3 Y�j�$�@s&dgZddlZddlmZddlmZddlmZm Z m Z ddlmZddl mZddlmZmZddlZd gd ddgd ddgd�ZiZiZiZx�ej�D]tZgee<e�ee<x\eeD]PZeejde�eejdeef�eejde�eejde�q�Wq�WGdd�de�ZdS)�ebtables�N)�runProg)�log)�tempFile�readfile� splitArgs)�COMMANDS)� ipXtables)� FirewallError�INVALID_IPVZBROUTINGZ PREROUTINGZPOSTROUTINGZOUTPUTZINPUTZFORWARD)ZbrouteZnat�filterz-N %s_directz-I %s 1 -j %s_directz-I %s_direct 1 -j RETURNz %s_directc@s�eZdZdZdZdZdd�Zdd�Zdd�Zd d �Z dd�Z d d�Zdd�Zdd�Z dd�Zdd�Zdd�Zdd�Zdd�Zdd�Zd/d d!�Zd"d#�Zd$d%�Zd&d'�Zd(d)�Zd0d+d,�Zd-d.�ZdS)1rZebFcCsBt|j|_td|j|_|j�|_|j�|_|j�g|_ dS)Nz %s-restore) r�ipv�_command�_restore_command�_detect_restore_noflush_optionZrestore_noflush_option�_detect_concurrent_option�concurrent_option�fill_exists�available_tables)�self�r�/usr/lib/python3.6/ebtables.py�__init__9s zebtables.__init__cCs$tjj|j�|_tjj|j�|_dS)N)�os�path�existsrZcommand_existsrZrestore_command_exists)rrrrrAszebtables.fill_existscCs(d}t|jddg�}|ddkr$d}|S)N�z--concurrentz-Lr)rr)rr�retrrrrEs z"ebtables._detect_concurrent_optioncCs.g}y|j|d�Wntk r(dSXdS)N�offFT)� set_rules� ValueError)r�rulesrrrrOsz'ebtables._detect_restore_noflush_optioncCs�g}|jr |j|kr |j|j�|dd�|D�7}tjd|j|jdj|��t|j|�\}}|dkr~td|jdj|�|f��|S)NcSsg|]}d|�qS)z%sr)�.0�itemrrr� ^sz"ebtables.__run..z %s: %s %s� rz'%s %s' failed: %s) r�appendr�debug2� __class__r�joinrr )r�argsZ_args�statusrrrrZ__runYszebtables.__runcCs(x"dD]}||krttd|��qWdS)N� %%REJECT%%�%%ICMP%%�%%LOGTYPE%%z'%s' invalid for ebtables)r,r-r.)r r)r�rule�strrrr�_rule_validatefs zebtables._rule_validatecCs|tko|t|kS)N)�BUILT_IN_CHAINS)rr �table�chainrrr�is_chain_builtinlszebtables.is_chain_builtincCsJg}|r4|jd|d|g�|jd|d|dddg�n|jd|d|g�|S)Nz-tz-Nz-I�1z-jZRETURNz-X)r&)r�addr3r4r!rrr�build_chain_rulespszebtables.build_chain_rulescCs8d|g}|r |d|t|�g7}n|d|g7}||7}|S)Nz-tz-Iz-D)r0)rr7r3r4�indexr*r/rrr� build_rule{szebtables.build_rulecCs tj|�S)N)r Zcommon_reverse_rule)rr*rrr�reverse_rule�szebtables.reverse_rulecCstj|�dS)N)r Zcommon_check_passthrough)rr*rrr�check_passthrough�szebtables.check_passthroughcCs tj|�S)N)r Zcommon_reverse_passthrough)rr*rrr�reverse_passthrough�szebtables.reverse_passthroughc Cs<t�}d}i}x�|D]�}|dd�}|j|�xTdD]L}y|j|�} Wntk rZYq4Xt|�| dkr4|j| �|j| �}q4Wx^tt|��D]N} xHtjD]>} | || kr�|| j d�o�|| j d�r�d|| || <q�Wq�W|j|g�j|�qWxD|D]<}|j d|�x&||D]}|j dj|�d ��qW�qW|j�tj|j�}tjd |j|jd|j|jf�g}|jd�t|j||jd �\} }tj�dk�rt|j�}|dk �rd} xH|D]@}tjd| |fddd�|j d ��s�tjddd�| d7} �q�Wtj|j�| dk�r8td|jdj|�|f��dS)Nr�-t�--table��"z"%s"z*%s r%� z %s: %s %sz%s: %dz --noflush)�stdin�z%8d: %sr)�nofmt�nlr)rEz'%s %s' failed: %s)r>r?)rr1r9r �len�pop�range�stringZ whitespace� startswith�endswith� setdefaultr&�writer)�closer�stat�namerr'r(r�st_sizerZgetDebugLogLevelrZdebug3�unlink)rr!� log_deniedZ temp_filer3Ztable_rulesZ_ruler/�opt�i�crPr*r+r�lines�linerrrr�sZ zebtables.set_rulescCs|j|�|j|�S)N)r1�_ebtables__run)rr/rTrrr�set_rule�s zebtables.set_ruleNcCs�g}|r|gntj�}xp|D]h}||jkr6|j|�qy*|jd|dg�|jj|�|j|�Wqtk r�tjd|�YqXqW|S)Nz-tz-Lz#ebtables table '%s' does not exist.)r2�keysrr&rZr rZdebug1)rr3rZtablesrrr�get_available_tables�s zebtables.get_available_tablescCsiS)Nr)rr3rrr�get_zone_table_chains�szebtables.get_zone_table_chainscCsFg}xs.