Warning: session_start(): Session cannot be started after headers have already been sent in /home/tvrreohg/public_html/manga.php on line 13
3
YjM @ s d ddgZ ddljZddlZddlZddlZddlmZ ddlm Z m
Z
m Z m Z m
Z
mZmZ ddlmZmZ ddlmZmZmZmZ dd lmZmZmZm Z dd
l m Z dd l m Z dd lm!Z! dd
l"m#Z# G dd d eZ$G dd deZ%dddZ&dddZ'dS )Zone zone_reader zone_writer N)config) checkIPnMask
checkIP6nMaskcheckInterfaceuniqifymax_zone_name_len
u2b_if_py2 check_mac)DEFAULT_ZONE_TARGET ZONE_TARGETS)PY2 IO_ObjectIO_Object_ContentHandlerIO_Object_XMLGenerator)common_startElementcommon_endElementcommon_check_config
common_writer)rich)log)errors)
FirewallErrorc sf e Zd ZdZd@dAdBdCdDd dgfd
dEgfd dgfdFd
dGgfddgfddgfddgfddgfddHgfdIdJfZdddgZddddgddgdgdgdddgdgdddd gddgdddddd gd gdd Zdd ddgd gd!d"gd#d$gd%d&d'd#d(gd%d'd(gd)d*gd+gd,gd- Zed.d/ Z fd0d1Z
d2d3 Z d4d5 Z fd6d7Z
fd8d9Zd:d; Z fdd? Z ZS )Kr z Zone class version short descriptionUNUSEDFtargetservicesports icmp_blocks
masquerade
forward_ports
interfacessources rules_str protocols source_portsicmp_block_inversionforward_-/Nnameportprotocolvalueset)r r zoneservicer1 z
icmp-blockz icmp-typer, z forward-port interfacerulesource destinationr2 z source-portr ZauditZacceptrejectZdropZmarklimitzicmp-block-inversion immutableZenabledzto-portzto-addrfamilyZpriorityaddressmacinvertipsetprefixleveltypeZburst) r5 r$ z forward-portr8 r9 r: r r; r< c C s8 x&t tjD ]\}\}}|| kr |S q W ttjdd S )Nz
index_of()) enumerater IMPORT_EXPORT_STRUCTUREr r Z
UNKNOWN_ERROR)elementiZelZdummy rJ /usr/lib/python3.6/zone.pyindex_ofd s z
Zone.index_ofc s t t| j d| _d| _d| _d| _t| _g | _ g | _
g | _ g | _ d| _
d| _g | _g | _g | _g | _d | _g | _g | _d| _d| _d| _d S )Nr F)superr __init__r r r r r
r r! r" r) r# r, r$ r% r* r& r' fw_configrulesr( r+ combinedapplied)self) __class__rJ rK rN k s, z
Zone.__init__c C s d| _ d| _d| _d| _t| _| jd d = | jd d = | jd d = | j d d = d| _
d| _ | j d d = | j
d d = | jd d = | jd d = d | _| jd d = | jd d = d| _d| _d| _d S )Nr F)r r r r r
r r! r" r) r# r, r$ r% r* r& r' rO rP r( r+ rQ rR )rS rJ rJ rK cleanup s* z Zone.cleanupc C s t | j| _t | j| _t | j| _t | j| _dd | jD | _dd | jD | _dd | jD | _dd | jD | _dd | j D | _ dd | j
D | _
dd | j D | _ d d | j D | _ d
d | j
D | _
d d | jD | _d S )
z HACK. I haven't been able to make sax parser return
strings encoded (because of python 2) instead of in unicode.
Get rid of it once we throw out python 2 support.c S s g | ] }t |qS rJ )r ).0srJ rJ rK
s z'Zone.encode_strings..c S s g | ]\}}t |t |fqS rJ )r )rV poprrJ rJ rK rX s c S s g | ] }t |qS rJ )r )rV rZ rJ rJ rK rX s c S s g | ] }t |qS rJ )r )rV rI rJ rJ rK rX s c S s0 g | ](\}}}}t |t |t |t |fqS rJ )r )rV Zp1Zp2Zp3Zp4rJ rJ rK rX s c S s g | ]\}}t |t |fqS rJ )r )rV rY rZ rJ rJ rK rX s c S s g | ] }t |qS rJ )r )rV rI rJ rJ rK rX s c S s g | ] }t |qS rJ )r )rV rW rJ rJ rK rX s c S s g | ] }t |qS rJ )r )rV rW rJ rJ rK rX s c S s g | ] }t |qS rJ )r )rV rW rJ rJ rK rX s N)r r r r r r! r" r) r# r% r* r& r' rP r( )rS rJ rJ rK encode_strings s zZone.encode_stringsc sN |dkr8dd |D | _ tt| j|dd | j D ntt| j|| d S )Nr( c S s g | ]}t j|d qS ))Zrule_str)r Z Rich_Rule)rV rW rJ rJ rK rX s z$Zone.__setattr__..c S s g | ] }t |qS rJ )str)rV rW rJ rJ rK rX s )rP rM r __setattr__)rS r0 r3 )rT rJ rK r] s zZone.__setattr__c s t t| j }|d= |S )Nr )rM r export_config_dict)rS Zconf)rT rJ rK r^ s zZone.export_config_dictc C sL t | ||| |dkr.|tkr*ttj|n|dkrxl|D ]d}t|sTttj|| jr}|| j krq|| jj
|jkrttjdj ||qW qW d S )Nr r& z)interface '{}' already bound to zone '{}'r' zipset:z&source '{}' already bound to zone '{}')r r r r INVALID_TARGETr ZINVALID_INTERFACErO Z get_zonesr0 Zget_zoner& formatr r r
startswith INVALID_ADDRr' )rS r itemZ
all_configr7 r5 r9 rJ rJ rK
_check_config s6
zZone._check_configc s t t| j| |jdr,ttjd| n|jdrHttjd| n|jddkrhttjd| nnd|kr|d |j d }n|}t
|t krttjd|t
|t | j f | j
r|| j
j krttjdd S )Nr/ z'%s' can't start with '/'z'%s' can't end with '/' zmore than one '/' in '%s'z'Zone of '%s' has %d chars, max is %d %sz+Zones can't have the same name as a policy.)rM r
check_namera r r INVALID_NAMEendswithcountfindlenr
rQ rO Zget_policy_objectsZ
NAME_CONFLICT)rS r0 Z checked_name)rT rJ rK rf s,
zZone.check_namec
C s d| _ d | _d| _d| _d| _x$|jD ]}|| jkr&| jj| q&W x$|jD ]}|| jkrL| jj| qLW x$|jD ]}|| jkrr| jj| qrW x$|j D ]}|| j kr| j j| qW x$|j
D ]}|| j
kr| j
j| qW x$|j D ]}|| j kr| j j| qW |j rd| _ |j
r d| _
x(|jD ] }|| jkr&| jj| q&W x(|jD ] }|| jkrP| jj| qPW x,|jD ]"} | jj| | jjt| qzW |jrd| _d S )NTr )rQ filenamer r r r& appendr' r! r" r) r# r, r$ r% r* rP r( r\ r+ )
rS r5 r7 r9 r6 r1 protoZicmpr, r8 rJ rJ rK combine sL
z Zone.combine)r r )r r )r r )r F)r r )r r )r$ F)r r r r )r r )r+ F)r, F)__name__
__module__ __qualname____doc__rG ZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRS staticmethodrL rN rU r[ r] r^ rd rf ro
__classcell__rJ rJ )rT rK r ( sx
c @ s$ e Zd Zdd Zdd Zdd ZdS )zone_ContentHandlerc C s" t j| | d | _d| _d | _d S )NF)r rN _rule _rule_errorZ _limit_ok)rS rc rJ rJ rK rN s z zone_ContentHandler.__init__c C s t j| || | jrd S | jj|| t| ||r6d S |dkrd|krVtjd|d d|krj|d | j_d|krtjd|d d|kr|d }|t krt
t j ||dkr|t
kr|| j_n|d kr| jjrtjd
nd | j_n|d krh| jrtjd
d | _d S d|kr.tjd d | _d S |d | jjkrT| jjj|d ntjd|d n8|dkrf| jr | jjrtjdt| j d | _d S d}d|kr|d j d$krd }d } }}d|kr|d }d|kr|d }d|kr|d }tj||||d| j_d S d|krBd|krBtjd d S d|krdd|krdtjd d S d |kr~tjd |d d|krtjd d S d|krt|d rt|d rt|d rt
t j|d d|kr$d |d }|| jj kr| jj j| ntjd |d d|kr|d }|| jj krT| jj j| ntjd |d n:|d!kr| jj rtjd" nd | j_ ntjd#| d S d S )%Nr5 r0 z'Ignoring deprecated attribute name='%s'r r= z,Ignoring deprecated attribute immutable='%s'r r r, z Forward already set, ignoring.Tr7 z$Invalid rule: interface use in rule.z Invalid interface: Name missing.z%Interface '%s' already set, ignoring.r9 z:Invalid rule: More than one source in rule '%s', ignoring.FrA yestruer? r@ rB )rA z$Invalid source: No address no ipset.z"Invalid source: Address and ipset.r> z)Ignoring deprecated attribute family='%s'z+Invalid source: Invertion not allowed here.zipset:%sz"Source '%s' already set, ignoring.zicmp-block-inversionz+Icmp-Block-Inversion already set, ignoring.zUnknown XML element '%s')ry rz ) r startElementrx rc Zparser_check_element_attrsr r Zwarningr r r r r_ r
r r, rw r& rm r9 r\ lowerr Z Rich_Sourcer r r rb r' r+ ) rS r0 attrsr rA Zaddrr@ rB entryrJ rJ rK r{ & s
z zone_ContentHandler.startElementc C s t j| | t| | d S )N)r
endElementr )rS r0 rJ rJ rK r s z zone_ContentHandler.endElementN)rp rq rr rN r{ r rJ rJ rJ rK rv s prv Fc
C s t }| jds ttjd| | d d |_|s>|j|j | |_||_|j t
j rZdnd|_ |j |_
t|}tj }|j| d|| f }t|db}tjd }|j| y|j| W n8 tjk
r } zttjd| j W Y d d } ~ X nX W d Q R X ~~tr|j |S )
Nz.xmlz'%s' is missing .xml suffix FTz%s/%srbznot a valid zone file: %s)r rh r r rg r0 rf rl pathra r
ETC_FIREWALLDZbuiltindefaultrv saxZ make_parserZsetContentHandleropenZ InputSourceZ
setByteStreamparseZSAXParseExceptionZ INVALID_ZONEZ getExceptionr r[ )
rl r Z
no_check_namer5 handlerparserr0 fr9 msgrJ rJ rK r s:
(c C s\ |r|n| j }| jr$d|| jf }nd|| jf }tj j|rytj|d| W n0 tk
r } ztj d|| W Y d d }~X nX tj j
|}|j t j
rtj j| rtj jt j
stjt j
d tj|d tj|ddd}t|}|j i }| jr| jd kr| j|d
< | jtkr*| j|d < |jd | |jd
t| | x8t| jD ]*} |jd |jdd| i |jd
qVW x\t| j D ]N}
|jd d|
kr|jdd|
dd i n|jdd|
i |jd
qW | j r
|jd |jdi |jd
| j r2|jd |jdi |jd
|j d |jd
|j |j! ~d S )Nz%s/%sz %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si ZwtzUTF-8)modeencodingr r r r5
z r7 r0 zipset:r9 rB r? zicmp-block-inversionr, )"r rl r0 osexistsshutilZcopy2 Exceptionr errordirnamera r r mkdirior r Z
startDocumentr r r
r{ ZignorableWhitespacer r r& Z
simpleElementr' r+ r, r Z endDocumentclose) r5 r _pathr0 r dirpathr r r} r7 r9 rJ rJ rK r s`
)F)N)(__all__Zxml.saxr r r r Zfirewallr Zfirewall.functionsr r r r r
r r Zfirewall.core.baser
r Zfirewall.core.io.io_objectr r r r Zfirewall.core.io.policyr r r r Z
firewall.corer Zfirewall.core.loggerr r Zfirewall.errorsr r rv r r rJ rJ rJ rK s$
$ x|