initial commit

14 files changed, 328 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..9a7d5a3
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,80 @@
+ptunnel (0.72-1) unstable; urgency=medium
+
+  * QA upload.
+  * New upstream release. Closes: #685305
+  * Switch to dpkg-source 3.0 (quilt) format.
+  * debian/copyright:
+    + Rewrite following copyright-format 1.0.
+  * debian/control
+    + Set QA team as Maintainer.
+    + Change debhelper to 9 in B-D.
+    + Bump Standards-Version to 3.9.7
+    + Remove cbds and quilt from B-D.
+    + Use dpkg architecture wildcards. Closes: #634477
+  * debian/compat
+    + Switch compat level 7 to 9.
+  * Use wrap-and-sort.
+  * Remove control.in file.
+  * Remove dirs file.
+  * Rename docs file to ptunnel.docs.
+    + Install only useful files: index.html, 
+      packet-format.png, setup.png
+  * debian/patches
+    + Add add_hardening_flags.diff
+      + Set correctly hardening flags.
+    + Add DEP-3 header to fix_minux_chars_in_man.patch
+    + Add fix_typo.diff to fix typo error in README. Closes: #597288
+    + Rename makefile-debian-prefix to makefile-debian-prefix.patch
+      + Add DEP-3 header to makefile-debian-prefix.patch
+  * Add ptunnel.doc-base file.
+  * debian/rules
+    + Use Hardening flags.
+  * Update watch file.
+
+ -- Daniel Echeverry <epsilon77@gmail.com>  Sat, 13 Feb 2016 20:49:23 -0500
+
+ptunnel (0.71-2) unstable; urgency=low
+
+  * Updated build-dep to allow building 
+    in non-linux port. Thanks to Cyril Brulebois
+    for reporting the issue.
+  Closes: #559717 
+  * Bumped standards-version to 3.8.3
+  * Added Homepage:
+
+ -- Romain Beauxis <toots@rastageeks.org>  Wed, 09 Dec 2009 10:29:11 -0600
+
+ptunnel (0.71-1) unstable; urgency=low
+
+  * New upstream release.
+  * Updated standards to 3.8.2
+  * Bumped compat to 7 
+  * Refreshed patches.
+  * Added build-dep on libselinux1-dev to enable SELinux support.
+
+ -- Romain Beauxis <toots@rastageeks.org>  Thu, 30 Jul 2009 04:57:07 +0200
+
+ptunnel (0.70-1) unstable; urgency=low
+
+  * New upstream release 
+  * Updated standards to 3.8.0
+  * Reverted build-deps on libpcap
+  * Updated debian/copyright
+
+ -- Romain Beauxis <toots@rastageeks.org>  Wed, 25 Feb 2009 03:06:53 +0100
+
+ptunnel (0.61-2) unstable; urgency=low
+
+  * Wrapped description to 70th col (Closes: #325809)
+  * Switched to cdbs
+  * Updated debian standards
+  * Added patch to correct the manual page
+
+ -- Romain Beauxis <toots@rastageeks.org>  Sun, 18 Feb 2007 13:39:47 +0100
+
+ptunnel (0.61-1) unstable; urgency=low
+
+  * Initial release Closes: #311348
+
+ -- Romain Beauxis <toots@rastageeks.org>  Tue, 31 May 2005 20:49:25 +0200
+
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 0000000..ec63514
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+9
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..f6cbedc
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,22 @@
+Source: ptunnel
+Section: net
+Priority: optional
+Maintainer: Debian QA Group <packages@qa.debian.org>
+Build-Depends: debhelper (>= 9),
+               libpcap0.8-dev | libpcap-dev,
+               libselinux1-dev [linux-any],
+               patchutils (>= 0.2.25)
+Standards-Version: 3.9.7
+Homepage: http://www.cs.uit.no/~daniels/PingTunnel/
+
+Package: ptunnel
+Architecture: any
+Depends: ${misc:Depends}, ${shlibs:Depends}
+Description: Tunnel TCP connections over ICMP packets
+ ptunnel is an application that allows you to reliably tunnel TCP
+ connections to a remote host using ICMP echo request and reply
+ packets, commonly known as ping requests and replies. It acts as
+ a proxy and can handle sockets and secured identification.
+ .
