⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
usr
/
lib
/
python3
/
dist-packages
/
ufw
/
__pycache__
/
View File Name :
common.cpython-312.pyc
eX v d Z ddlZddlZddlZddlmZ dZdZdZeZ dZ dZ d Z d Z G d d e Z G d d Zy)z!common.py: common classes for ufw N)debugufwz/lib/ufwz/usr/share/ufwz/etcz/usrz /usr/sbinTc e Zd ZdZd Zd Zy)UFWErrorz$This class represents ufw exceptionsc || _ y N)value)selfr s ,/usr/lib/python3/dist-packages/ufw/common.py__init__zUFWError.__init__# s c , t | j S r )reprr r s r __str__zUFWError.__str__& s DJJ r N)__name__ __module__ __qualname____doc__r r r r r r ! s . r r c e Zd ZdZ ddZd Zd Zd Zd Zd Z d dZ d Z d Z d Z d Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zd Zy) UFWRulez$This class represents firewall rulesc > d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ d| _ || _ d| _ | j' | | j) | | j+ | | j+ |d | j- | | j/ | | j1 | | j3 | y # t4 $ r w xY w)NF r src)removeupdatedv6dstr dportsportprotocolmultidappsappactionpositionlogtype interface_in interface_out directionforwardcomment set_action set_protocolset_portset_srcset_dst set_direction set_commentr ) r r& r" r r r! r r+ r, r- s r r zUFWRule.__init__, s OOF # h ' MM% MM% ' LL LL y ) W % s B D D c " | j S r ) format_ruler s r r zUFWRule.__str__O s !!r c d| z }t | j }|j |D ] }|d|d| j | z } |S )zPrint rule to stdoutz'%s'z, =)list__dict__sort)r reskeysks r _get_attribzUFWRule._get_attribR sI oDMM" A 4==#34 4C r c t | j | j }| j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j |_ | j" |_ | j$ |_ | j& |_ |S )z Return a duplicate of a rule)r r& r" r r r r r r r! r# r$ r% r' r( r) r* r+ r, r- )r rules r dup_rulezUFWRule.dup_rule[ s t{{DMM2kk || ''8888ZZ ZZ ZZ II II || - - ! / / || || r c : d}| j dk7 r|d| j z z }| j dk7 r|d| j z z }| j dk( r|dz }n|d| j z z }| j r|dz }| j dk7 r9| j dk7 r*|d| j z z }|dz }|d | j z z }nC| j dk7 r|d| j z z }n!| j dk7 r|d | j z z }| j d k7 r!| j d k7 r|d | j z z }| j s!| j dk7 r|d | j z z }| j d k7 r!| j d k7 r|d| j z z }| j s!| j dk7 r|d| j z z }d}| j dk7 rd| j z }| j dk( r |d|z z }nL| j dk( r |d|z z }| j dk( r&|dz }n | j dk( r |d|z z }n|d|z z }| j dk7 s| j dk7 rd}t j d }| j dk7 r"|d |j d | j z z }| j dk7 r| j dk7 r|d z }| j dk7 r"|d |j d | j z z }|d z }|d|z z }|j S )!z Format rule for later parsingr z -i %sz -o %sanyz -p allz -p z -m multiportz --dports z --sports 0.0.0.0/0::/0z -d z --dport z -s z --sport _allowz -j ACCEPT%srejectz -j REJECT%stcpz --reject-with tcp-resetlimitz -j LIMIT%sz -j DROP%sz-m comment --comment ' dapp_z%20,sapp_')r) r* r" r# r r! r r r( r& r$ r% recompilesubstrip)r rule_strlstrr- pat_spaces r r6 zUFWRule.format_ruler s " D$5$56 6H # D$6$67 7H ==E ! !H . .HzzO+::&4::+> tzz 99H /H tzz 99HZZ5( tzz 99HZZ5( tzz 99H 88{ "txx6'9 ) )HzzdjjE 1 djj0 0H 88{ "txx6'9 ) )HzzdjjE 1 djj0 0H <<2 %D ;;' ! $/ /H [[H $ $/ /H}}% 66 [[G # . .H - -H 99?dii2o.G 3IyyB7Y]]5$))%DDDyyB499?3yyB7Y]]5$))%DDD sNG g %H~~ r c |j j d }|d dk( s|d dk( s|d dk( r |d | _ nd| _ d}t | dkD r|d }| j | y ) zSets action of the rulerG r rH rI rK denyr N)lowersplitr& len set_logtype)r r& tmpr( s r r. zUFWRule.set_action ss lln""3' q6W A( 2c!f6G a&DK DK s8a<!fG !r c ^ t d |z }|dk( rn|dk( r| j rn|dk( r| j rnt j d| st j d| r t | |j d |j d z d kD r t | |j d }t | d kD rd | _ d }|D ] }t j d | rnd | _ |j d }|D ]) }t | d k st | dkD s t | t |d t |d k\ rt | t j d| r't | d k st | dkD rCt | t j d| r t j | }n t | |r|dt | z z }t | } |}|dk( rt | | _ yt | | _ y# t $ r t | w xY w)z:Sets port and location (destination or source) of the rulez Bad port '%s'rD r r z^[,:]z[,:]$rN : rZ Tr z ^\d+:\d+$i r z^\d+$z ^\w[\w\-]+N)rG r$ r% rQ matchr countr\ r] r# intsocket getservbyname Exceptionstrr! r ) r portlocerr_msgportsr_ pranqs r r0 zUFWRule.set_port s O$- 5= E\dii E\dii XXh %(D)A7# #jjo 3/2 57# #JJsOE5zA~ ! C88L!,!%DJ''#,C q6A:Q% "*7"3 3 ! 3q6{c#a&k1 &w //XXh*1vzSVe^ &w //XXmQ/0 " 0 0 3 #7++3Q<'C a&C1 4 D %< TDJ TDJ % 0 &w //0s *HH,c |t j j dgz v r|| _ yt d |z }t | )zSets protocol of the rulerD zUnsupported protocol '%s'N)r utilsupported_protocolsr" rG r )r r" rl s r r/ zUFWRule.set_protocol s= sxx33ug= = $DM34AG7# #r c | j re| j r%| j dk( s| j dk( rd| _ | j r'| j dk( s| j dk( rd| _ yyy| j r%| j dk( s| j dk( rd| _ | j r'| j dk( s| j dk( rd| _ yyy)z Adjusts src and dst based on v6rD rE rF N)r r r r s r _fix_anywherezUFWRule._fix_anywhere s 77xxTXX .$((k2I!xxTXX .$((k2I! 3Jx xxTXX .$((f2D&xxTXX .$((f2D& 3Exr c 2 || _ | j y)zXSets whether this is ipv6 rule, and adjusts src and dst accordingly. N)r ru )r r s r set_v6zUFWRule.set_v6 s r c |j }|dk7 r6t j j |d st d }t | || _ | j y)zSets source address of rulerD zBad source addressN)r[ r rr valid_addressrG r r ru r addrr_ rl s r r1 zUFWRule.set_src sP jjl %< 6 6sE B,-G7# # r c |j }|dk7 r6t j j |d st d }t | || _ | j y)z Sets destination address of rulerD zBad destination addressN)r[ r rr ry rG r r ru rz s r r2 zUFWRule.set_dst sP jjl %< 6 6sE B12G7# # r c z |dk7 r|dk7 rt d }t | dt | v rt d }t | dt | v rt d }t | t | dk( st | d k( rt d }t | t t | d k( rt d }t | t t | d kD rt d }t | t j dt | st d }t | |dk( r|| _ y|| _ y)zSets an interface for ruleinoutzBad interface type!z+Bad interface name: reserved character: '!'ra z/Bad interface name: can't use interface aliases.z..z)Bad interface name: can't use '.' or '..'r z+Bad interface name: interface name is empty z+Bad interface name: interface name too longz^[a-zA-Z0-9_\-\.\+,=%@]+$zBad interface nameN)rG r ri r] rQ rc r) r* )r if_typenamerl s r set_interfacezUFWRule.set_interface' s) d?w% /,-G7# # #d) EFG7# # #d) IJG7# # t9 s4yD 0CDG7# # D Na EFG7# # D NR EFG7# # xx4c$i@,-G7# # d? $D !%D r c t | dk7 r8t j dt | st d |z }t | t | | _ y)z Sets the position of the rulez-1z^[0-9]+z,Insert position '%s' is not a valid positionN)ri rQ rc rG r re r' )r numrl s r set_positionzUFWRule.set_positionW sG s8t BHHZS$BFG3OG7# #C r c |j dk( s|j dk( s|dk( r|j | _ yt d |z }t | )zSets logtype of the rulelogzlog-allr zInvalid log type '%s'N)r[ r( rG r )r r( rl s r r^ zUFWRule.set_logtypea sL ==?e #w}})'C b="==?DL/0G<G7# #r c X |dk( s|dk( r|| _ yt d |z }t | )zSets direction of the ruler~ r zUnsupported direction '%s'N)r+ rG r )r r+ rl s r r3 zUFWRule.set_directionj s3 U 2 &DN45CG7# #r c T t j j | j S )z Get decoded comment of the rule)r rr hex_decoder- r s r get_commentzUFWRule.get_commentr s xx""4<<00r c || _ y)zSets comment of the ruleN)r- )r r- s r r4 zUFWRule.set_commentv s r c N d}| j rF t j j | j | j \ | _ }|r|| _ | j rF t j j | j | j \ | _ }|r|| _ | j rP| j j d }t j j | dj | | _ | j rQ| j j d }t j j | dj | | _ yy# t $ r t d }t | w xY w# t $ r t d }t | w xY w)z&Normalize src and dst to standard formFz"Could not normalize source addressz'Could not normalize destination addressrN N)r r rr normalize_addressr rh rG r r r r r\ human_sortjoinr! )r changedrl rm s r normalizezUFWRule.normalizez sS 88 (&)hh&@&@AE'J#7 & 88 (&)hh&@&@CG77'L#7 & ::JJ$$S)E HH & % DJ ::JJ$$S)E HH & % DJ / ( @A w'' ( ( EF w'' (s <E! "<F ! F F$c | r|s t d| d|d}| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k7 r t | y| j |j k( rI| j |j k( r0| j |j k( rt# d }t | y| j |j k( rI| j |j k( r0| j |j k7 rt# d }t | yt# d | j |j | j |j | j |j d z }t | y ) zCheck if rules match Return codes: 0 match 1 no match -1 match all but action, log-type and/or comment -2 match all but comment z No match 'z' 'rP rZ zFound exact matchr z$Found exact match, excepting commentzZFound non-action/non-logtype/comment match (%(xa)s/%(ya)s/'%(xc)s' %(xl)s/%(yl)s/'%(yc)s'))xayaxlylxcyc) ValueErrorr r r! r" r r r r$ r% r) r* r+ r, r& r( r- rG )xydbg_msgs r rc z UFWRule.match s- , +,Q/ 77agg 'N 77agg 'N :: # 'N 55AEE> 'N 55AEE> 'N 44144< 'N 66QVV 'N 66QVV 'N >>Q^^ + 'N ??aoo - 'N ;;!++ % 'N 99 ! 'N 88qxx AII$: QYY&+,G 'N 88qxx AII$: QYY&>?G 'N F G HHAHH IIQYY IIQYY89 gr c > d }| r|s t | j | dk( ryd| d| j d|d|j d }|j dk7 rt d|z d z y |j | j k7 rt |d z y | j |j k7 r |j d k7 rt d |z y |j d k7 r, || j |j st d|z y |j dk( r| j dk( r | j | j rn>| j |j k7 r d|j vrt d|z y | j |j k7 rd|j v r| j |j k( rt j j | j |j | j st d|z d| j d|j dz y | j dk7 rF| j |j k7 r-t d|z d| j d|j dz y t j j |j | j }|j |k7 r1d|j vr#t d|z d|j d|dz y |j |k7 rd|j v rq| j |j k( rXt j j ||j | j s#t d|z d|d|j dz y | j |j k7 r-t d|z d| j d|j dz y t d| d| j d|d|j d y # t $ r! t d|z d|j z z Y y w xY w) a This will match if x is more specific than y. Eg, for protocol if x is tcp and y is all or for address if y is a network and x is a