403Webshell
Server IP : 138.197.176.125  /  Your IP : 216.73.217.54
Web Server : Apache/2.4.41 (Ubuntu)
System : Linux SuiteCRM-8 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User : root ( 0)
PHP Version : 8.3.19
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /lib/python3/dist-packages/ufw/__pycache__/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : /lib/python3/dist-packages/ufw/__pycache__/common.cpython-38.pyc
U

�L�dX�@sjdZddlZddlZddlZddlmZdZdZdZeZ	dZ
dZd	Zd
Z
Gdd�de�ZGd
d�d�ZdS)z!common.py: common classes for ufw�N)�debug�ufwz/lib/ufwz/usr/share/ufwz/etcz/usrz	/usr/sbinTc@s eZdZdZdd�Zdd�ZdS)�UFWErrorz$This class represents ufw exceptionscCs
||_dS�N)�value)�selfr�r�,/usr/lib/python3/dist-packages/ufw/common.py�__init__#szUFWError.__init__cCs
t|j�Sr)�reprr�rrrr	�__str__&szUFWError.__str__N)�__name__�
__module__�__qualname__�__doc__r
r
rrrr	r!src@s�eZdZdZd9dd�Zd	d
�Zdd�Zd
d�Zdd�Zdd�Z	d:dd�Z
dd�Zdd�Zdd�Z
dd�Zdd�Zd d!�Zd"d#�Zd$d%�Zd&d'�Zd(d)�Zd*d+�Zd,d-�Zd.d/�Zd0d1�Zd2d3�Zd4d5�Zd6d7�Zd8S);�UFWRulez$This class represents firewall rules�any�	0.0.0.0/0�inF�c

Cs�d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_	d|_
d|_d|_d|_
d|_d|_d|_||_d|_zV|�|�|�|�|�|�|�|d�|�|�|�|�|�|�|�|	�Wntk
r��YnXdS)NFrr�src)�remove�updated�v6�dstr�dport�sport�protocol�multi�dapp�sapp�action�position�logtype�interface_in�
interface_out�	direction�forward�comment�
set_action�set_protocol�set_port�set_src�set_dst�
set_direction�set_commentr)
rr"rrrrrr'r(r)rrr	r
,s<





zUFWRule.__init__cCs|��Sr)�format_rulerrrr	r
OszUFWRule.__str__cCs>d|}t|j�}|��|D]}|d||j|f7}q|S)zPrint rule to stdoutz'%s'z, %s=%s)�list�__dict__�sort)r�res�keys�krrr	�_get_attribRs
zUFWRule._get_attribcCs�t|j|j�}|j|_|j|_|j|_|j|_|j|_|j|_|j	|_	|j
|_
|j|_|j|_|j
|_
|j|_|j|_|j|_|j|_|j|_|j|_|S)zReturn a duplicate of a rule)rr"rrrrrrrrrr r!r#r$r%r&r'r(r))rZrulerrr	�dup_rule[s&zUFWRule.dup_rulecCs�d}|jdkr|d|j7}|jdkr4|d|j7}|jdkrH|d7}n�|d|j7}|jr�|d7}|jdkr�|jdkr�|d|j7}|d7}|d	|j7}n2|jdkr�|d|j7}n|jdkr�|d	|j7}|jd
kr�|jdkr�|d|j7}|j�s|jdk�r|d
|j7}|jd
k�r:|jdk�r:|d|j7}|j�s\|jdk�r\|d|j7}d}|jdk�rvd|j}|j	dk�r�|d|7}nT|j	dk�r�|d|7}|jdk�r�|d7}n&|j	dk�r�|d|7}n|d|7}|j
dk�s�|jdk�r�d}t�
d�}|j
dk�r,|d|�d|j
�7}|j
dk�rL|jdk�rL|d7}|jdk�rn|d|�d|j�7}|d 7}|d|7}|��S)!zFormat rule for later parsingrz -i %sz -o %srz -p allz -p z
 -m multiportz
 --dports z
 --sports r�::/0z -d z	 --dport z -s z	 --sport �_�allowz -j ACCEPT%s�rejectz -j REJECT%sZtcpz --reject-with tcp-reset�limitz -j LIMIT%sz
 -j DROP%sz-m comment --comment '� Zdapp_z%20�,Zsapp_�')r%r&rrrrrrr$r"r r!�re�compile�sub�strip)rZrule_strZlstrr)Z	pat_spacerrr	r1rsd








