a
=*f;- @ sx d Z dZdZddlZddlZddlZddlZddlmZ ddl m
Z
m Z m Z m
Z
dd lm
Z
e
eZG d
d d eZdS ) z.Cyril Jaquier, Lee Clemens, Yaroslav HalchenkozPCopyright (c) 2004 Cyril Jaquier, 2011-2012 Lee Clemens, 2012 Yaroslav HalchenkoZGPL N )Actions ) getLogger_as_boolextractOptionsMyTime)r c @ s e Zd ZdZg dZd5ddZdd Zd d
Zd d Zd
d Z dd Z
e dd Z e dd Z
e
jdd Z
e dd Ze dd Ze dd Zejd d Zd6d d Ze d d! Zd"d# Zd$d% Zd&d' Zd7d(d)Zd*d+ Zd8d-d.Zd/d0 Zd9d1d2Zd3d4 Z dS ):Jailag Fail2Ban jail, which manages a filter and associated actions.
The class handles the initialisation of a filter, and actions. It's
role is then to act as an interface between the filter and actions,
passing bans detected by the filter, for the actions to then act upon.
Parameters
----------
name : str
Name assigned to the jail.
backend : str
Backend to be used for filter. "auto" will attempt to pick
the most preferred backend method. Default: "auto"
db : Fail2BanDb
Fail2Ban persistent database instance. Default: `None`
Attributes
----------
name
database
filter
actions
idle
status
)Z pyinotifyZpollingZsystemdautoNc C sp || _ t|dkr td| || _t | _d | _i | _ t
d| j d | _ |d urf|
|| _ || _d S )N z]Jail name %r might be too long and some commands might not function correctly. Please shortenzCreating new jail '%s') _Jail__dblenlogSyswarning _Jail__namequeueZQueue _Jail__queue
_Jail__filter _banExtrainfoname _realBackend _setBackendbackend)selfr r Zdb r 8/usr/lib/python3.9/site-packages/fail2ban/server/jail.py__init__G s
z
Jail.__init__c C s d| j j| jf S )Nz%s(%r)) __class____name__r r r r r __repr__Y s z
Jail.__repr__c C s> t |\}}| }| j}|dkr`|| jvrNtd||f td||f |||d }|D ]}t| d| }zT|f i | |dkr||krt d||f nt
d| t | | _ |W S t
y } z0t|dkrtjntjd||f W Y d }~qdd }~0 0 qdtd| j td| j d S )Nr
z.Unknown backend %s. Must be among %s or 'auto'z_init%sz9Could only initiated %r backend whenever %r was requestedzInitiated %r backendz)Backend %r failed to initialize due to %sz,Failed to initialize any backend for Jail %r)r lower _BACKENDSr error
ValueErrorindexgetattr
capitalizer r r _Jail__actions ImportErrorlogloggingDEBUGZERRORr RuntimeError)r r ZbeArgsZbackendsbZ
initmethoder r r r \ sD
zJail._setBackendc K s6 ddl m} td| j|f || fi || _d S )Nr )
FilterPollzJail '%s' uses poller %r)Z
filterpollr1 r r r r )r kwargsr1 r r r _initPolling s zJail._initPollingc K s6 ddl m} td| j|f || fi || _d S )Nr )FilterPyinotifyzJail '%s' uses pyinotify %r)Zfilterpyinotifyr4 r r r r )r r2 r4 r r r _initPyinotify s zJail._initPyinotifyc K s6 ddl m} td| j|f || fi || _d S )Nr )
FilterSystemdzJail '%s' uses systemd %r)Z
filtersystemdr6 r r r r )r r2 r6 r r r _initSystemd s zJail._initSystemdc C s | j S )zName of jail.
)r r r r r r s z Jail.namec C s | j S )z;The database used to store persistent data for the jail.
r r r r r database s z
Jail.databasec C s
|| _ d S Nr8 r valuer r r r9 s c C s | j S )z;The filter which the jail is using to monitor log files.
)r r r r r filter s z Jail.filterc C s | j S )z2Actions object used to manage actions for jail.
)r) r r r r actions s z Jail.actionsc C s | j jp| jjS )z-A boolean indicating whether jail is idle.
r= idler> r r r r r@ s z Jail.idlec C s || j _|| j_d S r: r? r; r r r r@ s basicc C s^ | j j|d}| jj|d}|dkrNt| j jdd }| jpF| j||gS d|fd|fgS )zThe status of the jail.
)flavorZstatsZFilter r ) r= statusr> typer replacer" r r )r rB fstatZastatr r r r rD s z Jail.statusc C s | j S )z-Retrieve whether queue has tickets to ban.
