????
Your IP : 216.73.216.152
�
`q^c @ s� d g Z d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m Z d d l
m Z d d l m
Z
d d l m Z d d l m Z d d
l m Z d d l m Z d d l m Z d d
l m Z d d l m Z d d l m Z d d l m Z d d l m! Z! d d l" m# Z# m$ Z$ d d l% m& Z& d d l' m( Z( d d l) m* Z* d d l m+ Z+ d d l, m- Z- d e. f d � � YZ/ d S( t
Firewall_testi����N( t config( t functions( t FirewallIcmpType( t FirewallService( t FirewallZone( t FirewallDirect( t FirewallConfig( t FirewallPolicies( t
FirewallIPSet( t FirewallHelper( t log( t firewalld_conf( t Direct( t service_reader( t icmptype_reader( t zone_readert Zone( t ipset_reader( t IPSET_TYPES( t
helper_reader( t errors( t
FirewallErrorc B s+ e Z d � Z d � Z d � Z d � Z e e d � Z d � Z e d � Z d � Z
d � Z d � Z d
� Z
d � Z d � Z d
� Z d � Z d � Z d � Z d � Z e d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z! RS( c C s� t t j � | _ t | _ t | _ t | _ t | _ t | _
t | � | _ t
| � | _ t | � | _ t | � | _ t | � | _ t � | _ t | � | _ t | � | _ | j � d S( N( R R t FIREWALLD_CONFt _firewalld_conft Falset ip4tables_enabledt ip6tables_enabledt ebtables_enabledt
ipset_enabledR t ipset_supported_typesR t icmptypeR t serviceR t zoneR t directR R t policiesR t ipsetR
t helpert _Firewall_test__init_vars( t self( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt __init__8 s c C sh d | j | j | j | j | j | j | j | j | j | j | j
| j | j | j
| j | j f S( Ns> %s(%r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r, %r)( t __class__R R R t _statet _panict
_default_zonet _module_refcountt _markst _min_markt cleanup_on_exitt ipv6_rpfilter_enabledR t _individual_callst _log_deniedt _automatic_helpers( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt __repr__L s c C sy d | _ t | _ d | _ i | _ g | _ t j | _ t j | _
t j | _ t j
| _ t j | _ t j | _ d S( Nt INITt ( R* R R+ R, R- R. R t FALLBACK_MINIMAL_MARKR/ t FALLBACK_CLEANUP_ON_EXITR0 t FALLBACK_IPV6_RPFILTERR1 t FALLBACK_INDIVIDUAL_CALLSR2 t FALLBACK_LOG_DENIEDR3 t FALLBACK_AUTOMATIC_HELPERSR4 ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt __init_varsU s c C s | j S( N( R2 ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt individual_callsc s c
C s t j } t j d t j � y | j j � Wn t k
rM t j d � n X| j j d � ru | j j d � } n | j j d � r� t
| j j d � � | _ n | j j d � r� | j j d � } | d k r� | j
� d- k r� t | _ q� n | j j d � rp| j j d � } | d k rp| j
� d. k rpt j d � y | j j � Wqmt k
riqmXqpn | j j d � r�| j j d � } | d k r�| j
� d/ k r�t | _ n | j
� d0 k r�t | _ q�q�n | j r�t j d
� n
t j d � | j j d � rf| j j d � } | d k rf| j
� d1 k rft j d � t | _ qfn | j j d � r�| j j d � } | d k s�| j
� d k r�d | _ q�| j
� | _ t j d | j � n | j j d � rm| j j d � } | d k rm| j
� d2 k r'd | _ n- | j
� d3 k rEd | _ n | j
� | _ t j d | j � qmn | j j t j | j � � t j d � y | j j j � Wn] t k
r } | j j � r�t j d | j j j | � q
t j d | j j j | � n X| j j t j | j � � | j t j! d � | j t j" d � | j t j# d � | j t j$ d � t% | j& j' � � d k r�t j d � n | j t j( d � | j t j) d � | j t j* d � | j t j+ d � t% | j, j- � � d k rt j d � n | j t j. d � | j t j/ d � t% | j0 j1 � � d k rrt j2 d � t3 j4 d! � n t } xE d" d# d$ g D]4 } | | j0 j1 � k r�t j2 d% | � t } q�q�W| r�t3 j4 d! � n | | j0 j1 � k rId& | j0 j1 � k r d& } n$ d' | j0 j1 � k r'd' } n d" } t j d( | | � | } n t j d) | � t5 t j6 � } t7 j8 j9 t j6 � r�t j d* t j6 � y | j � Wq�t k
r�} t j d+ t j6 | � q�Xn | j j: t j | � � | j; | � | _< d, | _= d S(4 Ns" Loading firewalld config file '%s's0 Using fallback firewalld configuration settings.t DefaultZonet MinimalMarkt
CleanupOnExitt not falset Lockdownt yest trues Lockdown is enabledt
