a
=Æ*f, ã @ s° d Z dZdZddlZddlZddlZddlZddlmZmZ ddl m
Z
ddl m Z m
Z
mZ e d ƒZd
d „ Zd Zd
ZdZG dd„ dƒZejZG dd„ deƒZG dd„ deƒZdS )zFail2Ban Developersz^Copyright (c) 2004-2008 Cyril Jaquier, 2012-2014 Yaroslav Halchenko, 2014-2016 Serg G. BresterZGPLé Né )ÚversionÚ normVersion)ÚprintFormatted)Ú getLoggerÚ str2LogLevelÚgetVerbosityFormatZfail2banc
C sF z t | ƒ W n4 ttfy@ } z|jdkr,‚ W Y d }~n
d }~0 0 d S )Né )ÚprintÚBrokenPipeErrorÚIOErrorÚerrno)ÚsÚe© r úC/usr/lib/python3.9/site-packages/fail2ban/client/fail2bancmdline.pyÚoutput# s
r )ÚsocketÚpidfileÚ logtargetÚloglevelZ syslogsocketTé c @ s† e Zd Zdd„ Zdd„ Zedd„ ƒZdd„ Zd d
d „Zd d
„ Z dd„ Z
dd„ Z d dd„Z e
d dd„ƒZe
d dd„ƒZe
d dd„ƒZdS )!ÚFail2banCmdLinec C s$ d | _ | _d | _d| _| ¡ d S )NF)Ú_argvÚ_argsÚ
_configuratorÚ
cleanConfOnlyÚ resetConf©Úselfr r r Ú__init__4 s zFail2banCmdLine.__init__c C s dddddd d t dœ| _d S )NFz
/etc/fail2banTé )ÚasyncÚconfÚforceÚ
backgroundÚverboser r Útimeout)Ú MAX_WAITTIMEÚ_confr r r r r : s øzFail2banCmdLine.resetConfc C s8 | j r | j S ddlm} |ƒ | _ | j | jd ¡ | j S )Nr! )Ú Configuratorr# )r Ú configuratorr* Z
setBaseDirr) )r r* r r r r+ F s z Fail2banCmdLine.configuratorc C s |j D ]}|j | | j |< qd S )N)Ú__dict__)r ÚobjÚor r r Ú applyMembersR s
z Fail2banCmdLine.applyMembersFc C s |st dt ƒ n
t tƒ ƒ d S )Nú
Fail2Ban v)r r r )r Zshortr r r Ú dispVersionV s zFail2banCmdLine.dispVersionc C sB t j | jd ¡}td| d | d¡s,dnd ƒ tdƒ tdt d ƒ td ƒ tdƒ td
ƒ td ƒ td ƒ td
ƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ tdƒ td ƒ td ƒ td ƒ td ƒ | d¡s.tdƒ td ƒ tƒ tdƒ td!ƒ d"S )#z2 Prints Fail2Ban command line options and exits
r zUsage: z
[OPTIONS]Zserverz
Ú r0 z5 reads log file that contains password failure reportz=and bans the corresponding IP addresses using firewall rules.zOptions:z3 -c, --conf configuration directoryz' -s, --socket socket pathz( -p, --pidfile pidfile pathzl --pname name of the process (main thread) to identify instance (default fail2ban-server)z) --loglevel logging levelz^ --logtarget logging target, use file-name or stdout, stderr, syslog or sysout.z --syslogsocket auto|z= -d dump configuration. For debuggingz[ --dp, --dump-pretty dump the configuration using more human readable representationz\ -t, --test test configuration (can be also specified with start parameters)z, -i interactive modez. -v increase verbosityz. -q decrease verbosityzN -x force execution of the server (remove socket file)z@ -b start server in background (default)z6 -f start server in foregroundzj --async start server in async mode (for internal usage only, don't read configuration)zn --timeout timeout to wait for the server (for internal usage only, don't read configuration)zG --str2sec convert time abbreviation format to secondsz5 -h, --help display this help messagezX -V, --version print the version (-V returns machine-readable short format)zCommand:z:Report bugs to https://github.com/fail2ban/fail2ban/issuesN)ÚosÚpathÚbasenamer r Úendswithr r )r Zcallerr r r Ú dispUsage\ sD " zFail2banCmdLine.dispUsagec C sî |D ]â}|d }|dv r*|d | j d< q|dv rB|d | j d< q|dv rZ|d | j d< q|d v rz|d
krnd nd | j d
< q|dv r”d | _d | j d< q|dkr°| j d d7 < q|dkrÌ| j d d8 < q|dkràd | j d< q|dk röd | j d< q|dkr d | j d< q|dkr"d| j d< q|dkr8d | j d < q|d krdd d lm} | |d ¡| j d < q|d kr’d d lm} t| |d ¡ƒ d S |d!v rª| ¡ d S |d"v rÈ| |d#k¡ d S | d$¡r|d | j |d d%… < qd%S )&z! Gets the command line options
r )z-cz--confr! r# )z-sz--socketr )z-pz --pidfiler )ú-dz--dpz
--dump-prettyr8 Tr Údump)z-tz--testÚtestz-vr& z-qz-xr$ z-iÚ interactivez-br% z-fFz--asyncr" z --timeout)ÚMyTimer' z --str2sec)z-hz--help)ú-Vz --versionr= z--N) r) r Z
server.mytimer< Z str2secondsr r7 r1 Ú
startswith)r ÚoptListÚoptr. r< r r r Z__getCmdLineOptions… sV
z#Fail2banCmdLine.__getCmdLineOptionsc
C s d}z¨| j d u }|| _ t d|dd … ¡ z.d}g d¢}t | j dd … ||¡\}| _W n tjyz | ¡ Y W dS 0 | |¡}|d ur”|W S t d| j | j¡ |rZt
rZ| j d }|dkrÒt t j
¡ nR|dkrèt t j¡ n<|d kr t t j¡ n$|d
krt t j¡ n t t j¡ t tj¡}t|d ƒ} t | ¡}
| |
¡ t |¡ d } tD ]L} | j | d ¡d u rb| s”| j ¡ | j ¡ } | | v rb| | | j | < qbt d | j d ¡ t | j d
ƒ}
t d| j d t |
¡| j d ¡ d}| j dd¡r\|r | ¡ \}}d}|d ur>| !|| j d d k¡ nt"dƒ | j dd¡s\|W S | j dd¡rª|r‚d}| ¡ \}}|st#dƒ‚t$| jƒsªt"dƒ |W S W d S t#yÄ ‚ Y nJ t%y } z0t"d|f ƒ |d kröt &|¡ W Y d }~dS d }~0 0 d S )Nr! zUsing start params %szhc:s:p:xfbdtviqV)z loglevel=z
logtarget=z
syslogsocket=r: r" zconf=zpidfile=zpname=zsocket=ztimeout=zstr2sec=Úhelpr Zdpz dump-prettyFz conf: %r, args: %rr& r r é zUsing socket file %sr r z%Using pid file %s, [%s] logging to %sr r Tr9 zEERROR: The configuration stream failed because of the invalid syntax.r: z ERROR: test configuration failedz$OK: configuration test is successfulz ERROR: %s)'r ÚlogSysÚinfoÚgetoptr Ú GetoptErrorr7 Ú#_Fail2banCmdLine__getCmdLineOptionsÚdebugr) Ú
PRODUCTIONZsetLevelÚloggingZERRORZWARNINGÚINFOÚDEBUGZ
HEAVYDEBUGZ
StreamHandlerÚsysÚstderrr Z FormatterZ setFormatterZ
addHandlerÚ
CONFIG_PARAMSÚgetr+ Z readEarlyZgetEarlyOptionsr Z getLevelNameÚ
readConfigÚ
dumpConfigr ÚServerExecutionExceptionÚlenÚ ExceptionÚ exception)r Úargvr& ÚinitialZcmdOptsZ cmdLongOptsr? ÚretZlogoutÚfmtÚ formatterr# r. ZllevZreadcfgÚstreamr r r r Ú initCmdLine´ s
"
ÿ
zFail2banCmdLine.initCmdLineNc
C s– d }zR| j ¡ | j ¡ | j j|| j| j d}| j j| j dd¡d | j ¡ }W n6 t yŒ } z t
d| ¡ d}W Y d }~n
d }~0 0 ||fS )N)Z ignoreWrongr9 F)Zallow_no_filesz Failed during configuration: %s) r+ ZReloadZreadAllZ
getOptionsr) r ZconvertToProtocolrP ZgetConfigStreamrU rC Úerror)r Zjailr\ rY r r r r rQ s
ÿ ÿzFail2banCmdLine.readConfigc s8 |r ddl m‰ ‡ fdd„}nt}| D ] }||ƒ q&dS )Nr ©Úpformatc s t ˆ | dddƒ d S )Niè r )ÚwidthÚindent)r )r r_ r r Ú_output. s z+Fail2banCmdLine.dumpConfig.._outputT)Zpprintr` r )ÚcmdZprettyrc Úcr r_ r rR * s
zFail2banCmdLine.dumpConfigr c
C sx t j ¡ z4t j ¡ tt dƒr2t jr2t | ¡ n
t | ¡ W n4 t t
fyr } z|j dkr^‚ W Y d }~n
d }~0 0 d S )NÚexitr ) rM rN ÚcloseÚstdoutÚflushÚhasattrrf r3 Ú_exitr r r
)Úcoder r r r rk 9 s
zFail2banCmdLine._exitc C s" t d| ¡ t ¡ t | ¡ d S )NzExit with code %s)rC rH rJ Zshutdownr rk )rl r r r rf H s zFail2banCmdLine.exit)F)N)F)r )r )Ú__name__Ú
__module__Ú __qualname__r r Úpropertyr+ r/ r1 r7 rG r] rQ Ú staticmethodrR rk rf r r r r r 2 s
)/d
r c @ s e Zd ZdS )Ú
ExitExceptionN©rm rn ro r r r r rr U s rr c @ s e Zd ZdS )rS Nrs r r r r rS Y s rS )Ú
__author__Z
__copyright__Z __license__rE rJ r3 rM r r Zprotocolr Zhelpersr r r rC r rO rI r( r rf rU rr rS r r r r Ú s( "