3 Y�j�=�@s�ddljZddlZddlZddlZddlmZddlmZddl m Z mZmZddl mZmZmZddlmZddlmZddlmZdd lmZdd lmZGdd�de�ZGd d�de�ZdS)�N)�config)�LastUpdatedOrderedDict)� splitArgs�joinArgs� u2b_if_py2)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)�log)� ipXtables)�ebtables)�errors)� FirewallErrorc@s$eZdZdd�Zdd�Zdd�ZdS)�direct_ContentHandlercCstj||�d|_dS)NF)r�__init__�direct)�self�item�r�/usr/lib/python3.6/direct.pyr(szdirect_ContentHandler.__init__cCs�tj|||�|jj||�|dkr@|jr6ttjd��d|_�n>|dkr�|js\tj d�dS|d}|d}|d}|jj t|�t|�t|��n�|dk�r6|js�tj d �dS|d}|dkr�ttjd |��|d}|d}yt |d�}Wn(tk �rtj d|d�dSXt|�t|�t|�|g|_nH|dk�rl|j�sVtj d�dS|d}t|�g|_ntj d|�dSdS)NrzMore than one direct tag.T�chainz$Parse Error: chain outside of direct�ipv�table�rulez#Parse Error: rule outside of direct�ipv4�ipv6�ebz"'%s' not from {'ipv4'|'ipv6'|'eb'}�priorityz'Parse Error: %s is not a valid priority�passthroughz&Parse Error: command outside of directzUnknown XML element %s)rrr)r�startElementrZparser_check_element_attrsrrr ZPARSE_ERRORr �error� add_chainr�INVALID_IPV�int� ValueError�_rule�_passthrough)r�nameZattrsrrrrrrrr,sT z"direct_ContentHandler.startElementcCs�tj||�|dkrX|jrF|jjdd�t|j�D��|jj|j�n tj d�d|_nJ|dkr�|jr�|j jdd�t|j�D��|jj|j �n tj d �d|_ dS) NrcSsg|]}t|��qSr)r)�.0�xrrr� dsz4direct_ContentHandler.endElement..z2Error: rule does not have any arguments, ignoring.rcSsg|]}t|��qSr)r)r(r)rrrr*msz0Error: passthrough does not have any arguments, z ignoring.z9Error: passthrough does not have any arguments, ignoring.)r� endElementZ_elementr%�appendrr�add_ruler r r&�add_passthrough)rr'rrrr+^s z direct_ContentHandler.endElementN)�__name__� __module__�__qualname__rrr+rrrrr's2rcs<eZdZdZddBgfddddddgfgfdddgfgffZdZdd d dgd d ddgd gd �ZiZ�fdd�Zdd�Z dd�Z dd�Zdd�Zdd�Z dd�Zdd�Zdd�Zd d!�Zd"d#�Zd$d%�Zd&d'�Zd(d)�Zd*d+�Zd,d-�Zd.d/�Zd0d1�Zd2d3�Zd4d5�Zd6d7�Zd8d9�Zd:d;�Zdd?�Z d@dA�Z!�Z"S)C�Directz Direct class �chains��rulesr�passthroughsz(a(sss)a(sssias)a(sas))Nrrrr)rrrrcs0tt|�j�||_t�|_t�|_t�|_dS)N)�superr2r�filenamerr3r5r6)rr8)� __class__rrr�s zDirect.__init__cCsdS)Nr)r�confrZall_confrrr� _check_config�szDirect._check_configcCsg}g}x>|jD]4}x.|j|D] }|jtt|�t|g��q WqW|j|�g}xR|jD]H}xB|j|D]4}|jt|d|d|d|dt|d�f��qnWq^W|j|�g}x8|jD].