/opt/support/lib/__pycache__
Edit: /opt/support/lib/__pycache__/firewall_tools.cpython-313.pyc (7429B)
i( 8 S SK Jr S SKJr S SKrS SKrS SKrS SKJrJ r J
r
J r S SK J
r
Jr S SKJr S\\S \S \\\\4 \- 4 4S
jrS rS \S\S
4S jrS rS\\\\4 S\R2 S\\\S- 4 4S jrS\R2 S\4S jr g) )Literal)PathN)err_exit print_listedprint_fail2ban_listedwarn)is_exewhich)yellowreturn)APFCSFipset+fail2ban)/usr/local/sbin/apf
/usr/sbin/csfNc ~ Sn SnSn[ S5 ( a Sn[ S5 n SnON[ S5 ( a Sn[ S5 n SnO.[ S 5 ( a [ S
5 ( a S nO [ S 5 U c [ [ 5 5 nO U R
S
S9nX!W4$ ! [ a [ SU S35 N f = f)a Yields a tuple of fw_name, fw_command, fw_data.
fw_name will be "APF", "CSF", or "ipset+fail2ban".
If fw_name was "APF" or "CSF", fw_command will be the path to its exe.
If fw_name was "APF" or "CSF", fw_data will be the contents of its deny
file. Otherwise, fw_data will be a list of dicts containing "listname"
and "ip".
Returns:
tuple[str, str | None, list[dict[str, str] | None]]: see above
N r z/etc/apf/deny_hosts.rulesr
r z/etc/csf/csf.denyr z/usr/bin/fail2ban-clientipsetr zCannot identify firewallutf-8encodingz Cannot read z . Firewall is misconfigured.)r r r
r listread_ipset_save read_textFileNotFoundError) deny_filefw_cmdname deny_datas "/opt/support/lib/firewall_tools.pyfw_infor! s $ I
F
D
#$$&45 ,- * + +g +, *+ M!++W+=I "" ! M |I;.JK L Ms
B B<;B<c # T # [ R " S5 n [ R " SS/S[ R SS9 nUR
H= nU R
UR 5 5 =n( d M+ UR 5 v M? S S S 5 g ! , ( d f g = f7f)Nz4add (?P
[a-zA-Z0-9\-_]+) (?P[0-9\./]+)$r saver T)r stdoutuniversal_newlines) recompile
subprocessPopenPIPEr$ matchrstrip groupdict)irgxprocliner+ s r r r 6 s
::M ND &
KKD
4;;=11u1oo''
s# >B( 4B8B B(
B%!B(listname)ACCEPTDROPDENYUNKNOWNc Z [ R " S5 n[ R " S5 n[ S5 nUR SS9R 5 nU HQ nUR U5 =n( d M US U :X d M( UR U5 =n( d MB US nUS:w d MO Us $ g) z;Check whether an ipset list is set to ACCEPT, DROP, or DENYz--match-set ([a-z0-9\-\_]+)z -j ([A-Z]+)/etc/sysconfig/iptablesr r r DOCKERr5 r& r' r r
splitlinesfindall) r1 set_re action_re
iptables_fileiptablesr0 set_match action_matchactions r ipset_list_actionrC C s ZZ6
7F
>*I23M &&&8CCEH t, ,9 ,|x'#,#4#4T#::<: )!_F ) %
c # # [ R " S5 n [ R " S5 n[ S5 nUR SS9R 5 nU Hd nSU; d M SU; d M U R U5 nU( d M- US nS U; a& UR U5 nU( a US nXh4v M\ M^ US
4v Mf g 7f) Nz--match-set ([a-z0-9\-]+)z--dports ([0-9\,]+)r7 r r INPUTf2br multiportALLr9 ) jail_reports_rer> r? r0
jail_match jail_name
port_matchportss r get_jail_portsrP U s jj56Gzz01H23M &&&8CCEH d?u} .J "1
Id" % - -d 3
&qME#** && s A C$C,ACfw_dataipaddrc
\ [ [ 5 5 n/ n/ nSnU H? n U[ R " US 5 ; nU( a US nUR U5 M? MA U( d [
USS5 gSnU H n[ U5 n[
USSU S U S
35 UR S 5 ( aB UR S S 5 n UR US
5 n
UR U 5 [ X5 Mz US:X d M [ U S3[ S9 g Xt4$ ! [ R
a GM f = f)ah Check deny_data ``fw_info()`` for an IP address. If found, return whether
it's blocked and in what fail2ban list if it was automatically blocked
Args:
fw_data (list[dict[str, str]]): third arg returned by ``fw_info()``
ipaddr (netaddr.IPAddress): IP address to check
Returns:
tuple[bool, str | None]]: if blocked and in what fail2ban list if any
Nipr1 Fzany ipset or fail2ban list)FNTzthe z listzf2b-r rI r2 z# is NOT BLOCKED. It is whitelisted.)color)dictrP netaddr IPNetworkappendAddrFormatErrorr rC
startswithreplacegetr r r ) rQ rR
jail_port_map within_lists within_jails list_nametnetlisted list_actionrM
jail_portss r ipset_fail2ban_checkrg j sC )*MLLI w 0 0d <rw s F F ! (# *+ 89c3h 3 (#V
(
01$'*.
$sCx.
!. +2+<+<.
4t . b 7,, rD