a
=*f[ @ s d Z dZdZddlZddlZddlZddlmZ ddlm Z e e
Z d d
Z dd d
Z
G dd dZG dd deZedde_G dd deZdddZeee_dS )zJFail2Ban Developers, Alexander Koeppe, Serg G. Brester, Yaroslav Halchenkoz+Copyright (c) 2004-2016 Fail2ban DevelopersZGPL N )Utils ) getLoggerc C s t | tr| S t| S )z8A little helper to guarantee ip being an IPAddr instance
isinstanceIPAddrip r 9/usr/lib/python3.9/site-packages/fail2ban/server/ipdns.pyasip' s
r
c C s zn| p t } dd t | ddt jdt jD }|rl| d }d}|D ] }||r\| W S |sD|}qD|W S W n t jy Y n0 t | S )zGet fully-qualified hostname of given host, thereby resolve of an external
IPs and name will be preferred before the local domain (or a loopback), see gh-2438
c s s | ]}|d r|d V qdS ) Nr ).0air r r 3 s zgetfqdn..Nr .)socket gethostname getaddrinfoZ
SOCK_DGRAMZ AI_CANONNAME
startswitherrorgetfqdn)namenamesZpreffirstr r r r r - s$
r c @ s e Zd ZejdddZejdddZedd Zedd Z edd Z
ed d d Z d
Z edd Z
dZedd ZdZedd ZdZedd Zedd ZdZed d ZdS ) DNSUtilsi , ZmaxCountZmaxTimec C s t j| }|dur|S t }d}t r6tjtjfntjfD ]}zdt| d|dtj D ]J}t
|dk sXt
|d svqXt t |d d t
|}|jrX|| qXW q> ty } z|}W Y d}~q>d}~0 0 q>|s|rtd| | t j| | |S )z_ Convert a DNS into an IP address using the Python socket module.
Thanks to Kevin Drapel.
Nr z4Unable to find a corresponding IP address for %s: %s)r CACHE_nameToIpgetset
IPv6IsAllowedr AF_INETAF_INET6r Z IPPROTO_TCPlenr str_AF2FAMisValidadd ExceptionlogSyswarning)dnsipsZsaveerrfamresultr
er r r dnsToIpS s$ zDNSUtils.dnsToIpc
C sx t j| d}|dkr|S zt| d }W n8 tjyd } z td| | d }W Y d }~n
d }~0 0 t j| | |S )Nr r z'Unable to find a name for the IP %s: %s) r CACHE_ipToNamer" r Z
gethostbyaddrr r- debugr# )r
vr3 r r r ipToNameq s zDNSUtils.ipToNamec C sn t }t| }|dur0t|}|jr0|| |dv rj|sjt| }|| |rj|dkrjt d| | |S )z/ Return the IP of DNS found in a given text.
N)Zyeswarnr9 z'Determined IP using DNS Lookup: %s = %s)
r# r searchIPr* r+ r r4 updater- r. )textZuseDnsZipListZplainIPr
r r r textToIp s
zDNSUtils.textToIpTc C s dd| f}t j|}|dur"|S d}| r4ttjfntjtfD ]F}z| }W qW q> ty } ztd| W Y d}~q>d}~0 0 q>t j || |S )z;Get short hostname or fully-qualified hostname of host selfselfhostnameNr z#Retrieving own hostnames failed: %s)
r r5 r" r r r r, r- r. r# )Zfqdnkeyr r? r3 r r r getHostname s
$zDNSUtils.getHostname)r> r/ c C sR t jt j} | dur| S tdt dt dgtdg } t jt j| | S )zGet own host names of selfNZ localhostFTr )r r5 r" _getSelfNames_keyr# rA )r r r r getSelfNames s zDNSUtils.getSelfNames)Znetintrfr0 c C s\ t jt j} | dur| S ztdd t D } W n t } Y n0 t jt j| | S ) Get own IP addresses of selfNc S s g | ] \}}|qS r r )r Zniar r r
z+DNSUtils.getNetIntrfIPs..)r r! r" _getNetIntrfIPs_key IPAddrSet_NetworkInterfacesAddrsr# )r0 r r r getNetIntrfIPs s zDNSUtils.getNetIntrfIPs)r> r0 c C s t jt j} | dur| S tt } t D ]N}z| tt |O } W q. tyz } zt
