13:57 edwin 

new port: dump MSRPC information

        One-file-port, from @stake. This dumps information from
        remote RPC.  Much like "rpcinfo -p host" on unix hosts.
        Please check my patches: I removed an unused function so
        this wouldn't be marked as a security sensitive port, and
        I'm not sure my Makefile change respects CFLAGS.

PR:             ports/46991
Submitted by:   Yonatan@xpert.com <Yonatan@xpert.com>

13:28 edwin 

New port: security/hmap - web server fingerprinting tool

        Web server fingerprinting tool, used to identify web servers
        that changed thier banners.

PR:             ports/50754
Submitted by:   Yonatan@xpert.com <Yonatan@xpert.com>

10:58 erwin 

Crypt::OpenSSL::Bignum provides access to OpenSSL
multiprecision integer arithmetic libraries. Presently,
many though not all of the arithmetic operations that
OpenSSL provides are exposed to perl. In addition,
this module can be used to provide access to bignum
values produced by other OpenSSL modules, such as key
parameters from Crypt::OpenSSL::RSA.

08:49 krion 

- New port: security/tinyca version 0.4.9

TinyCA is a simple graphical userinterface written in Perl/Tk
to manage a small CA (Certification Authority).

PR:             54571
Submitted by:   Janos Mohacsi <janos.mohacsi@bsd.hu>

09:21 edwin 

New port: hunch - Scan httpd log files, find vulnerability probes,
mail admins

        Scan Apache log files for CodeRed, Nimda, FormMail, proxy
        scanners and other malicious probes. For each one found,
        track down the contact email from WHOIS data and send a
        notice. Built-in rate controls prevent flooding an admin
        even when his machines are scanning at high rates. Runs as
        a non-privileged cron job to not interfere with the HTTP
        daemon's operation.

        Notes to committer:
         1. This port installs a user and a group "hunch". It doesn't
         meet the conditions listed in the handbook for a "reserved"
         uid/gid.
         2. portlint will complain about the port. A lot. To the
         best of my judgment all of the warnings can be ignored
         with the exception of the one about BATCH which I could
         find no documentation for. Therefore it is setting
         IS_INTERACTIVE.

PR:             ports/44836
Submitted by:   Dan Pelleg <daniel+hunch@pelleg.org>

08:28 perky 

Remove security/py-amkCrypto port. This port have not been built over
a year and replaced by security/py-pycrypto.

07:27 demon 

New port: p5-Module-Signature.

Module::Signature adds cryptographic authentications to CPAN
distributions, via the special SIGNATURE file.

If you are a module user, all you have to do is to remember
running "cpansign -v" (or just "cpansign") before issuing
"perl Makefile.PL" or "perl Build.PL"; that will ensure the
 distribution has not been tampered with.

For module authors, you'd want to add the SIGNATURE file to
your MANIFEST, then type "cpansign -s" before making a distribution.

Submitted by:   autrijus@autrijus.org

11:45 edwin 

new port: Security scanner for Samba

        ADM smb is a security scanner for Samba
        /* based on the src of the smbclient  from the samba team */
        ADMsmb will perform a complete audit of samba for you on a host you
        provide.

PR:             ports/53696
Submitted by:   Jacek Serwatynski <tutus@trynet.eu.org>

07:01 erwin 

Add p5-Crypt-GeneratePassword 0.02,

This module lets you generate secure random passwords
with a reasonable amount of pronounceability. It avoids
the problems associated with the FIPS-181 NIST standard
as used by Crypt::RandPasswd. See perldoc for more
details.

PR:             55575
Submitted by:   andrew@scoop.co.nz

01:42 cy 

MIT KRB5 1.3 has been released. Remove the beta.

05:43 kris 

As announced on May 6, remove the broken p5-Authen-Krb4 port

15:52 skv 

Add p5-Digest-SHA2 1.0.0, perl interface to the SHA-2 algorithms.

09:20 nork 

Add drweb-qmail 4.29.12, qmail client for DrWeb antivirus suite.

PR:             ports/54614
Submitted by:   Denis N. Peplin <info@volginfo.ru>

19:33 kbyanc 

Add gcipher 1.0, a simple encryption tool.

PR:             53738
Submitted by:   Shannon -jj Behrens <jjinux@yahoo.com>

02:34 foxfair 

Add hostsentry 0.02, a Login Anomaly Detector.

