File: //proc/676643/root/usr/local/CyberCP/firewall/__pycache__/firewallManager.cpython-310.pyc
o
��h{ � @ s d dl Z d dlZ d dlZd dlZd dlmZ d dlmZ ej� d� e j
� dd� e� � d dl
Z
d dlmZ d dlmZ d dlmZ d dlZd d lmZmZmZ d d
lmZ d dl Z d d l m Z d d l m Z d d
l!m"Z" d dl#m$Z$ d dl%m&Z& d dl'm(Z( G dd� d�Z)dS )� N)�
Administrator)�httpProcz/usr/local/CyberCP�DJANGO_SETTINGS_MODULEzCyberCP.settings)�
ACLManager)�virtualHostUtilities)� HttpResponse�render�redirect)�randint)�FirewallUtilities)�
FirewallRules)�modSec)�CSF)�ProcessUtilities)�ServerStatusUtilc @ s� e Zd ZdZdZdZd[dd�Zd\dd�Zd\d d
�Zd[d d �Z d\d
d�Z
d\dd�Z d\dd�Z d\dd�Z
d\dd�Zd\dd�Zd\dd�Zd\dd �Zd\d d �Zd\d d �Zd\d!d"�Zd\d#d$�Zd\d%d&�Zd\d'd(�Zd\d)d*�Zd\d+d,�Zd\d-d.�Zd\d/d0�Zd\d1d2�Z d\d3d4�Z d\d5d6�Z d\d7d8�Z d\d9d:�Z d\d;d<�Z!d=d>� Z"d?d@� Z#dAdB� Z$dCdD� Z%dEdF� Z&dGdH� Z'd[dIdJ�Z(dKdL� Z)dMdN� Z*dOdP� Z+dQdR� Z,dSdT� Z-d\dUdV�Z.d\dWdX�Z/d\dYdZ�Z0dS )]�FirewallManagerz/usr/bin/imunify360-agentz/etc/sysconfig/cloudlinuxz*/etc/sysconfig/imunify360/integration.confNc C s
|| _ d S �N)�request)�selfr � r �./usr/local/CyberCP/firewall/firewallManager.py�__init__" s
zFirewallManager.__init__c C � t |dd d�}|�� S )Nzfirewall/index.html�admin�r r �r r �userID�procr r r � securityHome% � �z FirewallManager.securityHomec C s. d}t j�|�r td�S t|dd d�}|�� S )N�/etc/csfz/configservercsf/zfirewall/firewall.htmlr )�os�path�existsr r r )r r r �csfPathr r r r � firewallHome* s �z FirewallManager.firewallHomec
C s� zXt �|�}|d dkr
nt �dd�W S tj�� }d}d}|D ]&}|j|j|j|j |j
d�}|dkr<|t � |� }d}q |d t � |� }q |d }t � ddd |d
��}t
|�W S ty{ } zddt| �d �}
t � |
�}t
|�W Y d } ~ S d } ~ ww ) Nr � � fetchStatusr �[)�id�name�proto�port� ipAddress�,�]�None)�statusr' �
error_message�data)r1 r' r2 )r � loadedACL�
loadErrorJsonr �objects�allr) r* r+ r, r- �json�dumpsr �
BaseException�str) r r �
currentACL�rules� json_data�checker�items�dic�
final_json�msg� final_dicr r r �getCurrentRules4 s8
�
��z FirewallManager.getCurrentRulesc
C s� zFt �|�}|d dkr
nt �dd�W S |d }|d }|d }|d }t�|||� t||||d �}|�� ddd
d �} t�| �}
t |
�W S t
yi } zddt | �d �} t�| �}
t |
�W Y d } ~ S d } ~ ww ) Nr r& �
add_statusr �ruleName� ruleProtocol�rulePort�ruleIP)r* r+ r, r- r0 )r1 rF r2 ) r r4 r5 r �addRuler �saver8 r9 r r: r; ) r r r3 r< rG rH rI rJ � newFWRulerD rB rC r r r rK Z s*
��zFirewallManager.addRulec
C s� zEt �|�}|d dkr
