8i#t d dl Z d dlmZ d dlmZ d dlmZ d dlmZm Z m
Z
m Z m Z d dl
mZ d dlmZ dZd e j d
e j d Z G d d
Z G d d Z G d d Z G d d Z G d d Z G d d Z G d d Z G d d Z G d d Z G d d Z G d d! Z G d" d# Z G d$ d% Z G d& d' Z! G d( d) Z" G d* d+ Z# G d, d- Z$ G d. d/ Z% G d0 d1 Z& G d2 d3 Z' G d4 d5 Z( G d6 d7 Z) G d8 d9 Z* G d: d; Z+ G d< d= Z, G d> d? Z- G d@ dA Z.dBdCe/dDdEdCe/dFdEdGi dHdBdIdJidBdCe/dKdIdJidCe/dLdMdNdOdPdQdRZ0 G dS dTe Z1 G dU dV Z2 e dWdX e
_3 e dWdY e
_4 dS )Z N) timedelta)partial)Any)ConfigCore FilesUpdate
FromConfigint_from_envvar) RulesLock)IP
rbl_whitelistz/var//z-ipsetlists.dbc j e Zd Z edd Zed Z edd Zed ZdS )
AutoWhiteListAUTO_WHITELISTtimeoutc | j dz S N< ) TTL_VALUEclss K/opt/imunify360/venv/lib/python3.11/site-packages/im360/contracts/config.py ttl_valuezAutoWhiteList.ttl_value s }r!! after_unblock_timeoutc | j dz S r )UNBLOCK_WHITELIST_TTLr s r unblock_whitelist_ttlz#AutoWhiteList.unblock_whitelist_ttl& s (2--r N) __name__
__module__ __qualname__r r classmethodr r r r r r r s{
I
" " [" 'J
. . [. . .r r c r e Zd ZdZ edd Z edd Z edd Z edd ZdS )
CaptchaDOSz
X = TIMEFRAME
T = MAX_COUNT
N = TIMEOUT
were taken from this doc:
https://docs.google.com/a/cloudlinux.com/document/d/1uYMwy89dbF7FxKSzUehhJYcDadWhk0l5YRKuvZpSeq0/edit?usp=sharing
CAPTCHA_DOSenabled
time_frame max_countr N) r r! r" __doc__r ENABLED
TIME_FRAME MAX_COUNTTIMEOUTr$ r r r& r& + s^ j 22GM<88J
=+66Ij 22GGGr r& c ( e Zd Z edd ZdS )CSFIntegrationCSF_INTEGRATIONcatch_lfd_eventssectionoptionN)r r! r" r r, r$ r r r1 r1 ; s* j!! GGGr r1 c ( e Zd Z edd ZdS )ProactiveDefencePROACTIVE_DEFENCE php_immunityr4 N)r r! r" r PHP_IMMUNITYr$ r r r8 r8 B s* :# LLLr r8 c n e Zd Z ed d Z ed d Z ed d Z ed d ZdS )DOSr( interval port_limits
default_limitN)r r! r" r r, INTERVALPER_PORT
DEFAULT_LIMITr$ r r r= r= I sR j **Gz%,,Hz% //H Juo66MMMr r= c e Zd Z edd Z edd Z edd Z edd Z edd Ze de
e e f fd Z
d S )
EnhancedDOS ENHANCED_DOSr( timeframer? r@ actionreturnc > d t t D S )Nc i | ]E}| d s.| |k /|t t | FS )_)
startswithuppergetattrrE ).0names r
z'EnhancedDOS.as_dict..Y sW
??3''
-1JJLLD,@,@
'+t,,,@,@,@r )dirrE r$ r r as_dictzEnhancedDOS.as_dictW s+
K((
r N)r r! r" r r, TIMEFRAMErB rC ACTION staticmethoddictstrr rT r$ r r rE rE P s j 33G
>;77Iz.-88H J~??M
Z
1
1F
T#s(^
\
r rE c e Zd Z edd Z edd Z edd Z ed Z dS )IncidentLoggingINCIDENT_LOGGING
min_log_levelnum_dayslimit )daysN)
r r! r" r
MIN_LOG_LEVELNUM_DAYSLIMITr
total_seconds FREQUENCYr$ r r r[ r[ ` sb J 1?CCMz,j99H J)7 3 3E q!!!//11IIIr r[ c & e Zd Z edd ZdS )LocalIncidentReporting#IMUNIFY360_NOIP_MIN_REPORT_SEVERITY N)r r! r" r
MIN_SEVERITYr$ r r rh rh i s" #?#H!LLLLLr rh c V e Zd Z edd Z edd Z edd ZdS )ModsecMOD_SECruleset!cms_account_compromise_preventionapp_specific_rulesetN)r r! r" r RULESET!CMS_ACCOUNT_COMPROMISE_PREVENTIONAPP_SPECIFIC_RULESETr$ r r rm rm o sN jI..G(2