PR:             48127
Submitted by:   Andre Ramos <andre.ramos@netcabo.pt>

02:32 foxfair 

Add nikto 1.30, web and CGI vulnerability scanner with SSL support.

PR:             43313
Submitted by:   pandzilla

02:28 foxfair 

Add libwhisker 1.6, perl module to create HTTP test scripts.

PR:             42986
Submitted by:   pandzilla

20:11 oliver 

Add osiris 1.5.2,
file integrity checking, with GDBM and MySQL
support.

PR:             50026
Submitted by:   Nicolas Jombart <ecu@ipv42.net>

02:00 foxfair 

Add sudoscript, an audited shell using sudo(8) and script(1)

PR:             53967
Submitted by:   Howard Owen <hbo@egbok.com>

14:04 skv 

Add p5-Nmap-Scanner 0.5,
perform and manipulate nmap scans using
perl.

07:41 foxfair 

Import hydra-2.2, base on PR/43942. This port is provided as a standalone
program to avoid installing a full Nessus scanner system.

Submitted by:   Laurent LEVIER <llevier@argosnet.com>

12:33 nork 

Add new port of clamav-devel after repo copy.
Update to snapshot(20030625).

PR:             ports/53306
Submitted by:   Rob Evers <rob@debank.tv>
Approved by:    portmgr (marcus)
Repo copyed by: cvs (joe)

06:11 foxfair 

Add cryptlib 3.1, a powerful security programming toolkit.

PR:             53397
Submitted by:   me

02:52 foxfair 

PR:             53014
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>

Add prelude-manager 0.8.7, System central logging point of prelude Network
Intrusion Detection.

prelude-manager : the manager is the central logging point. It receives
alerts from sensors and logs them using one or several plugins (the default
logging being to a text file, but logging to a database is also possible -
and recommended).

02:48 foxfair 

PR:             53013
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>

Add prelude-nids 0.8.1,
Sensor program of prelude Network Intrusion Detection System

prelude-nids : the Prelude Network Intrusion Detection System is a sensor,
that may be installed on the same machine as the manager or not, which watches
network traffic and looks for familiar patterns. This is functionally
equivalent to Snort (http://www.snort.org).

02:45 foxfair 

PR:             53012
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>

Add prelude-lml 0.8.3, Log Monitoring Lackey for prelude Network
Intrusion Detection System.

02:40 foxfair 

PR:             53011
Submitted by:   Clement Laforet <sheepkiller@cultdeadsheep.org>
Reviewed by:    me

Add libprelude 0.8.5, libraries of prelude Network Intrusion Detection System.

00:03 oliver 

Add smtpmap 0.8, an SMTP software identifier.

PR:             46552
Submitted by:   Hubert Tournier <hubert@frbsd.org>

10:39 erwin 

Add pxytest 1.36, test remote system for unsecured mail proxies.

PR:             53275
Submitted by:   Paul Chvostek <paul@it.ca>

08:41 erwin 

Add proxycheck 0.45, check for open proxy servers.

PR:             53269
Submitted by:   Paul Chvostek <paul@it.ca>

01:19 foxfair 

Add authpf 1.0, authentification shell for pf gateways. This port depends
on security/pf first.

PR:             52123
Submitted by:   Max Laier <max@love2party.net>

01:09 foxfair 

Add pf 1.0, OpenBSD's pf (packetfilter) as in OpenBSD 3.3 as a loadable
kernel module.

PR:             52121
Submitted by:   Max Laier <max@love2party.net>

15:17 des 

PC/SC Lite driver for GemPC 410 serial smart card readers (also sold by IBM)

04:24 ume 

Add saslauthd as a separated port from cyrus-sasl2 to avoid
dependency loop between cyrus-sasl2 and openldap.

13:59 mich 

New port.
Vida is a multi-datapipe handler, written in C with ncurses library,
for unix and unix-like OS.

PR:             51086
Approved by:    roberto(mentor)

02:16 petef 

Add sslsniffer 1.21, sSLv3/TLS and SSLv2 sniffer.

PR:             45401
Submitted by:   Jim Geovedi <jim@corebsd.or.id>

05:10 foxfair 

Add ike-scan 1.0, VPN scanner and identifier.

