????
Your IP : 18.117.132.79
3
@)�f�2 � @ s� d ddgZ ddljZddlZddlZddlZddlmZ ddlm Z ddl
m Z m Z m
Z
mZmZmZmZmZ ddlmZ dd lmZ dd
lmZ G d d � d e �ZG d d
� d
e
�Zdd� Zddd�ZdS )�Service�service_reader�service_writer� N)�config)�
u2b_if_py2)�PY2� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator�
check_port� check_tcpudp�check_protocol�
check_address)�log)�errors)�
FirewallErrorc s� e Zd Zd d!d"dd#gfddgfdddifddgfd d$gfd
dgfd dgff
Zd d
gZdddd�Zddgddgdgdgddgddgdgdgd�Z� fdd�Zdd� Zd d � Z d d � Z
� Z S )%r �version� �short� description�ports�modules� destination� protocols� source_ports�includes�helpers�_�-N)r r �service�name�port�protocol�value�ipv4�ipv6r )r r! r" �moduler z source-port�include�helperc sN t t| �j� d| _d| _d| _g | _g | _g | _i | _ g | _
g | _ g | _ d S )Nr )
�superr �__init__r r r r r r r r r r )�self)� __class__� � /usr/lib/python3.6/service.pyr* D s zService.__init__c C sh d| _ d| _d| _| jd d �= | jd d �= | jd d �= | jj� | jd d �= | j d d �= | j
d d �= d S )Nr ) r r r r r r r �clearr r r )r+ r- r- r. �cleanupQ s
zService.cleanupc C s� t | j�| _t | j�| _t | j�| _dd� | jD �| _dd� | jD �| _dd� | jj� D �| _dd� | jD �| _dd� | j D �| _ dd� | j
D �| _
d d� | j D �| _ d
S ) z� HACK. I haven't been able to make sax parser return
strings encoded (because of python 2) instead of in unicode.
Get rid of it once we throw out python 2 support.c S s g | ]\}}t |�t |�f�qS r- )r )�.0�po�prr- r- r. �
<listcomp>d s z*Service.encode_strings.<locals>.<listcomp>c S s g | ] }t |��qS r- )r )r1 �mr- r- r. r4 e s c S s i | ]\}}t |�t |��qS r- )r )r1 �k�vr- r- r. �
<dictcomp>f s z*Service.encode_strings.<locals>.<dictcomp>c S s g | ] }t |��qS r- )r )r1 r3 r- r- r. r4 g s c S s g | ]\}}t |�t |�f�qS r- )r )r1 r2 r3 r- r- r. r4 h s c S s g | ] }t |��qS r- )r )r1 �sr- r- r. r4 j s c S s g | ] }t |��qS r- )r )r1 r9 r- r- r. r4 k s N) r r r r r r r �itemsr r r r )r+ r- r- r. �encode_strings] s zService.encode_stringsc C s: |dkrJx>|D ]6}|d dkr8t |d � t|d � qt|d � qW n�|dkrjx�|D ] }t|� qXW n�|dkr�x�|D ] }t |d � t|d � qxW n�|dkr�x�|D ]*}|dkr�ttjd
| ��t||| � q�W n^|d k�r6xR|D ]J}|jd ��r|jd d�}d
|k�r|jd
d�}t |�dk r�ttj
|��q�W d S )Nr r r � r r r r$ r% z'%s' not in {'ipv4'|'ipv6'}r �
nf_conntrack_r r � )r$ r% ) r r r
r r ZINVALID_DESTINATIONr �
startswith�replace�lenZINVALID_MODULE)r+ r �itemZ
all_configr! �protor r& r- r- r. �
_check_configm s8
zService._check_config)r r )r r )r r )r r )r r ) �__name__�
__module__� __qualname__ZIMPORT_EXPORT_STRUCTUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr* r0 r; rD �
__classcell__r- r- )r, r. r & s4
c @ s e Zd Zdd� ZdS )�service_ContentHandlerc C s0 t j| ||� | jj||� |dkrTd|kr<tjd|d � d|krP|d | j_�n�|dkr`�n�|dkrl�n�|dk�r$|d dkr�t|d � t|d � |d |d f}|| jj kr�| jj j
