a
=Æ*f:= ã @ sö d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl m
Z
ddl m Z dd l m
Z
dd
lmZ dd lmZmZmZmZmZmZ dd lmZ d
Zdd„ Zdd„ ZG dd„ dee
ƒZ G dd„ dƒZ G dd„ dƒZ dd„ Z dd„ Z dS ) zFail2Ban Developersz^Copyright (c) 2004-2008 Cyril Jaquier, 2012-2014 Yaroslav Halchenko, 2014-2016 Serg G. BresterZGPLé N)ÚThreadé )Úversioné )ÚCSocket)Ú
Beautifier)ÚFail2banCmdLineÚServerExecutionExceptionÚ
ExitExceptionÚlogSysÚexitÚoutput)ÚUtilsz
fail2ban> c C s t ¡ jjS ©N)Ú threadingÚcurrent_threadÚ __class__Ú__name__© r r úB/usr/lib/python3.9/site-packages/fail2ban/client/fail2banclient.pyÚ _thread_name, s r c C s t tƒS r )ÚinputÚPROMPTr r r r Ú
input_command/ s r c @ s” e Zd Zdd„ Zdd„ Zdd„ Zd%dd „Zed
d „ ƒZd&dd„Z d'dd„Z
dd„ Z dd„ Z d(dd„Z
d)dd „Zd d „ Zd d „ Zd*d!d"„Zd#d$„ ZdS )+ÚFail2banClientc C s* t | ¡ t | ¡ d| _d | _d | _d S )NT)r Ú__init__r Ú_aliveÚ_serverÚ _beautifier©Úselfr r r r 8 s
zFail2banClient.__init__c C s$ t dt d ƒ t dƒ t dƒ d S )Nz
Fail2Ban vz5 reads log file that contains password failure reportz=and bans the corresponding IP addresses using firewall rules.Ú )r
r r r r r ÚdispInteractive? s z Fail2banClient.dispInteractivec C s" t dƒ t d| ¡ tdƒ d S )Nr! zCaught signal %d. Exitingéÿ )r
r Zwarningr )r ZsignumÚframer r r Z__sigTERMhandlerD s z Fail2banClient.__sigTERMhandlerçš™™™™™¹?c C s& | j dg|dkr|gng gd|dS )NÚpingéÿÿÿÿF©Útimeout)Ú_Fail2banClient__processCmd)r r) r r r Z__pingJ s ÿzFail2banClient.__pingc C s | j r | j S tƒ | _ | j S r )r r r r r r Ú
beautifierN s zFail2banClient.beautifierTr' c
C sº d }z4| j }d}|D ]¦}| |¡ zÂ|s@t| jd |d}n|dkrR| |¡ | jd dkrnt dd|¡ | |¡}|d d krºt dd
|d ¡ |s¦|d d v ræt| |d ¡ƒ n,t
d
|d j ¡ |rât| |d ¡ƒ d}W q t
j
yÞ } zÚ|s| jd d krL|s&|d dkr<| | |d dk¡ nt dd|| ¡ W Y d } ~ W |r´z | ¡ W nF ty² } z,|s”| jd d kržt | ¡ W Y d } ~ n
d } ~ 0 0 |sÈ|d d v rÒtj ¡ dS d } ~ 0 ty¼ } zÆ|s| jd d kr*| jd d kr t | ¡ n
t
| ¡ W Y d } ~ W |r’z | ¡ W nF ty } z,|sr| jd d kr|t | ¡ W Y d } ~ n
d } ~ 0 0 |s¦|d d v r°tj ¡ dS d } ~ 0 0 qW |r z | ¡ W nF ty } z,|sü| jd d krt | ¡ W Y d } ~ n
d } ~ 0 0 |s0|d d v r¶tj ¡ nz|r–z | ¡ W nF ty” } z,|sv| jd d kr€t | ¡ W Y d } ~ n
d } ~ 0 0 |sª|d d v r´tj ¡ 0 |S )NTÚsocketr( r' Úverboser é zCMD: %rr zOK : %rr )Zechoú
server-statuszNOK: %rFr& z -- %s failed -- %r)r+ Z setInputCmdr Ú_confZ
settimeoutr ÚlogÚsendr
ZbeautifyÚerrorÚargsZ
beautifyErrorr, Ú _Fail2banClient__logSocketErrorÚcloseÚ ExceptionÚdebugÚsysÚstdoutÚflushÚ exception)
r ÚcmdZshowRetr) Úclientr+ Z streamRetÚcÚretÚer r r Z __processCmdU sŠ
ï
ö ù zFail2banClient.__processCmdr! Fc
C s z|t | jd t j¡rht | jd t j¡rT|r:t |¡ qft d|rLd| nd¡ qzt d| jd ¡ nt d| jd ¡ W n@ ty¼ } z(t d| jd ¡ t |¡ W Y d }~n
d }~0 0 d S )Nr, z*%sUnable to contact server. Is it running?z[%s] r! z3Permission denied to socket: %s, (you must be root)z6Failed to access socket path: %s. Is fail2ban running?z*Exception while checking socket access: %s)ÚosÚaccessr0 ÚF_OKÚW_OKr r3 r7 )r Z prevErrorZ errorOnlyrA r r r Z__logSocketError‡ s& ÿÿþÿz Fail2banClient.__logSocketErrorc C sb | ¡ rt d¡ d S | ¡ \}}|s*d S | jd sTtj | jd ¡rTt d¡ d S d|gdggS )NzServer already runningÚforcer, zLFail2ban seems to be in unexpected state (not running but the socket exists)z
server-streamr/ )Ú_Fail2banClient__pingr r3 Ú
readConfigr0 rB ÚpathÚexists)r r@ Ústreamr r r Z__prepareStartServer s
