Warning: session_start(): Session cannot be started after headers have already been sent in /home/tvrreohg/public_html/manga.php on line 13
3
YjW @ sn d gZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z ddl
m Z ddl m
Z
G d d d eZd
S ) FirewallDirect )LastUpdatedOrderedDict) ipXtables)ebtables)FirewallTransaction)log)errors)
FirewallErrorc @ sL e Zd Zdd Zdd Zdd Zdd Zd d
Zd d Zd
d Z dd Z
dNddZ dd Z dd Z
dOddZdd Zd d Zd d Zd d! ZdPd"d#ZdQd$d%Zd&d' Zd(d) Zd*d+ ZdRd,d-ZdSd.d/Zd0d1 Zd2d3 Zd4d5 Z d6d7 Z d8d9 Z d:d; Z dTdd?Z!d@dA Z"dBdC Z#dDdE Z$dFdG Z%dHdI Z&dJdK Z'dLdM Z(dS )Vr c C s || _ | j d S )N)_fw_FirewallDirect__init_vars)selffw r /usr/lib/python3.6/fw_direct.py__init__' s zFirewallDirect.__init__c C s d| j | j| j| jf S )Nz%s(%r, %r, %r)) __class___chains_rules_rule_priority_positions)r r r r __repr__+ s zFirewallDirect.__repr__c C s" i | _ i | _i | _i | _d | _d S )N)r r r
_passthroughs_obj)r r r r Z __init_vars/ s
zFirewallDirect.__init_varsc C s | j d S )N)r )r r r r cleanup6 s zFirewallDirect.cleanupc C s
t | jS )N)r r
)r r r r new_transaction; s z FirewallDirect.new_transactionc C s
|| _ d S )N)r )r objr r r set_permanent_config@ s z#FirewallDirect.set_permanent_configc C s* t | jt | j t | j dkr&dS dS )Nr TF)lenr r r )r r r r has_runtime_configurationC s "z(FirewallDirect.has_runtime_configurationc C sB | j r dS t| jj t| jj t| jj dkr>dS dS )NTr F)r r r get_all_chains
get_all_rulesget_all_passthroughs)r r r r has_configurationH s z FirewallDirect.has_configurationNc C sP |d kr| j }n|}| j| jj | jj | jj f| |d krL|jd d S )NT)r
set_configr r r r execute)r use_transaction transactionr r r apply_directQ s
zFirewallDirect.apply_directc C s i }i }i }xL| j D ]B}|\}}x4| j | D ]&}| jj|||s,|j|g j| q,W qW xf| jD ]\}|\}}}xL| j| D ]>\} }
| jj|||| |
s|||krt ||< | || | |
f< q|W qbW xP| jD ]F}x@| j| D ]2}
| jj ||
s||k rg ||< || j|
qW qW |||fS )N)
r r query_chain
setdefaultappendr
query_ruler r query_passthrough) r ZchainsrulesZ passthroughstable_idipvtablechainchain_idpriorityargsr r r get_runtime_configb s,
z!FirewallDirect.get_runtime_configc C s | j | j| jfS )N)r r r )r r r r
get_config s zFirewallDirect.get_configc C s |d kr| j }n|}|\}}}x||D ]t}|\}} xf|| D ]Z}
| j|| |
s r
nftables_enabledget_direct_backend_by_ipv
our_chainsr Z
OUR_CHAINSr r Z
BUILTIN_CHAINzoneZzone_from_chainZ
INVALID_CHAIN)r r. r/ r0 Zbuilt_in_chainsrC r r r _check_builtin_chain s"
z#FirewallDirect._check_builtin_chainc C sH |r| j j|g j| n*| j | j| t| j | dkrD| j |= d S )Nr )r r( r) remover )r r- r0 addr r r _register_chain s
z FirewallDirect._register_chainc C sV |d kr| j }n|}| jj r.|j| jj | jd|||| |d krR|jd d S )NT)r r
may_skip_flush_direct_backendsadd_preflush_direct_backends_chainr# )r r. r/ r0 r$ r% r r r r6 s
zFirewallDirect.add_chainc C s> |d kr| j }n|}| jd|||| |d kr:|jd d S )NFT)r rL r# )r r. r/ r0 r$ r% r r r remove_chain s
zFirewallDirect.remove_chainc C s: | j || | j||| ||f}|| jko8|| j| kS )N)r@ rE r )r r. r/ r0 r- r r r r' s
zFirewallDirect.query_chainc C s, | j || ||f}|| jkr(| j| S g S )N)r@ r )r r. r/ r- r r r
get_chains s
