🔐 Sid Gifari File Manager Pro
v8.0.5 | 2026-06-14 14:32:54 | PHP 8.1.34
📂
/ (Root)
/
usr
/
lib
/
python3.9
/
site-packages
/
fail2ban
/
server
/
__pycache__
📍 /usr/lib/python3.9/site-packages/fail2ban/server/__pycache__
🔄 Refresh
✏️
Editing: actions.cpython-39.pyc
Read Only
a =�*f�a � @ s� d Z dZdZddlZddlZddlZddlZzddlmZ W n e yZ ddl mZ Y n0 ddl m Z ddl m Z mZ dd lmZ dd lmZ dd lmZmZmZ dd lmZ dd lmZ ddlm Z ddl m Z e e �Z G dd� dee�Z!dS )z Cyril Jaquierz Copyright (c) 2004 Cyril JaquierZGPL� N)�Mapping)� OrderedDict� )� BanManager� BanTicket)�IPAddr)� JailThread)� ActionBase� CommandAction� CallingMap)�MyTime)� Observers)�Utils� )� getLoggerc @ s e Zd ZdZdd� Zedd� �Zd?dd �Zd@d d �Zd d� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd � Zd d � ZdAd d �Zd!d"� ZdBd#d$�ZdCd%d&�Zd'd(� ZG d)d*� d*e�Zd+d,� ZdDd.d/�ZdEd0d1�ZdFd2d3�Z d4d5� Z dGd6d7�Z dHd8d9�Z dId:d;�Z dJd=d>�Z!dS )K�Actionsa� Handles jail actions. This class handles the actions of the jail. Creation, deletion or to actions must be done through this class. This class is based on the Mapping type, and the `add` method must be used to add new actions. This class also starts and stops the actions, and fetches bans from the jail executing these bans via the actions. Parameters ---------- jail: Jail The jail of which the actions belongs to. Attributes ---------- daemon ident name status active : bool Control the state of the thread. idle : bool Control the idle state of the thread. sleeptime : int The time the thread sleeps for in the loop. c C sL t j| d|j d� || _t� | _t� | _d| _d| _ d| _ | j d | _ d S )Nzf2b/a.)�namer � r ) r �__init__r �_jailr �_actionsr � banManager�banEpoch� _Actions__lastConsistencyCheckTM� banPrecedence� unbanMaxCount)�self�jail� r �;/usr/lib/python3.9/site-packages/fail2ban/server/actions.pyr N s zActions.__init__c C sF t �| �}t|d�s"td| ��n t|jt�sBtd| |jjf ��|S )N�Actionz&%s module does not have 'Action' classz0%s module %s does not implement required methods)r Zload_python_module�hasattr� RuntimeError� issubclassr r �__name__)� pythonModule�modr r r �_load_python_module\ s � ��zActions._load_python_moduleNFc C s� || j v rN|std| ��| j | }t|d�rNt|d�rJ|�� || j|< dS |du rdt| j|�}n | �|�}|j| j|fi |��}|| j |< dS )a� Adds a new action. Add a new action if not already present, defaulting to standard `CommandAction`, or specified Python module. Parameters ---------- name : str The name of the action. pythonModule : str, optional Path to Python file which must contain `Action` class. Default None, which means `CommandAction` is used. initOpts : dict, optional Options for Python Action, used as keyword arguments for initialisation. Default None. Raises ------ ValueError If action name already exists. RuntimeError If external Python module does not have `Action` class or does not implement necessary methods as per `ActionBase` abstract class. zAction %s already exists�reload�clearAllParamsN) r � ValueErrorr! r) �_reload_actionsr r r' r )r r r% �initOptsr( �actionZcustomActionModuler r r �addi s z Actions.addTc s� |rt � � _n�t� d�r�� j�� D ]0\}}|� jv r"� j| jf i |rJ|ni �� q"t� fdd�� j�� D ��}t|�r�� jd|dd� � j |d� t � d� dS ) z@ Begin or end of reloading resp. refreshing of all parameters r+ c 3 s$ | ] \}}|� j vr||fV qd S �N)r+ ��.0r r- �r r r � <genexpr>� s �z!Actions.reload.