| Server IP : 188.151.22.197 / Your IP : 216.73.217.74 Web Server : Apache/2.4.62 (Rocky Linux) OpenSSL/3.5.5 System : Linux wsten.se 5.14.0-687.30.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jul 27 13:09:21 UTC 2026 x86_64 User : apache ( 48) PHP Version : 8.1.32 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /lib/python3.9/site-packages/firewall/core/io/__pycache__/ |
Upload File : |
a
�DZi7S � @ s� d Z g d�ZddlmZ ddlZddlZddlZddlmZ ddl m
Z
m Z m Z m
Z
mZmZmZmZ ddlmZmZmZ ddlmZmZ ddlmZmZm Z m Z dd l m Z dd
lm Z dd l!m"Z" G d d
� d
e�Z#G dd� de�Z$dd� Z%ddd�Z&dS )z$ipset io XML handler, reader, writer)�IPSet� ipset_reader� ipset_writer� N)�config)�checkIP�checkIP6� checkIPnMask�
checkIP6nMask� check_mac�
check_port�checkInterface�
checkProtocol)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)� IPSET_TYPES�IPSET_CREATE_OPTIONS)�check_icmp_name�check_icmp_type_code�check_icmpv6_name�check_icmpv6_type_code)�log)�errors)�
FirewallErrorc s� e Zd ZdddddddifddgffZdZg d �Zd
d
d gd gd
d
�Zdgdgd�Z� fdd�Zdd� Z e
dd� �Z dd� Z � fdd�Z
� ZS )r )�version� )�shortr )� descriptionr )�typer �optionsr �entriesz
(ssssa{ss}as))�_�-�:�.Nr �name)r r �ipset�option�entryr �value)r& r' c s< t t| ��� d| _d| _d| _d| _g | _i | _d| _ d S �Nr F)
�superr �__init__r r r r r r �applied��self�� __class__� �:/usr/lib/python3.9/site-packages/firewall/core/io/ipset.pyr, C s zIPSet.__init__c C s8 d| _ d| _d| _d| _| jd d �= | j�� d| _d S r* )r r r r r r �clearr- r. r2 r2 r3 �cleanupM s
z
IPSet.cleanupc C sB d}d|v r |d dkr d}|� d�s6ttjd| ��|dd � �d�}| �d�}t|�t|�ksnt|�d k r�ttjd
| |f ��t|�D �]�\}}|| }|d k�r�d |v �rV|dk�rV|d kr�ttjd
|| |f ��|�d �} t| �dk�rttjd|| ||f ��| D ]F}
|dk�r$t|
��r8|dk�r t |
��s ttjd|
| ||f ���q nh|dk�r�|dk�r�ttjd|| ||f ��|dk�r�t
} nt} nt } | |��s<ttjd|| ||f ��q�|dk�r"d |v �r�|�d �} t| �dk�rttjd|| ||f ��|dk�r t| d ��r4|dk�rPt | d ��sPttjd| d | ||f ��|dk�rht
| d ��r�|dk�r t | d ��s ttjd| d | ||f ��n�|� d��r�|dk�r�|dk�r�|dk�s�ttjd|| ||f ��|dk�r�t
|��r|dk�r<t |��s<ttjd|| ||f ��q�|dk�rVt
|��r@|dk�r<ttjd|| f ��q�|dk�rDd|v �r$|�d�} t| �dk�r�ttjd| ��| d d k�r,|dk�r�ttjd || f ��t| d ��s�d | d v�r�ttjd | d | f ��n6| d �d �\} }
t| |
��s"ttjd | d | f ��n�| d d v �r�|dk�rXttjd || f ��t| d ��s�d | d v�r�ttjd!| d | f ��n6| d �d �\} }
t| |
