb/radiusd.conf # remove the proxy function |
| # Add ALCASAR & Coovachilli dictionaries |
| [ -e /etc/raddb/dictionary.default ] || cp /etc/raddb/dictionary /etc/raddb/dictionary.default |
| cp $DIR_CONF/radius/dictionary.alcasar /usr/share/freeradius/dictionary.alcasar |
| echo -e '\n$INCLUDE dictionary.alcasar' > /etc/raddb/dictionary |
| cp /usr/share/doc/coova-chilli/dictionary.coovachilli /usr/share/freeradius/dictionary.coovachilli |
| echo -e '\n$INCLUDE dictionary.coovachilli' >> /etc/raddb/dictionary |
| cp $DIR_CONF/radius/dictionary.alcasar /etc/raddb/ |
| echo '$INCLUDE dictionary.alcasar' > /etc/raddb/dictionary |
| cp /usr/share/doc/coova-chilli/dictionary.coovachilli /etc/raddb/ |
| echo '$INCLUDE dictionary.coovachilli' >> /etc/raddb/dictionary |
| # Set "client.conf" to describe radius clients (coova on 127.0.0.1) |
| [ -e /etc/raddb/clients.conf.default ] || cp -f /etc/raddb/clients.conf /etc/raddb/clients.conf.default |
| cat << EOF > /etc/raddb/clients.conf |
| /rpms/ipt-netflow-2.3.spec |
|---|
| 8,7 → 8,7 |
| URL: https://github.com/aabc/ipt-netflow |
| BuildRequires: iptables-devel |
| Source0: %name-%version.tgz |
| %define kversion 4.14.106-server-1.mga6 |
| %define kversion 4.14.119-server-1.mga6 |
| %description |
| High performance NetFlow v5, v9, IPFIX flow data export module for Linux kernel. |
| 18,7 → 18,7 |
| %setup -q -n ipt-netflow-%{version} |
| %build |
| ./configure |
| ./configure --disable-dkms --disable-snmp-agent |
| %make_build |
| %install |
| 44,8 → 44,8 |
| /lib/modules/%kversion/extra/ipt_NETFLOW.ko |
| %changelog |
| * Sun May 12 2019 Richard REY <Rexy> |
| - Version 2.3 for the kernel 4.14.106 (ALCASAR 3.4) |
| * Tue May 21 2019 Richard REY <Rexy> |
| - Version 2.3 for the kernel 4.14.119 (ALCASAR 3.4) |
| * Wed Jan 02 2019 Richard REY <Rexy> |
| - Version 2.3 for the kernel 4.14.89 (ALCASAR 3.3.3) |
| * Sun Nov 04 2018 Richard REY <Rexy> |
| /rpms/rpm-build-howto |
|---|
| 38,8 → 38,8 |
| **** For ipt_netflow **** |
| - Must be complied on a system which runs the target kernel. So install manually the targeted kernel and reboot (ipt_NETFLOW will not load during this reboot) |
| - install the RPMs "kernel-server-devel" (choose the targeted kernel), "lib64iptables-devel (or libiptables-devel in 32b arch)" |
| - download, uncompress and test the compilation of the last version of ipt-netflow (./configure, make all install). The module is compiled in the same directory. The libs are copied in the /lib64/iptables (libip6t_NETFLOW.so & libipt_NETFLOW.so) |
| - test the module : go to the directory of sources and try to load it (depmod + modprobe ipt_NETFLOW), run "lsmod|grep ipt_NETFLOW" to verify if it's loaded. Run "alcasar-iptables.sh" to reload netfilter rules (no errors should appear) |
| - download, uncompress and test the compilation of the last version of ipt-netflow (./configure --disable-dkms --disable-snmp-agent, make all install). The module is compiled in the same directory. The libs are copied in the /lib64/iptables (libip6t_NETFLOW.so & libipt_NETFLOW.so) |
| - test the module : go to the directory of sources and try to load it (depmod + modprobe ipt_NETFLOW), look at "journalctrl -f" and run "lsmod|grep ipt_NETFLOW" to verify if it's loaded. Run "alcasar-iptables.sh" to reload netfilter rules (no errors should appear). Run "alcasar-daemon.sh" to verify that all is ok. |