<locals>.<genexpr>FT)�db�actions�stop�r5 N) �dictr+ r! �itemsr r( r �len�_Actions__flushBan� stopActions�delattr)r Zbeginr r, Zdelactsr r2 r r( � s zActions.reloadc C s0 z | j | W S ty* td| ��Y n0 d S �NzInvalid Action name: %s�r �KeyError�r r r r r � __getitem__� s zActions.__getitem__c C s0 z | j |= W n ty* td| ��Y n0 d S r> r? rA r r r � __delitem__� s zActions.__delitem__c C s t | j�S r/ )�iterr r2 r r r �__iter__� s zActions.__iter__c C s t | j�S r/ )r: r r2 r r r �__len__� s zActions.__len__c C s dS �NFr )r �otherr r r �__eq__� s zActions.__eq__c C s t | �S r/ )�idr2 r r r �__hash__� s zActions.__hash__c C s( t �|�}| j�|� t�d| � d S )Nz banTime: %s)r Z str2secondsr � setBanTime�logSys�info)r �valuer r r rL � s zActions.setBanTimec C s | j �� S r/ )r � getBanTimer2 r r r rP � s zActions.getBanTimec sD | j �� � |s� S t|�dkr2|d � v r.dS dS � fdd�|D �S )Nr r c s g | ]}|� v rd nd�qS )r r r �r1 �ip��lstr r � <listcomp>� � z%Actions.getBanned.<locals>.<listcomp>)r � getBanListr: )r Zidsr rS r � getBanned� s zActions.getBannedc C s | j jd|d�S )zkReturns the list of banned IP addresses. Returns ------- list The list of banned IP addresses. T)Zordered�withTime)r rW )r rY r r r rW � s zActions.getBanListc s< t �� � t|t�r&� fdd�|D �}n t|� �f}| �|�S )zBan an IP or list of IPs.c 3 s | ]}t |� �V qd S r/ )r rQ �ZunixTimer r r3 � rV z&Actions.addBannedIP.<locals>.<genexpr>)r �time� isinstance�listr �_Actions__checkBan)r rR �ticketsr rZ r � addBannedIP� s zActions.addBannedIPc C s2 |du r| � |�S t|ttf�r~g }d}|D ]<}z|| �|||�7 }W q, tyf |sb|�|� Y q,0 q,|rztd| ��|S |r�| jjdur�| jj� | j|� | j � |�}|dur�| � |� nnt|t ��st |�}|j�stt|j| j �� ��} | �r| �| ||�S d| } t�tj| � |�r&dS t| ��dS )aO Removes banned IP calling actions' unban method Remove a banned IP now, rather than waiting for it to expire, even if set to never expire. Parameters ---------- ip : list, str, IPAddr or None The IP address (or multiple IPs as list) to unban or all IPs if None Raises ------ ValueError If `ip` is not banned Nr znot banned: %rz%s is not bannedr )r; r\ r] �tuple�removeBannedIPr* �appendr �database�delBanr Z getTicketByID�_Actions__unBanr ZisSingle�filter�containsrW rM �log�loggingZMSG) r rR r4 ZifexistsZmissed�cnt�i�ticketZipa�ips�msgr r r rb � s> zActions.removeBannedIPc C s� |du r| j }tt|�� ��D ]v\}}z |�� W nF tyx } z.tjd| jj ||t� � t j kd� W Y d}~n d}~0 0 | j |= t� d| jj |� q dS )z>Stops the actions in reverse sequence (optionally filtered) Nz(Failed to stop jail '%s' action '%s': %s��exc_infoz%s: action %s terminated)r �reversedr] r9 r6 � ExceptionrM �errorr r �getEffectiveLevelrj �DEBUG�debug)r r5 r r- �er r r r< / s � zActions.stopActionsc s� d}� j �� D ]\\}}z |�� W q tyh } z.tjd� jj||t�� t j kd� W Y d}~qd}~0 0 q� j �rƐz� j r�t� d� t�� fdd�dd� � j� t� d � W qld}t� j� jjt�� �}t�d d |� j� t�� fd d�|��r� �� }||7 }|�r|� jk�rz� j �rv|d 9 }t�d d|�rF|� jk �rF|n� j|� j� � �|�rn|� jk �rn|n� j� d}W ql t�y� } z,tjd� jj|t�� t j kd� W Y d}~qld}~0 0 ql� jdd� � � � dS )z�Main loop for Threading. This function is the main loop of the thread. It checks the jail queue and executes commands when an IP address is banned. Returns ------- bool True when the thread exits nicely. r z)Failed to start jail '%s' action '%s': %srp NzActions: enter idle modec s � j p� j S r/ )�active�idler r2 r r �<lambda>V rV z Actions.run.