a
i7S @ s d Z g dZddlmZ ddlZddlZddlZddlmZ ddl m
Z
m Z m Z m
Z
mZmZmZmZ ddlmZmZmZ ddlmZmZ ddlmZmZm Z m Z dd l m Z dd
lm Z dd l!m"Z" G d d
d
eZ#G dd deZ$dd Z%dddZ&dS )z$ipset io XML handler, reader, writer)IPSet ipset_reader ipset_writer N)config)checkIPcheckIP6 checkIPnMask
checkIP6nMask check_mac
check_portcheckInterface
checkProtocol) IO_ObjectIO_Object_ContentHandlerIO_Object_XMLGenerator) IPSET_TYPESIPSET_CREATE_OPTIONS)check_icmp_namecheck_icmp_type_codecheck_icmpv6_namecheck_icmpv6_type_code)log)errors)
FirewallErrorc s e Zd ZdddddddifddgffZdZg d Zd
d
d gd gd
d
ZdgdgdZ fddZdd Z e
dd Z dd Z fddZ
ZS )r )version )shortr ) descriptionr )typer optionsr entriesz
(ssssa{ss}as))_-:.Nr name)r r ipsetoptionentryr value)r& r' c s< t t| d| _d| _d| _d| _g | _i | _d| _ d S Nr F)
superr __init__r r r r r r appliedself __class__ :/usr/lib/python3.9/site-packages/firewall/core/io/ipset.pyr, C s zIPSet.__init__c C s8 d| _ d| _d| _d| _| jd d = | j d| _d S r* )r r r r r r clearr- r. r2 r2 r3 cleanupM s
z
IPSet.cleanupc C sB d}d|v r |d dkr d}| ds6ttjd| |dd d}| d}t|t|ksnt|d k rttjd
| |f t|D ]\}}|| }|d krd |v rV|dkrV|d krttjd
|| |f |d } t| dkrttjd|| ||f | D ]F}
|dkr$t|
r8|dkr t |
s ttjd|
| ||f q nh|dkr|dkrttjd|| ||f |dkrt
} nt} nt } | |stt| || d S )NrS 0r8 r )rF r r ZIPSET_WITH_TIMEOUTr rQ r+
import_config)r/ r r] r( r0 r2 r3 rd 4 s
zIPSet.import_config)__name__
__module__ __qualname__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr, r5 staticmethodrQ r` rd
__classcell__r2 r2 r0 r3 r , s2
Cr c @ s e Zd Zdd Zdd ZdS )ipset_ContentHandlerc C s t | || | j|| |dkrpd|v rX|d tvrLttjd|d |d | j_d|v rl|d | j_ nt|dkr|nh|dkrn\|dkrd}d |v r|d }|d
d vrttj
d |d
| jjd
kr|d
dv rttj
d|d
| jjf |d
d v r"|s"ttj
d|d
|d
dv rz t |}W n, t yh ttj
d|d
|f Y n0 |dk rttj
d|d
|f |d
dkr|dvrttj||d
| jjvr|| jj|d
< ntd|d
d S )Nr& r z%sr r r r' r r) r% )r6 rS rT rU zUnknown option '%s'zhash:mac)r6 z%Unsupported option '%s' for type '%s'z&Missing mandatory value of option '%s'rR rV r rW r6 rX z Option %s already set, ignoring.)r startElementrO Zparser_check_element_attrsr r r rY r r ZINVALID_OPTIONrI rJ r[ r\ r r warning)r/ r% attrsr) r_ r2 r2 r3 rk ? sx
z!ipset_ContentHandler.startElementc C s( t | | |dkr$| jj| j d S )Nr( )r
endElementrO r appendZ_element)r/ r% r2 r2 r3 rn v s z ipset_ContentHandler.endElementN)re rf rg rk rn r2 r2 r2 r3 rj > s 7rj c C s& t }| ds ttjd| | d d |_||j | |_||_| t
j rVdnd|_ |j |_
t|}t }|| d|| f }t|dn}td }|| z|| W n: tjy } z ttjd| W Y d }~n
d }~0 0 W d n1 s
0 Y ~~d |jv r^|jd d
kr^t|jd kr^t d |j |jd d = d } t }
| t|jk r |j| |
v rt d
|j| |j | ntz | |j| |j|j! W n> ty } z$t d| |j | W Y d } ~ n"d } ~ 0 0 |
"|j| | d7 } qh~
|S )Nz.xmlz'%s' is missing .xml suffixFT%s/%srbznot a valid ipset file: %srS rb r z6ipset '%s': timeout option is set, entries are ignoredz Entry %s already set, ignoring.z
%s, ignoring.r: )#r rH r r Z INVALID_NAMEr% Z
check_namefilenamepathrC r
ETC_FIREWALLDZbuiltindefaultrj saxZ make_parserZsetContentHandleropenZ InputSourceZ
setByteStreamparseZSAXParseExceptionrD Z getExceptionr rF r r rl setpoprQ r add) rs rt r& handlerparserr% fsourcemsgrM Z entries_seter2 r2 r3 r { sd
: " r c
C s |r|n| j }| jr$d|| jf }nd|| jf }tj |rzt|d| W n2 ty } zt d|| W Y d }~n
d }~0 0 tj
|}| t j
rtj |stj t j
stt j
d t|d tj|ddd}t|}| d | ji}| jr| jd
kr| j|d < |d | |d
| jrz| jd
krz|d |di || j |d |d
| jr| jd
kr|d |di || j |d |d
| j D ]L\} }
|d |
d
kr| d| |
d n| dd| i |d
q| j D ]:} |d |di || |d |d
q"|d |d
| | ~d S )Nrq z %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si ZwtzUTF-8)modeencodingr r r r&
z r r r' )r% r) r% r( )!rt rs r% osexistsshutilcopy2 Exceptionr errordirnamerC r ru mkdiriorx r Z
startDocumentr r rk ZignorableWhitespacer Z
charactersrn r r rL Z
simpleElementr Z endDocumentclose) r& rt _pathr% r dirpathr r} rm r^ r) r( r2 r2 r3 r sf $
r )N)'__doc____all__Zxml.saxrw r r r Zfirewallr Zfirewall.functionsr r r r r
r r r
Zfirewall.core.io.io_objectr r r Zfirewall.core.ipsetr r Zfirewall.core.icmpr r r r Zfirewall.core.loggerr r Zfirewall.errorsr r rj r r r2 r2 r2 r3 s& ( =3