��s"ttjd!| d | f ��n\| d d"v�r�t| d ��s�ttjd#| d | f ��n&t| d ��sBttjd$| d | f ��n t|��s<ttjd%|| f ��q�|d&k�r�|� d'��r�zt|d(�}W n( t�y� ttjd)|| f ��Y n0 n6z t|�}W n( t�y� ttjd)|| f ��Y n0 |dk �s�|d*k�r<ttjd)|| f ��q�|d+k�r,t|��rt|�d,k�r<ttjd-|| f ��q�ttjd| ��q�d S ).NZipv4�family�inet6Zipv6zhash:zipset type '%s' not usable� �,� z)entry '%s' does not match ipset type '%s'�ipr" z invalid address '%s' in '%s'[%d]� z.invalid address range '%s' in '%s' for %s (%s)z(invalid address '%s' in '%s' for %s (%s)z0.0.0.0r �netz/0zhash:net,ifaceZmacz00:00:00:00:00:00z invalid mac address '%s' in '%s'�portr# zinvalid port '%s'Zicmpz(invalid protocol for family '%s' in '%s'�/z invalid icmp type '%s' in '%s')Zicmpv6z ipv6-icmpz invalid icmpv6 type '%s' in '%s')ZtcpZsctpZudpZudplitez invalid protocol '%s' in '%s'zinvalid port '%s'in '%s'zinvalid port '%s' in '%s'Zmark�0x� zinvalid mark '%s' in '%s'l �� Ziface� z invalid interface '%s' in '%s')�
startswithr r �
INVALID_IPSET�split�lenZ
INVALID_ENTRY� enumerater r r r �endswithr
r r r r r
r �int�
ValueErrorr )r( r Z
ipset_typer6 �flags�items�i�flag�itemZsplitsZ_splitZip_checkZ_type�_codeZint_valr2 r2 r3 � check_entryV s�
�
��
��
����
��
��
��
���
����
��� �
����
��
�
�
��
��
��
��
��
��
����
�
�
�
�
��zIPSet.check_entryc
C s� |dkr |t vr ttjd| ��|dkr�|�� D ]�}|tvrLttjd| ��|dv r�zt|| �}W n* ty� ttj d||| f ��Y n0 |dk r�ttj d||| f ��q0|d kr0|| d
vr0ttj
|| ��q0d S ) Nr z '%s' is not valid ipset typer zipset invalid option '%s'��timeout�hashsize�maxelem�)Option '%s': Value '%s' is not an integerr �#Option '%s': Value '%s' is negativer6 �Zinetr7 ) r r r � INVALID_TYPE�keysr rD rI rJ �
INVALID_VALUE�INVALID_FAMILY)r/ r rO Z
all_config�all_io_objects�key� int_valuer2 r2 r3 �
_check_config s@ � �
��
��
�zIPSet._check_configc sp d|d v r6|d d dkr6t |d �dkr6ttj��|d D ]}t�||d |d � q>tt| ��||� d S )NrS � �0r8 r � )rF r r ZIPSET_WITH_TIMEOUTr rQ r+ �
import_config)r/ r r] r( r0 r2 r3 rd 4 s
zIPSet.import_config)�__name__�
__module__� __qualname__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr, r5 � staticmethodrQ r` rd �
__classcell__r2 r2 r0 r3 r , s2
���
Cr c @ s e Zd Zdd� Zdd� ZdS )�ipset_ContentHandlerc C s� t �| ||� | j�||� |dkrpd|v rX|d tvrLttjd|d ��|d | j_d|v rl|d | j_ �nt|dkr|�nh|dkr��n\|dk�r�d}d |v r�|d }|d
d vr�ttj
d |d
��| jjd
kr�|d
dv r�ttj
d|d
| jjf ��|d
d v �r"|�s"ttj
d|d
��|d
dv �r�z t |�}W n, t �yh ttj
d|d
|f ��Y n0 |dk �r�ttj
d|d
|f ��|d
dk�r�|dv�r�ttj|��|d
| jjv�r�|| jj|d
< nt�d|d