<locals>.<lambda>c S s dS rG r r r r r r{ W rV zActions: leave idle mode� z1Actions: wait for pending tickets %s (default %s)c s � j p� jjS r/ )ry r ZhasFailTicketsr r2 r r r{ ^ rV r z+Actions: check-unban %s, bancnt %s, max: %sz*[%s] unhandled error in actions thread: %sT)r6 ) r r9 �startrs rM rt r r ru rj rv ry rz rw r �wait_forZ sleeptime�minr Z_nextUnbanTimer r[ ri r^ r r �_Actions__checkUnBanr; r< )r rk r r- rx ZbancntZwtr r2 r �run? sL � � ," � z Actions.runc @ s� e Zd ZdZdd� dd� dd� dd� dd� dd� d d� d d� d d� d d� d d� d%dd�dd� dd� dd� dd� dd� dd� dd� dd� dd� d�Zejd Zddefd d �Zd d � Zd d!� Z d&d#d$�Z dS )'zActions.ActionInfo)�fid� raw-ticketc C s | j �� S r/ )�_ActionInfo__ticketZgetIPr2 r r r r{ w rV zActions.ActionInfo.<lambda>c C s | d j S �NrR )Z familyStrr2 r r r r{ x rV c C s | d � d�S )NrR � )ZgetPTRr2 r r r r{ y rV c C s | d � � S r� )ZgetHostr2 r r r r{ z rV c C s | j �� S r/ )r� �getIDr2 r r r r{ { rV c C s | j �� S r/ )r� � getAttemptr2 r r r r{ | rV c C s | j �� S r/ )r� �getTimer2 r r r r{ } rV c C s | � � S r/ )� _getBanTimer2 r r r r{ ~ rV c C s | j �� S r/ )r� Z getBanCountr2 r r r r{ rV c C s d� | j�� �S �N� )�joinr� � getMatchesr2 r r r r{ � rV c C s | j jr dS dS )Nr r )r� �restoredr2 r r r r{ � rV Nc C s | j �|�S r/ )r� ZgetData)r �tagr r r r{ � rV c C s d� | �d��� �S )Nr� T�r� �_mi4ipr� r2 r r r r{ � rV c C s d� | �� �� �S r� r� r2 r r r r{ � rV c C s | � d��� S )NT�r� r� r2 r r r r{ � rV c C s | � � �� S r/ r� r2 r r r r{ � rV c C s t | j�S r/ )�reprr� r2 r r r r{ � rV c C s | j jj�� S r/ )�_ActionInfo__jailr5 r �sizer2 r r r r{ � rV c C s | j jj�� S r/ )r� r5 r � getBanTotalr2 r r r r{ � rV c C s | j jj�� S r/ )r� rg � failManagerr� r2 r r r r{ � rV c C s | j jj�� S r/ )r� rg r� Z getFailTotalr2 r r r r{ � rV )rR Zfamilyzip-revzip-hostr� Zfailuresr[ ZbantimeZbancount�matchesr� zF-*Z ipmatchesZ ipjailmatchesZ ipfailuresZipjailfailuresr� z jail.bannedzjail.banned_totalz jail.foundzjail.found_total)Z__ticketZ__jail�__mi4ipTc C s$ || _ || _t� | _|| _|| _d S r/ )r� r� r8 Zstorage� immutable�data)r rm r r� r� r r r r � s zActions.ActionInfo.__init__c C s | � | j| j| j| j�� �S r/ )� __class__r� r� r� r� �copyr2 r r r r� � s zActions.ActionInfo.copyc C s& | j �� }|d u r | jj�� }t|�S r/ )r� rP r� r5 �int)r �btimer r r r� � s z Actions.ActionInfo._getBanTimeFc C s� t | d�si | _| j}|r dnd}||v rD|| dur>|| S | jS zT| j}| d }d||< |jsj| jW S |r�|jj|d�||< n|jj||d�||< W nD ty� } z,tjd||j |t� � t j kd � W Y d}~n d}~0 0 || dur�|| S | jS ) a� Gets bans merged once, a helper for lambda(s), prevents stop of executing action by any exception inside. This function never returns None for ainfo lambdas - always a ticket (merged or single one) and prevents any errors through merging (to guarantee ban actions will be executed). [TODO] move merging to observer - here