관리-도구
편집 파일: ebtables.cpython-39.pyc
a ���g�$ � @ s d gZ ddlZddlmZ ddlmZ ddlmZm Z m Z ddl m Z ddl mZ ddlmZmZ ddlZd gg d �g d �d �Zi Zi Zi Ze�� D ]pZg ee< e� ee< ee D ]PZee �d e � ee �deef � ee �de � ee � de � q�q�G dd � d e �Z dS )�ebtables� N)�runProg)�log)�tempFile�readfile� splitArgs)�COMMANDS)� ipXtables�� FirewallError� INVALID_IPVZBROUTING)Z PREROUTINGZ POSTROUTING�OUTPUT)ZINPUTr ZFORWARD)ZbrouteZnat�filterz -N %s_directz-I %s 1 -j %s_directz-I %s_direct 1 -j RETURNz %s_directc @ s� e Zd ZdZd ZdZdd� Zdd� Zdd� Zd d � Z d d � Z d d� Z dd� Z dd� Z dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd/d d!�Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd0d+d,�Zd-d.� Zd S )1r ZebFc C sB t | j | _t d| j | _| �� | _| �� | _| �� g | _ d S )Nz %s-restore) r �ipv�_command�_restore_command� _detect_restore_noflush_optionZrestore_noflush_option�_detect_concurrent_option�concurrent_option� fill_exists�available_tables��self� r �:/usr/lib/python3.9/site-packages/firewall/core/ebtables.py�__init__9 s zebtables.__init__c C s$ t j�| j�| _t j�| j�| _d S �N)�os�path�existsr Zcommand_existsr Zrestore_command_existsr r r r r A s zebtables.fill_existsc C s( d}t | jddg�}|d dkr$d}|S )N� z --concurrent�-Lr )r r )r r �retr r r r E s z"ebtables._detect_concurrent_optionc C s. g }z| � |d� W n ty( Y dS 0 dS )N�offFT)� set_rules� ValueError)r �rulesr r r r O s z'ebtables._detect_restore_noflush_optionc C s� g }| j r | j |vr |�| j � |dd� |D �7 }t�d| j| jd�|�� t| j|�\}}|dkr~td| jd�|�|f ��|S )Nc S s g | ] }d | �qS )z%sr )�.0�itemr r r � <listcomp>^ � z"ebtables.__run.<locals>.<listcomp>� %s: %s %s� r �'%s %s' failed: %s) r �appendr �debug2� __class__r �joinr r% )r �args�_args�statusr" r r r Z__runY s �zebtables.__runc C s$ dD ]}||v rt td| ��qd S )N)z %%REJECT%%z%%ICMP%%z %%LOGTYPE%%z'%s' invalid for ebtablesr )r �rule�strr r r �_rule_validatef s �zebtables._rule_validatec C s |t v o|t | v S r )�BUILT_IN_CHAINS)r r �table�chainr r r �is_chain_builtinl s �zebtables.is_chain_builtinc C sJ g }|r4|� d|d|g� |� d|d|dddg� n|� d|d|g� |S )N�-tz-N�-I�1z-jZRETURN�-X)r. )r �addr9 r: r& r r r �build_chain_rulesp s zebtables.build_chain_rulesc C s8 d|g}|r |d|t |�g7 }n |d|g7 }||7 }|S )Nr< r= z-D)r6 )r r@ r9 r: �indexr2 r5 r r r � build_rule{ s zebtables.build_rulec C s t �|�S r )r Zcommon_reverse_rule�r r2 r r r � reverse_rule� s zebtables.reverse_rulec C s t �|� d S r )r Zcommon_check_passthroughrD r r r �check_passthrough� s zebtables.check_passthroughc C s t �|�S r )r Zcommon_reverse_passthroughrD r r r �reverse_passthrough� s z ebtables.reverse_passthroughc C s t � }d}i }|D ]�}|d d � }| �|� dD ]J}z|�|�} W n tyT Y q00 t|�| d kr0|�| � |�| �}q0t|�D ]<\} } tjD ],} | | v r�| � d�r�| � d�s�d| || < q�q�|� |g �� |� q|D ]4}|� d| � || D ]}|� d�|�d � q�q�|�� t�|j�} t�d | j| jd |j| jf � g } | � d � t| j| |jd �\}}t�� d k�r�t|j�}|d u�r�d} |D ]@}tjd| |f ddd� |� d��s�tjddd� | d7 } �q�t� |j� |dk�rtd| jd�| �|f ��d S )Nr )r< z--table� �"z"%s"z*%s r, � r+ z%s: %dz --noflush)�stdin� z%8d: %sr )�nofmt�nlr )rM r- ) r r7 rB r% �len�pop� enumerate�stringZ whitespace� startswith�endswith� setdefaultr. �writer1 �closer �stat�namer r/ r0 r �st_sizer ZgetDebugLogLevelr Zdebug3�unlink)r r& � log_deniedZ temp_filer9 Z table_rulesZ_ruler5 �opt�i�element�crX r2 r4 r" �lines�liner r r r$ � sb � � � �zebtables.set_rulesc C s | � |� | �|�S r )r7 �_ebtables__run)r r5 r\ r r r �set_rule� s zebtables.set_ruleNc C s� g }|r|gnt �� }|D ]f}|| jv r4|�|� qz*| �d|dg� | j�|� |�|� W q ty~ t�d| � Y q0 q|S )Nr< r! z#ebtables table '%s' does not exist.)r8 �keysr r. rc r% r Zdebug1)r r9 r" Ztablesr r r �get_available_tables� s z ebtables.get_available_tablesc C s i S r r )r r9 r r r �get_zone_table_chains� s z ebtables.get_zone_table_chainsc C s> g }t �� D ],}|| �� vr q dD ]}|�d||g� q"q |S )N)z-Fr? z-Zr< �r8 re rf r. )r r& r9 �flagr r r �build_flush_rules� s zebtables.build_flush_rulesc C sV g }|dkrdn|}t �� D ]4}|| �� vr.q t | D ]}|�d|d||g� q6q |S )NZPANICZDROPr< z-Prh )r ZpolicyZpolicy_detailsr& Z_policyr9 r: r r r �build_set_policy_rules� s z ebtables.build_set_policy_rulesc C s g S r r r r r r �build_default_tables� s z ebtables.build_default_tablesr# c C s� g }t D ]�}|| �� vrqt | d d � }|dkrH|tv rH|�t| � d|g}|D ]2}t|�tkrt|�|| � qT|�|t|� � qTq|S )Nr# r< )� DEFAULT_RULESrf � LOG_RULES�extend�type�listr. r )r r\ Z default_rulesr9 Z_default_rules�prefixr5 r r r �build_default_rules� s z ebtables.build_default_rulesc C s || j kS r )r )r r r r r �is_ipv_supported s zebtables.is_ipv_supported)N)r# )�__name__� __module__� __qualname__r rY Zpolicies_supportedr r r r rc r7 r; rA rC rE rF rG r$ rd rf rg rj rk rl rs rt r r r r r 4 s0 @ ) �__all__Zos.pathr Zfirewall.core.progr Zfirewall.core.loggerr Zfirewall.functionsr r r Zfirewall.configr Z firewall.corer Zfirewall.errorsr r rR r8 rm rn Z OUR_CHAINSre r9 �setr: r. r@ �objectr r r r r �<module> s0 