PR:             51751
Submitted by:   Yonatan <Yonatan@xpert.com>

05:07 foxfair 

Add ADMsnmp 0.1, SNMP audit scanner.

PR:             50642
Submitted by:   Yonatan@xpert.com

03:10 foxfair 

Add xmlsec1 1.0.1 released at Apr 28 2003. This is the latest stable version
of a C library based on LibXML2 and OpenSSL. Origial PR was intended to
import 1.0.0 but we have a newer version to go now, also enable GnuTLS
support .

PR:             51102
Submitted by:   Jim Geovedi <jim@corebsd.or.id>

22:12 vanilla 

Add kripp 0.2, lightweight network password sniffer.

PR:             51347
Submitted by:   Jim Geovedi <jim@corebsd.or.id>

17:00 arved 

Add dirmngr, a client for managing and downloading certificate
revocation lists (X.509).

PR:             51577
Submitted by:   Michael Nottebrock <michaelnottebrock@gmx.net>

21:37 sumikawa 

Add smtpscan 0.3.1, a remote SMTP server version detector.

PR:             46221
Submitted by:   Hubert Tournier <hubert@frbsd.org>

13:17 edwin 

The Samhain Intrusion Detection System

        Samhain is a host-based Intrusion Detection System and
        integrity checker with advanced features such as centralized
        logging, MySQL/PostgreSQL support, and rootkit detection.

PR:             ports/46982
Submitted by:   David Thiel <lx@redundancy.redundancy.org>

20:52 nork 

Add freebsd-update 1.2, fetches and installs binary updates
to FreeBSD.  This is the client half of the FreeBSD Update
system; it fetches and applies binary security updates.

PR:             ports/50202
Submitted by:   cperciva@daemonology.net

09:40 edwin 

Port for H+B EDV avmailgate

        AntiVir MailGate for  FreeBSD protects your  electronic
        post office against viruses.

        It is  working  with  numerous common  Mail Transport Agents
        (MTA), like  sendmail,  postfix,  qmail and exim.  Operates
        at high speed, is easy to configure and  checks both incoming
        and outgoing emails.

PR:             ports/34461
Submitted by:   Oliver Breuninger <ob@breuninger.org>

12:34 foxfair 

Add ftimes 3.2.1, a system baselining and evidence collection tool.

PR:             50369
Submitted by:   Klayton Monroe <klm@ir.exodus.net>

11:04 edwin 

New port: security/finger_mysql - A threaded MySQL scanner

        This is a one-file-port of a threaded MySQL scanner. If the
        user "root" is passwordless, then this is even funnier. For
        some reason is segfaults if you feed it with Class B network,
        but I'll fix that when time permits.

PR:             ports/48924
Submitted by:   Yonatan@xpert.com <Yonatan@xpert.com>

10:22 edwin 

New port: security/amap - application mapper

                This is amap- the application mapper. It tries to
                identify applications that do not run on thier
                default port.

PR:             ports/50218
Submitted by:   Yonatan@xpert.com <Yonatan@xpert.com>

08:04 edwin 

New port: makepasswd, random password generator

        Random password generator.

PR:             ports/49008
Submitted by:   Toni Viemero <toni.viemero@iki.fi>

02:41 edwin 

security/ftpmap: Identify remote FTP server software by fingerprinting

        Ftpmap scans remote FTP servers to indentify what software
        and what versions they are running. It uses program-specific
        fingerprints to discover the name of the software even when
        banners have been changed or removed, or when some features
        have been disabled. IPv6 is fully supported.

PR:             ports/48899
Submitted by:   Sergei Kolobov <sergei@kolobov.com>

13:04 foxfair 

Add libidea 0.8.2b, iDEA block cipher library.

PR:             43793
Submitted by:   Jim Geovedi <jim@corebsd.or.id>

12:32 foxfair 

Add libbf 0.8.2b, the Blowfish block cipher Library.

PR:             43792
Submitted by:   Jim Geovedi <jim@corebsd.or.id>

02:04 nectar 

Add KTH Kerberos 4.

05:59 edwin 

New port: security/pear-Auth - PEAR authentication methods.

PR:             ports/48119
Submitted by:   Thierry Thomas <thierry@pompo.net>

05:55 edwin 

New port: security/pear-Auth_SASL

        PEAR abstraction of various SASL mechanism responses.