we could wait for merge and read already merged info from a database Parameters ---------- overalljails : bool switch to get a merged bans : False - (default) bans merged for current jail only True - bans merged for all jails of current ip address Returns ------- BanTicket merged or self ticket only r� �allr NrR )rR )rR r z+Failed to get %s bans merged, jail '%s': %srp ) r! Z_ActionInfo__mi4ipr� r� rd Z getBansMergedrs rM rt r ru rj rv )r Z overalljails�mi�idxr rR rx r r r r� � s, � zActions.ActionInfo._mi4ip)N)F) r$ � __module__� __qualname__Z CM_REPR_ITEMSZAI_DICTr � __slots__r r� r� r� r r r r � ActionInfor s8 � r� c C s$ |st dt�� �}t�|| j�}|S )Nr� )r r r[ r r� r )r rm �aInfor r r �_getActionInfo� s zActions._getActionInfo�d c c s0 d}||k r,| j �� }|s q,|V |d7 }qdS )zAGenerator to get maximal count failure tickets from fail-manager.r r N)r Z getFailTicket)r �countrk rm r r r Z__getFailTickets� s zActions.__getFailTicketsc s� d}|s| � | j�}d}|D �]n}t�|�� |�| j�� �}� �� }| �� �}i }| jj� |d��rX|d7 }t j dur�� j s�t j � d� | j |� t�d| j j� j s�dnd|� | j�� D ]�\} } z2� j r�t| d d �r�W q�|js�|�� | �|� W q� t�y< } z0tjd | j j| || t�� tjkd � W Y d} ~ q�d} ~ 0 0 q�d � _ | j �r�| j � _ q |� dd��rzt� d| j j|� q |� d� �� � j �r~|� � � � � } | dk �r�tjn| dk �r�tj!ntj"} t�#| d| j j|� � j | j k�r:| dk�r:|�s:t$�%� | j&d k�r:t$�%� | _&| j�'� D ]} t(| d��r | �)� �q � j | j k �r�|�sjt*� fdd�| j�� D ��}|| j+� |d�7 }q || �+� �7 }q |�r�t�,d|| j�-� | j�.� | j j� |S )a Check for IP address to ban. If tickets are not specified look in the jail queue for FailTicket. If a ticket is available, it executes the "ban" command and adds a ticket to the BanManager. Returns ------- bool True if an IP address get banned. r N)�reasonr ZbanFoundz [%s] %sBan %sr� zRestore � norestoredF�9Failed to execute ban jail '%s' action '%s' info '%r': %srp TZexpiredz [%s] Ignore %s, expired bantimerm � �< z[%s] %s already banned�consistencyCheckc 3 s& | ] \}}|j � j kr||fV qd S r/ )r r0 �ZbTicketr r r3 ' s �z%Actions.__checkBan.<locals>.<genexpr>r7 z"Banned %s / %s, %s ticket(s) in %r)/�_Actions__getFailTicketsr r �wraprP r r� r� Z addBanTicketr ZMainr� r. r rM �noticer r r9 �getattrr� �resetZbanrs rt ru rj rv �bannedr �getrN r� ZNOTICEZWARNINGri r r[ r �valuesr! r� r8 �_Actions__reBanrw r� r� )r r_ rk Z rebanactsrm r� rR r� r� r r- rx ZdiftmZllr r� r Z __checkBan� st � � ��zActions.__checkBanc C s� |p| j }|�� }| �|�}|rTt�d| jj|t|�dkrNdt|� � �d nd� |� � D ]�\}}z0t� d| jj||� |j s�|� � |�|� W q\ ty� } z4tjd| jj|||t�� tjkd� W Y d }~ dS d }~0 0 q\d |_| j� r�| j|_dS ) z�Repeat bans for the ticket. Executes the actions in order to reban the host given in the ticket. Parameters ---------- ticket : Ticket Ticket to reban z[%s] Reban %s%sr z , action %rr r� z[%s] action %r: reban %sz;Failed to execute reban jail '%s' action '%s' info '%r': %srp NT)r r� r� rM r� r r r: r] �keysr9 rw r� r� Zrebanrs rt ru rj rv r� r ) r rm r5 ri rR r� r r- rx r r r Z__reBan4 s* 4 � zActions.