Warning: session_start(): Session cannot be started after headers have already been sent in /home/tvrreohg/public_html/manga.php on line 13
3
YjU @ s d Z dddgZddljZddlZddlZddlZddlmZ ddl m
Z
m Z m Z m
Z
mZmZmZmZmZ ddlmZmZmZmZ dd lmZmZ dd
lm Z m Z m Z m Z dd l m!Z! dd lm"Z" dd
l#m$Z$ G dd deZ%G dd deZ&dd Z'dddZ(dS )z$ipset io XML handler, reader, writerIPSet ipset_reader ipset_writer N)config) checkIPcheckIP6 checkIPnMask
checkIP6nMask
u2b_if_py2 check_mac
check_portcheckInterface
checkProtocol)PY2 IO_ObjectIO_Object_ContentHandlerIO_Object_XMLGenerator) IPSET_TYPESIPSET_CREATE_OPTIONS)check_icmp_namecheck_icmp_type_codecheck_icmpv6_namecheck_icmpv6_type_code)log)errors)
FirewallErrorc s e Zd Zd d d d!dddifddgffZdZd d
d d gZd
d
dgdgd
dZdgdgdZ fddZdd Z dd Z
e dd Z dd Z
fd d Z ZS )"r version short descriptiontypeoptionsentriesz
(ssssa{ss}as)_-:.Nname)r r ipsetoptionentryvalue)r( r) c s< t t| j d| _d| _d| _d| _g | _i | _d| _ d S )Nr F)
superr __init__r r r r r" r! applied)self) __class__ /usr/lib/python3.6/ipset.pyr- C s zIPSet.__init__c C s8 d| _ d| _d| _d| _| jd d = | jj d| _d S )Nr F)r r r r r" r! clearr. )r/ r1 r1 r2 cleanupM s
z
IPSet.cleanupc C s\ t | j| _t | j| _t | j| _t | j| _dd | jj D | _dd | jD | _dS )z HACK. I haven't been able to make sax parser return
strings encoded (because of python 2) instead of in unicode.
Get rid of it once we throw out python 2 support.c S s i | ]\}}t |t |qS r1 )r
).0kvr1 r1 r2
^ s z(IPSet.encode_strings..c S s g | ] }t |qS r1 )r
)r5 er1 r1 r2
` s z(IPSet.encode_strings..N)r
r r r r r! itemsr" )r/ r1 r1 r2 encode_stringsV s zIPSet.encode_stringsc C sr d}d|kr |d dkr d}|j ds6ttjd| |dd jd}| jd}t|t|ksnt|d k rttjd
| |f xtt|D ]}|| }|| }|d krd |ko|dkrh|d krttjd
|| |f |jd } t| dkrttjd|| ||f x| D ]J}
|dkr2t|
sH|dkrt |
rttjd|
| ||f qW nh|dkr|dkrttjd|| ||f |dkrt
} nt} nt } | |sjttjd|| ||f q|dkr@d |kr|jd } t| dkrttjd|| ||f |dkr0t| d sJ|dkrft | d rfttjd| d | ||f |dkrt
| d s|dkr>t | d r>ttjd| d | ||f n|j dr|dko|dko|dksttjd|| ||f |dkrt
| s&|dkrjt | rjttjd|| ||f q|dkrvt
| s`|dkrjttjd|| f q|dkrld|krL|jd} t| dkrttjd| | d d krP|dkrttjd || f t| d rd | d krttjd | d | f n6| d jd \} }
t| |
sJttjd | d | f qj| d d2kr|dkr|ttjd || f t| d rd | d krttjd"| d | f n6| d jd \} }
t| |
sJttjd"| d | f n^| d d3kr$t| d r$ttjd'| d | f n&t| d sjttjd(| d | f n t|sjttjd)|| f q|d*kr |j d+ryt|d,}W n* tk
r ttjd-|| f Y nX n8y t|}W n* tk
r ttjd-|| f Y nX |dk s
|d.krjttjd-|| f q|d/krZt| sDt|d0krjttjd1|| f qttjd| qW d S )4NZipv4familyinet6Zipv6zhash:zipset type '%s' not usable , z)entry '%s' does not match ipset type '%s'Zipr$ z invalid address '%s' in '%s'[%d] z.invalid address range '%s' in '%s' for %s (%s)z(invalid address '%s' in '%s' for %s (%s)z0.0.0.0r Znetz/0zhash:net,ifaceZmacz00:00:00:00:00:00z invalid mac address '%s' in '%s'Zportr% zinvalid port '%s'Zicmpz(invalid protocol for family '%s' in '%s'/z invalid icmp type '%s' in '%s'icmpv6 ipv6-icmpz invalid icmpv6 type '%s' in '%s'tcpsctpudpudplitez invalid protocol '%s' in '%s'zinvalid port '%s'in '%s'zinvalid port '%s' in '%s'ZmarkZ0x zinvalid mark '%s' in '%s'l Ziface z invalid interface '%s' in '%s')rD rE )rF rG rH rI )
startswithr r
INVALID_IPSETsplitlenZ
INVALID_ENTRYranger r r r endswithr r r r r r r int
ValueErrorr
)r* r! Z
ipset_typer= flagsr; iflagitemZsplitsZ_splitZip_checkZ_type_codeZint_valr1 r1 r2 check_entryb sT
zIPSet.check_entryc C s |dkr |t kr ttjd| |dkrx|j D ]}|tkrNttjd| |dkryt|| }W n, tk
r ttj d||| f Y nX |d k rttj d