PR:             ports/48120
Submitted by:   Thierry Thomas <thierry@pompo.net>

01:00 arved 

Retire kgpgapplet. Its features have been merged into kgpg.

PR:             48320
Submitted by:    Rick Fournier <rick@help-desk.ca> (maintainer)

09:19 markp 

Add mac-robber 1.00, a tool for listing Modify, Access, Create
timestamps from files.

PR:             47011
Submitted by:   Yonatan <Yonatan@xpert.com>

17:33 ijliao 

add gsfv 0.2.1
Create or verify Simple File Verification (SFV) checksum files

Submitted by:   Frederic Cambus

12:19 markp 

Add xspy 1.0c, a utility for monitoring keystrokes on remote X servers.

PR:             48132
Submitted by:   Yonatan <Yonatan@xpert.com>

04:35 cy 

Resurrect pam_krb5 for MIT KRB5.

Approved by:    nectar

05:35 ijliao 

add p5-Digest-MD4 1.1
Perl5 interface to the MD4 message digest algorithm

22:52 obraun 

Add quintuple-agent 1.0.3, quintuple Agent is a program that stores secrets for
you.

PR:             ports/48003
Submitted by:   Volker Stolz <stolz@i2.informatik.rwth-aachen.de>

18:15 nectar 

Remove this port.  The pam_krb5 in the base system should be utilized.

23:59 edwin 

New Port: security/p5-SHA

        The SHA module allows you to use the NIST SHA message digest
        algorithm from within Perl programs.

        The final message digest value is returned by the digest
        operation as a 20-byte binary string. This operation delivers
        the result of operations since the last new or reset
        operation. Once the operation has been performed, the context
        must be reset before being used to calculate another digest
        value.

PR:             ports/43799
Submitted by:   Jim Geovedi <negative@toxic.magnesium.net>

23:56 edwin 

New Port: security/p5-Crypt-Blowfish_PP

        Blowfish is a published algorithm written by Bruce Schneier
        Unlike IDEA or DES etc. there are no patent implications
        in using this algorithm.

        It uses anywhere between a 64 bit and a 448 bit key. The
        transform itself is fast and operates on a 64 bit block,
        and most of the calculation time is in initialising the
        context with the key data.

        The _PP name comes from the fact that this implementation
        is Pure Perl, and will not have any compatibility problems.

PR:             ports/43794
Submitted by:   Jim Geovedi <negative@toxic.magnesium.net>

22:40 will 

Add cryptplug 0.3.15, a collection of plug-ins to cryptographic
engines.

22:40 will 

Add newpg 0.9.4, a prerelease package of GnuPG extensions for GnuPG 2.0.

22:37 will 

Add pinentry 0.6.7, a collection of simple PIN or passphrase entry
dialogs.

09:50 dirk 

Add security/pear-Crypt_CBC:

PEAR class to emulate Perl's Crypt::CBC module

PR:             ports/47418
Submitted by:   Thierry Thomas <thierry@pompo.net>

16:41 ijliao 

add oinkmaster 0.6
Help you update your snort rules after each update

13:44 nbm 

Add py-pycrypto 1.9alpha4, the Python Cryptography Toolkit.

07:13 edwin 

New Port: security/fakeident

        Fake Identd is a tool that replies with a standard answer
        to all incoming identd requests on a host, making it nearly
        perfect for a masquerading router.

PR:             ports/46090
Submitted by:   Dean Hollister <dean@odyssey.apana.org.au>

07:00 edwin 

New port: security/ifd-gpr400: PC/SC Lite IFD for Gemplus GPR400

        This is the user-space IFD driver to support the Gemplus
        GPR400 PCMCIA Smart Card Reader under PC/SC Lite.

PR:             ports/42697
Submitted by:   Bruce M Simpson <bms@spc.org>

06:48 edwin 

New port: devel/ifd-devkit: PC/SC Lite IFD Driver Kit

        Smart card intermediate driver development kit for PC/SC Lite.

PR:             ports/42694
Submitted by:   Bruce M Simpson <bms@spc.org>

03:41 edwin 

new port: security/clamav

        Clam Antivirus is command line virus scanner using database
        from OpenAntiVirus.

