3
Yj$ @ s& d gZ ddlZddlmZ ddlmZ ddlmZm Z m
Z
ddl m Z ddl
mZ ddlmZmZ ddlZd gd
d d gd
d dgdZi Zi Zi Zxej D ]tZg ee< e ee< x\ee D ]PZee jde ee jdeef ee jde ee j de qW qW G dd d e Z dS )ebtables N)runProg)log)tempFilereadfile splitArgs)COMMANDS) ipXtables)
FirewallError INVALID_IPVZBROUTINGZ
PREROUTINGZ POSTROUTINGZOUTPUTZINPUTZFORWARD)ZbrouteZnatfilterz -N %s_directz-I %s 1 -j %s_directz-I %s_direct 1 -j RETURNz %s_directc @ s e Zd ZdZd ZdZdd Zdd Zdd Zd d
Z d d Z
d
d Z dd Z dd Z
dd Zdd Zdd Zdd Zdd Zd d Zd/d d!Zd"d# Zd$d% Zd&d' Zd(d) Zd0d+d,Zd-d. Zd S )1r ZebFc C sB t | j | _t d| j | _| j | _| j | _| j g | _ d S )Nz
%s-restore)
r ipv_command_restore_command _detect_restore_noflush_optionZrestore_noflush_option_detect_concurrent_optionconcurrent_option fill_existsavailable_tables)self r /usr/lib/python3.6/ebtables.py__init__9 s
zebtables.__init__c C s$ t jj| j| _t jj| j| _d S )N)ospathexistsr Zcommand_existsr Zrestore_command_exists)r r r r r A s zebtables.fill_existsc C s( d}t | jddg}|d dkr$d}|S )N z --concurrentz-Lr )r r )r r retr r r r E s
z"ebtables._detect_concurrent_optionc C s. g }y| j |d W n tk
r( dS X dS )NoffFT) set_rules
ValueError)r rulesr r r r O s z'ebtables._detect_restore_noflush_optionc C s g }| j r | j |kr |j| j |dd |D 7 }tjd| j| jdj| t| j|\}}|dkr~td| jdj||f |S )Nc S s g | ] }d | qS )z%sr ).0itemr r r
^ s z"ebtables.__run..z %s: %s %s r z'%s %s' failed: %s) r appendr debug2 __class__r joinr r )r argsZ_argsstatusr r r r Z__runY s zebtables.__runc C s( x"dD ]}||krt td| qW d S )N
%%REJECT%%%%ICMP%% %%LOGTYPE%%z'%s' invalid for ebtables)r, r- r. )r
r )r rulestrr r r _rule_validatef s
zebtables._rule_validatec C s |t ko|t | kS )N)BUILT_IN_CHAINS)r r
tablechainr r r is_chain_builtinl s zebtables.is_chain_builtinc C sJ g }|r4|j d|d|g |j d|d|dddg n|j d|d|g |S )Nz-tz-Nz-I1z-jZRETURNz-X)r& )r addr3 r4 r! r r r build_chain_rulesp s zebtables.build_chain_rulesc C s8 d|g}|r |d|t |g7 }n |d|g7 }||7 }|S )Nz-tz-Iz-D)r0 )r r7 r3 r4 indexr* r/ r r r
build_rule{ s zebtables.build_rulec C s
t j|S )N)r Zcommon_reverse_rule)r r* r r r reverse_rule s zebtables.reverse_rulec C s t j| d S )N)r Zcommon_check_passthrough)r r* r r r check_passthrough s zebtables.check_passthroughc C s
t j|S )N)r Zcommon_reverse_passthrough)r r* r r r reverse_passthrough s z ebtables.reverse_passthroughc
C s< t }d}i }x|D ]}|d d }| j| xTdD ]L}y|j|} W n tk
rZ Y q4X t|| d kr4|j| |j| }q4W x^tt|D ]N} xHtjD ]>}
|
|| kr|| j do|| j
d rd|| || < qW qW |j |g j | qW xD|D ]<}|j
d| x&|| D ]}|j
dj|d q W q W |j tj|j} tjd
| j| jd |j| jf g } | j d t| j| |jd
\}
}tj dkrt|j}|d k rd} xH|D ]@}tjd| |f ddd |j
d stjddd | d7 } qW tj |j |
dkr8td| jdj| |f d S )Nr -t--table "z"%s"z*%s
r%
z %s: %s %sz%s: %dz --noflush)stdin z%8d: %sr )nofmtnlr )rE z'%s %s' failed: %s)r> r? ) r r1 r9 r lenpoprangestringZ
whitespace
startswithendswith
setdefaultr& writer) closer statnamer r' r( r st_sizer ZgetDebugLogLevelr Zdebug3unlink)r r!
log_deniedZ temp_filer3 Z table_rulesZ_ruler/ opticrP r* r+ r linesliner r r r sZ
zebtables.set_rulesc C s | j | | j|S )N)r1 _ebtables__run)r r/ rT r r r set_rule s
zebtables.set_ruleNc C s g }|r|gnt j }xp|D ]h}|| jkr6|j| q y*| jd|dg | jj| |j| W q tk
r tjd| Y q X q W |S )Nz-tz-Lz#ebtables table '%s' does not exist.)r2 keysr r& rZ r r Zdebug1)r r3 r Ztablesr r r get_available_tables s
z ebtables.get_available_tablesc C s i S )Nr )r r3 r r r get_zone_table_chains s z ebtables.get_zone_table_chainsc C sF g }x s.