| Current File : //usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyc |
�
�c�`c @ sg d Z d d d g Z d d l j Z d d l Z d d l Z d d l Z d d l m Z d d l m
Z
m Z m Z m
Z
m Z m Z m Z m Z m Z d d l m Z m Z m Z m Z d d l m Z m Z d d
l m Z m Z m Z m Z d d l m! Z! d d l m" Z" d d
l# m$ Z$ d e f d � � YZ% d e f d � � YZ& d � Z' e( d � Z) d S( s$ ipset io XML handler, reader, writert IPSett ipset_readert ipset_writeri����N( t config( t checkIPt checkIP6t checkIPnMaskt
checkIP6nMaskt
u2b_if_py2t check_mact
check_portt checkInterfacet
checkProtocol( t PY2t IO_Objectt IO_Object_ContentHandlert IO_Object_XMLGenerator( t IPSET_TYPESt IPSET_CREATE_OPTIONS( t check_icmp_namet check_icmp_typet check_icmpv6_namet check_icmpv6_type( t log( t errors( t
FirewallErrorc B s� e Z d d d d d i d d 6f d d g f f Z d Z d d d
d g Z i d d 6d d 6d g d 6d
g d 6d d 6Z i d g d 6d g d 6Z d � Z d � Z d � Z
e d � � Z d � Z
d � Z RS( t versiont t shortt descriptiont typet optionst entriess
(ssssa{ss}as)t _t -t :t .t ipsett namet optiont entryt valuec C sV t t | � j � d | _ d | _ d | _ d | _ g | _ i | _ t | _
d S( NR ( t superR t __init__R R R R R R t Falset applied( t self( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyR+ C s c C sE d | _ d | _ d | _ d | _ | j 2| j j � t | _ d S( NR ( R R R R R R t clearR, R- ( R. ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyt cleanupM s
c C s� t | j � | _ t | j � | _ t | j � | _ t | j � | _ d � | j j � D� | _ g | j D] } t | � ^ qn | _ d S( s� HACK. I haven't been able to make sax parser return
strings encoded (because of python 2) instead of in unicode.
Get rid of it once we throw out python 2 support.c S s+ i | ]! \ } } t | � t | � � q S( ( R ( t .0t kt v( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pys
<dictcomp>^ s N( R R R R R R t itemsR ( R. t e( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyt encode_stringsV s c
C s� d } d | k r. | d d k r. d } q. n | j d � sV t t j d | � � n | d j d � } | j d � } t | � t | � k s� t | � d k r� t t j d
| | f � � n x't t | � � D]} | | } | | } | d k r�d | k r�| d k r�| d k r@t t j d
| | | f � � n | j d � } t | � d k r�t t j d | | | | f � � n x� | D]] }
| d k r�t |
� s�| d k r�t |
� r�t t j d |
| | | f � � q�q�Wq�| d k rL| d k r.t t j d | | | | f � � n | d k rCt
} qRt } n t } | | � s�t t j d | | | | f � � q�q� | d k rbd | k r�| j d � } t | � d k r�t t j d | | | | f � � n | d k rt | d � s | d k rGt | d � rGt t j d | d | | | f � � n | d k rdt
| d � s�| d k r_t | d � r_t t j d | d | | | f � � q_q�| j d � r| d k o�| d k o�| d k st t j d | | | | f � � qn | d k r!t
| � s:| d k r�t | � r�t t j d | | | | f � � q�q� | d k r�t