d|| W Y d}~q.d}~0 0 q.t j t j| | S )rD Nz#Retrieving own IPs of %s failed: %s) r r! r" _getSelfIPs_keyrI rK rC r4 r, r- r. r# )r0 r? r3 r r r
getSelfIPs s &zDNSUtils.getSelfIPsNc
C sV t js
dS z>tdd } t| W d W S 1 s<0 Y W n Y n0 d }zz.t t jt j}|d W W |r| dS t y. } zt
|drdd l }|j dk s|j |j |j
fv rW Y d }~W |r| dS |j |j|jfv rW Y d }~W |r| dS W Y d }~n
d }~0 0 W |rR| n|rP| 0 d S )NFz(/proc/sys/net/ipv6/conf/all/disable_ipv6rb)r r Terrnor )r Zhas_ipv6openintreadr& Z SOCK_STREAMZbindcloser, hasattrrO Z
EADDRNOTAVAILZ EAFNOSUPPORTZ
EADDRINUSEZEACCES)fsr3 rO r r r _IPv6IsSupportedBySystem s6 2
z!DNSUtils._IPv6IsSupportedBySystemc C s* | t _td| d ur | r dq"dnd | S )Nz
IPv6 is %sZonZoffauto)r _IPv6IsAllowedr- r6 )valuer r r setIPv6IsAllowed
s zDNSUtils.setIPv6IsAllowed)r> z ipv6-allowedc C s t jd urt jS t jt j} | d ur*| S t } | d u rzt }|shdt _zt }W d t _nd t _0 tdd |D } t j t j| | S )NTc s s | ]}d |j v V qdS ):N)ntoa)r r
r r r r $ rG z)DNSUtils.IPv6IsAllowed..)
r rY r! r" _IPv6IsAllowed_keyrW rK rM anyr# )r7 r0 r r r r$ s
zDNSUtils.IPv6IsAllowed)T)__name__
__module__ __qualname__r Cacher! r5 staticmethodr4 r8 r= rA rB rC rH rK rL rM rY rW r[ r^ r$ r r r r r M s6
r c s e Zd ZdZdZdZedeef Zedeeeef Z dZ
dZ e j
dd d
Zd Zd Zeej Zeej Zed
d Zef fdd Zedd ZefddZdd Zdd Z dd Z e dd Z e d d Z ejd ejd iZ!e d!d" Z"e d#d$ Z#e d%d& Z$e d'd( Z%e d)d* Z&d+d, Z'd-d. Z(d/d0 Z)d1d2 Z*d3d4 Z+d5d6 Z,e d7d8 Z-e d9d: Z.dQd;d<Z/d=d> Z0e d?d@ Z1e dAdB Z2dCdD Z3dEdF Z4dGdH Z5dIdJ Z6e6 Z7e dKdL Z8edMdN Z9edOdP Z: Z;S )Rr z7Encapsulate functionality for IPv4 and IPv6 addresses
z(?:\d{1,3}\.){3}\d{1,3}z:(?:[0-9a-fA-F]{1,4}::?|:){1,7}(?:[0-9a-fA-F]{1,4}|(?<=:):)z%^(?:(?P%s)|\[?(?P%s)\]?)$z^(%s|%s)/(?:(\d+)|(%s|%s))$N)_family_addr_plen _maskplen_rawi' r r c C s
t j| S N)r CIDR_RAW)r7 r r r r) E s zIPAddr._AF2FAMc s |t jkr t|ttfr t j}|t jkrHtt | | }||| |S ||f}t j
|}|d urh|S |t jkrt |\}}||f}|t jkrt j
|}|d ur|S tt | | }||| |j t jkrt j
|| |S rl )r CIDR_UNSPECr tuplelistrm super__new__
_IPAddr__init CACHE_OBJr" _IPAddr__wrap_ipstrre r# )clsipstrcidrr
args __class__r r rr I s,
zIPAddr.__new__c C s t | dkr0| d dkr0| d dkr0| dd } d| vrB| tjfS tj| }|d u r`| tjfS t| }|d rt|d |d< |d= zt|d |d< W n t y | tjf Y S 0 |S )Nr r [rk ]r /)
r' r rn
IP_W_CIDR_CREmatchrp groups
masktoplenrQ
ValueError)rw rV r r r Z __wrap_ipstrd s $
zIPAddr.__wrap_ipstrc C s t j| _d| _d| _d| _|| _|tjkrx|durL|tjk rLtj| g}n t j t j
g}|D ]:}z t ||}|| _W qW q\ t j y Y q\Y q\0 q\| jt j krt
d|\| _d| _|dur|dkrd|? }| j|M _|| _n| jt j
krt
d|\}}|d> |B | _d| _|durP|dkrPd |? }| j|M _|| _n&| tjr|d@ | _t j | _d| _ntj| _dS )
zP initialize IP object by converting IP address string
to binary to integer
r N!L !QQ@ )r AF_UNSPECre rf rg rh ri r rm r% r& Z inet_ptonr structunpackisInNet IP6_4COMPAT)r> rw rx familybinarymaskhilor r r Z__initz sH