IPv6_rpfilters IPv6 rpfilter is enableds IPV6 rpfilter is disabledt IndividualCallss IndividualCalls is enabledt LogDeniedt offs LogDenied is set to '%s't AutomaticHelperss AutomaticHelpers is set to '%s's Loading lockdown whitelists* Failed to load lockdown whitelist '%s': %sR$ R i s No icmptypes found.R% R s No services found.R! s No zones found.i t blockt dropt trusteds Zone '%s' is not available.t publict externals+ Default zone '%s' is not valid. Using '%s'.s Using default zone '%s's Loading direct rules file '%s's) Failed to load direct rules file '%s': %st RUNNING( RC RD ( s yesRG ( RC RD ( s yesRG ( s yesRG ( RC RD ( s yesRG (> R t
FALLBACK_ZONER t debug1R R t readt Exceptiont warningt gett intR/ t Nonet lowerR R0 R# t enable_lockdownR R1 t TrueR2 R3 R4 t set_firewalld_conft copyt deepcopyt lockdown_whitelistt query_lockdownt errort filenamet set_policiest _loadert FIREWALLD_IPSETSt ETC_FIREWALLD_IPSETSt FIREWALLD_ICMPTYPESt ETC_FIREWALLD_ICMPTYPESt lenR t
get_icmptypest FIREWALLD_HELPERSt ETC_FIREWALLD_HELPERSt FIREWALLD_SERVICESt ETC_FIREWALLD_SERVICESR t get_servicest FIREWALLD_ZONESt ETC_FIREWALLD_ZONESR! t get_zonest fatalt syst exitR
t FIREWALLD_DIRECTt ost patht existst
set_directt
check_zoneR, R* (
R' t reloadt complete_reloadt default_zonet valuet msgRc t zR! t obj( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt _startf s�
c C s | j � d S( N( R� ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt start s c C s t j j | � s d S| r� | j t j � r} | d k r} t � } t j j | � | _ | j | j � | | _ t
| _ q� t
} n x�t t j
| � � D]�} | j d � s| j t j � r� | d k r� t j j d | | f � r� | j d | | f | d t �q� q� n d | | f } t j d | | � y�| d k rt | | � } | j | j j � k r�| j j | j � } t j d | | j | j | j � | j j | j � n! | j j t j � r�t | _ n | j j | � | j j t j | � � n | d k r�t | | � } | j | j j � k r�| j j | j � } t j d | | j | j | j � | j j | j � n! | j j t j � r�t | _ n | j j! | � | j j! t j | � � n>| d k rht" | | d | �} | r@d t j j | � t j j | � d
d !f | _ | j | j � n t j | � } | j | j# j$ � k r�| j# j% | j � } | j# j& | j � | j' r�t j d | | j | | � | j( | � qt j d | | j | j | j � n* | j j t j � rt | _ t | _ n | j j) | � | rUt j d | | j | | � | j( | � q| j# j) | � n�| d
k r5t* | | � } | j | j+ j, � k r�| j+ j- | j � } t j d | | j | j | j � | j+ j. | j � n! | j j t j � r t | _ n | j+ j/ | � | j j/ t j | � � n� | d k rt0 | | � } | j | j1 j2 � k r�| j1 j3 | j � } t j d | | j | j | j � | j1 j4 | j � n! | j j t j � r�t | _ n | j1 j5 | � | j j5 t j | � � n t j6 d | � Wq� t7 k
r>}
t j8 d | | |
� q� t9 k
rkt j8 d | | � t j: � q� Xq� W| r| j' r| j | j# j$ � k r| j# j% | j � } t j d | | j | j | j � y | j# j& | j � Wn n X| j j; | j � n | j# j) | � n d S( NR! s .xmls %s/%st combines Loading %s file '%s'R s Overloads %s '%s' ('%s/%s')R t
no_check_namei i����s Combining %s '%s' ('%s/%s')R$ R% s Unknown reader type %ss Failed to load %s file '%s': %ss Failed to load %s file '%s':s0 Overloading and deactivating %s '%s' ('%s/%s')(< Ry Rz t isdirt
startswithR t
ETC_FIREWALLDR t basenamet namet
check_nameR t defaultt sortedt listdirt endswithRf R] R RT R R Rl t get_icmptypeRd t remove_icmptypet add_icmptypeR_ R` R R Rq t get_servicet remove_servicet add_serviceR R! Rt t get_zonet remove_zonet combinedR� t add_zoneR R$ t
get_ipsetst get_ipsett remove_ipsett add_ipsetR R% t get_helperst
get_helpert
remove_helpert
add_helperRu R Rc RV t exceptiont forget_zone( R' Rz t reader_typeR� t
combined_zoneRd R� R� t orig_objt
config_objR� ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyRf s�
c C s� | j j � | j j � | j j � | j j � | j j � | j j � | j j � | j j � | j j � | j
� d S( N( R t cleanupR R! R$ R% R R" R# R R& ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR� � s
c C s | j � d S( N( R� ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt stop� s c C s d S( N( ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt check_panic� s c C sV | } | s | d k r( | j � } n | | j j � k rR t t j | � � n | S( NR7 ( t get_default_zoneR! Rt R R t INVALID_ZONE( R' R! t _zone( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR} � s c C s( t j | � s$ t t j | � � n d S( N( R t checkInterfaceR R t INVALID_INTERFACE( R' t interface( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt check_interface� s c C s | j j | � d S( N( R t