| � s�| d k r�t t j d | | f � � q�q� | d k r�d | k r{| j d � } t | � d k r�t t j d | � � n | d d k r~| d k r6t t j d | | f � � n t | d � rxt | d � rxt t j d | d | f � � qxq�| d d1 k r| d k r�t t j d | | f � � n t | d � rxt | d � rxt t j d! | d | f � � qxq�| d d2 k rEt | d � rEt t j d& | d | f � � q�t | d � s�t t j d' | d | f � � q�q�t | � s�t t j d( | | f � � q�q� | d) k r�| j d* � r
y t | d+ � } WqJt k
rt t j d, | | f � � qJXn@ y t | � } Wn- t k
rIt t j d, | | f � � n X| d k sb| d- k r�t t j d, | | f � � q�q� | d. k r�t | � s�t | � d/ k r�t t j d0 | | f � � q�q� t t j d | � � q� Wd S(3 Nt ipv4t familyt inet6t ipv6s hash:s ipset type '%s' not usablei t ,i s) entry '%s' does not match ipset type '%s't ipR" s invalid address '%s' in '%s'[%d]i s. invalid address range '%s' in '%s' for %s (%s)s( invalid address '%s' in '%s' for %s (%s)s 0.0.0.0i t nets /0s hash:net,ifacet macs 00:00:00:00:00:00s invalid mac address '%s' in '%s't portR# s invalid port '%s't icmps( invalid protocol for family '%s' in '%s's invalid icmp type '%s' in '%s't icmpv6s ipv6-icmps invalid icmpv6 type '%s' in '%s't tcpt sctpt udpt udplites invalid protocol '%s' in '%s's invalid port '%s'in '%s's invalid port '%s' in '%s't markt 0xi s invalid mark '%s' in '%s'I���� t ifacei s invalid interface '%s' in '%s'( RA s ipv6-icmp( RB RC RD RE ( t
startswithR R t
INVALID_IPSETt splitt lent
INVALID_ENTRYt rangeR R R R t endswithR R R R R R R
t intt
ValueErrorR (
R( R t
ipset_typeR8 t flagsR4 t it flagt itemt splitst _splitt ip_checkt int_val( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyt check_entryb s@ *
c C s> | d k r4 | t k r4 t t j d | � � q4 n | d k r:x� | j � D]� } | t k rx t t j d | � � n | d k r� y t | | � } Wn1 t k
r� t t j d | | | f � � n X| d k r3t t j d
| | | f � � q3qM | d k rM | | d k rM t t j
| | � � qM qM Wn d S( NR s '%s' is not valid ipset typeR s ipset invalid option '%s't timeoutt hashsizet maxelems) Option '%s': Value '%s' is not an integeri s# Option '%s': Value '%s' is negativeR8 t inetR9 ( R\ R] R^ ( R_ s inet6( R R R t INVALID_TYPEt keysR RJ RP RQ t
INVALID_VALUEt INVALID_FAMILY( R. R RV t keyt int_value( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyt
_check_config s2
c C s� d | d k rO | d d d k rO t | d � d k rO t t j � � qO n x- | d D]! } t j | | d | d � qZ Wt t | � j | � d S( NR\ i t 0i i i ( RL R R t IPSET_WITH_TIMEOUTR R[ R* t
import_config( R. R R( ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyRi 3 s $ ( s versionR ( s shortR ( s descriptionR ( s typeR N( t __name__t
__module__t IMPORT_EXPORT_STRUCTUREt DBUS_SIGNATUREt ADDITIONAL_ALNUM_CHARSt Nonet PARSER_REQUIRED_ELEMENT_ATTRSt PARSER_OPTIONAL_ELEMENT_ATTRSR+ R0 R6 t staticmethodR[ Rf Ri ( ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyR , s.
� t ipset_ContentHandlerc B s e Z d � Z d � Z RS( c C s� t j | | | � | j j | | � | d k r� d | k r~ | d t k rk t t j d | d � � n | d | j _ n d | k r�| d | j _ q�n�| d k r� n�| d k r� n�| d k r�d } d | k r� | d } n | d
d k rt t j
d | d
� � n | j j d k ra| d
d k rat t j
d | d
| j j f � � n | d
d k r�| r�t t j
d | d
� � n | d
d k ry t | � } Wn1 t k
r�t t j
d | d
| f � � n X| d k rt t j
d | d
| f � � qn | d
d k rL| d k rLt t j | � � n | d
| j j k ry| | j j | d
<q�t j d | d
� n d S( NR% R s %sR R R R' R R) R& R8 R\ R] R^ s Unknown option '%s's hash:macs% Unsupported option '%s' for type '%s's& Missing mandatory value of option '%s's) Option '%s': Value '%s' is not an integeri s# Option '%s': Value '%s' is negativeR_ R9 s Option %s already set, ignoring.( s familys timeouts hashsizes maxelem( s family( s familys timeouts hashsizes maxelem( s timeouts hashsizes maxelem( s inets inet6( R t startElementRV t parser_check_element_attrsR R R R` R R t INVALID_OPTIONRP RQ Rb Rc R R t warning( R. R& t attrsR) Re ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyRt > sd
"
c C s9 t j | | � | d k r5 | j j j | j � n d S( NR( ( R t
endElementRV R t appendt _element( R. R& ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyRy u s ( Rj Rk Rt Ry ( ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyRs = s 7c C s� t � } | j d � s1 t t j d | � � n | d | _ | j | j � | | _ | | _ | j t
j � rx t n t
| _ | j | _ t | � } t j � } | j | � d | | f } t | d � �i } t j d � } | j | � y | j | � Wn2 t j k
r5} t t j d | j � � � n XWd QX~ ~ d | j k r�| j d d k r�t | j � d k r�t j d
| j � | j 2n d } t! � }
x� | t | j � k ru| j | |
k r�t j d | j | � | j j" | � q�y$ | j# | j | | j | j$ � Wn3 t k
rS} t j d | � | j j" | � q�X|
j% | j | � | d
7} q�W~
t& r�| j' � n | S( Ns .xmls '%s' is missing .xml suffixi����s %s/%st rbs not a valid ipset file: %sR\ Rg i s6 ipset '%s': timeout option is set, entries are ignoreds Entry %s already set, ignoring.s
%s, ignoring.i (( R RO R R t INVALID_NAMER& t
check_namet filenamet pathRI R t
ETC_FIREWALLDR, t Truet builtint defaultRs t saxt make_parsert setContentHandlert opent InputSourceRo t
setByteStreamt parset SAXParseExceptionRJ t getExceptionR RL R R Rw t sett popR[ R t addR
R6 ( R R� R% t handlert parserR& t ft sourcet msgRT t entries_setR5 ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyR z s^
!
"
$
c
C sg | r | n | j } | j r4 d | | j f } n d | | j f } t j j | � r� y t j | d | � Wq� t k
r� } t j d | | � q� Xn t j j
| � } | j t j
� rt j j | � rt j j t j
� s� t j t j
d � n t j | d � n t j | d d d d �} t | � } | j � i | j d
6} | j r{| j d k r{| j | d <n | j d
| � | j d � | j r�| j d k r�| j d � | j d i � | j | j � | j d � | j d � n | j r\| j d k r\| j d � | j d i � | j | j � | j d � | j d � n x{ | j j � D]j \ } }
| j d � |
d k r�| j d i | d 6|
d 6� n | j d i | d 6� | j d � qlWxU | j D]J } | j d � | j d i � | j | � | j d � | j d � q�W| j d
� | j d � | j � | j � ~ d S( Ns %s/%ss %s/%s.xmls %s.olds Backup of file '%s' failed: %si� t modet wtt encodings UTF-8R R R R% s
s R R R' R& R) R( (! R� R R& t ost existst shutilt copy2t ExceptionR t errort dirnameRI R R� t mkdirt ioR� R t
startDocumentR R Rt t ignorableWhitespaceR t
charactersRy R R R4 t
simpleElementR t endDocumentt close( R% R� t _pathR& R� t dirpathR� R� Rx Rd R) R( ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyR � sf %
!
(* t __doc__t __all__t xml.saxR� R� R� R� t firewallR t firewall.functionsR R R R R R R
R R t firewall.core.io.io_objectR
R R R t firewall.core.ipsetR R t firewall.core.icmpR R R R t firewall.core.loggerR R t firewall.errorsR R Rs R Ro R ( ( ( s: /usr/lib/python2.7/site-packages/firewall/core/io/ipset.pyt <module> s$ @""� = 5