)r emptyr r r r hasFailTickets s zJail.hasFailTicketsc C s | j | dS )zQAdd a fail ticket to the jail.
Used by filter to add a failure for banning.
N)r Zputr ticketr r r
putFailTicket s zJail.putFailTicketc C s. z| j d}|W S tjy( Y dS 0 dS )zTGet a fail ticket from the jail.
Used by actions to get a failure for banning.
FN)r getr ZEmptyrJ r r r
getFailTicket s
zJail.getFailTicketc s | j }|dkrd }|d ur$|||< n||v r2||= td|| |dkrrt|||< ||rr| jd u rrtd |dv r|d urt|||< |dv s|dd d u r|dkrd d
|d ur|dkr| d ng D |d < |d g t
|d
d}t r|ffdd }n&|dd}t |dd}||fdd}|dd d urf|d |f fdd }|dd d ur|d |ffdd }||d< d S )NrC zSet banTime.%s = %s incrementzDban time increment is not available as long jail database is not set)maxtimerndtime)formulafactorrP rQ multipliers evformularT c S s g | ] }t |qS r )int).0ir r r
z(Jail.setBanTimeExtra.. Z
evmultipliersrS 1c s& | j | | jt k r | jnd S )N)TimeZCountr
)ban banFactor)rT r r s z&Jail.setBanTimeExtra..rR z?ban.Time * (1<<(ban.Count if ban.Count<20 else 20)) * banFactorz~inline-conf-expr~evalc S s t | jt|S r: )maxr^ rb )r_ r` rR r r r ra rZ rP c s t || S r: )minr_ rU )rP r r ra rZ rQ c s || t S r: )randomre )rQ r r ra rZ )
r r r r rM r9 r r Z str2secondssplitrb r
compile)r optr< ber` rU rR r )rP rT rQ r setBanTimeExtra s@
,
zJail.setBanTimeExtrac C s |d ur| j |d S | j S r: )r rM )r ri r r r getBanTimeExtra s zJail.getBanTimeExtrac C s$ | j dr| j ddS | j S )z)Returns max possible ban-time of jail.
rO rP r] )r rM r>
getBanTimer r r r
getMaxBanTime s
zJail.getMaxBanTimeTc C sR z
| j dur
| jdr.d}|r8| }n
| j }| j j| ||| jjj dD ]}zpd|_
| j | |rtW qR||}t
| }|dkr|dkr||8 }|dkr|dkrW qR| | W qR ty } z&tjd|t tjkd W Y d}~qRd}~0 0 qRW n@ tyL } z&tjd |t tjkd W Y d}~n
d}~0 0 dS )
z5Restore any previous valid bans from the database.
NrO )Zjail
forbantimecorrectBanTimeZ
maxmatchesTr] r zRestore ticket failed: %sexc_infozRestore bans failed: %s)r9 r rM rn r> rm ZgetCurrentBansr= Z failManagerZ
maxMatchesZrestoredZ_inIgnoreIPListZgetIDr timeZgetTimerL Exceptionr r$ getEffectiveLevelr, r- )r rp ro rK ZbtmZdiftmr0 r r r restoreCurrentBans s8
" zJail.restoreCurrentBansc C s< t d| j | j | j | t d| j dS )zStart the jail, by starting filter and actions threads.
Once stated, also queries the persistent database to reinstate
any valid bans.
zStarting jail %rzJail %r startedN)r debugr r= startr> rv r r r r r rx = s
z
Jail.startc C s |rt d| j | j| jfD ]f}z |r0| |r<| W q ty } z,t jd|| j|t t
j kd W Y d}~q d}~0 0 q |rt d| j dS )z9Stop the jail, by stopping filter and actions threads.
zStopping jail %rz Stop %r of jail %r failed: %srq NzJail %r stopped)
r rw r r= r> stopjoinrt r$ ru r, r- r )r ry rz objr0 r r r ry I s z Jail.stopc C s | j p| j S )z?Check jail "isAlive" by checking filter and actions threads.
)r= isAliver> r r r r r| \ s z Jail.isAlive)r
N)rA )N)T)TT) r
__module__ __qualname____doc__r# r r! r r3 r5 r7 propertyr r9 setterr= r> r@ rD rI rL rN rk rl rn rv rx ry r| r r r r r ' sD
&
-
$
r )
__author__Z
__copyright__Z __license__r, Zmathrf r r> r Zhelpersr r r r Zmytimer r objectr r r r r s