| - if all is ok, copy the tarball in rpmbuild/SOURCES. Copy and adapt the .spec in rpmbuild/SPECS (change the versions of kernel and rpm). |
| - change to the directory ~/pmbuild/SPEC and run "rpmbuild -bb ****.spec" |
| --> !!! Pb : rpmbuild ne réalise pas le "make install" correctement (pas de copie du module compilé "~/rpmbuild/BUILD/ipt_NETFLOW.ko" vers /lib/modules/kernel-.../extra/ipt_NETFLOW.ko). Solutions : lancez la compil à la main (make + make install) depuis le répertoire ~/rpmbuild/BUILD |
| /rpms/x86_64/ipt-netflow-2.3-7.mga6.x86_64.rpm |
|---|
| Cannot display: file marked as a binary type. |
| svn:mime-type = application/octet-stream |
| /scripts/alcasar-rpm-download.sh |
|---|
| 11,7 → 11,7 |
| VERSION="6" |
| ARCH="x86_64" |
| # The kernel version we compile netflow for |
| KERNEL="kernel-server-4.14.106-1.mga6-1-1.mga6" |
| KERNEL="kernel-server-4.14.119-1.mga6-1-1.mga6" |
| # ****** Alcasar needed RPMS - paquetages nécessaires au fonctionnement d'Alcasar ****** |
| PACKAGES="arp-scan vim-enhanced freeradius freeradius-mysql freeradius-ldap lighttpd lighttpd-mod_auth php-fpm e2guardian postfix mariadb ntp bind-utils openssh-server php-xml php-ldap php-mysqli php-mbstring php-sockets php-cli php-curl php-pdo_sqlite php-json rng-utils rsync clamav perl-rrdtool perl-MailTools perl-Socket6 fail2ban gnupg ulogd pm-fallback-policy ipset cronie-anacron usbutils locales-en usb_modeswitch tinyproxy vnstat php-gd sudo iftop man dos2unix p7zip bc msec kernel-userspace-headers kernel-firmware-nonfree dnsmasq dhcp-server netcat-traditional" |
| /scripts/alcasar-urpmi.sh |
|---|
| 12,7 → 12,7 |
| VERSION="6" |
| ARCH="x86_64" |
| # The kernel version we compile netflow for |
| KERNEL="kernel-server-4.14.106-1.mga6-1-1.mga6" |
| KERNEL="kernel-server-4.14.119-1.mga6-1-1.mga6" |
| # ****** Alcasar needed RPMS - paquetages nécessaires au fonctionnement d'Alcasar ****** |
| PACKAGES="arp-scan vim-enhanced freeradius freeradius-mysql freeradius-ldap lighttpd lighttpd-mod_auth php-fpm e2guardian postfix mariadb ntp bind-utils openssh-server php-xml php-ldap php-mysqli php-mbstring php-sockets php-cli php-curl php-pdo_sqlite php-json rng-utils rsync clamav perl-rrdtool perl-MailTools perl-Socket6 fail2ban gnupg ulogd pm-fallback-policy ipset cronie-anacron usbutils locales-en usb_modeswitch tinyproxy vnstat php-gd sudo iftop man dos2unix p7zip bc msec kernel-userspace-headers kernel-firmware-nonfree dnsmasq dhcp-server netcat-traditional" |
| 114,7 → 114,7 |
| fi |
| done |
| # download the kernel used by ALCASAR and fix its version |
| # download the kernel used by ALCASAR |
| if [ $Lang == "fr" ] |
| then |
| echo "Récupération du noyau Linux exploité par ALCASAR. Veuillez patienter ..." |
| 121,7 → 121,6 |
| else |
| echo "Download the Linux kernel used by ALCASAR. Please wait ..." |
| fi |
| echo "/^kernel/" > /etc/urpmi/skip.list |
| urpmi --auto --quiet $KERNEL |
| # download updated RPM in cache |
| if [ $Lang == "fr" ] |
| 228,4 → 227,7 |
| urpmi --clean |
| # the ipt-netflow RPM add the kernel module ipt_NETFLOW (the modules dependance tree need to be updated) |
| /sbin/depmod -a |
| # fix some RPM versions |
| echo "/^kernel/" > /etc/urpmi/skip.list |
| echo "/^freeradius/" >> /etc/urpmi/skip.list |
| exit 0 |