+ Those features can be very handy when working in a closed networking
+ environment with firewalls and proxies.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..042b79e
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,58 @@
+Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: ptunnel
+Source: http://www.cs.uit.no/~daniels/PingTunnel/index.html
+
+Files: *
+Copyright: Copyright 2004-2011 Daniel Stoedle <daniels@cs.uit.no>, Yellow Lemon Software
+License: BSD-3-Clause
+
+Files: md5.*
+Copyright: Copyright 1999, 2000, 2002 Aladdin Enterprises
+License: Zlib
+
+Files: debian/*
+Copyright: 2005-2009 Romain Beauxis <toots@rastageeks.org>
+ 2016 Daniel Echeverry <epsilon77@gmail.com>
+License: BSD-3-Clause
+
+License: BSD-3-Clause
+ Redistribution and use in source and binary forms, with or without modification,
+ are permitted provided that the following conditions are met:
+ .
+ 1. Redistributions of source code must retain the above copyright notice,
+    this list of conditions and the following disclaimer.
+ .
+ 2. Redistributions in binary form must reproduce the above copyright notice,
+    this list of conditions and the following disclaimer in the documentation and/or
+    other materials provided with the distribution.
+ .
+ 3. Neither the name of the copyright holder nor the names of its contributors may be
+    used to endorse or promote products derived from this software without
+    specific prior written permission.
+ .
+ THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY
+ EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+ MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL
+ THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+ EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
+ GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
+ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+License: Zlib
+ This software is provided 'as-is', without any express or implied
+ warranty.  In no event will the authors be held liable for any damages
+ arising from the use of this software.
+ .
+ Permission is granted to anyone to use this software for any purpose,
+ including commercial applications, and to alter it and redistribute it
+ freely, subject to the following restrictions:
+ .
+ 1. The origin of this software must not be misrepresented; you must not
+    claim that you wrote the original software. If you use this software
+    in a product, an acknowledgment in the product documentation would be
+    appreciated but is not required.
+ 2. Altered source versions must be plainly marked as such, and must not be
+    misrepresented as being the original software.
+ 3. This notice may not be removed or altered from any source distribution.
diff --git a/debian/patches/add_hardening_flags.diff b/debian/patches/add_hardening_flags.diff
new file mode 100644
index 0000000..b5ad8ba
--- /dev/null
+++ b/debian/patches/add_hardening_flags.diff
@@ -0,0 +1,28 @@
+Description: Add Hardening flags
+Forwarded: no
+Author: Daniel Echeverry <epsilon77@gmail.com>
+Last-Update: 2016-02-16
+--- a/Makefile
++++ b/Makefile
+@@ -32,7 +32,7 @@ install: ptunnel
+ 	install ./ptunnel.8 $(mandir)/ptunnel.8
+ 
+ ptunnel: $(PT_OBJS)
+-	$(CC) -o $@ $^ $(LDOPTS) `[ -e /usr/include/selinux/selinux.h ] && echo -lselinux`
++	$(CC) $(CFLAGS) $(CPPFLAGS) $(LDFLAGS) -o $@ $^ $(LDOPTS) `[ -e /usr/include/selinux/selinux.h ] && echo -lselinux`
+ 
+ ptunnel.exe: $(WIN32_PT_OBJS)
+ 	$(CC) -o $@ $^ $(WIN32_LDOPTS)
+@@ -44,10 +44,10 @@ clean:
+ 
+ depend: .depend
+ .depend:
+-	$(CC) $(CFLAGS) -MM *.c > $@
++	$(CC) $(CFLAGS) $(CPPFLAGS) -MM *.c > $@
+ 
+ %.o:%.c
+-	$(CC) $(CFLAGS) `[ -e /usr/include/selinux/selinux.h ] && echo -DHAVE_SELINUX` -c -o $@ $<
++	$(CC) $(CFLAGS) $(CPPFLAGS) `[ -e /usr/include/selinux/selinux.h ] && echo -DHAVE_SELINUX` -c -o $@ $<
+ 
+ %.obj:%.c
+ 	$(WIN32_CC) $(WIN32_CFLAGS) -c -o $@ $<
diff --git a/debian/patches/fix_minus_chars_in_man.patch b/debian/patches/fix_minus_chars_in_man.patch
new file mode 100644
index 0000000..f5ad5ac
--- /dev/null
+++ b/debian/patches/fix_minus_chars_in_man.patch
@@ -0,0 +1,72 @@
+Description: Fix hyphen-used-as-minus-sign lintian warning in manpage
+Forwarded: no
+Author: Romain Beauxis <toots@rastageeks.org>
+Last-Update: 2016-02-13
+--- a/ptunnel.8
++++ b/ptunnel.8
+@@ -3,7 +3,7 @@
+ ptunnel \- tunnel TCP connections over ICMP echo request/reply packets.
