| Current File : //usr/lib/python2.7/site-packages/firewall/core/ipset.pyo |
�
�c�`c @ s d Z d d d g Z d d l Z d d l m Z d d l m Z d d l m Z d d l
m Z d d
l m
Z
m Z d d l m Z d Z d
d d d d d d d d d d g Z i d d 6d d 6d d 6d d 6Z i d d 6d d 6d! d 6Z d e f d" � � YZ d# � Z d$ � Z d S(% s The ipset command wrappert ipsett check_ipset_namet remove_default_create_optionsi����N( t errors( t
FirewallError( t runProg( t log( t tempFilet readfile( t COMMANDSi s hash:ips hash:ip,ports hash:ip,port,ips hash:ip,port,nets hash:ip,marks hash:nets hash:net,nets
hash:net,ports hash:net,port,nets hash:net,ifaces hash:macs
inet|inet6t familyt valuet hashsizet maxelems
value in secst timeoutt inett 1024t 65536c B s� e Z d Z d � Z d � Z d � Z d � Z d � Z d d � Z d � Z
d � Z d � Z d d
� Z
d d d � Z d � Z d d
� Z d d d � Z d � Z d � Z d � Z d � Z RS( s ipset command wrapper classc C s t d | _ d | _ d S( NR ( R t _commandt name( t self( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt __init__J s
c C s� g | D] } d | ^ q } t j d | j | j d j | � � t | j | � \ } } | d k r� t d | j d j | � | f � � n | S( s Call ipset with argss %ss %s: %s %st i s '%s %s' failed: %s( R t debug2t __class__R t joinR t
ValueError( R t argst itemt _argst statust ret( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt __runN s % c C s/ t | � t k r+ t t j d | � � n d S( s Check ipset names ipset name '%s' is not validN( t lent IPSET_MAXNAMELENR R t INVALID_NAME( R R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt
check_nameY s c C s� g } d } y | j d g � } Wn$ t k
rH } t j d | � n X| j � } t } x{ | D]s } | r� | j � j d d � } | d | k r� | d t k r� | j
| d � q� n | j d � rb t } qb qb W| S( s? Return types that are supported by the ipset command and kernelt s --helps ipset error: %si i s Supported set types:N(
t _ipset__runR R t debug1t
splitlinest Falset stript splitt Nonet IPSET_TYPESt appendt
startswitht True( R R t outputt ext linest in_typest linet splits( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_supported_types_ s
c C s; t | � t k s | t k r7 t t j d | � � n d S( s Check ipset types! ipset type name '%s' is not validN( R! R" R- R R t INVALID_TYPE( R t type_name( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt
check_typet s c C s� | j | � | j | � d | | g } t | t � r� xF | j � D]5 \ } } | j | � | d k rE | j | � qE qE Wn | j | � S( s+ Create an ipset with name, type and optionst createR% ( R$ R: t
isinstancet dictt itemsR. R& ( R t set_nameR9 t optionsR t keyt val( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt
set_createz s
c C s | j | � | j d | g � S( Nt destroy( R$ R& ( R R? ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_destroy� s
c C s d | | g } | j | � S( Nt add( R& ( R R? t entryR ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_add� s c C s d | | g } | j | � S( Nt del( R& ( R R? RG R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt
set_delete� s c C s? d | | g } | r2 | j d d j | � � n | j | � S( Nt tests %sR ( R. R R& ( R R? RG R@ R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyRK � s c C sK d g } | r | j | � n | r5 | j | � n | j | � j d � S( Nt lists
( R. t extendR& R+ ( R R? R@ R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_list� s c C s� | j d d g � } i } d } } i } x�| D]z} t | � d k rP q2 n g | j d d � D] } | j � ^ qc } t | � d k r� q2 q2 | d d k r� | d } q2 | d d k r� | d } q2 | d d k r2 | d j � } d }
xz |
t | � k ro| |
} | d k rbt | � |
k rK|
d 7}
| |
| | <qbt j d | � i Sn |
d 7}
q� W| r�| r�| t | � f | | <n d } } | j � q2 q2 W| S( s" Get active ipsets (only headers) R@ s -tersei t :i i t Namet Typet HeaderR
R R
R t netmasks& Malformed ipset list -terse output: %sN( R
R R
R RS ( RN R, R! R+ R* R t errorR t clear( R R3 R t _namet _typet _optionsR5 t xt pairR6 t it opt( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_get_active_terse� sD
+
c C s, d g } | r | j | � n | j | � S( Nt save( R. R& ( R R? R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyR^ � s c C s� | j | � | j | � t � } d | k r< d | } n d | | d g } | r� xF | j � D]5 \ } } | j | � | d k ra | j | � qa qa Wn | j d d j | � � | j d | � xj | D]b }
d |
k r� d |
}
n | r| j d | |
d j | � f � q� | j d | |
f � q� W| j � t j | j
� } t j d
| j
| j d | j
| j f � d g } t | j | d
| j
�\ } }
t j � d k rSy t | j
� Wn t k
r�qSXd } xl t | j
� D]X } t j d | | f d d d d �| j d � sBt j d d d �n | d 7} q�Wn t j | j
� | d k r�t d | j d j | � |
f � � n |
S( NR s '%s'R; s -existR% s %s
s flush %s
s
add %s %s %s
s
add %s %s
s %s: %s restore %ss %s: %dt restoret stdini i s %8d: %st nofmtt nli s
s '%s %s' failed: %s( R$ R: R R> R. t writeR t closet ost statR R R R R t st_sizeR t getDebugLogLevelR t Exceptiont debug3t endswitht unlinkR ( R R? R9 t entriest create_optionst
entry_optionst temp_fileR RA RB RG Rf R R R[ R5 ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_restore� sV
# c C s, d g } | r | j | � n | j | � S( Nt flush( R. R& ( R R? R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_flush s c C s | j d | | g � S( Nt rename( R& ( R t old_set_namet new_set_name( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyRt s c C s | j d | | g � S( Nt swap( R& ( R t
set_name_1t
set_name_2( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyRw s c C s | j d g � S( Nt version( R& ( R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyRz s N( t __name__t
__module__t __doc__R R& R$ R7 R: R, RC RE RH RJ RK RN R] R^ Rq Rs Rt Rw Rz ( ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyR G s&
' 7 c C s t | � t k r t St S( s" Return true if ipset name is valid( R! R" R) R0 ( R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyR s c C sK | j � } x8 t D]0 } | | k r t | | | k r | | =q q W| S( s( Return only non default create options ( t copyt IPSET_DEFAULT_CREATE_OPTIONS( R@ RX R\ ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyR s
( R} t __all__t os.pathRe t firewallR t firewall.errorsR t firewall.core.progR t firewall.core.loggerR t firewall.functionsR R t firewall.configR R" R- t IPSET_CREATE_OPTIONSR t objectR R R ( ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt <module> s@
