vuurmuur

LOW

maintainer gilcu3 26 votes scanned 2026-10-20 00:10:31.152894

View on AUR

Why flagged

The source URL uses the project's official domain (vuurmuur.org), which is standard for AUR packages; the flagged non-standard host is a false positive as it is the legitimate project site.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source URL uses the project's official domain (vuurmuur.org), which is standard for AUR packages; the flagged non-standard host is a false positive as it is the legitimate project site.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:30 source=(https://www.vuurmuur.org/releases/$pkgver/${pkgname}-$pkgver.tar.gz

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: gilcu3
    
      2
    
      3# Previous Maintainers
    
      4# Piotr Rogoża <rogoza dot piotr at gmail dot com>
    
      5
    
      6# Contributor: skydrome <skydrome@i2pmail.org>
    
      7# Contributor: Valere Monseur <valere_monseur@hotmail.com>
    
      8# Contributor: Phillip Smith <fukawi2@NO-SPAM.gmail.com>
    
      9# Contributor: (asper, noob
    
      10# Contributor: ratamahata
    
      11
    
      12pkgname=vuurmuur
    
      13pkgver=0.8.2
    
      14pkgrel=1
    
      15pkgdesc='powerful front-end for iptables aimed at system-administrators who need a decent firewall, but dont have netfilter specific knowledge'
    
      16arch=('i686' 'x86_64' 'armv7h' 'aarch64')
    
      17url='http://www.vuurmuur.org'
    
      18license=('GPL-2.0-or-later')
    
      19install='vuurmuur.install'
    
      20depends=(libnetfilter_log libnetfilter_conntrack libmnl iptables ncurses)
    
      21optdepends=('conntrack-tools: for connection tracking'
    
      22            'iproute2: for traffic shapping'
    
      23            'iptrafvol: for traffic volume logging')
    
      24conflicts=()
    
      25backup=('etc/vuurmuur/config.conf'
    
      26        'etc/vuurmuur/modules.conf'
    
      27        'etc/vuurmuur/vuurmuur_conf.conf'
    
      28        'etc/vuurmuur/plugins/textdir.conf'
    
      29)
    
      30source=(https://www.vuurmuur.org/releases/$pkgver/${pkgname}-$pkgver.tar.gz
    
      31        modules.conf
    
      32        vuurmuur.service
    
      33        vuurmuur.script)
    
      34sha256sums=('6388c4df83b327603f632e15b3201c297247f91d8adcc49172675738b935a5b3'
    
      35            'a18d4093075f8e0a24f902780b04d03116be8c057b139a7502d8517009bd65e0'
    
      36            '1bf559e49ac64cdf6bff9b003adbe97af1b222d59ec49242545cf13daee07a24'
    
      37            'de4cee0e33d3431c985289d8de2844eeb1b1e614e69b7e3b1d6c99e8cda3aa4f')
    
      38
    
      39build() {
    
      40    cd ${pkgname}-${pkgver}
    
      41
    
      42    ./configure --prefix=/usr --sysconfdir=/etc
    
      43    make
    
      44}
    
      45
    
      46package() {
    
      47    cd ${pkgname}-${pkgver}
    
      48
    
      49    make DESTDIR="$pkgdir" install
    
      50
    
      51    # make directory structure
    
      52    install -dm700 "$pkgdir"/etc/$pkgname
    
      53    install -dm700 "$pkgdir"/etc/${pkgname}/plugins
    
      54    install -dm755 "$pkgdir"/usr/share/$pkgname/textdir/{interfaces,services,zones,rules}
    
      55    install -dm700 "$pkgdir"/var/log/$pkgname
    
      56
    
      57    # install systemd's files
    
      58    install -Dm755 ../vuurmuur.script "$pkgdir"/usr/lib/systemd/scripts/vuurmuur
    
      59    install -Dm644 ../vuurmuur.service "$pkgdir"/usr/lib/systemd/system/vuurmuur.service
    
      60
    
      61    # install configuration
    
      62    install -Dm600 "$pkgdir"/usr/share/vuurmuur/config/config.conf.sample \
    
      63                    "$pkgdir"/etc/${pkgname}/config.conf
    
      64    install -Dm600 ../modules.conf "$pkgdir"/etc/${pkgname}/modules.conf
    
      65    install -Dm600 "$pkgdir"/usr/share/vuurmuur/config/vuurmuur_conf.conf.sample \
    
      66                    "$pkgdir"/etc/${pkgname}/${pkgname}_conf.conf
    
      67
    
      68    sed -i "$pkgdir"/etc/${pkgname}/config.conf \
    
      69        -e 's|"/sbin/tc|"/usr/bin/tc|' \
    
      70        -e 's|"/sbin/ip6tables|"/usr/bin/ip6tables|' \
    
      71        -e 's|"/sbin/iptables|"/usr/bin/iptables|' \
    
      72        -e 's|"/sbin/ip6tables-restore|"/usr/bin/ip6tables-restore|' \
    
      73        -e 's|"/sbin/iptables-restore|"/usr/bin/iptables-restore|'
    
      74
    
      75
    
      76    echo "LOCATION=\"/etc/${pkgname}/textdir\"" > "$pkgdir"/etc/${pkgname}/plugins/textdir.conf
    
      77
    
      78    # default firewall setup in /usr/share
    
      79    touch "$pkgdir"/usr/share/${pkgname}/textdir/rules/rules.conf
    
      80    touch "$pkgdir"/usr/share/${pkgname}/textdir/rules/blocklist.conf
    
      81
    
      82#    cp -R zones/*   "$pkgdir"/usr/share/${pkgname}/textdir/zones/
    
      83    mv    "$pkgdir"/usr/share/${pkgname}/services/* "$pkgdir"/usr/share/${pkgname}/textdir/services/
    
      84}
    
      85

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-20 00:10:31	Low	2
2026-10-19 00:03:55	Low	2
2026-10-18 00:06:55	Low	2
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 00:26:05	Low	2
2026-10-10 00:11:52	Low	2
2026-10-09 00:05:33	Low	2
2026-10-08 00:28:03	Low	2
2026-10-07 00:21:34	Low	2
2026-10-06 00:13:36	Low	2
2026-10-05 00:08:03	Low	2
2026-10-04 00:18:08	Low	2
2026-10-03 00:23:04	Low	2
2026-10-02 00:00:32	Low	2
2026-10-01 00:02:06	Low	2