}x(|j|D]}|jt|t|�f��q�Wq�W|j|�t|�S)Nr��)r3r,�tuple�listr5r6)r�retr)�keyrrrrr� export_config�s$$ zDirect.export_configcCs�|j�|j|�x�t|j�D]x\}\}}|dkrNx||D]}|j|�qr rRrL)rrrrrrMrA�valuerrrr-s zDirect.add_rulecCs�|j||�|||f}|t|�f}||jkrb||j|krb|j||=t|j|�dkr�|j|=n$tddj|�||fd||f��dS)Nrz(Rule '%s' for table '%s' and chain '%s' z',z)with ipv '%s' and priority %d not in list)rQr>r5rTr$rL)rrrrrrMrArYrrr�remove_rules zDirect.remove_rulecCsb|j||�|||f}||jkr^x"|j|j�D]}|j||=q0Wt|j|�dkr^|j|=dS)Nr)rQr5rPrT)rrrrrArYrrr�remove_rules"s zDirect.remove_rulescCs:|j||�|||f}|t|�f}||jko8||j|kS)N)rQr>r5)rrrrrrMrArYrrr� query_rule+s zDirect.query_rulecCsF|j||�|||f}||jkr*|j|Std||fd|��dS)Nz'No rules for table '%s' and chain '%s' z with ipv '%s')rQr5r$)rrrrrArrr� get_rules1s zDirect.get_rulescCs|jS)N)r5)rrrr� get_all_rules:szDirect.get_all_rulescCs^|j|�||jkrg|j|<||j|kr>|j|j|�ntjddj|�|fd�dS)NzPassthrough '%s' for ipv '%s'z',zalready in list, ignoring)rOr6r,r rRrL)rrrMrrrr.?s zDirect.add_passthroughcCsl|j|�||jkrN||j|krN|j|j|�t|j|�dkrh|j|=ntddj|�|fd��dS)NrzPassthrough '%s' for ipv '%s'z',znot in list)rOr6rSrTr$rL)rrrMrrr�remove_passthroughIs zDirect.remove_passthroughcCs"|j|�||jko ||j|kS)N)rOr6)rrrMrrr�query_passthroughSs zDirect.query_passthroughcCs.|j|�||jkr|j|Std|��dS)NzNo passthroughs for ipv '%s')rOr6r$)rrrrr�get_passthroughsWs zDirect.get_passthroughscCs|jS)N)r6)rrrr�get_all_passthroughs^szDirect.get_all_passthroughscCs�|j�|jjd�s&ttjd|j��t|�}tj�}|j |�t |jd��b}tjd�}|j|�y|j |�Wn8tjk r�}zttjd|j��WYdd}~XnXWdQRXdS)Nz.xmlz'%s' is missing .xml suffix�rbzNot a valid file: %s)rCr8�endswithrr ZINVALID_NAMEr�saxZmake_parserZsetContentHandler�openZInputSourceZ setByteStream�parseZSAXParseExceptionZINVALID_TYPEZgetException)r�handler�parser�f�source�msgrrr�readcs zDirect.readc CsBtjj|j�r\ytj|jd|j�Wn4tk rZ}ztd|j|f��WYdd}~XnXtjjtj �sxtj tj d�tj|jddd�}t |�}|j�|jdi�|jd�xR|jD]H}|\}}x:|j|D],}|jd �|jd |||d��|jd�q�Wq�Wx�|jD]�}|\}}}xx|j|D]j\}} t| �dk�r@�q&|jd �|jd |||d|d��|jtjjt| ��|jd �|jd��q&W�qWx||jD]r}xj|j|D]\} t| �dk�rȐq�|jd �|jdd|i�|jtjjt| ��|jd�|jd��q�W�q�W|jd�|jd�|j�|j�~dS)Nz%s.oldzBackup of '%s' failed: %si�ZwtzUTF-8)�mode�encodingr� z r)rrrr<rz%d)rrrrrr)�os�path�existsr8�shutilZcopy2� Exception�IOErrorrZ ETC_FIREWALLD�mkdir�iorfr Z startDocumentrZignorableWhitespacer3Z simpleElementr5rTreZsaxutils�escaperr+r6ZendDocument�close) rrlrjrhrArrrrrMrrr�writeusZ$ zDirect.write)r4r4r4)#r/r0r1�__doc__rEZDBUS_SIGNATUREZPARSER_REQUIRED_ELEMENT_ATTRSZPARSER_OPTIONAL_ELEMENT_ATTRSrr;rBrHrCrNrOrQr!rUrVrWrXr-rZr[r\r]r^r.r_r`rarbrmr{� __classcell__rr)r9rr2usH r2)Zxml.saxrerqrxrtZfirewallrZfirewall.fw_typesrZfirewall.functionsrrrZfirewall.core.io.io_objectrrr Zfirewall.core.loggerr Z firewall.corerrr Zfirewall.errorsrrr2rrrr�s N