PR:             ports/40602
Submitted by:   TERAMOTO Masahiro <markun@onohara.to>

21:30 arved 

Add opencdk, Open Crypto Development Kit, libary for basic parts of the OpenPGP
message format

PR:             47103
Submitted by:   Sergei Kolobov <sergei@kolobov.com>

12:53 edwin 

New port: security/hackbot

Hackbot is a host exploration tool and bannergrabber.
It scans numerous services and vulnerabilities.

PR:             ports/47021
Submitted by:   Michael L. Hostbaek <mich@freebsdcluster.org>

05:07 edwin 

New port: drweb-postfix antivirus checking backend

PR:             ports/46496
Submitted by:   zhuravlev alexander <zaa@ulstu.ru>

06:37 petef 

Add p5-Authen-Smb 0.91, perl extension to authenticate against an
SMB server.

PR:             46740
Submitted by:   Mustafa Arif <ma499@doc.ic.ac.uk>

05:39 petef 

Add kgpgapplet 0.1.3, kgpg's kicker applet is a simple icon that
integrates into your kicker.

PR:             46897
Submitted by:   Rick Fournier <rick@help-desk.ca>

06:01 lioux 

New port ocaml-cryptokit version 1.1: A variety of cryptographic
primitives for Objective Caml

18:50 arved 

Add libksba, an X.509 library

PR:     43895

12:02 perky 

Add opensc 0.7.0, ISO 7816 Smartcard API Library (OpenSSH Compatible).

PR:             42698
Submitted by:   Bruce M Simpson <bms@spc.org>

14:02 edwin 

GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and
SSL 3.0 protocols. The library does not include any patented algorithms and
is available under the GNU Lesser GPL license.

Important features of the GnuTLS library include:
- Thread safety
- Support for both TLS 1.0 and SSL 3.0 protocols
- Support for both X.509 and OpenPGP certificates
- Support for basic parsing and verification of certificates
- Support for SRP for TLS authentication
- Support for TLS Extension mechanism
- Support for TLS Compression Methods

Additionaly GnuTLS provides an emulation API for the widely used
OpenSSL library, to ease integration with existing applications.

WWW:    http://www.gnutls.org/

PR:             ports/45348
Submitted by:   Sergei Kolobov <sergei@kolobov.com>

13:44 edwin 

[NEW PORT] security/libtasn1: ASN.1 parser library for GnuTLS

XASN.1 structure parser library

PR:             ports/45347
Submitted by:   Sergei Kolobov <sergei@kolobov.com>

07:04 demon 

New port: p5-Authen-SASL.

SASL is a generic mechanism for authentication used by
several network protocols. Authen::SASL provides an
implementation framework that all protocols should be able
to share.

Submitted by:   Blaz Zupan <blaz@si.FreeBSD.org>

06:07 perky 

Add py-posix1e 0.2.1, Python module for manipulating POSIX.1e ACLs

20:28 knu 

Sort entries.

23:11 anders 

Add libgringotts, a library for encapsulating/safekeeping data in
encrypted/compressed form.

18:47 arved 

Add kgpg. Another Frontend for gnupg.

PR:             45573, 44840
Submitted by:   Rick Fournier <rick@help-desk.ca>, Arjan van Leeuwen
<avleeuwen@piwebs.com>

15:21 arved 

Bring back the geheimnis port. This is a snapshot from CVS that works with
KDE3

PR:     40660

08:59 ijliao 

add bubblegum 1.12
Watch a file for changes

PR:             44956
Submitted by:   Ben Kibbey <bjk@m-net.arbornet.org>

06:51 cy 

New MIT Kerberos V beta, version 1.2.7-beta1.

17:01 ijliao 

add libecc 0.3.0
C++ Elliptic Curve Library

09:13 sobomax 

Add p5-Crypt-RandPasswd 0.02, an implementation of the Automated
Password Generator standard.

04:25 cy 

MIT KRB5 1.2.6 has been GA for some time. Remove the beta.

12:38 ijliao 

add libgcrypt 1.1.0
General purpose crypto library based on code used in GnuPG

PR:             43894
Submitted by:   Tilman Linneweh <tilman@arved.de>

03:56 kris 

tcp_wrapper has been in the base system since 4.0-RELEASE.  Remove it.

10:13 knu 

Add ruby-cast_256, a Ruby extension library which implements CAST-256
encryption.

04:39 alane 

Even after much work on the patch, it won't build on kde3. *BLAM*