||| f q2|d kr2|| dkr2ttj
|| q2W d S )Nr z '%s' is not valid ipset typer! zipset invalid option '%s'timeouthashsizemaxelemz)Option '%s': Value '%s' is not an integerr z#Option '%s': Value '%s' is negativer= inetr> )rZ r[ r\ )r] r> ) r r r INVALID_TYPEkeysr rM rR rS
INVALID_VALUEINVALID_FAMILY)r/ r rW Z
all_configkey int_valuer1 r1 r2
_check_config& s2
zIPSet._check_configc sr d|d kr6|d d dkr6t |d dkr6ttjx&|d D ]}tj||d |d q@W tt| j| d S )NrZ 0r? r )rO r r ZIPSET_WITH_TIMEOUTr rY r,
import_config)r/ r r* )r0 r1 r2 rh A s
zIPSet.import_config)r r )r r )r r )r r )__name__
__module__ __qualname__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr- r4 r< staticmethodrY rd rh
__classcell__r1 r1 )r0 r2 r , s,
Ec @ s e Zd Zdd Zdd ZdS )ipset_ContentHandlerc
C s t j| || | jj|| |dkrpd|krX|d tkrLttjd|d |d | j_d|krl|d | j_ nz|dkr|nn|dkrnb|dkrd}d |kr|d }|d
dkrttj
d|d
| jjdko|d
dk rttj
d|d
| jjf |d
dkr&| r&ttj
d|d
|d
d kry t |}W n. t k
rn ttj
d|d
|f Y nX |dk rttj
d|d
|f |d
d kr|d krttj||d
| jjkr|| jj|d
< ntjd|d
d S ) Nr( r z%sr r r r) r r+ r' r= rZ r[ r\ zUnknown option '%s'zhash:macz%Unsupported option '%s' for type '%s'z&Missing mandatory value of option '%s'z)Option '%s': Value '%s' is not an integerr z#Option '%s': Value '%s' is negativer] r> z Option %s already set, ignoring.)r= rZ r[ r\ )r= )r= rZ r[ r\ )rZ r[ r\ )r] r> )r startElementrW Zparser_check_element_attrsr r r r^ r r ZINVALID_OPTIONrR rS r` ra r! r warning)r/ r' attrsr+ rc r1 r1 r2 ro L sd
z!ipset_ContentHandler.startElementc C s( t j| | |dkr$| jjj| j d S )Nr* )r
endElementrW r" appendZ_element)r/ r' r1 r1 r2 rr s z ipset_ContentHandler.endElementN)ri rj rk ro rr r1 r1 r1 r2 rn K s 7rn c % C s t }| jds ttjd| | d d |_|j|j | |_||_|j t
j rVdnd|_ |j |_
t|}tj }|j| d|| f }t|db}tjd }|j| y|j| W n8 tjk
r } zttjd|j W Y d d }~X nX W d Q R X ~~d |jkrF|jd d
krFt|jd krFt j d |j |jd d = d } t }
x| t|jk r|j| |
krt j d
|j| |jj | nry |j |j| |j|j! W n< tk
r } z t j d| |jj | W Y d d } ~ X nX |
j"|j| | d7 } qRW ~
t#r|j$ |S )Nz.xmlz'%s' is missing .xml suffixre FTz%s/%srbznot a valid ipset file: %srZ rf r z6ipset '%s': timeout option is set, entries are ignoredz Entry %s already set, ignoring.z
%s, ignoring.rA )%r rQ r r Z INVALID_NAMEr' Z
check_namefilenamepathrL r
ETC_FIREWALLDZbuiltindefaultrn saxZ make_parserZsetContentHandleropenZ InputSourceZ
setByteStreamparseZSAXParseExceptionrM Z getExceptionr! rO r" r rp setpoprY r addr r< ) rv rw r( handlerparserr' fsourcemsgrU Z entries_setr9 r1 r1 r2 r s^
( c C s |r|n| j }| jr$d|| jf }nd|| jf }tj j|rytj|d| W n0 tk
r } ztj d|| W Y d d }~X nX tj j
|}|j t j
rtj j| rtj jt j
stjt j
d tj|d tj|ddd}t|}|j d | ji}| jr| jd
kr| j|d < |jd | |jd
| jrz| jd
krz|jd |jdi |j| j |jd |jd
| jr| jd
kr|jd |jdi |j| j |jd |jd
xZ| jj D ]L\} }
|jd |
d
kr |j d| |
d n|j dd| i |jd
qW xD| j D ]:} |jd |jdi |j| |jd |jd
q(W |jd |jd
|j |j ~d S )Nz%s/%sz %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si ZwtzUTF-8)modeencodingr r r r(
z r r r) )r' r+ r' r* )!rw rv r' osexistsshutilZcopy2 Exceptionr errordirnamerL r rx mkdirior{ r Z
startDocumentr r ro ZignorableWhitespacer Z
charactersrr r r! r; Z
simpleElementr" Z endDocumentclose) r( rw _pathr' r dirpathr r rq rb r+ r* r1 r1 r2 r sf
)N))__doc____all__Zxml.saxrz r r r Zfirewallr Zfirewall.functionsr r r r r
r r r
r Zfirewall.core.io.io_objectr r r r Zfirewall.core.ipsetr r Zfirewall.core.icmpr r r r Zfirewall.core.loggerr r Zfirewall.errorsr r rn r r r1 r1 r1 r2 s&
, !=5