6) )% &:i1GHHr rm c * e Zd ZdZ edd ZdS ) ModsecSensormodsecSEND_ADDITIONAL_DATAenableN)r r! r" PLUGIN_IDr rx r$ r r rv rv x s( I%:&33EFFFr N)
r r! r" r r r r r# r r r$ r r r| r| } sk J5 6 6E NP P [P G G [G G Gr r| c e Zd Z edd Z edd Z edd Z edd Z edd ZdS )ModsecBlockBySeverityMOD_SEC_BLOCK_BY_SEVERITYry r r severity_limitdenied_num_limitN) r r! r" r r, CHECK_PERIODMAX_REPETITIONSEVERITY_LIMITDENIED_NUM_LIMITr$ r r r r s j# G :# L Z# N Z# N "z# r r c e Zd ZdZdZdZdZdS )ModSecurityDirectivesz4Values for `{check,fix} modsec directives` commands. RelevantOnlyOffOnN)r r! r" r+ SecAuditEngine
SecConnEngine
SecRuleEnginer$ r r r r s% >> $NMMMMr r c t e Zd ZdZ edd Z edd Z edd ZdZe d Z
dS ) NetworkInterfacez[
Applies or ignores Imunify360's firewall rules
to specific network interfaces
NETWORK_INTERFACE
eth_device eth6_deviceeth_device_skip device_skipc b t j | j t j | j | j | j iS )N)r V4
ETH_DEVICEV6 ETH6_DEVICE DEVICE_SKIPETH_DEVICE_SKIPr s r get_interface_confz#NetworkInterface.get_interface_conf s*
E3> E3? OS 0
r N) r r! r" r+ r r r r r r# r r$ r r r r su
/ >>J * 0-@@K j!46GHHO K
[
r r c e Zd ZdZdS ) OssecSensorossecNr r! r" rz r$ r r r r s IIIr r c e Zd ZdZdS )ControlPanelProtectorcontrol_panel_protectorNr r$ r r r r s )IIIr r c e Zd ZdZdS ) CpHulkSensorCPHULKNr r$ r r r r s IIIr r c " e Zd Z e ZdS ) ProtectorN)r r! r" r RULE_EDIT_LOCKr$ r r r r s Y[[NNNr r c e Zd ZdZdZdS )Subsys)cPHulkfail2ban N)r r! r" THIRD_PARTY_IDS THIRD_PARTY_IDS_CHECK_TIMEOUTr$ r r r r s ,O$&!!!r r c r e Zd Z edd Z edd Z edd ZdZ edd ZdS ) Webshield WEBSHIELDry known_proxies_support
splash_screeni panel_protectionN) r r! r" r ENABLEKNOWN_PROXIES_SUPPORT
SPLASH_SCREEN#SPLASH_CAPTCHA_SHOWN_LOG_ENTRY_RULEPANEL_PROTECTIONr$ r r r r s^
Z X
.
.F &J{4K L L J{O< e Zd Z edd Z edd ZdS ) WebServices WEB_SERVICES
http_ports https_portsN)r r! r" r
HTTP_PORTS HTTPS_PORTSr$ r r r r s8 J *^];;KKKr r c e Zd Z edd Z edd Z edd Z edd Z edd Z edd Z edd Z
edd Z edd
Z d Z
d S )
FirewallFIREWALLport_blocking_mode TCP_IN_IPv4 TCP_OUT_IPv4 UDP_IN_IPv4 UDP_OUT_IPv4 TCP_IN_IPv6 TCP_OUT_IPv6 UDP_IN_IPv6 UDP_OUT_IPv6z(/var/imunify360/disable_iptables_loggingN)r r! r" r r TCP_IN_IPV4 TCP_OUT_IPV4 UDP_IN_IPV4 UDP_OUT_IPV4 TCP_IN_IPV6 TCP_OUT_IPV6 UDP_IN_IPV6 UDP_OUT_IPV6LOGGING_DISABLE_FLAGr$ r r r r s #J0DEE *Z 77K :j.99L *Z 77K :j.99L *Z 77K :j.99L *Z 77K :j.99LEr r c e Zd Z eed Z ed Z ed Z ed Z ed Z ed Z
ed Z dS ) SMTPBlocking
SMTP_BLOCKINGry ports allow_groups allow_users allow_localredirectN) r r! r" r r getoptr, PORTS ALLOW_GROUPS ALLOW_USERS ALLOW_LOCALREDIRECTr$ r r r r sw
WZ
1
1FfX G F7OOE6.))L& ''K& ''Kvj!!HHHr r c , e Zd ZdZ edd ZdS ) StopManagingz:Categories to ignore by {validate,reset} agent's commands.