+ .SH SYNOPSIS
+ .B ptunnel
+-\-p proxy_address \-lp listen_port \-da destination_address \-dp dest_port [\-c network_device] [\-v verbosity] [-f file] [-udp] [-syslog]
++\-p proxy_address \-lp listen_port \-da destination_address \-dp dest_port [\-c network_device] [\-v verbosity] [\-f file] [\-udp] [\-syslog]
+ 
+ .B ptunnel
+ [\-c network_device] [\-v verbosity] [\-f file] [\-udp] [\-syslog] [\-daemon file]
+@@ -39,13 +39,13 @@ Specifies/restrict the port that the pro
+ Specify the network interface to capture packets from. Note that packet capturing isn't always necessary, but you should try this if you experience problems with ptunnel.
+ .TP
+ .B \-v verbosity
+-Controls the verbosity level. -1 is no output, 0 shows errors only, 1 shows info messages, 2 gives more output, 3 provides even more output, level 4 displays debug info and level 5 displays absolutely everything, including the nasty details of sends and receives.
++Controls the verbosity level. \-1 is no output, 0 shows errors only, 1 shows info messages, 2 gives more output, 3 provides even more output, level 4 displays debug info and level 5 displays absolutely everything, including the nasty details of sends and receives.
+ .TP
+ .B \-udp
+-Enables tunneling over UDP port 53 (DNS) instead of using ICMP. This will only work if your proxy can accept incoming traffic on port 53, and the client is able to send data to the proxy on port 53. Note that this option does not wrap ptunnel's data in DNS-compliant packets. This option must be given on both the proxy and client side for things to work correctly.
++Enables tunneling over UDP port 53 (DNS) instead of using ICMP. This will only work if your proxy can accept incoming traffic on port 53, and the client is able to send data to the proxy on port 53. Note that this option does not wrap ptunnel's data in DNS\-compliant packets. This option must be given on both the proxy and client side for things to work correctly.
+ .TP
+ .B \-syslog (Not available on Windows.)
+-Changes logging to use the built-in syslog fascility.
++Changes logging to use the built\-in syslog fascility.
+ .TP
+ .B \-daemon file (Not available on Windows.)
+ Run in background, writing PID in file.
+@@ -64,13 +64,13 @@ When started in privileged mode, restric
+ .TP
+ .B \-setcon context (Not available on Windows.)
+ Set SELinux context when all there is left to do are network I/O operations.
+-In order to be able to combine with -chroot you will have to `mount --bind /proc /chrootdir/proc`
++In order to be able to combine with \-chroot you will have to `mount --bind /proc /chrootdir/proc`
+ .TP
+ .B \-x password
+ Specifies a password or passphrase to use. This will allow you to protect the proxy from use by others who don't know the password. It needs to be specified on both proxy and client.
+ .TP
+ .B \-f file
+-Specifies a log file. If you specify -syslog, syslog is always used instead.
++Specifies a log file. If you specify \-syslog, syslog is always used instead.
+ .TP
+ .B \-h
+ Displays brief usage information.
+@@ -84,19 +84,19 @@ An ssh connection to login.domain.com ca
+ .TP
+ .B ssh \-p 8000 localhost
+ .PP
+-If ssh complains about potential man-in-the-middle attacks, simply remove the offending key from the known_hosts file. The warning/error is expected if you have previously ssh'd to your local computer (i.e., ssh localhost), or you have used ptunnel to forward ssh connections to different hosts.
++If ssh complains about potential man\-in\-the\-middle attacks, simply remove the offending key from the known_hosts file. The warning/error is expected if you have previously ssh'd to your local computer (i.e., ssh localhost), or you have used ptunnel to forward ssh connections to different hosts.
+ 
+-Of course, for all of this to work, you need to start the proxy on your proxy-computer (proxy.pingtunnel.com). Doing this is very simple:
++Of course, for all of this to work, you need to start the proxy on your proxy\-computer (proxy.pingtunnel.com). Doing this is very simple:
+ 
+ .B ptunnel
+ 
+ If you find that the proxy isn't working, you will need to enable packet capturing on the main network device. Currently this device is assumed to be an ethernet-device (i.e., ethernet or wireless). Packet capturing is enabled by giving the -c switch, and supplying the device name to capture packets on (for instance eth0 or en1). The same goes for the client. On Mac OS X, packet capturing must always be enabled (both for proxy and client), as resent packets won't be received otherwise.
+ 
+-To protect yourself from others using your proxy, you can protect access to it with a password using the <tt>-x</tt> switch. The password is never sent in the clear, but keep in mind that it may be visible from tools like top or ps, which can display the command line used to start an application.
