VÅVÐzã@s1ddlZddlZddlZddlmZddlmZGdd„dƒZGdd„deƒZGdd „d eƒZ Gd d „d eƒZ Gd d „d eƒZ Gdd„deƒZ Gdd„deƒZ Gdd„deƒZGdd„deƒZGdd„dƒZGdd„dƒZdS)éN)ÚUFWError)Údebugc@s:eZdZdZdd„Zdd„Zdd„ZdS) Ú UFWCommandz"Generic class for parser commands.cCs>||_g|_||jkr1|jj|ƒ||_dS)N)ÚcommandÚtypesÚappendÚtype)Úselfrr©r ú,/usr/lib/python3/dist-packages/ufw/parser.pyÚ__init__-s   zUFWCommand.__init__cCs5t|ƒdkrtƒ‚t|djƒƒ}|S)Nér)ÚlenÚ ValueErrorÚUFWParserResponseÚlower)r ÚargvÚrr r r Úparse4s zUFWCommand.parsecCstdƒ‚dS)Nz!UFWCommand.help: need to override)r)r Úargsr r r Úhelp<szUFWCommand.helpN)Ú__name__Ú __module__Ú __qualname__Ú__doc__r rrr r r r r+s   rc@sFeZdZdZdd„Zdd„Zdd„ZeeƒZdS) ÚUFWCommandRulez#Class for parsing ufw rule commandscCsd}tj|||ƒdS)NÚrule)rr )r rrr r r r AszUFWCommandRule.__init__c ACs‚d}d}d}d}d}d}d}d} d} d} t|ƒdkru|djƒdkru|j|dƒt|ƒdkr|djƒdkr"t|ƒdkr"d} |j|dƒd} yt|dƒ} Wntk rþ|d}YnX| dkr“td | ƒ} | Snq|djƒd kr“t|ƒd krStƒ‚|d} | d kr…td ƒ| }t|ƒ‚|d=|d=|d}|dkrÖ|dkrÖ|dkrÖ|dkrÖtƒ‚t|ƒ}|dkr÷tƒ‚d}|dkrE|djƒdks5|djƒdkrE|djƒ}|dkr°|ddkr°|djƒdks|djƒdkr°|djƒ}|d=t|ƒ}d}|dkrw|j dƒdksì|j dƒdkrwtdƒ}|djƒdkr0|djƒdkr0t|ƒ‚|dksR|djƒdkr^t|ƒ‚|d=t|ƒ}d}d}|rÄ|dkrÄ|djƒdks»|djƒdkrÄd}n>|dkr|djƒdksü|djƒdkrd}|dkr1||jƒ} ||=t|ƒ}d|krUtdƒ}t|ƒ‚d|krytdƒ}t|ƒ‚d}d|krô|j dƒ}|t|ƒdkrÈtdƒ}t|ƒ‚||d}||d=||=t|ƒ}|dks |dkrtƒ‚|}| dkr5|d| 7}t j j |ddd |dt jj|ƒƒ}| rw| |_n5| dkr¬y|j| ƒWntk r«‚YnX|dkr$t jj|dƒr"yt jj|dƒWn9tk r!d!}|d|_|j|dd"ƒYnX|jdkrB y t jj|dƒ\}}Wn1tk r„}zt|ƒ‚WYdd}~XnXtjd#|ƒsÍd$|ks¯d%|krÇtd&ƒ}t|ƒ‚|}y'|j|ƒ|j|d"ƒd!}WqB tk r td'ƒ}t|ƒ‚YqB Xn|dddkrStd(ƒ}t|ƒ‚nïd)|kržd*|kržd|kržd|kržtd+ƒ}t|ƒ‚n¤d,d)d*d-d.ddg}|j d*ƒdksv|j d)ƒdksv|j d,ƒdksv|j d-ƒdksv|j dƒdksv|j dƒdksv|j d.ƒdksv|j d.ƒdkrŽ|j d,ƒdkrŽtd/ƒ}t|ƒ‚d}d}x|D]}|ddkrç|||krçtd0ƒ||}t|ƒ‚|d,krR |d|kr7 y|j||dƒWqO tk r3 ‚YqO Xq­ td1ƒ}t|ƒ‚n[|dksj |dkr |d|krä yO|dkr¤ |jd||dƒn$|dkrÈ |jd||dƒWq tk rà ‚Yq Xq­ td2ƒ|}t|ƒ‚nª|d)kr¿ |d|kr¤ yd||djƒ}|dkrQ d3}d}n$t jj|d4ƒro d5}nd6}|j|ƒWntk rš ‚YnXd7}q­ td8ƒ}t|ƒ‚nî|d*kr{ |d|kr` yd||djƒ}|dkr d3}d}n$t jj|d4ƒr+ d5}nd6}|j|ƒWntk rV ‚YnXd"}q­ td9ƒ}t|ƒ‚n2|d-ks“ |d.kr­ |d|kr• |dkrË td:ƒ|}t|ƒ‚||d}|d.kr |d7krý ||_qf ||_n]tjd#|ƒsf d$|ks3 d%|krK td&ƒ}t|ƒ‚|d7kr` |}n|}y|j||ƒWq­ tk r‘ ‚Yq­ Xntd;ƒ}t|ƒ‚|d7}q¡W|dkrÜ |dkrÜ d!}nf|dkr |dkr ||kr td<ƒ}t|ƒ‚n'|dkr0 |}n|dkrB |}|dksZ |dkrýd}|dkr¯ yt jj|ƒ}Wn*tk r® td=ƒ}t|ƒ‚YnX|dkr¤|dksÓ |dkryt jj|ƒ}Wq¤tk rtd=ƒ}t|ƒ‚Yq¤Xn‹yt jj|ƒ}Wn*tk r[td=ƒ}t|ƒ‚YnX|dkst||kr}|}n'|dkrŒntd>ƒ}t|ƒ‚|jdkrÃ|j|ƒn:|dkrý|j|krýtd?