z#Fail2banClient.__prepareStartServerc C s
|| _ d S r )r ©r Úsr r r Ú _set_server² s zFail2banClient._set_serverc
C s$ ddl m} | ¡ }d| _|s"dS z€|rH| | j¡ | |d¡s W dS nXtƒ }| j||d d| _ |
| jd| j ¡| _ |
dd¡s | j r˜| j ¡ d | _ tdƒ W n| ty¶ ‚ Y nj ty } zPtdƒ t d |rÜd
nd ¡ | jd dkrþt |¡ n
t |¡ W Y d }~dS d }~0 0 dS )
Nr )ÚFail2banServerTF)ÚphaserK Údoner# r! z Exception while starting server Ú
backgroundZ
foregroundr- )Zfail2banserverrO Ú#_Fail2banClient__prepareStartServerr ZstartServerAsyncr0 Ú,_Fail2banClient__processStartStreamAfterWaitÚdictÚconfigureServerÚdaemonZstartServerDirectrN r ÚgetÚquitr r
r7 r
r r3 r< )r rR rO rK rP rA r r r Z
__startServer¶ s:
z Fail2banClient.__startServerNc s^ |r˜ˆ d ur"‡ fdd„}|| j d< ttj| dˆ |fd}d|_| ¡ |d u r”ˆ d ur”t ‡ fdd„| j d d
¡ t d d ˆ ¡ ˆ
d
d¡s”t dƒ‚dS ˆ d ur¶dˆ d
< t d dˆ ¡ |d u rÆ| ¡ }ˆ d urô|rÖdnd ˆ d< ˆ d
< t d dˆ ¡ |südS ˆ d ur._server_readyZonstartF)Útargetr4 Tc s ˆ dd ¡d uS )NÚready©rX r r\ r r Úð ó z0Fail2banClient.configureServer..r) gü©ñÒMbP?r. r[ Ústartz$Async configuration of server failedz client phase %sr_ c s ˆ dd ¡d uS )NrZ r` r r\ r r ra rb ç à?Z configurerQ )r0 r r rV rW rc r Úwait_forr r1 rX r rS rT )r ZnonsyncrP rK r] Úthr@ r r\ r rV à s>
z Fail2banClient.configureServerc C sz t |tƒst|ƒ}t|ƒdkrF|d dkrF| | jd ¡}|sBdS |S t|ƒdkr |d dkr t|ƒdkrˆddg|dd…< | |¡S | j d d¡ržtd
ƒ | d g¡ | d¡sÂt
d ¡ dS | j d d¡røtd
ƒ | ¡ | | j
¡}|d urø|S | j d d¡rtdƒ | dg¡S t|ƒdkr6|d dkr6g }t|ƒdkrœ|d dv rn| |d ¡ |d= n*t|ƒdkrœt
d|dd … ¡ dS qœq<| jddr&t|ƒdksÆ|d dkrØd}| ¡ \}}n|d }| |¡\}}|sødS | j d d¡rtdƒ | d|||ggd¡S t
d¡ dS n@t|ƒdkrj|d dkrj| j|gt|d ƒdS | |g¡S d S )Nr r rc rR FZrestartÚreloadú --restartÚ interactivez ## stop ... ÚstopzCould not stop serverz ## load configuration ... z ## start ... r )rh z--unbanz --if-existsz%Unexpected argument(s) for reload: %rr' r( z--allz ## reload ... TzCould not find serverr& )Ú
isinstanceÚlistÚlenÚ _Fail2banClient__startServerr0 Ú _Fail2banClient__processCommandrX r
Ú _Fail2banClient__waitOnServerr r3 Z resetConfÚ initCmdLineÚ_argvÚappendrG rH r* Úfloat)r r= r@ ZoptsZjailrK r r r Z__processCommand sh
z Fail2banClient.__processCommandc
G sž d}z&| ¡ s t d¡ W dS | j|Ž }W nT ty~ } z<| jd dkrRt |¡ t d| jd d ¡ W Y d }~n
d }~0 0 |sš| jrš| j ¡ d | _|S )NFz%Could not find server, waiting failedr- r zQCould not start server. Maybe an old socket file is still present. Try to remove r, zR. If you used fail2ban-client to start the server, adding the -x option will do it) rp r r3 r* r r0 r< r rY )r r4 r@ rA r r r Z __processStartStreamAfterWaitZ s$
þþ
z,Fail2banClient.__processStartStreamAfterWaitc sô |d u rˆ j d }t ¡ }t dd||f¡ d‰‡ ‡fdd„}tˆ j d ƒ”}ˆ jrÒ|ƒ }||krrW d ƒ dS t ¡ | }t dd |¡ |d
krœ| ¡ ||kr¬td ƒ‚tˆd |d
krÀdndƒ‰t ˆ¡ qNW d ƒ n1 sæ0 Y dS )Nr) r. z__waitOnServer: %rgš™™™™™y?c s t j ˆ jd ¡o ˆ jˆdS )Nr, r( )rB rI rJ r0 rG r ©r Zsltimer r ra x rb z/Fail2banClient.__waitOnServer..r- Tz wait-time: %sr zFailed to start serverr gš™™™™™É?rd r% F)
r0 Útimer r1 Ú
VisualWaitr Ú heartbeatr ÚminÚsleep)r ÚaliveZmaxtimeZ starttimeÚtestZvisZrunfÚwaittimer ru r Z__waitOnServerq s(
*z Fail2banClient.__waitOnServerc
C sJ i }t ƒ dkr r r r Úexec_command_lineü s
r¢ )!Ú
__author__Z
__copyright__Z __license__rB rŠ r€ r, r9 rv r r r Zcsocketr r+ r Zfail2bancmdliner r r
r r r
Z server.utilsr r r r r r“ r rw r¢ r r r r Ú s4