++To protect yourself from others using your proxy, you can protect access to it with a password using the <tt>\-x</tt> switch. The password is never sent in the clear, but keep in mind that it may be visible from tools like top or ps, which can display the command line used to start an application.
+ 
+ .SH EXIT STATUS
+ .B ptunnel
+-does not exit until forced to do so by an interrupt (Ctrl-C) or if it crashes.
++does not exit until forced to do so by an interrupt (Ctrl\-C) or if it crashes.
+ .SH BUGS
+ .B ptunnel
+ currently does not handle packet capturing on network interfaces other than ethernet or wireless correctly.
diff --git a/debian/patches/fix_typo.diff b/debian/patches/fix_typo.diff
new file mode 100644
index 0000000..cb7ded8
--- /dev/null
+++ b/debian/patches/fix_typo.diff
@@ -0,0 +1,15 @@
+Description: Fix typo in README file
+Forwarded: no
+Author: Daniel Echeverry <epsilon77@gmail.com>
+Last-Update: 2016-02-14
+--- a/README
++++ b/README
+@@ -10,7 +10,7 @@ ping requests and replies.
+ 
+ Contact details
+ ---------------
+-You can the author, Daniel Stoedle, here:
++You can contact the author, Daniel Stoedle, here:
+    <daniels@cs.uit.no>
+ The official ptunnel website is located here:
+    <http://www.cs.uit.no/~daniels/PingTunnel/>
diff --git a/debian/patches/makefile-debian-prefix.patch b/debian/patches/makefile-debian-prefix.patch
new file mode 100644
index 0000000..60b36d5
--- /dev/null
+++ b/debian/patches/makefile-debian-prefix.patch
@@ -0,0 +1,17 @@
+Description: Set debian paths
+Forwarded: no
+Author: Romain Beauxis <toots@rastageeks.org>
+Last-Update: 2016-02-13
+--- a/Makefile
++++ b/Makefile
+@@ -12,8 +12,8 @@ WIN32_CFLAGS = -g -Wall -DWIN32 -I"c:\Pr
+ WIN32_LDOPTS = -lwpcap -lwsock32 -L"c:\Program Files\WpdPack\Lib"
+ WIN32_PT_OBJS = ptunnel.obj md5.obj
+ 
+-prefix		= /usr
+-bindir		= $(prefix)/bin
++prefix		= $(DESTDIR)/usr
++bindir		= $(prefix)/sbin
+ mandir		= $(prefix)/share/man/man8
+ 
+ all: ptunnel
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..9a8f77a
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1,4 @@
+add_hardening_flags.diff
+fix_typo.diff
+fix_minus_chars_in_man.patch
+makefile-debian-prefix.patch
diff --git a/debian/ptunnel.doc-base b/debian/ptunnel.doc-base
new file mode 100644
index 0000000..a332a7a
--- /dev/null
+++ b/debian/ptunnel.doc-base
@@ -0,0 +1,10 @@
+Document: ptunnel
+Title: Debian ptunnel manual
+Author: Daniel Stoedle <daniels@cs.uit.no>
+Abstract: This manual describes how works ptunnel and how use it.
+Section: Network/Communication
+
+Format: HTML
+Index: /usr/share/doc/ptunnel/index.html
+Files: /usr/share/doc/ptunnel/index.html
+
diff --git a/debian/ptunnel.docs b/debian/ptunnel.docs
new file mode 100644
index 0000000..6a5af59
--- /dev/null
+++ b/debian/ptunnel.docs
@@ -0,0 +1,4 @@
+README
+web/index.html
+web/packet-format.png
+web/setup.png
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..896d652
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,11 @@
+#!/usr/bin/make -f
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+CPPFLAGS:=$(shell dpkg-buildflags --get CPPFLAGS)
+CFLAGS:=$(shell dpkg-buildflags --get CFLAGS)
+LDFLAGS:=$(shell dpkg-buildflags --get LDFLAGS)
+
+%:
+	dh  $@
+
+override_dh_auto_build:
+	dh_auto_build -- CFLAGS="$(CFLAGS)" LDFLAGS="$(LDFLAGS)" CPPFLAGS="$(CPPFLAGS)"
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debian/watch b/debian/watch
new file mode 100644
index 0000000..71b0b4f
--- /dev/null
+++ b/debian/watch
@@ -0,0 +1,5 @@
+version=3
+http://www.cs.uit.no/~daniels/PingTunnel/PingTunnel-(.*)\.tar\.gz
+
+
+