z
IPAddr.__initc C s
t | jS rl )reprr] r> r r r __repr__ s zIPAddr.__repr__c C s t | jtr| jS t| jS rl )r r] r( r r r r __str__ s zIPAddr.__str__c C s t | jffS )zIPAddr pickle-handler, that simply wraps IPAddr to the str
Returns a string as instance to be pickled, because fail2ban-client can't
unserialize IPAddr objects
)r( r] r r r r
__reduce__ s zIPAddr.__reduce__c C s | j S rl )rf r r r r addr s z IPAddr.addrc C s | j S rl )re r r r r r s z
IPAddr.familyZinet4Zinet6c C s t j| jS rl )r FAM2STRr" re r r r r familyStr s zIPAddr.familyStrc C s | j S rl )rg r r r r plen s z IPAddr.plenc C s | j S )zlThe raw address
Should only be set to a non-empty string if prior address
conversion wasn't possible
)ri r r r r raw s z
IPAddr.rawc C s | j tjkS )z6Either the object corresponds to a valid IP address
)re r r r r r r r* s zIPAddr.isValidc C s | j tjdtjdi| jdkS )zIReturns whether the object is a single IP address (not DNS and subnet)
r r i)rg r r% r& r" re r r r r isSingle s zIPAddr.isSinglec C s~ | j tjkr t|ts | j|kS t|ts>|d u r6dS t|}| j |j krNdS | j tjkrf| j|jkS | j|jko|| j|jkS NF) re r rm r ri r r rf rg r> otherr r r __eq__ s
z
IPAddr.__eq__c C s
| |k S rl r r r r r __ne__ s z
IPAddr.__ne__c C sV | j tjkr t|ts | j|k S t|ts>|d u r6dS t|}| j |j k pT| j|jk S r )re r rm r ri rf r r r r __lt__ s
z
IPAddr.__lt__c C s t |tst|}d| |f S Nz%s%sr r r r r __add__ s
zIPAddr.__add__c C s t |tst|}d|| f S r r r r r r __radd__ s
zIPAddr.__radd__c C s
t | jS rl )hashr] r r r r __hash__ s zIPAddr.__hash__c C s4 | j tjkrd| j S | j tjkr,d| j S dS dS )z r+ r r r r r r r] s
z IPAddr.ntoac C sT | j r | jd}|du r>d}n | jr:| j}|du r>d}ndS ddt||f S )a return the DNS PTR string of the provided IP address object
If "suffix" is provided it will be appended as the second and top
level reverse domain.
If omitted it is implicitly set to the second and top level reverse
domain of the according IP address family
r Nz
in-addr.arpa.z ip6.arpa.r z%s.%s)r r] splitr r joinreversed)r> suffixZ exploded_ipr r r getPTR0 s z
IPAddr.getPTRc C s t | jS )z?Return the host name (DNS) of the provided IP address object
)r r8 r] r r r r getHostE s zIPAddr.getHostc C s | j tjkS )z4Either the IP object is of address family AF_INET
)r r r% r r r r r J s z
IPAddr.isIPv4c C s | j tjkS )z5Either the IP object is of address family AF_INET6
)r r r& r r r r r P s z
IPAddr.isIPv6c C sl |j s |jdkr | t|jv S | j|jkr0dS | jrDd|j? }n| jrXd|j? }ndS | j|@ |jkS )z9Return either the IP object is in the provided network
r Fr r ) r* r r r4 r r r r r )r> netr r r r r V s zIPAddr.isInNetc C s t |to|| kp|| S )z;Return whether the object (as network) contains given IP
)r r r r> r
r r r containsi s zIPAddr.containsc C s