zFirewallDirect.get_chainsc C sD g }x:| j D ]0}|\}}x"| j | D ]}|j|||f q$W q W |S )N)r r) )r rkeyr. r/ r0 r r r r s z FirewallDirect.get_all_chainsc C sZ |d kr| j }n|}| jj r.|j| jj | jd|||||| |d krV|jd d S )NT)r r
rI rJ rK _ruler# )r r. r/ r0 r2 r3 r$ r% r r r r8 s
zFirewallDirect.add_rulec C sB |d kr| j }n|}| jd|||||| |d kr>|jd d S )NFT)r rQ r# )r r. r/ r0 r2 r3 r$ r% r r r remove_rule s
zFirewallDirect.remove_rulec C s2 | j || |||f}|| jko0||f| j| kS )N)r@ r )r r. r/ r0 r2 r3 r1 r r r r* # s
zFirewallDirect.query_rulec C s6 | j || |||f}|| jkr2t| j| j S g S )N)r@ r listr? )r r. r/ r0 r1 r r r get_rules) s
zFirewallDirect.get_rulesc C sR g }xH| j D ]>}|\}}}x.| j | D ] \}}|j||||t|f q&W q W |S )N)r r) rS )r rO rP r. r/ r0 r2 r3 r r r r 0 s
z FirewallDirect.get_all_rulesc C s |rr|| j krt | j |< || j | |< || jkr g }x4| j D ]*}x$| j | D ]}|j|t|f q W q W |S )N)r r) rS )r rO r. r3 r r r r { s
z#FirewallDirect.get_all_passthroughsc C s4 g }|| j kr0x | j | D ]}|jt| qW |S )N)r r) rS )r r. rO r3 r r r get_passthroughs s
z FirewallDirect.get_passthroughsc C s g }x|D ]}d}x|D ]}y|j |}W n tk
r> Y qX t||krd||d krd}||d jd}x.|D ]&} |dd }
| |
|d < |j|
qxW qW |s
|j| q
W |S )z5Split values combined with commas for options in optsF, TN)index
ValueErrorr splitr) ) r r, ZoptsZ out_rulesrY Z processedoptiitemsitemrQ r r r split_value s$
zFirewallDirect.split_valuec
C s* | j || | jj r2|dkr2| jjj|||| |}| jj|} | jj rd| j|||rdd| }n:| jjr|dd dkr| j|||d d r|d d }|||f}
||f} |r|
| jkr| | j|
krtt j
d||||f nB|
| jks| | j|
krtt j d||||f | j|
| }d} d }
|
| j krt
| j |
j }d }x@|t|k r||| kr| | j |
|| 7 } |d7 }qTW t|g}| j|d
d g}| j|d d
g}x<|D ]4}|j| | j|||| t| | d7 } |
d7 }
qW | j| |
|||
|j| j| |
|| |
d S )Nr; r< z %s_direct Z_directz"rule '%s' already is in '%s:%s:%s'z rule '%s' is not in '%s:%s:%s'rd r z-sz--sourcez-dz
--destination)r; r< iii)r@ r
rA rD create_zone_base_by_chainrB Zis_chain_builtinr r r ALREADY_ENABLED NOT_ENABLEDr sortedr? r rS rl r8 Z
build_rulera rX add_fail)r rV r. r/ r0 r2 r3 r% rL backendr1 rU re rW Z positionsjZ args_list_argsr r r rQ sZ
(
zFirewallDirect._rulec C s | j || | j||| ||f}|rV|| jkr|| j| krttjd|||f n.|| jksn|| j| krttjd|||f | jj|}|j ||j
||| | j ||| |j | j ||| d S )Nz chain '%s' already is in '%s:%s'z chain '%s' is not in '%s:%s')
r@ rE r r r ro rp r
rB Z add_rulesZbuild_chain_rulesrH rr )r rG r. r/ r0 r% r- rs r r r rL s$
zFirewallDirect._chainc
C s | j | t|}|rD|| jkrp|| j| krpttjd||f n,|| jks\|| j| krpttjd||f | jj|}|r|j | |dkr|j
|\}}|r|r| jj j ||| |} n
|j
|} |j|| | j||| |j| j||| d S )Nzpassthrough '%s', '%s'r; r< )r; r< )r= ra r r r ro rp r
rB Zcheck_passthroughZ passthrough_parse_table_chainrD rn Zreverse_passthroughr8 r^ rr )
r rV r. r3 r% Z
tuple_argsrs r/ r0 ru r r r r_ ' s0
zFirewallDirect._passthrough)N)N)N)N)N)N)N)N))__name__
__module__ __qualname__r r r r r r r r! r& r4 r5 r" r= r@ rE rH r6 rM r' rN r r8 rR r* rT r rX r] r^ r9 r` r+ r rb rl rQ rL r_ r r r r r & sL
'
jN)__all__Zfirewall.fw_typesr Z
firewall.corer r Z firewall.core.fw_transactionr Zfirewall.core.loggerr Zfirewallr Zfirewall.errorsr objectr r r r r s