;9)я!F L d dl Z d dlZd dlZd dlmZ d dlmZmZ d dlm Z m
Z
m Z m Z m
Z
d dlmZ d dlmZ d dlmZ d dlmZ d d lmZ d d
lmZmZ d d lm Z m Z d d l m Z m Z m!Z! d d
l"m#Z#m$Z$ d dl%m&Z&m'Z'm(Z(m)Z)m*Z* ddl+m,Z, dZ-d Z.d Z/dddZ0d Z1d Z2 G d dej3 Z4dS ) Nwraps)ListOptional)JOINSQLNodeListField
ModelAlias)
model_to_dict)PORT_BLOCKING_MODE_ALLOW) ApplyOrderBy)lookup)run_in_executor_decorator)ValidationErrorOrderBy)Scopecheck_disabled_firewall)Firewall Permissions Webshield) CountryListCountry) BlockedPortIPList
IPListPurpose IPListRecordPurpose )send_to_socket< c < t fd }|S )Nc l K t j t k rt d | i | d {V S )Nz*Only for FIREWALL.port_blocking_mode=ALLOW)r port_blocking_moder
PermissionErrorargskwargsfuncs K/opt/imunify360/venv/lib/python3.11/site-packages/im360/simple_rpc/lists.pywrapperz.blocked_ports_allow_mode_only..wrapper sL &*B B B!"NOO OT4*6********* r r) r+ s ` r* blocked_ports_allow_mode_onlyr. s3
4[[+ + + + [+
Nr, c < t fd }|S )Nc h K | i | d {V }t |t rt | t |t si S | d }|dk r"t | d |dk r"t | d i S )Nerrorr message Exception)
isinstancestrr3 dictgetr )r' r( responser1 r) s r* r+ z0raise_acquired_validation_error..wrapper) s t.v........ h $ $ &H%% %(D)) I W%% % % %!(,,y"9"9:: :
k
!
!HLL 3 344 4Ir, r r- s ` r* raise_acquired_validation_errorr9 ( s3
4[[ [ Nr, F)except_splash_screenc t j g|d< t j r'| s%|d t j |S )N listnames)r GRAYr
SPLASH_SCREENappendGRAY_SPLASHSCREEN)r: r( s r* _create_graylist_filterrA ; sD !;-F; ='; ={""6#;<<< Mr, c < t fd }|S )Nc X K t j dt | i | d {V S )Nz9!! Deprecated cli call, use `ip-list` command instead. !!)warningswarnDeprecationWarningr& s r*
async_wrapperz&migrate_warning..async_wrapperC sJ
G
T4*6*********r, r )r) rG s ` r* migrate_warningrH B s4
4[[+ + + + [+ r, c < t fd }|S )Nc K t j d rt j dt
| i | d {V S )Nz!/var/imunify360/firewall_disabledz.wrapperO sa
7>>= > > MN
T4*6*********r, r r- s ` r* warn_disabled_firewallrO N s3
4[[+ + + + [+ Nr, c
& e Zd Zej Zd Z fdZe e j
ddd e d>d Z e e j
ddd e d?d Z
e e j
d
dd e d>d Z e j
d e d?d ed
edee dee fd Z e j
d e d?d ed
edee dee fd Z d?ded ed
edee dee f
dZed Zd Zee e j
ddd d Zee e j
ddd d Zee e j
d
dd d Z ee e j
ddd d Z ee e j
ddd d Z ee e j
ddd d Z ee e j
ddd d Z ee e j
ddd d! Z!ee e j
ddd d" Z"ee e j
d
dd d# Z# e j
d$d e$e%e d?d% Z& e j
d$d e$e%d?d& Z' e j
d$d e$e%d' Z( e j
d$d e$e%d( Z) e j
d)d e$e%d?d* Z* e j
d)d e$e%d@d+ Z+ e j
d)d e$e%d, Z,dAd.Z- e j
d/d0 e$e dBd1 Z.e/d2 Z0 dCd3e1e d4e2fd5Z3 dDd3e1e d ee d
ee dee1e d4e2f
d6Z4e/ d>d3e1e d ee d
ee dee1e fd7 Z5 dEd3e1e d ee d
ee d4e2dee f
d8Z6 e j
d/d9d e dBd:ee1e d ee d
ee dee1e fd; Z7 e j
d/d9d ed< Z8 e j
d/d9d ed= Z9 xZ:S )FListsEndpointsc 2 ddi | | S )Npurposelistname)r7 )xs r* zListsEndpoints.] s Y
$;$?$? 1% % r, c ^ t j |i | t j h| _ d S N)super__init__r captcha_passed_hidden_fields)selfr' r( __class__s r* rZ zListsEndpoints.__init__a s3 $)&))) % 4 5r, whitelistiplistNc | | j di |}|d |t j dt j g|||| j d|fS )Nwhite)r< limitoffsetorder_byexclude_fields )_countsr fetchWHITEr\ )r] rd re rf r( countss r* whitelist_ip_fetchz!ListsEndpoints.whitelist_ip_fetchf sh '''' 7O L
!<. ! # 2
r, blacklistc t j t j gfi |t j dt j g||| j d|fS )N)r< rd re rg rh )r fetch_countBLACKrj r\ )r] rd re r( s r* blacklist_ip_fetchz!ListsEndpoints.blacklist_ip_fetchz s] !6<.;;F;;V\ >
|n . >
>
>
>
r, graylistc
| dd } | j dd|i|}t dd|i|}|d |t j d|||| j d|fS )Nno_splash_screenFr: gray)rd re rf rg rh )popri rA r rj r\ )r] rd re rf r( r: rl s r* graylist_fetchz ListsEndpoints.graylist_fetch s &zz* ,t+
r, c ( | j dd||||d|S )Nrk r{ rh r} r s r* whitelist_fetchz ListsEndpoints.whitelist_fetch r r, r| c t j d||gd|}t j d|g||| j d|}||z |||z } | j dd|i|}
|
| |
| fS )N)rf by_list)r< rf ry rg ry rh )r rj r r\ ri lower) r] r| rd re ry rf r(
country_itemsip_itemsitemsrl s r* r~ z&ListsEndpoints._fetch_all_by_list_name s $)
K
<
k .
)6FUN+BC 66V6v66ioo''(&%77r, c > K t |t d {V S )N)msgtimeout)r IPListUpdateTimeout)r] r s r* _send_msg_to_socketz"ListsEndpoints._send_msg_to_socket sA #'
r, c J K | d|||d d {V }|S )NIP_LISTS_UPDATE)methodactionrS r r )r] r rS r results r* _send_ip_list_updatez#ListsEndpoints._send_ip_list_update sX //+ "
r, addc K | d }| dt j d |D dd| d {V S )Nr r c , g | ]}t | S rh r5 .0_ips r*
z0ListsEndpoints.whitelist_add.. 333s#c((333r, Tr ry r rS r )rw r r rk r] r( _ipss r*
whitelist_addz ListsEndpoints.whitelist_add s zz'""..M33d333 /
r, c K t j du r+| dd }|dk rt d | d }| dt
j d |D dd |
d {V S ) NFscopegroup%Local IP list management is disabled.r r c , g | ]}t | S rh r r s r* r z0ListsEndpoints.blacklist_add.. r r, Tr r r ALLOW_LOCAL_IP_MANAGEMENTrw r r r DROPr] r( r r s r*
blacklist_addz ListsEndpoints.blacklist_add s 0E 9 9JJw--E %&MNNNzz'""..L33d333 /
r, c K | d }| dt j d |D dd| d {V S )Nr r c , g | ]}t | S rh r r s r* r z/ListsEndpoints.graylist_add.. r r, Tr r )rw r r CAPTCHAr s r* graylist_addzListsEndpoints.graylist_add s zz'""..O33d333 /
r, movec K t j du rt d | dt j dd |D i d {V S )NFr r r c , g | ]}t | S rh r r s r* r z1ListsEndpoints.blacklist_move..- s 7 7 7#SXX 7 7 7r, r r r r r r r r] r s r* blacklist_movez ListsEndpoints.blacklist_move# s 0E 9 9!"IJJ J..L 7 7 7 7 78 /
r, c K | d }t j du r+| dd }|dk rt d | dt
j dd |D i| d {V S ) Nr Fr r r r c , g | ]}t | S rh r r s r* r z1ListsEndpoints.whitelist_move..= 6 6 6#SXX 6 6 6r, r )rw r r r r r rk )r] r( r r s r* whitelist_movez ListsEndpoints.whitelist_move0 s zz'"" 0E 9 9JJw--E %&MNNN..M 6 6 6 6 6A&A /
r, editc K t j du r+| dd }|dk rt d | d }| dt
j dd |D i| d {V S ) NFr r r r r c , g | ]}t | S rh r r s r* r z1ListsEndpoints.blacklist_edit..M r r, r r r s r* blacklist_editz ListsEndpoints.blacklist_edit@ s 0E 9 9JJw--E %&MNNNzz'""..L 6 6 6 6 6A&A /
r, c K t j du r+| dd }|dk rt d | d }| dt
j dd |D i| d {V S ) NFr r r r r c , g | ]}t | S rh r r s r* r z1ListsEndpoints.whitelist_edit..] r r, r )r r rw r r r rk r s r* whitelist_editz ListsEndpoints.whitelist_editP s 0E 9 9JJw--E %&MNNNzz'""..M 6 6 6 6 6A&A /
r, deletec K t j du rt d | dt j d |D d {V S )NFr r c , g | ]}t | S rh r r s r* r z3ListsEndpoints.blacklist_delete..j ---3s88---r, r r r s r* blacklist_deletez ListsEndpoints.blacklist_delete` sy 0E 9 9!"IJJ J..L--u--- /
r, c K t j du rt d | dt j d |D d {V S )NFr r c , g | ]}t | S rh r r s r* r z3ListsEndpoints.whitelist_delete..w r r, r )r r r r r rk r s r* whitelist_deletez ListsEndpoints.whitelist_deletem sy 0E 9 9!"IJJ J..M--u--- /
r, c j K | dt j d |D d {V S )Nr c , g | ]}t | S rh r r s r* r z2ListsEndpoints.graylist_delete.. r r, r )r r r r s r* graylist_deletez ListsEndpoints.graylist_deletez s\ ..O--u--- /
r, z blocked-portc V | j di |}|d |t j d||d|fS )N
blocked-ports)rd re rh )ri r rj )r] rd re r( rl s r* get_port_protoz ListsEndpoints.get_port_proto sK
'''' ? # CE& C CF C C
r, c h K |r d |D ng }| dd|||d d {V S )Nc , g | ]}t | S rh r r r` s r* r z3ListsEndpoints.blocked_port_add.. ***CGG***r, BLOCKED_PORT_UPDATEr r r r ipscommentr r] r r r ips_lists r* blocked_port_addz ListsEndpoints.blocked_port_add su /29**c****r--/ "
r, c D K | dd|d d {V S )Nr r )r r r r r s r* blocked_port_deletez"ListsEndpoints.blocked_port_delete sQ --/"
r, c F K | dd||d d {V S )Nr r )r r r r r )r] r r s r* blocked_port_editz ListsEndpoints.blocked_port_edit sT --/ "
r, zblocked-port-ipc h K |r d |D ng }| dd|||d d {V S )Nc , g | ]}t | S rh r r s r* r z9ListsEndpoints.ignored_by_port_add_ip.. r r, BLOCKED_PORT_IP_UPDATEr r r r s r* ignored_by_port_add_ipz%ListsEndpoints.ignored_by_port_add_ip su /29**c****r--2 "
r, c ` K d |D }| dd|||d d {V S )Nc , g | ]}t | S rh r r s r* r z:ListsEndpoints.ignored_by_port_edit_ip.. %%%2s2ww%%%r, r r r r )r] r r r s r* ignored_by_port_edit_ipz&ListsEndpoints.ignored_by_port_edit_ip sj &%%%%--2 "
r, c ^ K d |D }| dd||d d {V S )Nc , g | ]}t | S rh r r s r* r z. r r, r r )r r r r r )r] r r s r* ignored_by_port_delete_ipz(ListsEndpoints.ignored_by_port_delete_ip sg &%%%%--2"
r, Fc R t j ddt j gi|t j ddt j gi|z t j dt j g|d|t j ddt j gi|z t j di t dd|i|t
j di |dS )Nr< r )r< ry r: )rc blackrv r rh )r rp rk r rq rA r )r] ry r: r( s r* ri zListsEndpoints._counts s "FFfl^FvFF ) ( . /39 " %|nV ?E ) ( . /39 & ) )=AG
) 4 > >v > >)
r, zip-listsyncedc t j || | | t j |||| fS )N)by_ip)rS r rd re )r rp _counts_syncedrj )r] rS r rd re s r* ip_list_syncedz ListsEndpoints.ip_list_synced sP
$We 4 4 e , , uE&
r, c
> t j j t j t j j | d t j j t j t j j | d t j j t j t j j | d t j j t j t j j | d iS )Nr )rS r ) r rk valuer rp r7 r r SPLASHSCREEN)r( s r* r z ListsEndpoints._counts_synced
s
M !9
+6::g3F3F" " "
L 8 *&**W2E2E! ! !
O !<#; -VZZ5H5H$ $ $
& (@ ,2 jj))) ) )
r,
list_namesr: c K t j d d|i|} | j d i |}t j t j g| d | d | d }t j t j g| d | d | d }t j d dt j gi||z t j d dt j gi||z t j d i t d d|i|t j d dt j gi|d|d}t j |v r|||z z
}||fS )
Nr< by_country_code
by_commentr r r r r r: )rc dropcaptcha splashscreen)servercloudrh ) r rp r r rq r7 rk rA r@ ) r] r r: r( max_count count_syncedblacklisted_country_countwhitelisted_country_countrl s r* get_counts_localz ListsEndpoints.get_counts_local s &FFFvFF *t*44V44 $/$; &' "JJ'8 9 9 zz,//**W%% %
%
%
! %0$; &' "JJ'8 9 9 zz,//**W%% %
%
%
! &JJ&, J6JJ/0 &JJ&, J6JJ/0 "- - -A !' 2 ! ! % 7 8!.T 7 V%=v{$KKK KKKr, r r r r r: r< zip+z
country.code+c i | ]
}|j | S rh namer fields r*
z5ListsEndpoints.union_ip_countries..t s IIIEej%IIIr, c i | ]
}|j | S rh r
r s r* r z5ListsEndpoints.union_ip_countries..u s)
"'EJ
r, c
b g } D ]\ }}||v rP| | |t | j | | Y| t
d | | j | S )NNULL)r r? r7 getattrmodelaliasr select)query
model_columnsselect_columnscol_name_ all_columnss r* align_queryz6ListsEndpoints.union_ip_countries..align_query{ s N * 0 0 2 2
G
G !},,"))%)) $gek8&D&D %// #))#f++*;*;H*E*EFFFF 5< 0 0r, r c , g | ]}t | S rh )r )r keys r* r z5ListsEndpoints.union_ip_countries.. s
5
5
53c#hh
5
5
5r, country)onc ( g | ]}|j d k
|S rS column_namer orders r* r z5ListsEndpoints.union_ip_countries.. s, u/@I/M/M/M/M/Mr, r T)force_no_prefixc ( g | ]}|j d k
|S r" r# r% s r* r z5ListsEndpoints.union_ip_countries.. s, u/@I/M/M/M/M/Mr, .)exclude)idrT rS rh ).r fetch_as_unionr7 r r= r r> r@ r? rA rw r
fromstring
_returningr union_allr keysfrom_joinr r
LEFT_OUTERr r+ re rd desc
list_priorityr get_nodesr$ splitr4 r enumeratenodesr
r rf r r\ r r listname2purposer ) r] r rd re rf r: r( r r
ip_columnscountry_columnsordersr alias_modelcombined_query
wrapped_queryrS others_orderr& r9 nodeinrowsrowentryitemr s @r* union_ip_countriesz!ListsEndpoints.union_ip_countriesJ s $2 !+
#JJ'8 9 9 zz,//**W%%
K: % %'
&(
& 'z99!!&":;;;, %9=C F
JJ{D ) ) )(
"5))"?33H JIX5HIII
+8+C
!?2 1 1 1 1 1 ;x44# M?CC
11 !++M::* *
5
5+"2"2"4"4
5
5
5
%
&** T_#i..GJ*F +
) 0 0 8 8M ) / / 6 6M #+ G
qzKF(>>>> -dCCCHHJJ #+ L &
G
G$.E - 3 3C 8 8 ( 2#U%6%<%. r r, r r r )r r r r rf rd re rT rS )r rj r7 r r: rw r )r rd re rf r( r rH s r* &get_black_white_listed_local_countriesz5ListsEndpoints.get_black_white_listed_local_countries s $) !+
#JJ'8 9 9 zz,//**W%%
" D + <$$
OO r, c K t j |v r_t j rS|sQt j |vr | t j t
dd|i|}| dd t j d|| j |||d|}|D ]1}t j | d j |d< 2|S )Nr: r< )r< rg rd re rf rT rS rh )
r r= r r> r@ r? rA rw rj r\ r r: r ) r] r rd re r: rf r( r rH s r* get_ip_localzListsEndpoints.get_ip_local s
K: % %'
&(
& 'z99!!&":;;;, %9=C F
JJ{D ) ) )<
.
