From owner-freebsd-questions@FreeBSD.ORG Tue Feb 6 06:37:58 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E595D16A400 for ; Tue, 6 Feb 2007 06:37:58 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from smtp.infracaninophile.co.uk (ns0.infracaninophile.co.uk [81.187.76.162]) by mx1.freebsd.org (Postfix) with ESMTP id 59CED13C467 for ; Tue, 6 Feb 2007 06:37:58 +0000 (UTC) (envelope-from m.seaman@infracaninophile.co.uk) Received: from [IPv6:::1] (localhost.infracaninophile.co.uk [IPv6:::1]) by smtp.infracaninophile.co.uk (8.13.8/8.13.8) with ESMTP id l166baCT056801; Tue, 6 Feb 2007 06:37:37 GMT (envelope-from m.seaman@infracaninophile.co.uk) Message-ID: <45C8222A.5080804@infracaninophile.co.uk> Date: Tue, 06 Feb 2007 06:37:30 +0000 From: Matthew Seaman Organization: Infracaninophile User-Agent: Thunderbird 1.5.0.9 (X11/20070120) MIME-Version: 1.0 To: ceo@l-i-e.com References: <33808.216.230.84.67.1170717281.squirrel@www.l-i-e.com> In-Reply-To: <33808.216.230.84.67.1170717281.squirrel@www.l-i-e.com> X-Enigmail-Version: 0.94.0.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enigBBEEEFB92C4684BFC1A5412B" X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-3.0 (smtp.infracaninophile.co.uk [IPv6:::1]); Tue, 06 Feb 2007 06:37:52 +0000 (GMT) X-Virus-Scanned: ClamAV 0.88.7/2525/Mon Feb 5 16:11:08 2007 on happy-idiot-talk.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-2.5 required=5.0 tests=AWL,BAYES_00, DKIM_POLICY_TESTING,NO_RELAYS autolearn=ham version=3.1.7 X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on happy-idiot-talk.infracaninophile.co.uk Cc: freebsd-questions@freebsd.org Subject: Re: port: security/denyhosts X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Feb 2007 06:37:59 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigBBEEEFB92C4684BFC1A5412B Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable Richard Lynch wrote: > I thought the security/denyhosts port looked good, even if just to > slim down that report I get every day about the hundreds of SSH > attempts... >=20 > And, hey, reporting back to denyhosts HQ and letting them notify the > sysadmins of hacked boxen is a lot better than me doing it by hand. >=20 > Only problem is, I'm stuck at Step 1: >=20 > cd /usr/ports/security/denyhosts > root@audio1# make clean > =3D=3D=3D> Cleaning for python-2.4.1_3 > =3D=3D=3D> Cleaning for denyhosts-2.6 > root@audio1# make > =3D=3D=3D> Vulnerability check disabled, database not found > =3D=3D=3D> Extracting for denyhosts-2.6 > =3D> Checksum OK for DenyHosts-2.6.tar.gz. > =3D=3D=3D> Patching for denyhosts-2.6 > =3D=3D=3D> Applying FreeBSD patches for denyhosts-2.6 > -e:No such file or directory > *** Error code 1 >=20 > Stop in /usr/ports/security/denyhosts. >=20 > I thought maybe I was missing Python, but I went and installed that, > and it's in pkg_info >=20 > Actually, I should also point out that I had to do portsnap fetch and > portsnap extract just to get security/denyhosts to show up... >=20 > Maybe I wasn't supposed to do that?... >=20 > Or is there another package it relies on that I'm missing? The command that is failing is: happy-idiot-talk:...ports/security/denyhosts:% grep '.-e' Makefile=20 @${REINPLACE_CMD} -e 's,%%PREFIX%%,${PREFIX},' \ where ${REINPLACE_CMD} should expand thusly: happy-idiot-talk:...ports/security/denyhosts:% make -V REINPLACE_CMD=20 /usr/bin/sed -i.bak You should find the definition of that variable around line 2087 of bsd.port.mk If this does not work for you then either you're missing chunks out of /usr/ports/Mk or you've got rogue entries in /etc/make.conf that break that command or you're running on a version of the OS too old to support "sed -i". Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 7 Priory Courtyard Flat 3 PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW --------------enigBBEEEFB92C4684BFC1A5412B Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.2 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFyCIw8Mjk52CukIwRCFiJAKCJWq1V0Y+qnwQJB4KpEcEP5GngtwCfVyCQ 9sVMTV1oHPbk98L3pDpzMyU= =QUYc -----END PGP SIGNATURE----- --------------enigBBEEEFB92C4684BFC1A5412B--