nt �dd�W S |d }|d }|d }|d }t�|||� tjj|d �}|�� ddd
d �} t �
| �}
t |
�W S t yh } zddt
| �d �} t �
| �}
t |
�W Y d } ~ S d } ~ ww ) Nr r& �
delete_statusr r) r+ r, rJ )r) r0 )r1 rN r2 )r r4 r5 r �
deleteRuler r6 �get�deleter8 r9 r r: r; ) r r r3 r< �ruleIDrH rI rJ �delRulerD rB rC r r r rO w s*
��zFirewallManager.deleteRulec
C � z<t �|�}|d dkr
nt �dd�W S d}t�|�}|dkr.ddd�}t�|�}t|�W S ddd�}t�|�}t|�W S ty^ } zdt |�d�}t�|�}t|�W Y d }~S d }~ww ) Nr r& �
reload_statusr zsudo firewall-cmd --reloadr0 )rU r2 z3Can not reload firewall, see CyberCP main log file.�
r r4 r5 r � executionerr8 r9 r r: r; � r r r3 r< �command�resrD rB rC r r r �reloadFirewall� �,
�
��z FirewallManager.reloadFirewallc
C rT ) Nr r& � start_statusr z sudo systemctl start firewalldr0 )r] r2 z2Can not start firewall, see CyberCP main log file.rV rX r r r �
startFirewall� r\ z FirewallManager.startFirewallc
C rT ) Nr r& � stop_statusr z sudo systemctl stop firewalldr0 )r_ r2 z1Can not stop firewall, see CyberCP main log file.rV rX r r r � stopFirewall� r\ z FirewallManager.stopFirewallc
C s� z?t �|�}|d dkr
nt �� W S d}t�|�}|�d�dkr0dddd�}t�|�}t|�W S dddd�}t�|�}t|�W S t ya } zdt
|�d �}t�|�}t|�W Y d }~S d }~ww )
Nr r& zsystemctl status firewalld�dead����noner )r1 r2 �firewallStatus�r1 r2 ) r r4 r5 r �outputExecutioner�findr8 r9 r r: r; ) r r r3 r< rY r1 rD rB rC r r r rd � s(
��z FirewallManager.firewallStatusc C r )Nzfirewall/secureSSH.htmlr r r r r r � secureSSH r zFirewallManager.secureSSHc
C s@ z�t �|�}|d dkr
nt �� W S |d }|dkrqd}d| }t�|��d�}d}d }|D ]2} | �d
�d krH| �d �d ksE| �d
�d krHd}q.| �d�d kr`| �d�d ks`| �d�d �d�}q.d||d�}
t� |
�} t
| �W S d} d| }t�|��d�}d}
d}|D ]e} | �d�d kr�| �d�}z*d|d d d� d |d }z|d d |d � d�� }W n |d }Y W n d|d d d� }d}Y ||d�}|dkr�|
t� |� }
d}q�|
d t� |� }
q�|
d }
t� dd |
d ��} t
| �W S t �y } zdt
|�d �}
t� |
�} t
| �W Y d }~S d }~ww )!Nr r& �type�1z/etc/ssh/sshd_config� sudo cat �
r �22�PermitRootLoginrb �Yes�yes�Port� GatewayPorts� )r1 �permitRootLogin�sshPortz/root/.ssh/authorized_keysr( zssh-rsazssh-rsa �2 z .. � �@� )�userName�keyr. r/ r0 )r1 r2 r3 re )r r4 r5 r rf �splitrg �stripr8 r9 r �indexr: r; )r r r3 r< ri � pathToSSH�catrt ru r@ rD rB �
pathToKeyFiler> r? �keydatar{ rz rA rC r r r �
getSSHConfigs st
�
���
��z FirewallManager.getSSHConfigsc
C s z�t �|�}|d dkr
nt �dd�W S |d }|d }|d }|dkr'd }nd
}d tj d }|d
t|� d | d | }t�|�}|�d�dkr�d} t j
� | �rid|d�}
| � |
� d|d�}
| � |
� nZz t
jjdd�} t�d| jd� || _| �� t�d|d� W n: zt
d|dd�} | �� t�d|d� d}
t�|
� W n ty� } ztj�t|�� W Y d }~nd }~ww Y ddd �}t�|�}t |�W S dd|d �}t�|�}t |�W S t�y } zddt|�d �}t�|�}t |�W Y d }~S d }~ww ) Nr r& �
saveStatusr ri ru � rootLoginTrj �0� /usr/local/CyberCP/bin/python � /plogical/firewallUtilities.pyz saveSSHConfigs --type z --sshPort z
--rootLogin �1,Nonerb r �TCP_IN)�protocol�ports�TCP_OUT� SSHCustom)r* �tcpz 0.0.0.0/0)r* r, r+ z-firewall-cmd --permanent --remove-service=ssh)r1 r� )r1 r� r2 ) r r4 r5 r �
cyberPanelr; r rf rg r! r" r# � modifyPortsr r6 rP r rO r, rL rK rW r: �logging�CyberCPLogFileWriter� writeToFiler8 r9 r )r r r3 r< ri ru r� �execPath�outputr$ �dataIn�updateFW�newFireWallRulerY rC rD rB r r r �saveSSHConfigsZ sf
���
��z FirewallManager.saveSSHConfigsc
C s� zQt �|�}|d dkr
nt �dd�W S |d }dtj d }|d | d }t�|�}|�d
�d krBddd �}t� |�}t
|�W S dd|d
�}t� |�}t
|�W S t yt } zddt | �d
�}t� |�}t
|�W Y d } ~ S d } ~ ww )Nr r& rN r r{ r� r� z deleteSSHKey --key '�'r� rb )r1 rN )r1 rN � error_mssage�
r r4 r5 r r� r rf rg r8 r9 r r: r; )
r r r3 r< r{ r� r� rD rB rC r r r � deleteSSHKey� s,
��z FirewallManager.deleteSSHKeyc
C s zft �|�}|d dkr
nt �dd�W S |d }dttdd�� }t|d �}|�|� |�� d
tj d }|d | }t
� |�}|� d
�dkrWddd�} t
�| �}
t|
�W S dd|d�} t
�| �}
t|
�W S ty� } zddt| �d�} t
�| �}
t|
�W Y d } ~ S d } ~ ww )Nr r& rF r r{ �/home/cyberpanel/�� �' �w�#sudo /usr/local/CyberCP/bin/python r� z addSSHKey --tempPath r� rb )r1 rF )r1 rF r� )r r4 r5 r; r
�open�write�closer r� r rf rg r8 r9 r r: ) r r r3 r< r{ �tempPathr� r� r� rD rB rC r r r � addSSHKey� s4
��zFirewallManager.addSSHKeyc
C s� t �� t jkr/d}tj�tjd�}d| }t �|�� � }d}|D ]
}|�
d�dkr-d} nq nd}d}t |d||d�d �} | � � S )
Nr& �conf/httpd_config.confrk r �module mod_securityrb zfirewall/modSecurity.html)�modSecInstalled�OLSr )
r � decideServerr� r! r" �joinr � Server_rootrf �
splitlinesrg r r )
r r r r� �confPathrY � httpdConfigr� r@ r r r r �loadModSecurityHome� s$ ��
�z#FirewallManager.loadModSecurityHomec
C s� z5t �|�}|d dkr
nt �dd�W S dtj d }|d }t�|� t�d� t �
dd d
��}t |�W S t yW } zdt
|�d
�}t �
|�}t |�W Y d }~S d }~ww ) Nr r& �
installModSecr r� �/plogical/modSec.pyz installModSec� r0 )r� r2 )r r4 r5 r r� r �popenExecutioner�time�sleepr8 r9 r r: r; )r r r3 r< r� rB rC rD r r r r� � s"
��z FirewallManager.installModSecc
C s zkdt j }t�|�}|�d�dkrHdtj d }|d }t�|�}|�d�dkr*nt�d|d d
d ��}t |�W S t�d |d d d ��}t |�W S |�d
�dkr^t�d d
d |d��}t |�W S t�d
d |d��}t |�W S t
y� } zd d
t |�d�} t�| �}t |�W Y d }~S d }~ww )Nrk �[200]rb r� r� z installModSecConfigsr� z-Failed to install ModSecurity configurations.r& r �r2 �
requestStatus�abort� installedr0 �[404]�r� r� r2 r� �r� r2 r� �r� r� r2 ) r
�installLogPathr rf rg r r� r8 r9 r r: r; )
r r r3 rY �
installStatusr� r� rB rC rD r r r �installStatusModSec sV
�
�
�
�
��z#FirewallManager.installStatusModSecc
C s �z�t �|�}|d dkrnt �dd�W S t�� tjk�r d}d}d}d}d}d} d}
tj�t j
d �} tj�t j
d
d �} tj� | ��rd | }
t� |
��
d
�}|D ]�}|�d�dkrk|�d�dksh|�d�dkrkd}qQ|�d�dkr�|�d�dks�|�d�dkr�d}qQ|�d�dkr�|�d�dks�|�d�dkr�d}qQ|�d�dkr�|�
d�}|d dkr�|d }qQ|�d�dkr�|�
d�}|d dkr�|d }qQ|�d�dkr�|�
d�}|d dkr�|d } qQ|�d�dkr�|�
d�}|d dkr�|d }
qQqQdd||||| ||
d� }n�ddd�}n�d}d}d}d}d} d}
tj�t j
d�} d | }
t� |
��
d
�}|D ]�}|�d�dk�rK|�d�dk�sG|�d�dk�rKd}�q-|�d�dk�rg|�d�dk�sc|�d�dk�rgd}�q-|�d�dk�r�|�
d�}|d dk�r�|d }�q-|�d�dk�r�|�
d�}|d dk�r�|d }�q-|�d�dk�r�|�
d�}|d dk�r�|d } �q-|�d�dk�r�|�
d�}|d dk�r�|d }
�q-�q-dd|||| ||
d �}t�|�}t|�W S t�y } zdt|�d �}t�|�}t|�W Y d }~S d }~ww ) Nr r& r' r �9z^(?:5|4(?!04))� ABIJDEFHZ�Serialr� �moduleszmod_security.sork rl z modsecurity rb �on�OnzSecAuditEngine zSecRuleEngine �SecDebugLogLevelrs �SecAuditLogRelevantStatus�SecAuditLogParts�SecAuditLogType) r' r� �
SecRuleEngine� modsecurity�SecAuditEnginer� r� r� r� )r' r� zconf/modsec.conf)r' r� r� r� r� r� r� r� �r' r2 )r r4 r5 r r� r� r! r" r� r r� r# rf r| rg r8 r9 r r: r; )r r r3 r< r� r� r� r� r� r� r� r� �
modSecPathrY r@ �resultrD rB rC r r r �fetchModSecSettings> s�
�� �
��
��z#FirewallManager.fetchModSecSettingsc
C sp �z�t �|�}|d dkrnt �dd�W S t�� tjkr�|d }|d }|d }|d }|d }|d
} |d }
|d kr?d
}nd}|d krHd}nd}|d krQd}nd}dt|� }dt|� }d| } d|
}
dttdd�� } t| d�} | � |d � | � |d � | � |d � | � |d � | � |d � | � | d � | � |
d � | �
� d t j d }
|
d | }
t�
|
�}|�d �d kr�dd!d"�}t�|�}t|�W S d|d"�}t�|�}t|�W S |d }|d }|d }|d }|d
} |d }
|d k�rd}nd}|d k�r d}nd}dt|� }dt|� }d| } d|
}
dttdd�� } t| d�} | � |d � | � |d � | � |d � | � |d � | � | d � | � |
d � | �
� d t j d }
|
d | }
t�
|
�}|�d �d k�r�dd!d"�}t�|�}t|�W S d|d"�}t�|�}t|�W S t�y� } zdt|�d"�}t�|�}t|�W Y d }~S d }~ww )#Nr r& r� r �modsecurity_statusr� r� r� r� r� r� Tzmodsecurity onzmodsecurity offzSecAuditEngine onzSecAuditEngine offzSecRuleEngine OnzSecRuleEngine offzSecDebugLogLevel zSecAuditLogParts zSecAuditLogRelevantStatus zSecAuditLogType r� r� r� r� rl r� r� z$ saveModSecConfigs --tempConfigPath r� rb r0 �r� r2 )r r4 r5 r r� r� r; r
r� �
writelinesr� r r� rf rg r8 r9 r r: )r r r3 r< r� r� r� r� r� r� r� �tempConfigPathr� r� r� �data_retr> rC r r r �saveModSecConfigurations� s�
��z(FirewallManager.saveModSecConfigurationsc C �z t �� t jkr.tj�tjd�}d| }t �|�� d�}d}|D ]
}|�
d�dkr,d} nq nd}t |dd |id
�}|� � S ) Nr� rk rl r r� rb r& z firewall/modSecurityRules.htmlr� r �
r r� r� r! r" r� r r� rf r| rg r r � r r r r� rY r� r� r@ r r r r � modSecRulesP s ���zFirewallManager.modSecRulesc
C sj z�t �|�}|d dkr
nt �dd�W S t�� tjkrrtj�t j
d�}d| }t� |�� d�}d}|D ]
}|�
d�d kr@d} nq3tj�t j
d
�} |rdd| }t� |�}
d|
d �} t�| �} t| �W S ddi} t�| �} t| �W S tj�t j
d �} d| }t� |�}
d|
d �} t�| �} t| �W S ty� }
zdt|
�d
�} t�| �} t| �W Y d }
~
S d }
~
ww )Nr r& r� r r� rk rl r� rb z/conf/modsec/rules.conf)r� �currentModSecRulesz/conf/rules.conf�r� r2 )r r4 r5 r r� r� r! r" r� r r� rf r| rg r8 r9 r r: r; )r r r3 r< r� rY r� r� r@ � rulesPathr� rD rB rC r r r �fetchModSecRulesd sV
�
�
�
�
��z FirewallManager.fetchModSecRulesc
C s� z[t �|�}|d dkr
nt �dd�W S |d }ttjd�}|�|� |�� dtj d }|d }t
� |�}|� d
�d krMdd d
�}t
�|�} t| �W S d|d
�}t
�|�} t| �W S ty} }
zdt|
�d
�}t
�|�} t| �W Y d }
~
S d }
~
ww )Nr r& r� r r� r� r� r� z saveModSecRulesr� rb r0 r� )r r4 r5 r� r
�
tempRulesFiler� r� r r� r rf rg r8 r9 r r: r; ) r r r3 r< �newModSecRulesr� r� r� r� r> rC r r r �saveModSecRules� s2
��z FirewallManager.saveModSecRulesc C r� ) Nr� rk rl r r� rb r& z#firewall/modSecurityRulesPacks.htmlr� r r� r� r r r �modSecRulesPacks� s ���z FirewallManager.modSecRulesPacksc
C s� z�t �|�}|d dkr
nt �dd�W S t�� tjkr�tj�t j
d�}d| }t� |�� � }d}|D ]
}|�
d�dkr?d} nq2d} d}
|r�d| }t� |�� � }|D ] }|�
d �dkr_d} n |�
d
�dkrhd}
|
dkrr| dkrr nqSd|
| d �} t�| �} t| �W S ddi} t�| �} t| �W S d} d}
zd }t� |�}
|
�
d
�dkr�d} nd} W n
tjy� Y nw zd}t� |�}
|
�
d
�dkr�d}
W n Y d|
| d �} t�| �} t| �W S ty� } zdt|�d�} t�| �} t| �W Y d }~S d }~ww )Nr r& r� r r� rk r� rb z
modsec/comodoz modsec/owasp)r� �owaspInstalled�comodoInstalledz.sudo ls /usr/local/lsws/conf/comodo_litespeed/zNo suchz$cat /usr/local/lsws/conf/modsec.confr� )r r4 r5 r r� r� r! r" r� r r� rf r� rg r8 r9 r �
subprocess�CalledProcessErrorr: r; )r r r3 r< r� rY r� r� r@ r� r� rD rB r� rC r r r �getOWASPAndComodoStatus� s�
���
��
��
��z'FirewallManager.getOWASPAndComodoStatusc
C s^ z�t �|�}|d dkr
nt �dd�W S |d }t�� tjkrVdtj d }|d | }t�|�}|� d �d
krGdd d �}t
� |�}t |�W S d|d �}t
� |�}t |�W S dtj d }|d | }t�|�}|� d �d
kr~dd d �}t
� |�}t |�W S d|d �}t
� |�}t |�W S t
y� } zdt| �d �}t
� |�}t |�W Y d } ~ S d } ~ ww )
Nr r& r� r �packNamer� r� rs r� rb r0 �r� r2 )r r4 r5 r r� r� r r� rf rg r8 r9 r r: r; )
r r r3 r< r� r� r� r� r> rC r r r �installModSecRulesPack1 sB
��z&FirewallManager.installModSecRulesPackc
C sT z�t �|�}|d dkr
nt �dd�W S |d }tj�d�}d| }t�|��� }d}d} d}
|D ]D} | � d | �d
kru|
d }
| d d krId } nd
} | �
d �}
|
� d�d
}
|
|
|| d�}| dkrl|t �
|� }d} q1|d t �
|� }q1|d }t �
dd|d��}t|�W S ty� } zdt|�d�}t �
|�}t|�W Y d }~S d }~ww )Nr r& r' r r� zN/usr/local/lsws/conf/modsec/owasp-modsecurity-crs-3.0-master/owasp-master.confrk r( zmodsec/rb �#FT�/)r) �fileNamer� r1 r. r/ r0 )r' r2 r3 r� )r r4 r5 r! r" r� r rf r� rg �lstripr| r8 r9 r r: r; )r r r3 r< r� r� rY r� r> r? �counterr@ r1 r� rA rB rC rD r r r �
getRulesFilesc sN
��
S
��z FirewallManager.getRulesFilesc
C s zgt �|�}|d dkr
nt �dd�W S |d }|d }|d }|dkr'd }nd
}d tj d }|d
| d | d| }t�|�} | �d�dkrYddd�}
t� |
�} t
| �W S d| d�}
t� |
�} t
| �W S t y� } zdt | �d�}
t� |
�} t
| �W Y d } ~ S d } ~ ww )Nr r& r� r r� r� r1 T�disableRuleFile�enableRuleFiler� r� rs z --packName z --fileName "%s"r� rb r0 r� r� )
r r r3 r< r� r� �
currentStatus� functionNamer� r� r� r> rC r r r �enableDisableRuleFile� s6
��z%FirewallManager.enableDisableRuleFilec C s^ d}zd}t �|�}|�d�dkrd}W n tjy d}Y nw t| jdd|id�}|�� S ) Nr& zcsf -hzcommand not foundrb r zfirewall/csf.html� csfInstalledr )r rf rg r� r� r r r )r r� rY r� r r r r �csf s
���zFirewallManager.csfc
C � z<| j jd }t�|�}|d dkrnt�dd�W S dtj d }|d }t�|� t �
d � ddi}t � |�}t
|�W S ty^ } zdt|�d
�}t � |�}t
|�W Y d }~S d }~ww ) Nr r r& r� r r� �/plogical/csf.pyz installCSFrw r� �r �sessionr r4 r5 r r� r r� r� r� r8 r9 r r: r; � r r r< r� r� r> rC rD rB r r r �
installCSF s&
��zFirewallManager.installCSFc
C s z\| j jd }t�dtj �}|�d�dkr/dtj }t�|� t� d|ddd��}t
|�W S |�d �dkrOdtj }t�|� t� dd
d|d ��}t
|�W S t� d
d|d ��}t
|�W S t y } zdd
t |�d
�}t� |�}t
|�W Y d }~S d }~ww )Nr rk r� rb z sudo rm -f r0 r& r� r� r r� r� r� )
r r r rf r r� rg rW r8 r9 r r: r; )r r r� rY rB rC rD r r r �installStatusCSF: sF
�
�
�
��z FirewallManager.installStatusCSFc
C r� ) Nr r r& r� r r� r� z