subset of y (where x is either an address or network). Returns: 0 match 1 no match -1 fuzzy match This is a fuzzy destination match, so source ports or addresses are not considered, and (currently) only incoming. c d| v sd| v r| |k( ryy|j d D ]S }| |k( r yd|v s|j d \ }}t | t | k\ s;t | t | k sS y y)z:Returns True if p is an exact match or within a multi rulerN ra TF)r\ re )test_pto_matchrj lowhighs r _match_portsz-UFWRule.fuzzy_dst_match.<locals>._match_ports sy f}v X% s+T> $;"&**S/KS$6{c#h.3v;#d)3K # , r r zNo fuzzy match 'z (v6=z)' 'z)'r~ z (direction) z (not incoming)rZ z (forward does not match)rD z (protocol) z(dport) r /z(dst) z ('z' not in network 'z')z (interface) z (z != )z %s does not existz(v6) z(fuzzy match) 'r )r rc r r+ r r, r" r r) _is_anywherer r rr in_networkget_ip_from_ifIOError)r r r r if_ips r fuzzy_dst_matchzUFWRule.fuzzy_dst_match sH " , 771:? qttQ& ;;$ .7*->> ? 99 ! ' 77 8 :: # e(; -') * 77e L!''$B *w& ' >>R ~~#quu(= !%% Cquu$4h()!%% C155LQTTQTT\88&&quuaeeQTT:h(uuaee,% % & ~~#!..(Hnw.~~q~~27 7 8 //E uu~#QUU"2nw.uue2% % &% C155LQTTQTT\88&&uaeeQTT:nw.7<aeeDE F 44144< 'G#quuaee&DD E 1addAqttLM+ nw.1E~~2' ' ( s =4O2 2'P P c |dk( s|dk( ryy)z Check if address is anywhererF rE TFr )r r{ s r r zUFWRule._is_anywhereN s 6>T[ 0r c d}| j dk7 s| j dk7 r1| j d| j d| j d| j }| j dk( r5| j d| j d| j d| j }| j dk( r5| j d| j d| j d| j }| j dk( r#| j dk( r|d| j z z }|S | j dk7 r|d| j z z }| j dk7 r|d| j z z }|S )a Returns a tuple to identify an app rule. Tuple is: dapp dst sapp src direction_iface|direction or dport dst sapp src direction_iface|direction or dapp dst sport src direction_iface|direction where direction_iface is of form 'in_eth0', 'out_eth0' or 'in_eth0 out_eth0' (ie, both interfaces used). If no interfaces are specified, then tuple ends with the direction instead. r rL z %sz in_%sz out_%s) r$ r% r r r r! r) r* r+ )r tupls r get_app_tuplezUFWRule.get_app_tupleT s 99?dii2o$(IItxxDHHMDyyB(, DHHdii)-3yyB(, 488TZZ)-3 B&4+=+=+C 00 $$*H(9(9 ::D%%+I);); <<D r c | j dk7 rA| j dk7 s| j dk7 r#t d | j z }t | | j t j j v r(|dk( r#t d | j z }t | | j t j j v rB| j dk7 s| j dk7 r#t d | j z }t | yy)z Verify rulerD r z3Improper rule syntax ('%s' specified with app rule)r z'Invalid IPv6 address with protocol '%s'z Invalid port with protocol '%s'N) r" r% r$ rG r r rr ipv4_only_protocolsportless_protocolsr r! )r rule_iptyperl s r verifyzUFWRule.verifyv s ==E ! IIOtyyBMN ==*G7# # ==CHH 8 8 8 $ AB (G7# # ==CHH 7 7 7zzU"djjE&9 => !]], w'' ': 8r N)rD rE rD rE r~ Fr )r ) r r r r r r r? rB r6 r. r0 r/ ru rw r1 r2 r r r^ r3 r r4 r rc r r r r r r r r r * s .:EGL!F".A F "3#j$ ' .&`!$$1 !)FAFl\ D(r r )r rQ rf ufw.utilr r programName state_dir share_dir trans_dir config_dir prefix_dir iptables_dir do_checksrh r r r r r <module>r sV '" y ` ( ` (r