JFIF $
d d 7
Viewing File: /usr/lib/python3.9/site-packages/firewall/core/__pycache__/ebtables.cpython-39.pyc
a
� i�$ � @ s d gZ ddlZddlmZ ddlmZ ddlmZm Z m
Z
ddl m Z ddl
mZ ddlmZmZ ddlZd gg d
�g d �d �Zi Zi Zi Ze�� D ]pZg ee< e� ee< ee D ]PZee �d
e � ee �deef � ee �de � ee � de � q�q�G dd � d e �Z dS )�ebtables� N)�runProg)�log)�tempFile�readfile� splitArgs)�COMMANDS)� ipXtables��
FirewallError� INVALID_IPVZBROUTING)Z
PREROUTINGZ POSTROUTING�OUTPUT)ZINPUTr
ZFORWARD)ZbrouteZnat�filterz -N %s_directz-I %s 1 -j %s_directz-I %s_direct 1 -j RETURNz %s_directc @ s� e Zd ZdZd ZdZdd� Zdd� Zdd� Zd d
� Z d d � Z
d
d� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd/d d!�Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd0d+d,�Zd-d.� Zd S )1r ZebFc C sB t | j | _t d| j | _| �� | _| �� | _| �� g | _ d S )Nz
%s-restore)
r �ipv�_command�_restore_command� _detect_restore_noflush_optionZrestore_noflush_option�_detect_concurrent_option�concurrent_option� fill_exists�available_tables��self� r �:/usr/lib/python3.9/site-packages/firewall/core/ebtables.py�__init__9 s
zebtables.__init__c C s$ t j�| j�| _t j�| j�| _d S �N)�os�path�existsr Zcommand_existsr Zrestore_command_existsr r r r r A s zebtables.fill_existsc C s( d}t | jddg�}|d dkr$d}|S )N� z --concurrent�-Lr )r r )r r �retr r r r E s
z"ebtables._detect_concurrent_optionc C s. g }z| � |d� W n ty( Y dS 0 dS )N�offFT)� set_rules�
ValueError)r �rulesr r r r O s z'ebtables._detect_restore_noflush_optionc C s� g }| j r | j |vr |�| j � |dd� |D �7 }t�d| j| jd�|�� t| j|�\}}|dkr~td| jd�|�|f ��|S )Nc S s g | ] }d | �qS )z%sr )�.0�itemr r r �
<listcomp>^ � z"ebtables.__run.<locals>.<listcomp>� %s: %s %s� r �'%s %s' failed: %s) r �appendr �debug2� __class__r �joinr r% )r �args�_args�statusr" r r r Z__runY s
�zebtables.__runc C s$ dD ]}||v rt td| ��qd S )N)z
%%REJECT%%z%%ICMP%%z %%LOGTYPE%%z'%s' invalid for ebtablesr
)r �rule�strr r r �_rule_validatef s
�zebtables._rule_validatec C s |t v o|t | v S r )�BUILT_IN_CHAINS)r r �table�chainr r r �is_chain_builtinl s
�zebtables.is_chain_builtinc C sJ g }|r4|� d|d|g� |� d|d|dddg� n|� d|d|g� |S )N�-tz-N�-I�1z-jZRETURN�-X)r. )r �addr9 r: r& r r r �build_chain_rulesp s zebtables.build_chain_rulesc C s8 d|g}|r |d|t |�g7 }n |d|g7 }||7 }|S )Nr< r= z-D)r6 )r r@ r9 r: �indexr2 r5 r r r �
build_rule{ s zebtables.build_rulec C s
t �|�S r )r Zcommon_reverse_rule�r r2 r r r � reverse_rule� s zebtables.reverse_rulec C s t �|� d S r )r Zcommon_check_passthroughrD r r r �check_passthrough� s zebtables.check_passthroughc C s
t �|�S r )r Zcommon_reverse_passthroughrD r r r �reverse_passthrough� s z ebtables.reverse_passthroughc
C s t � }d}i }|D ]�}|d d � }| �|� dD ]J}z|�|�} W n tyT Y q00 t|�| d kr0|�| � |�| �}q0t|�D ]<\} }
tjD ],} | |
v r�|
� d�r�|
�
d�s�d|
|| < q�q�|� |g �� |� q|D ]4}|�
d| � || D ]}|�
d�|�d � q�q�|�� t�|j�} t�d | j| jd
|j| jf � g }
|
� d � t| j|
|jd �\}}t�� d
k�r�t|j�}|d u�r�d} |D ]@}tjd| |f ddd� |�
d��s�tjddd� | d7 } �q�t� |j� |dk�rtd| jd�|
�|f ��d S )Nr )r< z--table� �"z"%s"z*%s
r, �
r+ z%s: %dz --noflush)�stdin� z%8d: %sr )�nofmt�nlr )rM r- ) r r7 rB r% �len�pop� enumerate�stringZ
whitespace�
startswith�endswith�
setdefaultr. �writer1 �closer �stat�namer r/ r0 r �st_sizer ZgetDebugLogLevelr Zdebug3�unlink)r r& �
log_deniedZ temp_filer9 Z table_rulesZ_ruler5 �opt�i�element�crX r2 r4 r" �lines�liner r r r$ � sb
� �
�
�zebtables.set_rulesc C s | � |� | �|�S r )r7 �_ebtables__run)r r5 r\ r r r �set_rule� s
zebtables.set_ruleNc C s� g }|r|gnt �� }|D ]f}|| jv r4|�|� qz*| �d|dg� | j�|� |�|� W q ty~ t�d| � Y q0 q|S )Nr< r! z#ebtables table '%s' does not exist.)r8 �keysr r. rc r% r Zdebug1)r r9 r" Ztablesr r r �get_available_tables� s
z ebtables.get_available_tablesc C s i S r r )r r9 r r r �get_zone_table_chains� s z ebtables.get_zone_table_chainsc C s> g }t �� D ],}|| �� vr q dD ]}|�d||g� q"q |S )N)z-Fr? z-Zr< �r8 re rf r. )r r& r9 �flagr r r �build_flush_rules� s zebtables.build_flush_rulesc C sV g }|dkrdn|}t �� D ]4}|| �� vr.q t | D ]}|�d|d||g� q6q |S )NZPANICZDROPr< z-Prh )r ZpolicyZpolicy_detailsr& Z_policyr9 r: r r r �build_set_policy_rules� s z ebtables.build_set_policy_rulesc C s g S r r r r r r �build_default_tables� s z ebtables.build_default_tablesr# c C s� g }t D ]�}|| �� vrqt | d d � }|dkrH|tv rH|�t| � d|g}|D ]2}t|�tkrt|�|| � qT|�|t|� � qTq|S )Nr# r< )�
DEFAULT_RULESrf � LOG_RULES�extend�type�listr. r )r r\ Z
default_rulesr9 Z_default_rules�prefixr5 r r r �build_default_rules� s z ebtables.build_default_rulesc C s
|| j kS r )r )r r r r r �is_ipv_supported s zebtables.is_ipv_supported)N)r# )�__name__�
__module__� __qualname__r rY Zpolicies_supportedr r r r rc r7 r; rA rC rE rF rG r$ rd rf rg rj rk rl rs rt r r r r r 4 s0
@
) �__all__Zos.pathr Zfirewall.core.progr Zfirewall.core.loggerr Zfirewall.functionsr r r Zfirewall.configr Z
firewall.corer Zfirewall.errorsr r rR r8 rm rn Z
OUR_CHAINSre r9 �setr: r. r@ �objectr r r r r �<module> s0 �
Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg