MINI MINI MANI MO

Path : /usr/lib/python2.7/site-packages/firewall/core/
File Upload :
Current File : //usr/lib/python2.7/site-packages/firewall/core/fw_test.pyo


d[c@sdgZddlZddlZddlZddlmZddlmZddlm	Z	ddl
mZddlm
Z
ddlmZdd	lmZdd
lmZddlmZddlmZdd
lmZddlmZddlmZddlmZddl m!Z!ddl"m#Z#m$Z$ddl%m&Z&ddl'm(Z(ddl)m*Z*ddlm+Z+ddl,m-Z-de.fdYZ/dS(t
Firewall_testiN(tconfig(t	functions(tFirewallIcmpType(tFirewallService(tFirewallZoneIPTables(tFirewallDirectIPTables(tFirewallConfig(tFirewallPolicies(t
FirewallIPSet(tFirewallHelper(tlog(tfirewalld_conf(tDirect(tservice_reader(ticmptype_reader(tzone_readertZone(tipset_reader(tIPSET_TYPES(t
helper_reader(terrors(t
FirewallErrorcBs4eZdZdZdZdZeedZdZedZ	dZ
dZd	Zd
Z
dZdZd
ZdZdZdZdZdZedZdZdZdZdZdZdZdZdZdZdZ dZ!dZ"RS( cCsttj|_t|_t|_t|_t|_t	|_
i|_g|jd<g|jd<g|jd<t||_
t||_t||_t||_t||_t|_t||_t||_|jdS(Ntipv4tipv6teb(RRtFIREWALLD_CONFt_firewalld_conftFalsetip4tables_enabledtip6tables_enabledtebtables_enabledt
ipset_enabledRtipset_supported_typestavailable_tablesRticmptypeRtserviceRtzoneRtdirectRRtpoliciesR	tipsetR
thelpert_Firewall_test__init_vars(tself((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt__init__7s&						


cCshd|j|j|j|j|j|j|j|j|j|j	|j
|j|j|j
|j|jfS(Ns>%s(%r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r)(t	__class__RRRt_statet_panict
_default_zonet_module_refcountt_markst	_min_marktcleanup_on_exittipv6_rpfilter_enabledR t_individual_callst_log_deniedt_automatic_helpers(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt__repr__PscCsyd|_t|_d|_i|_g|_tj|_tj	|_
tj|_tj
|_tj|_tj|_dS(NtINITt(R.RR/R0R1R2RtFALLBACK_MINIMAL_MARKR3tFALLBACK_CLEANUP_ON_EXITR4tFALLBACK_IPV6_RPFILTERR5tFALLBACK_INDIVIDUAL_CALLSR6tFALLBACK_LOG_DENIEDR7tFALLBACK_AUTOMATIC_HELPERSR8(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt__init_varsYs					cCs|jS(N(R6(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytindividual_callsgsc
	Cstj}tjdtjy|jjWn tk
rO}tjdn X|jj	drw|jj	d}n|jj	drt
|jj	d|_n|jj	dr|jj	d}|dk	r|j
d-krt|_qn|jj	drr|jj	d}|dk	rr|j
d.krrtjdy|jjWqotk
rkqoXqrn|jj	dr|jj	d}|dk	r|j
d/krt|_n|j
d0krt|_qqn|jrtjd
n
tjd|jj	drh|jj	d}|dk	rh|j
d1krhtjdt|_qhn|jj	dr|jj	d}|dks|j
dkrd|_q|j
|_tjd|jn|jj	dro|jj	d}|dk	ro|j
d2kr)d|_n-|j
d3krGd	|_n|j
|_tjd|jqon|jjtj|jtjdy|jjjWn]tk
r}|jjrtjd|jjj|qtjd|jjj|nX|jjtj|j|j tj!d|j tj"d|j tj#d|j tj$dt%|j&j'dkrtjdn|j tj(d|j tj)d|j tj*d|j tj+dt%|j,j-dkrtjdn|j tj.d|j tj/dt%|j0j1dkrttj2d t3j4d!nt}xEd"d#d$gD]4}||j0j1krtj2d%|t}qqW|rt3j4d!n||j0j1krKd&|j0j1krd&}n$d'|j0j1kr)d'}nd"}tjd(|||}ntjd)|t5tj6}	t7j8j9tj6rtjd*tj6y|	jWqtk
r}tjd+tj6|qXn|jj:tj|	|j;||_<d,|_=dS(4Ns"Loading firewalld config file '%s's0Using fallback firewalld configuration settings.tDefaultZonetMinimalMarkt
CleanupOnExittnotfalsetLockdowntyesttruesLockdown is enabledt
IPv6_rpfiltersIPv6 rpfilter is enabledsIPV6 rpfilter is disabledtIndividualCallssIndividualCalls is enabledt	LogDeniedtoffsLogDenied is set to '%s'tAutomaticHelperssAutomaticHelpers is set to '%s'sLoading lockdown whitelists*Failed to load lockdown whitelist '%s': %sR(R#isNo icmptypes found.R)R$sNo services found.R%sNo zones found.itblocktdropttrustedsZone '%s' is not available.tpublictexternals+Default zone '%s' is not valid. Using '%s'.sUsing default zone '%s'sLoading direct rules file '%s's)Failed to load direct rules file '%s': %stRUNNING(RGRH(syesRK(RGRH(syesRK(syesRK(RGRH(syesRK(>Rt
FALLBACK_ZONERtdebug1RRtreadt	ExceptiontwarningtgettintR3tNonetlowerRR4R'tenable_lockdownRR5tTrueR6R7R8tset_firewalld_conftcopytdeepcopytlockdown_whitelisttquery_lockdownterrortfilenametset_policiest_loadertFIREWALLD_IPSETStETC_FIREWALLD_IPSETStFIREWALLD_ICMPTYPEStETC_FIREWALLD_ICMPTYPEStlenR#t
get_icmptypestFIREWALLD_HELPERStETC_FIREWALLD_HELPERStFIREWALLD_SERVICEStETC_FIREWALLD_SERVICESR$tget_servicestFIREWALLD_ZONEStETC_FIREWALLD_ZONESR%t	get_zonestfataltsystexitR
tFIREWALLD_DIRECTtostpathtexistst
set_directt
check_zoneR0R.(
R+treloadtcomplete_reloadtdefault_zonetmsgtvalueRgtzR%tobj((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt_startjs	


	

	
		

			
			cCs|jdS(N(R(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytstartsc	Cstjj|sdS|r|jtjr}|dkr}t}tjj||_|j	|j||_t
|_qt
}nxttj
|D]}|jds|jtjr|dkrtjjd||fr|jd||f|dtqqnd||f}tjd||y|dkrt||}|j|jjkr|jj|j}tjd||j|j|j|jj|jn!|jjtjrt|_n|jj||jjtj|n|dkrt||}|j|jjkr|jj|j}tjd||j|j|j|jj |jn!|jjtjrt|_n|jj!||jj!tj|n>|dkrht"||d	|}|r@dtjj|tjj|d
d!f|_|j	|jntj|}	|j|j#j$kr|j#j%|j}|j#j&|j|j'rtjd||j|||j(|qtjd||j|j|jn*|jjtjrt|_t|	_n|jj)|	|rUtjd||j|||j(|q|j#j)|n|d
kr5t*||}|j|j+j,kr|j+j-|j}tjd||j|j|j|j+j.|jn!|jjtjr	t|_n|j+j/||jj/tj|n|dkrt0||}|j|j1j2kr|j1j3|j}tjd||j|j|j|j1j4|jn!|jjtjrt|_n|j1j5||jj5tj|ntj6d|Wqt7k
r>}
tj8d|||
qt9k
rm}
tj8d||tj:qXqW|r|j'r|j|j#j$kr|j#j%|j}tjd||j|j|jy|j#j&|jWnnX|jj;|jn|j#j)|ndS(NR%s.xmls%s/%stcombinesLoading %s file '%s'R#s  Overloads %s '%s' ('%s/%s')R$t
no_check_nameiis  Combining %s '%s' ('%s/%s')R(R)sUnknown reader type %ssFailed to load %s file '%s': %ssFailed to load %s file '%s':s0  Overloading and deactivating %s '%s' ('%s/%s')(<R}R~tisdirt
startswithRt
ETC_FIREWALLDRtbasenametnamet
check_nameRtdefaulttsortedtlistdirtendswithRjRaRRXRR#Rptget_icmptypeRhtremove_icmptypetadd_icmptypeRcRdRR$Rutget_servicetremove_servicetadd_serviceRR%Rxtget_zonetremove_zonetcombinedRtadd_zoneRR(t
get_ipsetst	get_ipsettremove_ipsett	add_ipsetRR)tget_helperst
get_helpert
remove_helpert
add_helperRyRRgRZt	exceptiontforget_zone(R+R~treader_typeRt
combined_zoneRhRRtorig_objt
config_objR((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyRj
s			


