Файловый менеджер - Редактировать - /opt/support/lib/__pycache__/firewall_tools.cpython-313.pyc
Ðазад
� ��i( � �8 � S SK Jr S SKJr S SKrS SKrS SKrS SKJrJ r J r J r S SK J r Jr S SKJr S\\S \S \\\\4 \- 4 4S jrS rS \S\S 4S jrS rS\\\\4 S\R2 S\\\S- 4 4S jrS\R2 S\4S jr g)� )�Literal)�PathN)�err_exit� print_listed�print_fail2ban_listed�warn)�is_exe�which)�yellow�return)�APF�CSF�ipset+fail2ban)�/usr/local/sbin/apf� /usr/sbin/csfNc �~ � Sn SnSn[ S5 ( a Sn[ S5 n SnON[ S5 ( a Sn[ S5 n SnO.[ S 5 ( a [ S 5 ( a S nO [ S 5 U c [ [ 5 5 nO U R S S9nX!W4$ ! [ a [ SU S35 N f = f)a� Yields a tuple of fw_name, fw_command, fw_data. fw_name will be "APF", "CSF", or "ipset+fail2ban". If fw_name was "APF" or "CSF", fw_command will be the path to its exe. If fw_name was "APF" or "CSF", fw_data will be the contents of its deny file. Otherwise, fw_data will be a list of dicts containing "listname" and "ip". Returns: tuple[str, str | None, list[dict[str, str] | None]]: see above N� r z/etc/apf/deny_hosts.rulesr r z/etc/csf/csf.denyr z/usr/bin/fail2ban-client�ipsetr zCannot identify firewall�utf-8��encodingz Cannot read z . Firewall is misconfigured.)r r r r �list�read_ipset_save� read_text�FileNotFoundError)� deny_file�fw_cmd�name� deny_datas �"/opt/support/lib/firewall_tools.py�fw_infor! s� � �$ �I� �F� �D� �#�$�$�&���4�5� ��� �� � � ���,�-� ��� �*� +� +��g��� ���+�,���� �*�+� � M�!�+�+�W�+�=�I� �� "�"�� !� M� �|�I�;�.J�K� L� M�s � B � B<�;B<c # �T # � [ R " S5 n [ R " SS/S[ R SS9 nUR H= nU R UR 5 5 =n( d M+ UR 5 v � M? S S S 5 g ! , ( d f g = f7f)Nz4add (?P<listname>[a-zA-Z0-9\-_]+) (?P<ip>[0-9\./]+)$r �saver T)r �stdout�universal_newlines) �re�compile� subprocess�Popen�PIPEr$ �match�rstrip� groupdict)�irgx�proc�liner+ s r r r 6 s� � � � �:�:�M� N�D� � � � �&������ � � ��K�K�D� � � �4�;�;�=�1�1�u�1��o�o�'�'� � � � �s# �>B(� 4B�8B� B(� B%�!B(�listname)�ACCEPT�DROP�DENY�UNKNOWNc �Z � [ R " S5 n[ R " S5 n[ S5 nUR SS9R 5 nU HQ nUR U5 =n( d M US U :X d M( UR U5 =n( d MB US nUS:w d MO Us $ g) z;Check whether an ipset list is set to ACCEPT, DROP, or DENYz--match-set ([a-z0-9\-\_]+)z -j ([A-Z]+)�/etc/sysconfig/iptablesr r r �DOCKERr5 �r& r' r r � splitlines�findall) r1 �set_re� action_re� iptables_file�iptablesr0 � set_match� action_match�actions r �ipset_list_actionrC C s� � � �Z�Z�6� 7�F�� � �>�*�I��2�3�M� �&�&��&�8�C�C�E�H��� ���t�,� ,�9� ,���|�x�'�#,�#4�#4�T�#:�:�<�:� )�!�_�F� ��)� %� � � � c # � # � [ R " S5 n [ R " S5 n[ S5 nUR SS9R 5 nU Hd nSU; d M SU; d M U R U5 nU( d M- US nS U; a& UR U5 nU( a US nXh4v � M\ M^ US 4v � Mf g 7f) Nz--match-set ([a-z0-9\-]+)z--dports ([0-9\,]+)r7 r r �INPUT�f2br � multiport�ALLr9 ) �jail_re�ports_rer> r? r0 � jail_match� jail_name� port_match�portss r �get_jail_portsrP U s� � � ��j�j�5�6�G��z�z�0�1�H��2�3�M� �&�&��&�8�C�C�E�H��� �d�?�u��}� � � ��.�J� ��"�1� �I��d�"� %� -� -�d� 3� � � &�q�M�E�#�*�*� � ��&�&� �s �A C�$C�,AC�fw_data�ipaddrc �\ � [ [ 5 5 n/ n/ nSnU H? n U[ R " US 5 ; nU( a US nUR U5 M? MA U( d [ USS5 gSnU H� n[ U5 n[ USSU S U S 35 UR S 5 ( aB UR S S 5 n UR US 5 n UR U 5 [ X�5 Mz US:X d M� [ U S3[ S9 g Xt4$ ! [ R a GM f = f)ah Check deny_data ``fw_info()`` for an IP address. If found, return whether it's blocked and in what fail2ban list if it was automatically blocked Args: fw_data (list[dict[str, str]]): third arg returned by ``fw_info()`` ipaddr (netaddr.IPAddress): IP address to check Returns: tuple[bool, str | None]]: if blocked and in what fail2ban list if any N�ipr1 Fzany ipset or fail2ban list)FNTzthe � z listzf2b-r rI r2 z# is NOT BLOCKED. It is whitelisted.)�color)�dictrP �netaddr� IPNetwork�append�AddrFormatErrorr rC � startswith�replace�getr r r ) rQ rR � jail_port_map� within_lists� within_jails� list_name�tnet�listed� list_actionrM � jail_portss r �ipset_fail2ban_checkrg j sC � � � �)�*�M��L��L��I��� ��w� 0� 0��d�� <�<�F�� �� ,� � �#�#�I�.� � � ��V�U�$@�A�� �F�!� �'� �2� ��V�T�T�)��A�k�]�%�#H�I� � � �� '� '�!�)�)�&�"�5�I�&�*�*�9�e�<�J� � � � � *� !�)� 8��h�&�� �h� A�B�&�� #� "� � � ��/ �&�&� � � �s �9D�D+�*D+c � � [ R " SS/SS9nWR 5 H, nUR S5 ( a M [ U 5 U; d M, g g! [ [ R 4 a [ S5 Nhf = f) zPSearch iptables -nL for a line containing an IP which does not start with ACCEPTr? z-nLr r zcould not run iptables -nLr2 TF)r( � check_output�OSError�CalledProcessErrorr r: r\ �str)rR rQ r0 s r �check_iptablesrm � sz � �/� �)�)�:�u�*=��P�� �"�"�$�����x�(�(�S��[�D�-@�� %� �� �Z�2�2� 3� /��-�.�/�s �A �%B�B) �typingr �pathlibr r& r( rX �outputr r r r �run_cmdr r � rads.colorr �tupler rW rl r! r rC rP � IPAddress�boolrg rm � rD r �<module>rw s� �� � � � � � F� F� !� �(#�� � *�+� � 8�9���c�3�h� ��3� � �� (#�V (���� � 0�1��$'�*. � �$�s�C�x�.� !�. �+2�+<�+<�. � �4��t�� � �. �b �7�,�,� �� rD
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка