Current File : //proc/3/root/lib/python2.7/site-packages/firewall/core/fw_direct.pyo
�
�c�`c @ s� d g Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l
m Z d d l m
Z
d e f d � � YZ d
S( t FirewallDirecti����( t LastUpdatedOrderedDict( t ipXtables( t ebtables( t FirewallTransaction( t log( t errors( t
FirewallErrorc B sd e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d$ d � Z
d � Z d � Z d$ d
� Z
d � Z d � Z d
� Z d � Z d$ d � Z d$ d � Z d � Z d � Z d � Z d$ d � Z d$ d � Z d � Z d � Z d � Z d � Z d � Z d � Z d$ d � Z d$ d � Z d � Z! d � Z" d � Z# d! � Z$ d" � Z% d# � Z& RS(% c C s | | _ | j � d S( N( t _fwt _FirewallDirect__init_vars( t selft fw( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt __init__' s c C s d | j | j | j | j f S( Ns %s(%r, %r, %r)( t __class__t _chainst _rulest _rule_priority_positions( R
( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt __repr__+ s c C s1 i | _ i | _ i | _ i | _ d | _ d S( N( R R R t
_passthroughst Nonet _obj( R
( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt __init_vars/ s
c C s | j � d S( N( R ( R
( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt cleanup6 s c C s
t | j � S( N( R R ( R
( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt new_transaction; s c C s
| | _ d S( N( R ( R
t obj( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt set_permanent_config@ s c C s| t | j � t | j � t | j � d k r3 t St | j j � � t | j j � � t | j j � � d k rx t St S( Ni (
t lenR R R t TrueR t get_all_chainst
get_all_rulest get_all_passthroughst False( R
( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt has_configurationC s /% c C su | d k r | j � } n | } | j | j j � | j j � | j j � f | � | d k rq | j t � n d S( N( R R t
set_configR R R R t executeR ( R
t use_transactiont transaction( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt apply_directL s c C s� i } i } i } xi | j D]^ } | \ } } xI | j | D]: } | j j | | | � s< | j | g � j | � q< q< Wq Wx� | j D]� } | \ } } } xl | j | D]] \ } }
| j j | | | | |
� s� | | k r� t � | | <n | | | | |
f <q� q� Wq� Wxk | j D]` } xW | j | D]H }
| j j | |
� s.| | k rbg | | <n | | j |
� q.q.WqW| | | f S( N(
R R t query_chaint
setdefaultt appendR t
query_ruleR R t query_passthrough( R
t chainst rulest passthroughst table_idt ipvt tablet chaint chain_idt priorityt args( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt get_runtime_config] s, $
c C s | j | j | j f S( N( R R R ( R
( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt
get_config| s c
C s | d k r | j � } n | } | \ } } } x� | D]� } | \ } } xp | | D]d }
| j | | |
� sT y | j | | |
d | �Wq� t k
r� } t j t | � � q� XqT qT Wq7 Wx� | D]� } | \ } } }
x� | | D]v \ }
} | j | | |
|
| � s� y# | j | | |
|
| d | �Wq]t k
rY} t j t | � � q]Xq� q� Wq� Wx{ | D]s } xj | | D]^ } | j
| | � s}y | j | | d | �Wq�t k
r�} t j t | � � q�Xq}q}WqlW| d k r�| j t
� n d S( NR# ( R R R& t add_chainR R t warningt strR) t add_ruleR* t add_passthroughR" R ( R
t confR# R$ R R R R. R/ R0 R1 t errorR2 R3 R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR! s@
"
"
" c C s> d d d g } | | k r: t t j d | | f � � n d S( Nt ipv4t ipv6t ebs '%s' not in '%s'( R R t INVALID_IPV( R
R/ t ipvs( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt
_check_ipv� s c C sf | j | � | d k r( t j j � n t j j � } | | k rb t t j d | | f � � n d S( NR> R? s '%s' not in '%s'( s ipv4s ipv6( RC R t BUILT_IN_CHAINSt keysR R R t
INVALID_TABLE( R
R/ R0 t tables( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _check_ipv_table� s
c C s� | d k rJ t j | } | j j r. i } qd | j j | � j | } n t j | } t j | } | | k r� t t j
d | � � n | | k r� t t j
d | � � n | d k r� | j j j | � d k r� t t j d | � � q� n d S( NR> R? s chain '%s' is built-in chains chain '%s' is reserveds Chain '%s' is reserved( s ipv4s ipv6( s ipv4s ipv6( R RD R t nftables_enabledt get_direct_backend_by_ipvt
our_chainsR t
OUR_CHAINSR R t
BUILTIN_CHAINt zonet zone_from_chainR t
INVALID_CHAIN( R
R/ R0 R1 t built_in_chainsRK ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _check_builtin_chain� s"
c C sc | r% | j j | g � j | � n: | j | j | � t | j | � d k r_ | j | =n d S( Ni ( R R' R( t removeR ( R
R. R1 t add( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _register_chain� s
c C sZ | d k r | j � } n | } | j t | | | | � | d k rV | j t � n d S( N( R R t _chainR R" ( R
R/ R0 R1 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR7 � s c C sZ | d k r | j � } n | } | j t | | | | � | d k rV | j t � n d S( N( R R RV R R" R ( R
R/ R0 R1 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt remove_chain� s c C sO | j | | � | j | | | � | | f } | | j k oN | | j | k S( N( RH RR R ( R
R/ R0 R1 R. ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR& � s
c C s: | j | | � | | f } | | j k r6 | j | Sg S( N( RH R ( R
R/ R0 R. ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt
get_chains� s
c C sX g } xK | j D]@ } | \ } } x+ | j | D] } | j | | | f � q0 Wq W| S( N( R R( ( R
t rt keyR/ R0 R1 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR � s c C s` | d k r | j � } n | } | j t | | | | | | � | d k r\ | j t � n d S( N( R R t _ruleR R" ( R
R/ R0 R1 R3 R4 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR: s c C s` | d k r | j � } n | } | j t | | | | | | � | d k r\ | j t � n d S( N( R R R[ R R" R ( R
R/ R0 R1 R3 R4 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt remove_rule s c C sE | j | | � | | | f } | | j k oD | | f | j | k S( N( RH R ( R
R/ R0 R1 R3 R4 R2 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR) s c C sI | j | | � | | | f } | | j k rE t | j | j � � Sg S( N( RH R t listRE ( R
R/ R0 R1 R2 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt get_rules s
c C sm g } x` | j D]U } | \ } } } x= | j | D]. \ } } | j | | | | t | � f � q3 Wq W| S( N( R R( R] ( R
RY RZ R/ R0 R1 R3 R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR % s *c C s� | r� | | j k r( t � | j | <n | | j | | <| | j k rX i | j | <n | | j | k r� | j | | c d 7<q� d | j | | <nK | j | | =t | j | � d k r� | j | =n | j | | c d 8<d S( Ni i ( R R R R ( R
t rule_idR2 R3 t enable( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _register_rule- s
c C s_ y& | j j | j j | � j | � SWn2 t k
rZ } t j | � t t j | � � n Xd S( N(
R t ruleRJ t namet ExceptionR t debug2R R t COMMAND_FAILED( R
R/ R4 t msg( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt passthroughA s
&
c C sz | r< | | j k r% g | j | <n | j | j | � n: | j | j | � t | j | � d k rv | j | =n d S( Ni ( R R( RS R ( R
R/ R4 R` ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _register_passthroughI s c C s] | d k r | j � } n | } | j t | t | � | � | d k rY | j t � n d S( N( R R t _passthroughR R] R" ( R
R/ R4 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR; S s c C s] | d k r | j � } n | } | j t | t | � | � | d k rY | j t � n d S( N( R R Rj R R] R" R ( R
R/ R4 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt remove_passthrough^ s c C s& | | j k o% t | � | j | k S( N( R t tuple( R
R/ R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR* i s c C sO g } xB | j D]7 } x. | j | D] } | j | t | � f � q$ Wq W| S( N( R R( R] ( R
RY R/ R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR m s
!c C sG g } | | j k rC x+ | j | D] } | j t | � � q# Wn | S( N( R R( R] ( R
R/ RY R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt get_passthroughst s
c C ss | j | | � | j j rH | d
k rH | j j j | | | | � n | } | j j | � } | j j r� | j | | | � r� d | } nB | j j r� | d d k r� | j | | | d � r� | d } n | | | f }
| | f } | r<|
| j k r�| | j |
k r�t t j
d | | | | f � � q�nX |
| j k s^| | j |
k r�t t j d | | | | f � � n | j |
| } d } |
| j k rt
| j |
j � � }
d } xL | t |
� k r| |
| k r| | j |
|
| 7} | d 7} q�Wn | j | | j | | | | | � � | j | |
| | � | j | j | |
| | � d S( NR> R? s %s_directi����t _directs" rule '%s' already is in '%s:%s:%s's rule '%s' is not in '%s:%s:%s'i i ( s ipv4s ipv6( RH R RI RN t create_zone_base_by_chainRJ t is_chain_builtinR R R t ALREADY_ENABLEDt NOT_ENABLEDR t sortedRE R R: t
build_ruleRa t add_fail( R
R` R/ R0 R1 R3 R4 R$ RV t backendR2 R_ t indext positionst j( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR[ { sL
(%% c C s" | j | | � | j | | | � | | f } | r| | | j k r� | | j | k r� t t j d | | | f � � q� nD | | j k s� | | j | k r� t t j d | | | f � � n | j j | � } | j | | j
| | | � � | j | | | � | j | j | | | � d S( Ns chain '%s' already is in '%s:%s's chain '%s' is not in '%s:%s'(
RH RR R R R Rq Rr R RJ t add_rulest build_chain_rulesRU Ru ( R
RT R/ R0 R1 R$ R. Rv ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyRV � s$ c
C sn | j | � t | � } | rc | | j k r� | | j | k r� t t j d | | f � � q� nA | | j k s� | | j | k r� t t j d | | f � � n | j j | � } | r | j | � | d k r| j
| � \ } } | r| r| j j j | | | � qn | } n | j
| � } | j | | � | j | | | � | j | j | | | � d S( Ns passthrough '%s', '%s'R> R? ( s ipv4s ipv6( RC Rl R R R Rq Rr R RJ t check_passthrought passthrough_parse_table_chainRN Ro t reverse_passthroughR: Ri Ru (
R
R` R/ R4 R$ t
tuple_argsRv R0 R1 t _args( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyRj � s0
N(' t __name__t
__module__R R R R R R R R R% R5 R6 R! RC RH RR RU R7 RW R& RX R R: R\ R) R^ R Ra Rh Ri R; Rk R* R Rm R[ RV Rj ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR & sH '
_ N( t __all__t firewall.fw_typesR t
firewall.coreR R t firewall.core.fw_transactionR t firewall.core.loggerR t firewallR t firewall.errorsR t objectR ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt <module> s
Mini Shell