| |S rl r r r r r __contains__n s zIPAddr.__contains__c C sl dd> d } d}| d|dddi}d}t ddD ]8}|d|> O }|dk rVd| |||A < d| ||| A < q.|S )Nr r r r r )range)Zm6Zm4Zmmapmir r r Z __getMaskMapr s zIPAddr.__getMaskMapc C sF d}| j d ur| j S tj| j}|d u r Zmplenr r r maskplen s
zIPAddr.maskplenc C s
t | jS )zIConvert mask string to prefix length
To be used only for IPv4 masks
)r r )r r r r r s zIPAddr.masktoplenc C s< t j| }|sdS |d}|dur2|dkr2|S |dS )zBSearch if text is an IP address, and return it if so, else None
NZIPv4r ZIPv6)r
IP_4_6_CREr group)r< r rw r r r r: s
zIPAddr.searchIP)N) r0 Zips2r
r r r r s
zIPAddrSet.__init__c C s4 t |tst|}| j|j O _t| | d S rl )r r r r r# r+ r r r r r+ s z
IPAddrSet.addc s: t tst t| p8| jo8t fdd| D S )Nc 3 s | ]}| V qd S rl r )r nr r r r rG z)IPAddrSet.__contains__..)r r r# r r r_ r r r r r s zIPAddrSet.__contains__N)r` ra rb r r r+ r r r r r rI s rI Fc
s z^ddl m}m}m m mmmmm }m
}m }m }m
m dd l}dd l }G fddd|
G fddd|G fddd|G
fd d
d
|}G d d d | d
fd|fd|fd
fd
fd|fd|fg _||jdpd
js&tddd d fdd d
fd d } W n: ty }
z t|
fd d } W Y d }
~
n
d }
~
0 0 t| t_| | S )!Nr ) StructureUnionPOINTERpointer get_errnocastc_ushortc_bytec_void_pc_char_pc_uintc_intc_uint16c_uint32c s e Zd Zdfd d fgZdS )z0_NetworkInterfacesAddrs..struct_sockaddr sa_familyZsa_data Nr` ra rb _fields_r )r r r r struct_sockaddr s
r c s& e Zd Zdfdfd d fgZdS )z3_NetworkInterfacesAddrs..struct_sockaddr_inZ
sin_familyZsin_portsin_addrr Nr r )r r r r r struct_sockaddr_in s
r c s2 e Zd Zdfdfdfd d fdfgZdS )z4_NetworkInterfacesAddrs..struct_sockaddr_in6Z sin6_familyZ sin6_portZ
sin6_flowinfo sin6_addr Z
sin6_scope_idNr r )r r r r r r struct_sockaddr_in6 s
r c s$ e Zd Zd fd fgZdS )z._NetworkInterfacesAddrs..union_ifa_ifuZ
ifu_broadaddrZ ifu_dstaddrNr r )r r r r
union_ifa_ifu s
r c @ s e Zd ZdS )z/_NetworkInterfacesAddrs..struct_ifaddrsN)r` ra rb r r r r struct_ifaddrs s r ifa_nextifa_nameZ ifa_flagsifa_addr ifa_netmaskZifa_ifuZifa_datacr z libc.getifaddrs is not availablec s s" | j }|V |jsq |jj }qd S rl )contentsr )ifapifar r r ifap_iter s
z*_NetworkInterfacesAddrs..ifap_iterFc s | j j}|j}|tjkr| j}t||j}|r| jj}|d ur|jtjkr| j}|dt||j 7 }t|S |tj kr| j}t||j
}|r
| jj}|d ur
|jtj kr
| j}|dt||j
7 }t|S d S )Nr~ ) r r r r r% r r r r r& r )r withMaskZsar1 r Znm)r r r r r r r
getfamaddr s*
z+_NetworkInterfacesAddrs..getfamaddrc 3 s~ } |}|dkr*t ~z@|D ](}|jd}|| }|r6||fV q6W | n | 0 d S )Nr zUTF-8)
getifaddrsOSErrorr decodeZ freeifaddrs)r r r2 r r r )r r r r libcr r r r rJ s
z8_NetworkInterfacesAddrs.._NetworkInterfacesAddrsc s d S rl r r ) _init_errorr r rJ s )F)F)ctypesr r r r r r r r r r r r r r Z ctypes.utilr ZCDLLutilZ find_libraryr NotImplementedErrorr, rd r rJ ) r r r r r r r r r rJ r3 r )r r r r r r r r r r r r r r r r r rJ s8 @
"
rJ )r )F)
__author__Z
__copyright__Z __license__r r r Zutilsr Zhelpersr r` r- r
r r objectr r r# rI rJ rd r r r r s&
b u
j