관리-도구
편집 파일: fw_direct.pyo
� �c�`c @ s� d g Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d e f d � � YZ d S( t FirewallDirecti����( t LastUpdatedOrderedDict( t ipXtables( t ebtables( t FirewallTransaction( t log( t errors( t FirewallErrorc B sd e Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d$ d � Z d � Z d � Z d$ d � Z d � Z d � Z d � Z d � Z d$ d � Z d$ d � Z d � Z d � Z d � Z d$ d � Z d$ d � Z d � Z d � Z d � Z d � Z d � Z d � Z d$ d � Z d$ d � Z d � Z! d � Z" d � Z# d! � Z$ d" � Z% d# � Z& RS(% c C s | | _ | j � d S( N( t _fwt _FirewallDirect__init_vars( t selft fw( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt __init__' s c C s d | j | j | j | j f S( Ns %s(%r, %r, %r)( t __class__t _chainst _rulest _rule_priority_positions( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt __repr__+ s c C s1 i | _ i | _ i | _ i | _ d | _ d S( N( R R R t _passthroughst Nonet _obj( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt __init_vars/ s c C s | j � d S( N( R ( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt cleanup6 s c C s t | j � S( N( R R ( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt new_transaction; s c C s | | _ d S( N( R ( R t obj( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt set_permanent_config@ s c C s| t | j � t | j � t | j � d k r3 t St | j j � � t | j j � � t | j j � � d k rx t St S( Ni ( t lenR R R t TrueR t get_all_chainst get_all_rulest get_all_passthroughst False( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt has_configurationC s /% c C su | d k r | j � } n | } | j | j j � | j j � | j j � f | � | d k rq | j t � n d S( N( R R t set_configR R R R t executeR ( R t use_transactiont transaction( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt apply_directL s c C s� i } i } i } xi | j D]^ } | \ } } xI | j | D]: } | j j | | | � s< | j | g � j | � q< q< Wq Wx� | j D]� } | \ } } } xl | j | D]] \ } } | j j | | | | | � s� | | k r� t � | | <n | | | | | f <q� q� Wq� Wxk | j D]` } xW | j | D]H } | j j | | � s.| | k rbg | | <n | | j | � q.q.WqW| | | f S( N( R R t query_chaint setdefaultt appendR t query_ruleR R t query_passthrough( R t chainst rulest passthroughst table_idt ipvt tablet chaint chain_idt priorityt args( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt get_runtime_config] s, $ c C s | j | j | j f S( N( R R R ( R ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt get_config| s c C s | d k r | j � } n | } | \ } } } x� | D]� } | \ } } xp | | D]d } | j | | | � sT y | j | | | d | �Wq� t k r� } t j t | � � q� XqT qT Wq7 Wx� | D]� } | \ } } } x� | | D]v \ } } | j | | | | | � s� y# | j | | | | | d | �Wq]t k rY} t j t | � � q]Xq� q� Wq� Wx{ | D]s } xj | | D]^ } | j | | � s}y | j | | d | �Wq�t k r�} t j t | � � q�Xq}q}WqlW| d k r�| j t � n d S( NR# ( R R R& t add_chainR R t warningt strR) t add_ruleR* t add_passthroughR" R ( R t confR# R$ R R R R. R/ R0 R1 t errorR2 R3 R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR! s@ " " " c C s> d d d g } | | k r: t t j d | | f � � n d S( Nt ipv4t ipv6t ebs '%s' not in '%s'( R R t INVALID_IPV( R R/ t ipvs( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _check_ipv� s c C sf | j | � | d k r( t j j � n t j j � } | | k rb t t j d | | f � � n d S( NR> R? s '%s' not in '%s'( s ipv4s ipv6( RC R t BUILT_IN_CHAINSt keysR R R t INVALID_TABLE( R R/ R0 t tables( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _check_ipv_table� s c C s� | d k rJ t j | } | j j r. i } qd | j j | � j | } n t j | } t j | } | | k r� t t j d | � � n | | k r� t t j d | � � n | d k r� | j j j | � d k r� t t j d | � � q� n d S( NR> R? s chain '%s' is built-in chains chain '%s' is reserveds Chain '%s' is reserved( s ipv4s ipv6( s ipv4s ipv6( R RD R t nftables_enabledt get_direct_backend_by_ipvt our_chainsR t OUR_CHAINSR R t BUILTIN_CHAINt zonet zone_from_chainR t INVALID_CHAIN( R R/ R0 R1 t built_in_chainsRK ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _check_builtin_chain� s" c C sc | r% | j j | g � j | � n: | j | j | � t | j | � d k r_ | j | =n d S( Ni ( R R' R( t removeR ( R R. R1 t add( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _register_chain� s c C sZ | d k r | j � } n | } | j t | | | | � | d k rV | j t � n d S( N( R R t _chainR R" ( R R/ R0 R1 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR7 � s c C sZ | d k r | j � } n | } | j t | | | | � | d k rV | j t � n d S( N( R R RV R R" R ( R R/ R0 R1 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt remove_chain� s c C sO | j | | � | j | | | � | | f } | | j k oN | | j | k S( N( RH RR R ( R R/ R0 R1 R. ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR& � s c C s: | j | | � | | f } | | j k r6 | j | Sg S( N( RH R ( R R/ R0 R. ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt get_chains� s c C sX g } xK | j D]@ } | \ } } x+ | j | D] } | j | | | f � q0 Wq W| S( N( R R( ( R t rt keyR/ R0 R1 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR � s c C s` | d k r | j � } n | } | j t | | | | | | � | d k r\ | j t � n d S( N( R R t _ruleR R" ( R R/ R0 R1 R3 R4 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR: s c C s` | d k r | j � } n | } | j t | | | | | | � | d k r\ | j t � n d S( N( R R R[ R R" R ( R R/ R0 R1 R3 R4 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt remove_rule s c C sE | j | | � | | | f } | | j k oD | | f | j | k S( N( RH R ( R R/ R0 R1 R3 R4 R2 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR) s c C sI | j | | � | | | f } | | j k rE t | j | j � � Sg S( N( RH R t listRE ( R R/ R0 R1 R2 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt get_rules s c C sm g } x` | j D]U } | \ } } } x= | j | D]. \ } } | j | | | | t | � f � q3 Wq W| S( N( R R( R] ( R RY RZ R/ R0 R1 R3 R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR % s *c C s� | r� | | j k r( t � | j | <n | | j | | <| | j k rX i | j | <n | | j | k r� | j | | c d 7<q� d | j | | <nK | j | | =t | j | � d k r� | j | =n | j | | c d 8<d S( Ni i ( R R R R ( R t rule_idR2 R3 t enable( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _register_rule- s c C s_ y& | j j | j j | � j | � SWn2 t k rZ } t j | � t t j | � � n Xd S( N( R t ruleRJ t namet ExceptionR t debug2R R t COMMAND_FAILED( R R/ R4 t msg( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt passthroughA s & c C sz | r< | | j k r% g | j | <n | j | j | � n: | j | j | � t | j | � d k rv | j | =n d S( Ni ( R R( RS R ( R R/ R4 R` ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt _register_passthroughI s c C s] | d k r | j � } n | } | j t | t | � | � | d k rY | j t � n d S( N( R R t _passthroughR R] R" ( R R/ R4 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR; S s c C s] | d k r | j � } n | } | j t | t | � | � | d k rY | j t � n d S( N( R R Rj R R] R" R ( R R/ R4 R# R$ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt remove_passthrough^ s c C s& | | j k o% t | � | j | k S( N( R t tuple( R R/ R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR* i s c C sO g } xB | j D]7 } x. | j | D] } | j | t | � f � q$ Wq W| S( N( R R( R] ( R RY R/ R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR m s !c C sG g } | | j k rC x+ | j | D] } | j t | � � q# Wn | S( N( R R( R] ( R R/ RY R4 ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt get_passthroughst s c C ss | j | | � | j j rH | d k rH | j j j | | | | � n | } | j j | � } | j j r� | j | | | � r� d | } nB | j j r� | d d k r� | j | | | d � r� | d } n | | | f } | | f } | r<| | j k r�| | j | k r�t t j d | | | | f � � q�nX | | j k s^| | j | k r�t t j d | | | | f � � n | j | | } d } | | j k rt | j | j � � } d } xL | t | � k r| | | k r| | j | | | 7} | d 7} q�Wn | j | | j | | | | | � � | j | | | | � | j | j | | | | � d S( NR> R? s %s_directi����t _directs" rule '%s' already is in '%s:%s:%s's rule '%s' is not in '%s:%s:%s'i i ( s ipv4s ipv6( RH R RI RN t create_zone_base_by_chainRJ t is_chain_builtinR R R t ALREADY_ENABLEDt NOT_ENABLEDR t sortedRE R R: t build_ruleRa t add_fail( R R` R/ R0 R1 R3 R4 R$ RV t backendR2 R_ t indext positionst j( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR[ { sL (%% c C s" | j | | � | j | | | � | | f } | r| | | j k r� | | j | k r� t t j d | | | f � � q� nD | | j k s� | | j | k r� t t j d | | | f � � n | j j | � } | j | | j | | | � � | j | | | � | j | j | | | � d S( Ns chain '%s' already is in '%s:%s's chain '%s' is not in '%s:%s'( RH RR R R R Rq Rr R RJ t add_rulest build_chain_rulesRU Ru ( R RT R/ R0 R1 R$ R. Rv ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyRV � s$ c C sn | j | � t | � } | rc | | j k r� | | j | k r� t t j d | | f � � q� nA | | j k s� | | j | k r� t t j d | | f � � n | j j | � } | r | j | � | d k r| j | � \ } } | r| r| j j j | | | � qn | } n | j | � } | j | | � | j | | | � | j | j | | | � d S( Ns passthrough '%s', '%s'R> R? ( s ipv4s ipv6( RC Rl R R R Rq Rr R RJ t check_passthrought passthrough_parse_table_chainRN Ro t reverse_passthroughR: Ri Ru ( R R` R/ R4 R$ t tuple_argsRv R0 R1 t _args( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyRj � s0 N(' t __name__t __module__R R R R R R R R R% R5 R6 R! RC RH RR RU R7 RW R& RX R R: R\ R) R^ R Ra Rh Ri R; Rk R* R Rm R[ RV Rj ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyR & sH ' _ N( t __all__t firewall.fw_typesR t firewall.coreR R t firewall.core.fw_transactionR t firewall.core.loggerR t firewallR t firewall.errorsR t objectR ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/fw_direct.pyt <module> s