 			
	
			



	
cCs|dkr|j|SgS(NRRR(sipv4sipv6seb(R"(R+tipv((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytget_available_tablesscCs|jj|jj|jj|jj|jj|jj|jj|jj|j	j|j
dS(N(R#tcleanupR$R%R(R)RR&R'RR*(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyRs








cCs|jdS(N(R(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytstopscCsdS(N((R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytcheck_panicscCsV|}|s|dkr(|j}n||jjkrRttj|n|S(NR;(tget_default_zoneR%RxRRtINVALID_ZONE(R+R%t_zone((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyRscCs(tj|s$ttj|ndS(N(RtcheckInterfaceRRtINVALID_INTERFACE(R+t	interface((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytcheck_interfacescCs|jj|dS(N(R$t
check_service(R+R$((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyRscCstj|}|dksY|dksY|dksYt|dkr|d|dkr|dkrytjd|nz|dkrtjd|nZ|dkrtjd|n:t|dkr|d|dkrtjd	|nttj|ndS(
Niiiiis'%s': port > 65535s'%s': port is invalids'%s': port is ambiguouss'%s': range start >= end(	RtgetPortRangeR^RoRRXRRtINVALID_PORT(R+tporttrange((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt
check_ports$&&cCsA|sttjn|dkr=ttjd|ndS(Nttcptudptsctptdccps''%s' not in {'tcp'|'udp'|'sctp'|'dccp'}(RRRR(RRtMISSING_PROTOCOLtINVALID_PROTOCOL(R+tprotocol((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytcheck_tcpudps	cCs(tj|s$ttj|ndS(N(RtcheckIPRRtINVALID_ADDR(R+tip((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytcheck_ipscCs||dkr3tj|sxttj|qxnE|dkrftj|sxttj|qxnttjddS(NRRs'%s' not in {'ipv4'|'ipv6'}(RtcheckIPnMaskRRRt
checkIP6nMasktINVALID_IPV(R+Rtsource((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt
check_addresss	cCs|jj|dS(N(R#tcheck_icmptype(R+ticmp((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyRscCsdS(N((R+R((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyRscCs|jS(N(R.(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt	get_statescCsdS(N((R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytenable_panic_modescCsdS(N((R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytdisable_panic_modescCs|jS(N(R/(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytquery_panic_modescCs|jS(N(R7(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytget_log_deniedscCs|tjkr:ttjd|djtjfn||jkr||_|jj	d||jj
|jnttj|dS(Ns'%s', choose from '%s's','RN(
RtLOG_DENIED_VALUESRRt
INVALID_VALUEtjoinRR7RtsettwriteRtALREADY_SET(R+R((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytset_log_denieds		

cCs|jS(N(R8(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytget_automatic_helpersscCs|tjkr:ttjd|djtjfn||jkr||_|jj	d||jj
|jnttj|dS(Ns'%s', choose from '%s's','RP(
RtAUTOMATIC_HELPERS_VALUESRRRRRR8RRRRR(R+R((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytset_automatic_helperss		

cCs|jS(N(R0(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR#scCsi|j|}||jkrS|j}||_|jjd||jjnttj|dS(NRD(RR0RRRRRtZONE_ALREADY_SET(R+R%Rt_old_dz((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytset_default_zone&s		cCs$|jjdd|jjdS(NRIRJ(RRR(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR`2scCs$|jjdd|jjdS(NRIRG(RRR(R+((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pytdisable_lockdown6s(#t__name__t
__module__R,R9R*RCRRRRjRRRRRRRRRRRRRRRRRRRRRRRR`R(((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR6s@																													(0t__all__tos.pathR}RzRctfirewallRRtfirewall.core.fw_icmptypeRtfirewall.core.fw_serviceRtfirewall.core.fw_zoneRtfirewall.core.fw_directRtfirewall.core.fw_configRtfirewall.core.fw_policiesRtfirewall.core.fw_ipsetR	tfirewall.core.fw_helperR
tfirewall.core.loggerRtfirewall.core.io.firewalld_confRtfirewall.core.io.directR
tfirewall.core.io.serviceRtfirewall.core.io.icmptypeRtfirewall.core.io.zoneRRtfirewall.core.io.ipsetRtfirewall.core.ipsetRtfirewall.core.io.helperRRtfirewall.errorsRtobjectR(((s9/usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt<module>s0	

OHA YOOOO