� d S )Nr& r z%sr r r r' r r) r% )r6 rS rT rU zUnknown option '%s'zhash:mac)r6 z%Unsupported option '%s' for type '%s'z&Missing mandatory value of option '%s'rR rV r rW r6 rX z Option %s already set, ignoring.)r � startElementrO Zparser_check_element_attrsr r r rY r r ZINVALID_OPTIONrI rJ r[ r\ r r �warning)r/ r% �attrsr) r_ r2 r2 r3 rk ? sx
�
����
�
��
�� z!ipset_ContentHandler.startElementc C s( t �| |� |dkr$| jj�| j� d S )Nr( )r �
endElementrO r �appendZ_element)r/ r% r2 r2 r3 rn v s z ipset_ContentHandler.endElementN)re rf rg rk rn r2 r2 r2 r3 rj > s 7rj c C s& t � }| �d�s ttjd| ��| d d� |_|�|j� | |_||_|� t
j �rVdnd|_ |j |_
t|�}t�� }|�|� d|| f }t|d��n}t�d �}|�|� z|�|� W n: tjy� } z ttjd|�� ��W Y d }~n
d }~0 0 W d � n1 �s
0 Y ~~d |jv �r^|jd d
k�r^t|j�d k�r^t � d |j� |jd d �= d } t � }
| t|j�k �r |j| |
v �r�t � d
|j| � |j� | � ntz |� |j| |j|j!� W n> t�y } z$t � d| � |j� | � W Y d } ~ n"d } ~ 0 0 |
�"|j| � | d7 } �qh~
|S )Nz.xmlz'%s' is missing .xml suffix���FT�%s/%s�rbznot a valid ipset file: %srS rb r z6ipset '%s': timeout option is set, entries are ignoredz Entry %s already set, ignoring.z
%s, ignoring.r: )#r rH r r Z INVALID_NAMEr% Z
check_name�filename�pathrC r �
ETC_FIREWALLDZbuiltin�defaultrj �saxZ make_parserZsetContentHandler�openZ InputSourceZ
setByteStream�parseZSAXParseExceptionrD Z getExceptionr rF r r rl �set�poprQ r �add) rs rt r& �handler�parserr% �f�source�msgrM Z entries_set�er2 r2 r3 r { sd
�
��: �� " r c
C s� |r|n| j }| jr$d|| jf }nd|| jf }tj �|�r�zt�|d| � W n2 ty� } zt� d||� W Y d }~n
d }~0 0 tj �
|�}|� t j
�r�tj �|�s�tj �t j
�s�t�t j
d� t�|d� tj|ddd�}t|�}|�� d | ji}| j�r| jd
k�r| j|d < |�d |� |�d
� | j�rz| jd
k�rz|�d� |�di � |�| j� |�d� |�d
� | j�r�| jd
k�r�|�d� |�di � |�| j� |�d� |�d
� | j� � D ]L\} }
|�d� |
d
k�r�|� d| |
d�� n|� dd| i� |�d
� �q�| j D ]:} |�d� |�di � |�| � |�d� |�d
� �q"|�d � |�d
� |� � |� � ~d S )Nrq z %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si� ZwtzUTF-8)�mode�encodingr r r r& �
z r r r' )r% r) r% r( )!rt rs r% �os�exists�shutil�copy2� Exceptionr �error�dirnamerC r ru �mkdir�iorx r Z
startDocumentr r rk ZignorableWhitespacer Z
charactersrn r r rL Z
simpleElementr Z endDocument�close) r& rt �_pathr% r� �dirpathr r} rm r^ r) r( r2 r2 r3 r � sf $
r )N)'�__doc__�__all__Zxml.saxrw r� r� r� Zfirewallr Zfirewall.functionsr r r r r
r r r
Zfirewall.core.io.io_objectr r r Zfirewall.core.ipsetr r Zfirewall.core.icmpr r r r Zfirewall.core.loggerr r Zfirewall.errorsr r rj r r r2 r2 r2 r3 �<module> s& ( =3