D + <$$
OO r, localrS c @ K |s/t j t j t j t j g}n d |D }| dd }| dd }|dk r@ | j d
d |D |d| d{V \ } }
| j |||fd |i| d{V } | |
| fS |d
k r7 | j d
||d| d{V \ } }
| j |f||||d | d{V } | |
| fS | j |f||||d |}
| j |fd |i| d{V \ } }
| |
|
fS )zreplacements for old whitelist/graylist/blacklist ip list,
With changes: non search by ip, now will find supernets and subnets
c 6 g | ]}t j | S rh )r rT )r ps r* r z5ListsEndpoints.ip_list_local_list.." s# ???!'*1--???r, ru Fby_typeNr c F g | ] }|t j t j fv | S rh r r s r* r z5ListsEndpoints.ip_list_local_list..* s7 ! )A6;(OOO OOOr, )r r: rf r` )rd re rf r: r: rh )
r rk rq r= r@ rw r rL rN rI )r] rS rd re rf r( r r: rS r rl r r result_itemss r* ip_list_local_listz!ListsEndpoints.ip_list_local_list s @ ( JJ @?w???J %zz*. s 666CGG666r, ,return_exceptionsc , i | ]\ }}|| |S rh rh )r rC r8
ips_for_taskss r* r z4ListsEndpoints.ip_list_local_add.. s:
8
! h
r, rh )r r rw r r rj r rT r[ r ctimedeep
imported_fromr` ry netmasknetwork_addressversionlenr? updater r5 r2 asynciogatherr8 )
r] rS r( r r new_ipstasksr`
existing_itemtask create_items responsesr\ s
@r* ip_list_local_addz ListsEndpoints.ip_list_local_addT s~ 0E 9 9JJw--E %&MNNNzz'""
. .B "L!'**+)NLK(IOMN*N M" =!!Q&&r""""'
a '11&11100 #"%b''"& (* 1 T""" $$SWW---- 966g666L,, ) " - D
LL ,!7!7 8 8 8!.%H4HHHHHHHH
( 3 3
r, c K t j du rt d | d|d |D d{V S )zUsed for removing record from IPList table, same as old
rpc calls: `[white/black/gray]list ip delete`, but now also
splachscreen is allowed to delete
Fr r c , g | ]}t | S rh r r s r* r z7ListsEndpoints.ip_list_local_delete.. r r, r N)r r r r )r] rS r s r* ip_list_local_deletez#ListsEndpoints.ip_list_local_delete sw 0E 9 9!"IJJ J..--u--- /
r, )NNN)NNrX )NF)NNNN)F)NNNF)NNFN);__name__
__module__ __qualname__r IM360SCOPE_COLUMNS_TO_IP_LISTrZ rH r bindr rm rr rx intr r5 r r r r~ r9 r r rO r r r r r r r r r r r r. r r r r r r r ri r staticmethodr r boolr rI rL rN rV rm rp
__classcell__)r^ s @r* rQ rQ [ s KE 6 6 6 6 6
V[dF++ 04
,+ _
" V[dF++
,+ _
V[T6**
+* _
( V[
!%&*
7#
" V[
!%&*
7#
, !%&*
8 88 8 8
8 7#
8 8 8 84 %
%$
V[dE**
+* _
V[dE**
+* _
" V[T5))
*) _
V[dF++
,+ _
V[dF++
,+ _
V[dF++
,+ _
V[dF++
,+ _
V[dH--
.- _
V[dH--
.- _
V[T8,,
-, _
V[ (( "
#" )(
V[ '' "
#" ('
V[ ** "
#" +*
V[ (( "
#" )(
V["E** "
#" +*
V["F++ "
#" ,+
V["H-- "
#" .-
0 V[H%% ;?
&%
\
( &+,! ,!I,! #,! ,! ,! ,!b $ $,0%*
| |I| }|
|
4=) | #
| | | || $ $,0 I }
4=) \ > $ $%*&*
% %I% }%
%
# % 7#
% % % %N V[GV,, (, # $,0 D/ D/$s)$D/ }D/
D/
4=) D/ D/ D/ -,D/L V[GU++C
C
,+C
J V[GX..
/.
r, rQ )5re rK rD functoolsr typingr r peeweer r r r
r playhouse.shortcutsr defence360agent.contracts.configr
$defence360agent.model.simplificationr defence360agent.rpc_toolsr defence360agent.rpc_tools.utilsr "defence360agent.rpc_tools.validater r defence360agent.utilsr r im360.contracts.configr r r im360.model.countryr r im360.model.firewallr r r r r resident_socketr r r. r9 rA rH rO
RootEndpointsrQ rh r, r* r s/ ! ! ! ! ! ! ! ! 9 9 9 9 9 9 9 9 9 9 9 9 9 9 - - - - - - E E E E E E = = = = = = , , , , , , E E E E E E G G G G G G G G @ @ @ @ @ @ @ @ C C C C C C C C C C 4 4 4 4 4 4 4 4 , + + + + + & 5:
N
N
N
N
N
V) N
N
N
N
N
r,