__reBanc C s� | j �|�sd S d }| j�� D ]�\}}zN|jr>t|dd�r>W q |jsHW q |d u rZ| �|�}|jsh|� � |� |� W q t y� } z0t j d| jj|||t �� tjkd� W Y d }~q d }~0 0 q d S )Nr� Fr� rp )r Z _inBanListr r9 r� r� Z _prolongabler� r� r� Zprolongrs rM rt r r ru rj rv )r rm r� r r- rx r r r � _prolongBanV s$ �zActions._prolongBanc C sP | j �t�� |�}|D ]}| �|� qt|�}|rLt�d|| j �� | j j � |S )zKCheck for IP address to unban. Unban IP addresses which are outdated. z Unbanned %s, %s ticket(s) in %r) r Z unBanListr r[ rf r: rM rw r� r r )r ZmaxCountrT rm rk r r r Z __checkUnBanm s �zActions.__checkUnBanc s� d}|du r"t �d� | j�� }nd}t| j�}d}i }|durD|n| j�� D ]�\}� z<t� d�r�t� t �rr� j r�t � d| j j |� � �� r�W qNW n� t�y } zft jd| j j || t �� tjkd � t �d � t� d �r�� �fd d �} � �| � W Y d} ~ qNW Y d} ~ n d} ~ 0 0 t �d� � ||< qN|}|�rZ| j jdu�rZt �d� | j j�| j � |D ] } | j| ||d� |d7 }�q^t �d|| j�� | j j � |S )z�Flush the ban list. Unban all IP address which are still in the banning list. If actions specified, don't flush list - just execute unban for given actions (reload, obsolete resp. removed actions). TNz Flush ban listFr �flushz [%s] Flush ticket(s) with %sz1Failed to flush bans in jail '%s' action '%s': %srp z'No flush occurred, do consistency checkr� c s" �r t � dd �s t�d� dS dS )NZactionrepair_on_unbanz,Invariant check failed. Flush is impossible.FT)r� rM rt r �r- r6 r r � _beforeRepair� s z)Actions.__flushBan.<locals>._beforeRepairz! Unban tickets each individuallyz Flush jail in database)r5 ri r z! Unbanned %s, %s ticket(s) in %r)rM rw r Z flushBanListrD r r9 r! r\ r Z actionflushr� r r r� rs rt ru rj rv rN r� rd re rf r� ) r r4 r5 r6 ri rT rk � unbactionsr rx r� rm r r� r Z __flushBan{ sJ � " �zActions.__flushBanc C s� |du r| j }n|}|�� }| �|�}|r<t�d| jj|� |�� D ]�\}}z0t�d| jj||� |j sp|� � |� |� W qD t y� } z0tj d| jj||| t�� tjkd� W Y d} ~ qDd} ~ 0 0 qDdS )z�Unbans host corresponding to the ticket. Executes the actions in order to unban the host given in the ticket. Parameters ---------- ticket : FailTicket Ticket of failures of which to unban Nz [%s] Unban %sz[%s] action %r: unban %sz;Failed to execute unban jail '%s' action '%s' info '%r': %srp )r r� r� rM r� r r r9 rw r� r� Zunbanrs rt ru rj rv ) r rm r5 ri r� rR r� r r- rx r r r Z__unBan� s$ �zActions.__unBan�basicc C s� g d�}|du s||vr*t �d||f � |dkrF| j�� | j�� fS |dkrb| j�� }t|�}n | j�� }d|fd| j�� fg}|dkr�|d|fg7 }|d kr�| j�� }|d | j�|�fd | j� |�fd | j� |�fg7 }|S ) zEStatus of current and total ban counts and current banned IP list. )�shortr� �stats�cymruNz9Unsupported extended jail status flavor %r. Supported: %sr� r� zCurrently bannedz Total bannedzBanned IP listr� zBanned ASN listzBanned Country listzBanned RIR list) rM Zwarningr r� r� rW r: ZgetBanListExtendedCymruInfoZgeBanListExtendedASNZgeBanListExtendedCountryZgeBanListExtendedRIR)r ZflavorZsupported_flavorsr� rk �retZ cymru_infor r r �status� s. � ��zActions.status)NNF)T)F)NTF)N)r� )N)NT)N)FNF)NT)r� )"r$ r� r� �__doc__r � staticmethodr' r. r( rB rC rE rF rI rK rL rP rX rW r` rb r< r� r r� r� r� r^ r� r� r� r; rf r� r r r r r 2 s< . : 3] U " 6 r )"� __author__Z __copyright__Z __license__rj �os�sysr[ �collections.abcr � ImportError� collectionsr Z banmanagerr r Zipdnsr Z jailthreadr r- r r r Zmytimer Zobserverr Zutilsr Zhelpersr r$ rM r r r r r �<module> s*
💾 Save Changes
❌ Cancel