zUFWRule.format_rulecCsj|���d�}|ddks2|ddks2|ddkr>|d|_nd|_d}t|�dkr\|d}|�|�d	S)
zSets action of the ruler;rr<r=r>Zdenyr�N)�lower�splitr"�len�set_logtype)rr"�tmpr$rrr	r*�s$zUFWRule.set_actionrc		Cs�td�|}|dkr�n�|dkr*|jr*�n�|dkr<|jr<�n~t�d|�sTt�d|�r`t|���nZ|�d�|�d�d	kr�t|���n6|�d�}t|�d
kr�d|_	d}|D�]
}t�d
|��rd|_	|�d�}|D]$}t
|�d
ks�t
|�dkr�t|��q�t
|d�t
|d
�k�r�t|��nzt�d|��rNt
|�d
k�sDt
|�dk�r�t|��nFt�d|��r�zt�|�}Wnt
k
�r�t|��YnXnt|��|�r�|dt|�7}q�t|�}q�|}|dk�r�t|�|_n
t|�|_dS)z:Sets port and location (destination or source) of the rulez
Bad port '%s'rrrz^[,:]z[,:]$r@�:�rFTrz	^\d+:\d+$i��rz^\d+$z
^\w[\w\-]+N)r;r r!rB�matchr�countrHrIr�int�socketZ
getservbyname�	Exception�strrr)	r�portZloc�err_msg�portsrK�pZran�qrrr	r,�sP







zUFWRule.set_portcCs2|tjjdgkr||_ntd�|}t|��dS)zSets protocol of the rulerzUnsupported protocol '%s'N)r�utilZsupported_protocolsrr;r)rrrUrrr	r+�szUFWRule.set_protocolcCs�|jrH|jr&|jdks |jdkr&d|_|jr�|jdks@|jdkr�d|_n@|jrh|jdksb|jdkrhd|_|jr�|jdks�|jdkr�d|_dS)zAdjusts src and dst based on v6rrr:N)rrrrrrr	�
_fix_anywhere�szUFWRule._fix_anywherecCs||_|��dS)zXSets whether this is ipv6 rule, and adjusts src and dst
           accordingly.
        N)rrZ)rrrrr	�set_v6szUFWRule.set_v6cCs@|��}|dkr.tj�|d�s.td�}t|��||_|��dS)zSets source address of rulerzBad source addressN)rGrrY�
valid_addressr;rrrZ�r�addrrKrUrrr	r-szUFWRule.set_srccCs@|��}|dkr.tj�|d�s.td�}t|��||_|��dS)z Sets destination address of rulerzBad destination addressN)rGrrYr\r;rrrZr]rrr	r.szUFWRule.set_dstcCs�|dkr |dkr td�}t|��dt|�kr<td�}t|��dt|�krXtd�}t|��t|�dkspt|�d	kr�td
�}t|��tt|��dkr�td�}t|��tt|��d
kr�td�}t|��t�dt|��s�td�}t|��|dkr�||_n||_dS)zSets an interface for ruler�outzBad interface type�!z+Bad interface name: reserved character: '!'rLz/Bad interface name: can't use interface aliases�.z..z)Bad interface name: can't use '.' or '..'rz+Bad interface name: interface name is empty�z+Bad interface name: interface name too longz^[a-zA-Z0-9_\-\.\+,=%@]+$zBad interface nameN)r;rrSrIrBrNr%r&)rZif_type�namerUrrr	�
set_interface's0
zUFWRule.set_interfacecCs>t|�dkr0t�dt|��s0td�|}t|��t|�|_dS)zSets the position of the rulez-1z^[0-9]+z,Insert position '%s' is not a valid positionN)rSrBrNr;rrPr#)rZnumrUrrr	�set_positionWszUFWRule.set_positioncCsD|��dks |��dks |dkr,|��|_ntd�|}t|��dS)zSets logtype of the rule�logzlog-allrzInvalid log type '%s'N)rGr$r;r)rr$rUrrr	rJas�zUFWRule.set_logtypecCs0|dks|dkr||_ntd�|}t|��dS)zSets direction of the rulerr_zUnsupported direction '%s'N)r'r;r)rr'rUrrr	r/jszUFWRule.set_directioncCstj�|j�S)zGet decoded comment of the rule)rrYZ
hex_decoder)rrrr	�get_commentrszUFWRule.get_commentcCs
||_dS)zSets comment of the ruleN)r))rr)rrr	r0vszUFWRule.set_commentcCsd}|jrVztj�|j|j�\|_}Wn$tk
rJtd�}t|��YnX|rV||_|j	r�ztj�|j	|j�\|_	}Wn$tk
r�td�}t|��YnX|r�||_|j
r�|j
�d�}tj�|�d�
|�|_
|jr�|j�d�}tj�|�d�
|�|_dS)z&Normalize src and dst to standard formFz"Could not normalize source addressz'Could not normalize destination addressr@N)rrrYZnormalize_addressrrRr;rrrrrHZ
human_sort�joinr)rZchangedrUrVrrr	�	normalizezs:
�
�zUFWRule.normalizecCs�|r|st��d||f}|j|jkr2t|�dS|j|jkrJt|�dS|j|jkrbt|�dS|j|jkrzt|�dS|j|jkr�t|�dS|j|jkr�t|�dS|j|jkr�t|�dS|j	|j	kr�t|�dS|j
|j
kr�t|�dS|j|jk�rt|�dS|j|jk�r&t|�dS|j
|j
k�r@t|�dS|j|jk�r~|j|jk�r~|j|jk�r~td�}t|�dS|j|jk�r�|j|jk�r�|j|jk�r�td�}t|�dStd�|j|j|j|j|j|jd�}t|�d	S)
z�Check if rules match
        Return codes:
          0  match
          1  no match
         -1  match all but action, log-type and/or comment
         -2  match all but comment
        zNo match '%s' '%s'rFzFound exact matchrz$Found exact match, excepting comment���zZFound non-action/non-logtype/comment match (%(xa)s/%(ya)s/'%(xc)s' %(xl)s/%(yl)s/'%(yc)s'))ZxaZyaZxlZylZxcZyc���)�
ValueErrorrrrrrrrr r!r%r&r'r(r"r$r)r;)�x�y�dbg_msgrrr	rN�sz
�
���z
UFWRule.matchcCs�dd�}|r|st��|�|�dkr(dSd||j||jf}|jdkrZtd|d�dS|j|jkrvt|d	�dS|j|jkr�|jd
kr�td|�dS|jd
kr�||j|j�s�td|�dS|jd
k�rv|jd
kr�|�	|j
�r�n�|j
|j
k�rd|j
k�rtd|�dS|j
|j
k�r�d|j
k�r�|j|jk�r�tj�
|j
|j
|j��s�td|d|j
|j
f�dS�n|jd
k�r�|j|jk�r�td|d|j|jf�dSztj�|j|j�}Wn.tk
�r�td|d|j�YdSX|j
|k�r,d|j
k�r,td|d|j
|f�dS|j
|k�r�d|j
k�r�|j|jk�r�tj�
||j
|j��s�td|d||j
f�dS|j|jk�r�td|d|j
|j
f�dStd||j||jf�dS)a�This will match if x is more specific than y. Eg, for protocol if x
           is tcp and y is all or for address if y is a network and x is a
           subset of y (where x is either an address or network). Returns:

            0  match
            1  no match
           -1  fuzzy match

           This is a fuzzy destination match, so source ports or addresses
           are not considered, and (currently) only incoming.
        cSs~d|ksd|kr ||krdSdS|�d�D]N}||kr<dSd|kr*|�d�\}}t|�t|�kr*t|�t|�kr*dSq*dS)z:Returns True if p is an exact match or within a multi ruler@rLTF)rHrP)Ztest_pZto_matchrTZlowZhighrrr	�_match_ports�s z-UFWRule.fuzzy_dst_match.<locals>._match_portsrz(No fuzzy match '%s (v6=%s)' '%s (v6=%s)'rz(direction) z (not incoming)rFz (forward does not match)rz(protocol) z(dport) r�/z(dst) z ('%s' not in network '%s')z(interface) z (%s != %s)z %s does not existz(v6) z'(fuzzy match) '%s (v6=%s)' '%s (v6=%s)'rk)rlrNrr'rr(rrr%�_is_anywhererrrYZ
in_networkZget_ip_from_if�IOError)rmrnrproZif_iprrr	�fuzzy_dst_match�s|�
(�

�

�
�
�&��zUFWRule.fuzzy_dst_matchcCs|dks|dkrdSdS)zCheck if address is anywherer:rTFr)rr^rrr	rrNszUFWRule._is_anywherecCs�d}|jdks|jdkr�d|j|j|j|jf}|jdkrRd|j|j|j|jf}|jdkrtd|j|j|j|jf}|jdkr�|jdkr�|d|j7}n0|jdkr�|d|j7}|jdkr�|d|j7}|S)a�Returns a tuple to identify an app rule. Tuple is:
             dapp dst sapp src direction_iface|direction
           or
             dport dst sapp src direction_iface|direction
           or
             dapp dst sport src direction_iface|direction

           where direction_iface is of form 'in_eth0', 'out_eth0' or
           'in_eth0 out_eth0' (ie, both interfaces used). If no interfaces are
           specified, then tuple ends with the direction instead.
        rz%s %s %s %sz %sz in_%sz out_%s)	r r!rrrrr%r&r')rZtuplrrr	�
get_app_tupleTs$
�
�

zUFWRule.get_app_tuplecCs�|jdkr4|jdks|jdkr4td�|j}t|��|jtjjkr`|dkr`td�|j}t|��|jtjjkr�|j	dks�|j
dkr�td�|j}t|��dS)zVerify rulerrz3Improper rule syntax ('%s' specified with app rule)rz'Invalid IPv6 address with protocol '%s'zInvalid port with protocol '%s'N)rr!r r;rrrYZipv4_only_protocolsZportless_protocolsrr)rZrule_iptyperUrrr	�verifyvs,
������zUFWRule.verifyN)rrrrrFr)r)rrrrr
r
r8r9r1r*r,r+rZr[r-r.rdrerJr/rgr0rirNrtrrrurvrrrr	r*s>�
#	C
5


0
	#Cn"r)rrBrQZufw.utilrrZprogramNameZ	state_dirZ	share_dirZ	trans_dirZ
config_dirZ
prefix_dirZiptables_dirZ	do_checksrRrrrrrr	�<module>s

Youez - 2016 - github.com/yon3zu
LinuXploit