check_service( R' R ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR� � s c C s t j | � } | d k sY | d k sY | d k sY t | � d k r| d | d k r| d k ry t j d | � nz | d k r� t j d | � nZ | d k r� t j d | � n: t | � d k r� | d | d k r� t j d | � n t t j | � � n d S(
Ni����i����i i i s '%s': port > 65535s '%s': port is invalids '%s': port is ambiguouss '%s': range start >= end( R t getPortRangeRZ Rk R RT R R t INVALID_PORT( R' t portt range( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt
check_port� s $& &c C sA | s t t j � � n | d k r= t t j d | � � n d S( Nt tcpt udpt sctpt dccps' '%s' not in {'tcp'|'udp'|'sctp'|'dccp'}( R� R� R� R� ( R R t MISSING_PROTOCOLt INVALID_PROTOCOL( R' t protocol( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt check_tcpudp� s c C s( t j | � s$ t t j | � � n d S( N( R t checkIPR R t INVALID_ADDR( R' t ip( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt check_ip� s c C s| | d k r3 t j | � sx t t j | � � qx nE | d k rf t j | � sx t t j | � � qx n t t j d � � d S( Nt ipv4t ipv6s '%s' not in {'ipv4'|'ipv6'}( R t checkIPnMaskR R R� t
checkIP6nMaskt INVALID_IPV( R' t ipvt source( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt
check_address� s c C s | j j | � d S( N( R t check_icmptype( R' t icmp( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR� � s c C s d S( N( ( R' R� ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR~ � s c C s | j S( N( R* ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt get_state� s c C s d S( N( ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt enable_panic_mode� s c C s d S( N( ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt disable_panic_mode� s c C s | j S( N( R+ ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt query_panic_mode� s c C s | j S( N( R3 ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt get_log_denied� s c C s� | t j k r: t t j d | d j t j � f � � n | | j � k r� | | _ | j j d | � | j j
� | j � n t t j | � � d S( Ns '%s', choose from '%s's ','RJ (
R t LOG_DENIED_VALUESR R t
INVALID_VALUEt joinR� R3 R t sett writeR~ t ALREADY_SET( R' R� ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt set_log_denied� s
c C s | j S( N( R4 ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt get_automatic_helpers s c C s� | t j k r: t t j d | d j t j � f � � n | | j � k r� | | _ | j j d | � | j j
� | j � n t t j | � � d S( Ns '%s', choose from '%s's ','RL (
R t AUTOMATIC_HELPERS_VALUESR R R� R� R� R4 R R� R� R~ R� ( R' R� ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt set_automatic_helpers s
c C s | j S( N( R, ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR� s c C s` | j | � } | | j k rJ | | _ | j j d | � | j j � n t t j | � � d S( NR@ ( R} R, R R� R� R R t ZONE_ALREADY_SET( R' R! R� ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt set_default_zone s c C s$ | j j d d � | j j � d S( NRE RF ( R R� R� ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR\ ( s c C s$ | j j d d � | j j � d S( NRE RC ( R R� R� ( R' ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt disable_lockdown, s (" t __name__t
__module__R( R5 R& R? R R� R� Rf R� R� R� R} R� R� R� R� R� R� R� R~ R� R� R� R� R� R� R� R� R� R� R\ R� ( ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyR 7 s> � � (0 t __all__t os.pathRy Rv R_ t firewallR R t firewall.core.fw_icmptypeR t firewall.core.fw_serviceR t firewall.core.fw_zoneR t firewall.core.fw_directR t firewall.core.fw_configR t firewall.core.fw_policiesR t firewall.core.fw_ipsetR t firewall.core.fw_helperR
t firewall.core.loggerR t firewall.core.io.firewalld_confR t firewall.core.io.directR
t firewall.core.io.serviceR t firewall.core.io.icmptypeR t firewall.core.io.zoneR R t firewall.core.io.ipsetR t firewall.core.ipsetR t firewall.core.io.helperR R t firewall.errorsR t objectR ( ( ( s9 /usr/lib/python2.7/site-packages/firewall/core/fw_test.pyt <module> s2