ƒ|j}t|ƒ‚|rH|jt jj kr;|d!kr;t!d@|jƒd6}|j"|ƒt|ƒ} |j#| j$dA<|| j$d<|| j$dB<| S)CNÚÚanyFrrÚdeleter Tz delete-%dÚinsertéÚ0z#Cannot insert rule at position '%s'ÚallowÚdenyÚrejectÚlimitéÚinÚoutÚonzInvalid interface clauseéÚlogzlog-allzOption 'log' not allowed herez!Option 'log-all' not allowed hereÚcommentz*Option 'comment' missing required argumenté Ú_Ú directionZbothÚdstz^\d([0-9,:]*\d+)*$ú,ú:zPort ranges must be numericzBad portzWrong number of argumentsÚfromÚtozNeed 'to' or 'from' clauseÚprotoÚportÚappzImproper rule syntaxzInvalid token '%s'zInvalid 'proto' clausezInvalid '%s' clausez 0.0.0.0/0Ú6Zv6Zv4ÚsrczInvalid 'from' clausezInvalid 'to' clausezNeed 'from' or 'to' with '%s'zInvalid 'port' clausez%Mixed IP versions for 'from' and 'to'zCould not find protocolzProtocol mismatch (from/to)z,Protocol mismatch with specified protocol %sz*Adjusting iptype to 'v4' for protocol '%s'rZiptype)%rrÚremoveÚintÚ Exceptionrrr/rÚcountÚindexÚufwÚcommonZUFWRuleÚutilZ hex_encodeZ set_positionZ applicationsZvalid_profile_nameZget_services_protoÚdappZset_portZparse_port_protoÚreÚmatchZ set_protocolÚ set_interfaceZ valid_addressZset_srcZset_dstÚsappÚprotocolZipv4_only_protocolsrZverifyrÚdata) r rÚactionrrZ from_typeZto_typeZ from_serviceZ to_serviceZ insert_posÚlogtyper;Zrule_numrÚerr_msgÚnargsZrule_directionZ has_interfaceZlog_idxr-Z comment_idxZ rule_actionr7r6ÚeÚkeysÚiÚlocÚargZfaddrZsaddrÚtmpr r r rEs2((        $     "2 6 , "  ( "                             $  *                                                                     zUFWCommandRule.parsecCs§|j}|jdks'|jdkrm|jdksE|jdkrm|jdkrm|jdkrm|jdkrm|jdkrm|jdkrm|jdkr°|d|j7}|j dkrÐ|d|j 7}|j dkrd|j kr|d|j 7}qG|d|j 7}n1|d|j7}|j dkrG|d |j 7}|j dkr£|d |j ƒ7}n6|jdkr|d |j7}|jdkr°|d |j7}n |jdkrÐ|d|j7}|j dkrð|d|j 7}xd dgD]}|d kr3|j}|j}|j}d}n!|j}|j}|j }d}|dksl|dkrrd}|dks–|dks–|dkrý|d||f7}|dkräd|krÓ|d|7}qþ|d|7}qý|dkrý|d|7}qýWd|krBd|krB|jdkrB|jdkrB|d7}|j dkr€|j dkr€|jdkr€|d|j 7}|j dkr£|d |j ƒ7}|S)zGet command string for rulez 0.0.0.0/0z::/0rrr)z %sú z '%s'z/%sz comment '%s'z in on %sz out on %sr:r1r4r5z %s %sz app '%s'z app %sz port %sz to z from z to anyz proto %s)rJr1r:ZsportrGZ interface_inZ interface_outZdportr0rKrCrHr-Z get_comment)rÚresrPrQr7r8Údirr r r Ú get_command»sr         $    -zUFWCommandRule.get_commandN)rrrrr rrWÚ staticmethodr r r r r?s   ÿw Mrc@s.eZdZdZdd„Zdd„ZdS)ÚUFWCommandRouteRulez)Class for parsing ufw route rule commandscCstj||ƒd|_dS)NÚroute)rr r)r rr r r r szUFWCommandRouteRule.__init__c Csþ|ddkst‚d|krŒ|jdƒ}d}t|ƒ|krŒy.t||dƒtdƒ}t|ƒ‚Wntk r‹YnXd}d}d}dj|ƒ}d|kr=d |kr=d }|jd ƒ|jd ƒkrïd }||j|ƒd }|d|j|ƒ…||j|ƒd d…}n_tj d|ƒ r–tj d|ƒ r–d|ks{d|kr–tdƒ}t|ƒ‚n|}d|d%s   ÿÍ>; -