File: //lib/python3/dist-packages/firewall/core/__pycache__/ebtables.cpython-310.pyc
o
bhAb�$ � @ s d gZ ddlZddlmZ ddlmZ ddlmZm Z m
Z
ddl m Z ddl
mZ ddlmZmZ ddlZd gg d
�g d �d �Zi Zi Zi Ze�� D ]8Zg ee< e� ee< ee D ](Zee �d
e � ee �deef � ee �de � ee � de � qYqJG dd � d e �Z dS )�ebtables� N)�runProg)�log)�tempFile�readfile� splitArgs)�COMMANDS)� ipXtables��
FirewallError� INVALID_IPV�BROUTING)�
PREROUTING� POSTROUTING�OUTPUT)�INPUTr �FORWARD)�broute�nat�filterz -N %s_directz-I %s 1 -j %s_directz-I %s_direct 1 -j RETURNz %s_directc @ s� e Zd ZdZd ZdZdd� Zdd� Zdd� Zd d
� Z d d � Z
d
d� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd/d d!�Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd0d+d,�Zd-d.� Zd S )1r �ebFc C sB t | j | _t d| j | _| �� | _| �� | _| �� g | _ d S )Nz
%s-restore)
r �ipv�_command�_restore_command� _detect_restore_noflush_option�restore_noflush_option�_detect_concurrent_option�concurrent_option� fill_exists�available_tables��self� r" �8/usr/lib/python3/dist-packages/firewall/core/ebtables.py�__init__9 s
zebtables.__init__c C s$ t j�| j�| _t j�| j�| _d S �N)�os�path�existsr �command_existsr �restore_command_existsr r" r" r# r A s zebtables.fill_existsc C s( d}t | jddg�}|d dkrd}|S )N� z --concurrent�-Lr )r r )r! r �retr" r" r# r E s
z"ebtables._detect_concurrent_optionc C s, g }z | � |d� W dS ty Y dS w )N�offFT)� set_rules�
ValueError)r! �rulesr" r" r# r O s ��z'ebtables._detect_restore_noflush_optionc C s� g }| j r| j |vr|�| j � |dd� |D �7 }t�d| j| jd�|�� t| j|�\}}|dkr?td| jd�|�|f ��|S )Nc S s g | ]}d | �qS )z%sr" )�.0�itemr" r" r# �
<listcomp>^ s z"ebtables.__run.<locals>.<listcomp>� %s: %s %s� r �'%s %s' failed: %s) r �appendr �debug2� __class__r �joinr r0 )r! �args�_args�statusr- r" r" r# �__runY s
�zebtables.__runc C s$ dD ]
}||v rt td| ��qd S )N)z
%%REJECT%%z%%ICMP%%z %%LOGTYPE%%z'%s' invalid for ebtablesr
)r! �rule�strr" r" r# �_rule_validatef s ���zebtables._rule_validatec C s |t v o |t | v S r% )�BUILT_IN_CHAINS)r! r �table�chainr" r" r# �is_chain_builtinl s
�zebtables.is_chain_builtinc C sL g }|r|� d|d|g� |� d|d|dddg� |S |� d|d|g� |S )N�-tz-N�-I�1z-j�RETURN�-X)r8 )r! �addrD rE r1 r" r" r# �build_chain_rulesp s �zebtables.build_chain_rulesc C s8 d|g}|r|d|t |�g7 }n|d|g7 }||7 }|S )NrG rH z-D)rA )r! rL rD rE �indexr< r@ r" r" r# �
build_rule{ s zebtables.build_rulec C �
t �|�S r% )r �common_reverse_rule�r! r< r" r" r# � reverse_rule� �
zebtables.reverse_rulec C s t �|� d S r% )r �common_check_passthroughrR r" r" r# �check_passthrough� s zebtables.check_passthroughc C rP r% )r �common_reverse_passthroughrR r" r" r# �reverse_passthrough� rT z ebtables.reverse_passthroughc
C s t � }d}i }|D ]i}|d d � }| �|� dD ]%}z|�|�} W n ty* Y qw t|�| d kr=|�| � |�| �}qtt|��D ]$} tjD ] }
|
|| v rg|| � d�r_|| �
d�sgd|| || < qIqD|� |g �� |� q |D ]}|�
d| � || D ] }|�
d�|�d � q�qu|�� t�|j�} t�d | j| jd
|j| jf � g } | � d � t| j| |jd �\}
}t�� d
kr�t|j�}|d ur�d} |D ] }tjd| |f ddd� |�
d�s�tjddd� | d7 } q�t� |j� |
dk�rtd| jd�| �|f ��d S )Nr )rG z--table� �"z"%s"z*%s
r6 �
r5 z%s: %dz --noflush)�stdin� z%8d: %sr )�nofmt�nlr+ )r^ r7 ) r rB rN r0 �len�pop�range�string�
whitespace�
startswith�endswith�
setdefaultr8 �writer; �closer& �stat�namer r9 r: r �st_sizer �getDebugLogLevelr �debug3�unlink)r! r1 �
log_denied� temp_filerD � table_rules�_ruler@ �opt�i�crj r< r> r- �lines�liner" r" r# r/ � sn
�
�
��� � �
�
��zebtables.set_rulesc C s | � |� | �|�S r% )rB �_ebtables__run)r! r@ rp r" r" r# �set_rule� s
zebtables.set_ruleNc C s� g }|r|gnt �� }|D ]2}|| jv r|�|� q
z| �d|dg� | j�|� |�|� W q
ty? t�d| � Y q
w |S )NrG r, z#ebtables table '%s' does not exist.)rC �keysr r8 ry r0 r �debug1)r! rD r- �tablesr" r" r# �get_available_tables� s
�z ebtables.get_available_tablesc C s i S r% r" )r! rD r" r" r# �get_zone_table_chains� s z ebtables.get_zone_table_chainsc C s> g }t �� D ]}|| �� vrqdD ]
}|�d||g� qq|S )N)z-FrK z-ZrG �rC r{ r~ r8 )r! r1 rD �flagr" r" r# �build_flush_rules� s �zebtables.build_flush_rulesc C sV g }|dkrdn|}t �� D ]}|| �� vrqt | D ] }|�d|d||g� qq|S )N�PANIC�DROPrG z-Pr� )r! �policyr1 �_policyrD rE r" r" r# �build_set_policy_rules� s �z ebtables.build_set_policy_rulesc C s g S r% r" r r" r" r# �build_default_tables� s z ebtables.build_default_tablesr. c C s� g }t D ]@}|| �� vr
qt | d d � }|dkr$|tv r$|�t| � d|g}|D ]}t|�tkr:|�|| � q*|�|t|� � q*q|S )Nr. rG )�
DEFAULT_RULESr~ � LOG_RULES�extend�type�listr8 r )r! rp �
default_rulesrD �_default_rules�prefixr@ r" r" r# �build_default_rules� s �z ebtables.build_default_rulesc C s
|| j kS r% )r )r! r r" r" r# �is_ipv_supported rT zebtables.is_ipv_supportedr% )r. )�__name__�
__module__� __qualname__r rk �policies_supportedr$ r r r ry rB rF rM rO rS rV rX r/ rz r~ r r� r� r� r� r� r" r" r" r# r 4 s2
@
) �__all__�os.pathr& �firewall.core.progr �firewall.core.loggerr �firewall.functionsr r r �firewall.configr �
firewall.corer �firewall.errorsr r rc rC r� r� �
OUR_CHAINSr{ rD �setrE r8 rL �objectr r" r" r" r# �<module> s4 �
