D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
lib
/
python2.7
/
site-packages
/
firewall
/
core
/
Filename :
ipset.pyo
back
Copy
� �c�`c @ s d Z d d d g Z d d l Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z m Z d d l m Z d Z d d d d d d d d d d d g Z i d d 6d d 6d d 6d d 6Z i d d 6d d 6d! d 6Z d e f d" � � YZ d# � Z d$ � Z d S(% s The ipset command wrappert ipsett check_ipset_namet remove_default_create_optionsi����N( t errors( t FirewallError( t runProg( t log( t tempFilet readfile( t COMMANDSi s hash:ips hash:ip,ports hash:ip,port,ips hash:ip,port,nets hash:ip,marks hash:nets hash:net,nets hash:net,ports hash:net,port,nets hash:net,ifaces hash:macs inet|inet6t familyt valuet hashsizet maxelems value in secst timeoutt inett 1024t 65536c B s� e Z d Z d � Z d � Z d � Z d � Z d � Z d d � Z d � Z d � Z d � Z d d � Z d d d � Z d � Z d d � Z d d d � Z d � Z d � Z d � Z d � Z RS( s ipset command wrapper classc C s t d | _ d | _ d S( NR ( R t _commandt name( t self( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt __init__J s c C s� g | D] } d | ^ q } t j d | j | j d j | � � t | j | � \ } } | d k r� t d | j d j | � | f � � n | S( s Call ipset with argss %ss %s: %s %st i s '%s %s' failed: %s( R t debug2t __class__R t joinR t ValueError( R t argst itemt _argst statust ret( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt __runN s % c C s/ t | � t k r+ t t j d | � � n d S( s Check ipset names ipset name '%s' is not validN( t lent IPSET_MAXNAMELENR R t INVALID_NAME( R R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt check_nameY s c C s� g } d } y | j d g � } Wn$ t k rH } t j d | � n X| j � } t } x{ | D]s } | r� | j � j d d � } | d | k r� | d t k r� | j | d � q� n | j d � rb t } qb qb W| S( s? Return types that are supported by the ipset command and kernelt s --helps ipset error: %si i s Supported set types:N( t _ipset__runR R t debug1t splitlinest Falset stript splitt Nonet IPSET_TYPESt appendt startswitht True( R R t outputt ext linest in_typest linet splits( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_supported_types_ s c C s; t | � t k s | t k r7 t t j d | � � n d S( s Check ipset types! ipset type name '%s' is not validN( R! R" R- R R t INVALID_TYPE( R t type_name( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt check_typet s c C s� | j | � | j | � d | | g } t | t � r� xF | j � D]5 \ } } | j | � | d k rE | j | � qE qE Wn | j | � S( s+ Create an ipset with name, type and optionst createR% ( R$ R: t isinstancet dictt itemsR. R& ( R t set_nameR9 t optionsR t keyt val( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_createz s c C s | j | � | j d | g � S( Nt destroy( R$ R& ( R R? ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_destroy� s c C s d | | g } | j | � S( Nt add( R& ( R R? t entryR ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_add� s c C s d | | g } | j | � S( Nt del( R& ( R R? RG R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_delete� s c C s? d | | g } | r2 | j d d j | � � n | j | � S( Nt tests %sR ( R. R R& ( R R? RG R@ R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyRK � s c C sK d g } | r | j | � n | r5 | j | � n | j | � j d � S( Nt lists ( R. t extendR& R+ ( R R? R@ R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_list� s c C s� | j d d g � } i } d } } i } x�| D]z} t | � d k rP q2 n g | j d d � D] } | j � ^ qc } t | � d k r� q2 q2 | d d k r� | d } q2 | d d k r� | d } q2 | d d k r2 | d j � } d } xz | t | � k ro| | } | d k rbt | � | k rK| d 7} | | | | <qbt j d | � i Sn | d 7} q� W| r�| r�| t | � f | | <n d } } | j � q2 q2 W| S( s" Get active ipsets (only headers) R@ s -tersei t :i i t Namet Typet HeaderR R R R t netmasks& Malformed ipset list -terse output: %sN( R R R R RS ( RN R, R! R+ R* R t errorR t clear( R R3 R t _namet _typet _optionsR5 t xt pairR6 t it opt( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_get_active_terse� sD + c C s, d g } | r | j | � n | j | � S( Nt save( R. R& ( R R? R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyR^ � s c C s� | j | � | j | � t � } d | k r< d | } n d | | d g } | r� xF | j � D]5 \ } } | j | � | d k ra | j | � qa qa Wn | j d d j | � � | j d | � xj | D]b } d | k r� d | } n | r| j d | | d j | � f � q� | j d | | f � q� W| j � t j | j � } t j d | j | j d | j | j f � d g } t | j | d | j �\ } } t j � d k rSy t | j � Wn t k r�qSXd } xl t | j � D]X } t j d | | f d d d d �| j d � sBt j d d d �n | d 7} q�Wn t j | j � | d k r�t d | j d j | � | f � � n | S( NR s '%s'R; s -existR% s %s s flush %s s add %s %s %s s add %s %s s %s: %s restore %ss %s: %dt restoret stdini i s %8d: %st nofmtt nli s s '%s %s' failed: %s( R$ R: R R> R. t writeR t closet ost statR R R R R t st_sizeR t getDebugLogLevelR t Exceptiont debug3t endswitht unlinkR ( R R? R9 t entriest create_optionst entry_optionst temp_fileR RA RB RG Rf R R R[ R5 ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_restore� sV # c C s, d g } | r | j | � n | j | � S( Nt flush( R. R& ( R R? R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt set_flush s c C s | j d | | g � S( Nt rename( R& ( R t old_set_namet new_set_name( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyRt s c C s | j d | | g � S( Nt swap( R& ( R t set_name_1t set_name_2( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyRw s c C s | j d g � S( Nt version( R& ( R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyRz s N( t __name__t __module__t __doc__R R& R$ R7 R: R, RC RE RH RJ RK RN R] R^ Rq Rs Rt Rw Rz ( ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyR G s& ' 7 c C s t | � t k r t St S( s" Return true if ipset name is valid( R! R" R) R0 ( R ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyR s c C sK | j � } x8 t D]0 } | | k r t | | | k r | | =q q W| S( s( Return only non default create options ( t copyt IPSET_DEFAULT_CREATE_OPTIONS( R@ RX R\ ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyR s ( R} t __all__t os.pathRe t firewallR t firewall.errorsR t firewall.core.progR t firewall.core.loggerR t firewall.functionsR R t firewall.configR R" R- t IPSET_CREATE_OPTIONSR t objectR R R ( ( ( s7 /usr/lib/python2.7/site-packages/firewall/core/ipset.pyt <module> s@ �