|� ntjd
|d |d � nBt |d � |d | jj k�r| jj j
|d � ntjd |d � �n|d k�rtt |d � |d | jj k�r`| jj j
|d � ntjd |d � �n�|d
k�r�t|d � t|d � |d |d f}|| jj
k�r�| jj
j
|� ntjd|d |d � �nN|dk�r>xRd D ]J}||k�r�t||| � || jjk�r&tjd|� n|| | jj|< �q�W n�|dk�r�|d }|jd��r~|jdd�}d|k�r~|jdd�}|| jjk�r�| jjj
|� n tjd|� n�|dk�r�|d | jjk�r�| jjj
|d � ntjd|d � n@|dk�r,|d | jjk�r | jjj
|d � ntjd|d � d S ) Nr r z'Ignoring deprecated attribute name='%s'r r r r! r r" z#Port '%s/%s' already set, ignoring.z$Protocol '%s' already set, ignoring.r# z source-portz)SourcePort '%s/%s' already set, ignoring.r r$ r% z2Destination address for '%s' already set, ignoringr& r= r r z"Module '%s' already set, ignoring.r' z#Include '%s' already set, ignoring.r( z"Helper '%s' already set, ignoring.)r$ r% )r � startElementrB Zparser_check_element_attrsr Zwarningr r r r �appendr
r r r r r? r@ r r r )r+ r �attrs�entry�xr& r- r- r. rJ � s�
z#service_ContentHandler.startElementN)rE rF rG rJ r- r- r- r. rI � s rI c C s t � }| jd�s ttjd| ��| d d � |_|j|j� | |_||_|j t
j �rVdnd|_ |j |_
t|�}tj� }|j|� d|| f }t|d��b}tjd �}|j|� y|j|� W n8 tjk
r� } zttjd|j� ��W Y d d }~X nX W d Q R X ~~t�r|j� |S )
Nz.xmlz'%s' is missing .xml suffix� FTz%s/%s�rbz not a valid service file: %s���)r �endswithr r Z INVALID_NAMEr Z
check_name�filename�pathr? r �
ETC_FIREWALLDZbuiltin�defaultrI �saxZ make_parserZsetContentHandler�openZ InputSourceZ
setByteStream�parseZSAXParseExceptionZINVALID_SERVICEZ getExceptionr r; ) rS rT r �handler�parserr �f�source�msgr- r- r. r � s8
(c C sr |r|n| j }| jr$d|| jf }nd|| jf }tj j|�r�ytj|d| � W n0 tk
r� } ztj d||� W Y d d }~X nX tj j
|�}|j t j
�r�tj j|� r�tj jt j
�s�tjt j
d� tj|d� tj|ddd�}t|�}|j� i }| j�r| jd k�r| j|d
< |jd |� |jd � | j�rt| jd k�rt|jd
� |jdi � |j| j� |jd� |jd � | j�r�| jd k�r�|jd
� |jdi � |j| j� |jd� |jd � x>| jD ]4} |jd
� |jd| d | d d�� |jd � �q�W x4| j D ]*}
|jd
� |jdd|
i� |jd � �qW x>| j D ]4} |jd
� |jd| d | d d�� |jd � �q<W x4| j D ]*} |jd
� |jdd| i� |jd � �q|W t | j �dk�r�|jd
� |jd| j � |jd � x4| j!D ]*} |jd
� |jdd | i� |jd � �q�W x4| j"D ]*}
|jd
� |jdd|
i� |jd � �qW |jd � |jd � |j#� |j$� ~d S ) Nz%s/%sz %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si� ZwtzUTF-8)�mode�encodingr r r �
z r r r! r r< )r! r" r" r# z source-portr& r r r' r( )%rT rS r �os�exists�shutilZcopy2� Exceptionr �error�dirnamer? r rU �mkdir�iorX r
Z
startDocumentr rJ ZignorableWhitespacer Z
charactersZ
endElementr r Z
simpleElementr r r rA r r r Z endDocument�close)r rT �_pathr r^ �dirpathr\ rZ rL r! r" r& r' r( r- r- r. r s�
)N) �__all__Zxml.saxrW rb ri rd Zfirewallr Zfirewall.functionsr Zfirewall.core.io.io_objectr r r r
r r r
r Zfirewall.core.loggerr r Zfirewall.errorsr r rI r r r- r- r- r. �<module> s
( mQ