removeCSFrw r� r r r r r � removeCSFd s&
��zFirewallManager.removeCSFc
C s� z=| j jd }t�|�}|d dkrnt�dd�W S t�� }d|d |d |d |d |d
|d d �}t�|�}t |�W S t
y] } zdd
d�}t�|�}t |�W Y d }~S d }~ww )Nr r r& r' r �TESTING�tcpIN�tcpOUT�udpIN�udpOUTrd )r' � testingModer r r r
rd zCSF is not installed.r� ) r r r r4 r5 r �fetchCSFSettingsr8 r9 r r: ) r r r< �currentSettingsr� r> rC rD rB r r r r } s,
�
��z FirewallManager.fetchCSFSettingsc
C s z`| j jd }t�|�}|d dkrnt�� W S t�| j j�}|d }|d }dtj d }|d | d | }t
� |�}|� d
�d krRddi}t�
|�} t| �W S d |d
�}t�
|�} t| �W S ty� }
zd t|
�d
�} t�
| �} t| �W Y d }
~
S d }
~
ww )Nr r r& �
controllerr1 r� r� z changeStatus --controller z
--status r� rb r re )r r r r4 r5 r8 �loads�bodyr r� r rf rg r9 r r: r; )
r r r< r3 r r1 r� r� r� r> rC rD rB r r r � changeStatus� s2
��z FirewallManager.changeStatusc
C sN z�| j jd }t�|�}|d dkrnt�� W S |d }|d }dttdd�� }tj� |�r4t�
|� t |d �}|� |� |�
� d
| }t�|� d tj d } | d
| d | } t�| �}
|
�d�dkrvddi} t�| �} t| �W S d|
d�} t�| �} t| �W S ty� }
zdt|
�d�}t�|�}t|�W Y d }
~
S d }
~
ww )Nr r r& r� r� r� r� r� r� z chmod 600 %sr� r� z modifyPorts --protocol z --ports r� rb r1 r re )r r r r4 r5 r; r
r! r" r# �remover� r� r� r rW r r� rf rg r8 r9 r r: )r r3 r r< r� r� � portsPathr� rY r� r� r� r> rC rD rB r r r r� � s@
��zFirewallManager.modifyPortsc
C s� zG| j jd }t�|�}|d dkrnt�� W S t�| j j�}|d }|d }|dkr1t� |� n |dkr:t�
|� ddi}t� |�}t |�W S t
yi } zd t|�d
�} t� | �}
t |
�W Y d }~S d }~ww ) Nr r r& �moder- �allowIP�blockIPr1 r re )r r r r4 r5 r8 r r r r r r9 r r: r; ) r r r< r3 r r- r� r> rC rD rB r r r � modifyIPs� s,
��zFirewallManager.modifyIPsc C s� d}t |�}|�� }|�dd�d }d|t�� f }i }||d< d|d< tj�tj �r0d|d< nd|d< |d dkrFt
| j d |d
�}|� � S |d dkrXt
| j d |d
�}|� � S t
| j d |d
�}|� � S ) N�/etc/cyberpanel/machineIPrl r& r �%s:%sr- �CL�imunifyzfirewall/notAvailable.htmlr zfirewall/imunify.html)
r� �readr| r �fetchCurrentPortr! r" r# r � imunifyPathr r r �r �ipFile�f�ipDatar- � fullAddressr3 r r r r r s2
� ��zFirewallManager.imunifyc
C s� zC| j jd }t�|�}|d dkrn tj�tjdd� W dS t �
| j j �}d}|d|d }t �
|� dd d
�}t �|�}t|�W S tyc } ztj�tjt|�d d� W Y d }~d S d }~ww ) Nr r r& �4Not authorized to install container packages. [404].r �D/usr/local/CyberCP/bin/python /usr/local/CyberCP/CLManager/CageFS.pyz) --function submitinstallImunify --key %sr{ r0 re � [404].)r r r r4 r� r� � statusWriterr �lswsInstallStatusPathr8 r r r r� r9 r r: r; )r r r< r3 r� r� r> rC r r r �submitinstallImunify$ s*
�
(��z$FirewallManager.submitinstallImunifyc C s� d}t |�}|�� }|�dd�d }d|t�� f }i }||d< tj�tj �r,d|d< nd|d< |d dkrBt
| j d|d �}|� � S t
| j d
|d �}|� � S ) Nr rl r& r r r- r z firewall/notAvailableAV.htmlr zfirewall/imunifyAV.html)
r� r r| r r r! r" r# r �
imunifyAVPathr r r r r r r � imunifyAV> s&
��zFirewallManager.imunifyAVc
C s� z8| j jd }t�|�}|d dkrn tj�tjdd� W dS d}|d }t �
|� ddd �}t � |�}t
|�W S tyX } ztj�tjt|�d
d� W Y d }~d S d }~ww ) Nr r r& r$ r r% z" --function submitinstallImunifyAVr0 re r& )r r r r4 r� r� r' r r( r r� r8 r9 r r: r; )r r r< r� r� r> rC r r r �submitinstallImunifyAVW s(
�
(��z&FirewallManager.submitinstallImunifyAVc C r )Nz firewall/litespeed_ent_conf.htmlr r r r r r �litespeed_ent_confq r z"FirewallManager.litespeed_ent_confc
C s� zTt �|�}|d dkr
nt �dd�W S d}tj�|�s<d}t�|� d|� �}t�|�}d|d�}t �
|�}t |�W S d|� �}t�|�}d|d�}t �
|�}t |�W S t yv } zdt
| �d �}t �
|�}t |�W Y d } ~ S d } ~ ww )
Nr r& r� r �)/usr/local/lsws/conf/pre_main_global.confz/touch /usr/local/lsws/conf/pre_main_global.conf�cat �r1 �currentLitespeed_confre )r r4 r5 r! r" r# r rW rf r8 r9 r r: r; )
r r r3 r< � file_pathrY r� rD rB rC r r r �fetchlitespeed_Confv s:
�
�
��z#FirewallManager.fetchlitespeed_Confc
C s zht �|�}|d dkr
nt �dd�W S d}d|� �}t�|� |d }d}t|d �}|�|� |�� d
|� d |� �}t�|� d |� d
|� �}t�|d d� d|� �}t�|�} d| d�}
t �
|
�} t | �W S t y� } zdt
| �d�}
t �
|
�} t | �W Y d } ~ S d } ~ ww )Nr r& r� r r. zrm -f r� z%/home/cyberpanel/pre_main_global.confr� zmv rs z
chmod 644 z && chown lsadm:lsadm Tr/ r0 re )r r4 r5 r rW r� r� r� rf r8 r9 r r: r; )
r r r3 r< r2 rY r1 �
tempRulesPath� WriteToFiler� rD rB rC r r r �saveLitespeed_conf� s<
�
��z"FirewallManager.saveLitespeed_confr )NN)1�__name__�
__module__� __qualname__r �CLPathr* r r r% rE rK rO r[ r^ r` rd rh r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r� r r r) r+ r, r- r3 r6 r r r r r sd
&
Q
>
$
6
9
%
Z
2
&*
!,
'r )*r! �os.path�sys�django�loginSystem.modelsr �plogical.httpProcr r" �append�environ�
setdefault�setupr8 � plogical.aclr � plogical.CyberCPLogFileWriterr� r� � plogical.virtualHostUtilitiesr r� �django.shortcutsr r r �randomr
r� �plogical.firewallUtilitiesr �firewall.modelsr �plogical.modSecr
� plogical.csfr �plogical.processUtilitiesr � serverStatus.serverStatusUtilr r r r r r �<module> s0