STOP_MANAGINGmodsec_directivesr4 N)r r! r" r+ r MODSEC_DIRECTIVESr$ r r r r s3 DD"
" r r c B e Zd ZdZ edd Z edd ZdS ) ControlPanelz^
Relates to actions to be performed by a host admin
for compromised user accounts
CONTROL_PANEL#compromised_user_admin_notification compromised_user_password_resetN)r r! r" r+ r #COMPROMISED_USER_ADMIN_NOTIFICATION COMPROMISED_USER_PASSWORD_RESETr$ r r r r
sN
+5*>+ +' '1j:' '###r r c B e Zd Z edd Z edd ZdS ) Permissions PERMISSIONS allow_local_rules_management)r6 allow_local_ip_managementN)r r! r" r ALLOW_LOCAL_RULES_MANAGEMENTALLOW_LOCAL_IP_MANAGEMENTr$ r r r r sL #-: <$ $ $ !+
9! ! ! r r rX integeri )typecoercedefaulti )ipv4ipv6)r schemar r string)r r
r` )r r
minmax)idrQ severity)r r )r keysrules valuesrules)groupsrulesc p e Zd ZdZej ej ej e
d fd
Z xZ S )UnifiedAccessLoggerConfigaV # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
#
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
# DO NOT EDIT. INTERNAL USAGE ONLY.
# !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
#
# Direct modifications to this file prohibited.
#
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
pathvalidation_schemac N t || d S )Nr )super__init__)selfr r __class__s r r# z"UnifiedAccessLoggerConfig.__init__X s) d6GHHHHHr )
r r! r"
DISCLAIMERosr joinr
CONFIG_DIR$UNIFIED_ACCESS_LOGGER_CONFIGFILENAME#CONFIG_SCHEMA_UNIFIED_ACCESS_LOGGERr#
__classcell__)r% s @r r r K sx
J W\\ OT F
>
I I I I I I I I I I Ir r c r e Zd Z edd Z ede ZdxZ\ ZZ Z
Z Z Z
Z ede ZdS )UnifiedAccessLoggerr unified_access_loggerr )
config_cls)zim360-whitelistzim360-blacklistzim360-graylistzim360-blocked-by-portzim360-whitelisted-countryzim360-blacklisted-countryzim360-outgoing-blockedr N)r r! r" r r, r NFLOG_GROUPS _RULES_NAMES WHITELIST BLACKLISTGRAYLISTBLOCKED_BY_PORTWHITELIST_COUNTRYBLACKLIST_COUNTRYSMTPr r$ r r r. r. c sr j%<==G :h3LMMML L
Jw+D E E EEEEr r. FILES_UPDATEdisabled_types days_to_keep)5r' datetimer functoolsr typingr defence360agent.contracts.configr r r r r
im360.utilsr defence360agent.utils.validater RBL_WHITELIST_FILEPRODUCTIPSET_LISTS_PATHr r& r1 r8 r= rE r[ rh rm rv r| r r r r r r r r r r r r r r r r intr+ r r. DISABLED DAYS_TO_KEEPr$ r r rI s " ! ! ! ! ! - - - - - -$ LLLLLL . . . . . . . .(
3
3
3
3
3
3
3
3 7 7 7 7 7 7 7 7
2 2 2 2 2 2 2 2M M M M M M M M I I I I I I I IH H H H H H H H
G G G G G G G G .
( * * * * * * * * ! ! ! ! ! ! ! !' ' ' ' ' ' ' ' C C C C C C C C. . . . . . . .< < < < < < < <
F
F
F
F
F
F
F
F" " " " " " " " " "
" H
& ! * % !
#'' '' #TI I I I I I I I0F F F F F F F F. "z.2BCC %:nnEE r