⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.144
Server IP:
157.245.143.252
Server:
Linux www 6.11.0-9-generic #9-Ubuntu SMP PREEMPT_DYNAMIC Mon Oct 14 13:19:59 UTC 2024 x86_64
Server Software:
nginx/1.26.0
PHP Version:
8.3.11
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
ufw
/
__pycache__
/
View File Name :
frontend.cpython-312.pyc
#fd | d Z ddlZddlZddlZddlmZ ddlZddlmZm Z m Z ddl m Z ddl Zd Zd Z G d d Zy) z'frontend.py: frontend interface for ufw N)UFWError)errorwarnmsg)UFWBackendIptablesc t j j }dD ]0 }|j t j j | 2 dD ]0 }|j t j j | 2 dD ]0 }|j t j j | 2 dD ]0 }|j t j j | 2 dD ]0 }|j t j j | 2 dD ]0 }|j t j j | 2 g d}|D ]^ }|j t j j | |j t j j | ` t | dkD rmd }| | j d k( rd}| | j d k7 r=| | j d k7 r'| | j |v r| j |d t | dk sd | v r%t | dk rt dd t! |j# | d d }|S # t$ $ r#}t d|j& z Y d}~S d}~wt( $ r t dd w xY w)zEParse command. Returns tuple for action, rule, ip_version and dryrun.) enabledisablehelpz--helpz-hversionz --versionreloadreset)listinfodefaultupdate)onofflowmediumhighfull)allowdenyreject)Nverbosenumbered)rawz before-rulesz user-rulesz after-rulesz logging-rulesbuiltins listeningadded)r limitr r insertdeleteprepend --dry-runr routerule znot enough argsF)do_exitNz%szInvalid syntax)ufwparser UFWParserregister_commandUFWCommandBasic UFWCommandAppUFWCommandLoggingUFWCommandDefaultUFWCommandStatusUFWCommandShowUFWCommandRuleUFWCommandRouteRulelenlowerr# r ValueError parse_commandr value Exception)argvpi rule_commandsidxpres ./usr/lib/python3/dist-packages/ufw/frontend.pyr< r< s^ A 3::55a89 3 3::33A67 3 < 3::77:; < ) 3::77:; ) + 3::66q9: +A 3::44Q78A M 3::44Q78 3::99!<= 4y1} 9?? +C 9?? ) 9?? ' 9?? - KKV $ 4y1},TQ /l __T!"X & I dagg I . s 7J KJ44Kc * t di dt j j ddddddddd d d d d dddddddddddddddd d d d i d d!d"d#d$d%d&d'd(d(d)d)d*d*d+d,d-d.d/d0d1d2d3d3d4d5d6d7d8d9d:d;d<d=d>d?iz } | S )@zPrint help messagea+ Usage: %(progname)s %(command)s %(commands)s: %(enable)-31s enables the firewall %(disable)-31s disables the firewall %(default)-31s set default policy %(logging)-31s set logging to %(level)s %(allow)-31s add allow %(rule)s %(deny)-31s add deny %(rule)s %(reject)-31s add reject %(rule)s %(limit)-31s add limit %(rule)s %(delete)-31s delete %(urule)s %(insert)-31s insert %(urule)s at %(number)s %(prepend)-31s prepend %(urule)s %(route)-31s add route %(urule)s %(route-delete)-31s delete route %(urule)s %(route-insert)-31s insert route %(urule)s at %(number)s %(reload)-31s reload firewall %(reset)-31s reset firewall %(status)-31s show firewall status %(statusnum)-31s show firewall status as numbered list of %(rules)s %(statusverbose)-31s show verbose firewall status %(show)-31s show firewall report %(version)-31s display version information %(appcommands)s: %(applist)-31s list application profiles %(appinfo)-31s show information on %(profile)s %(appupdate)-31s update %(profile)s %(appdefault)-31s set default application policy prognamecommandCOMMANDcommandsCommandsr r r z default ARGloggingz logging LEVELlevelLEVELr z allow ARGSr* r z deny ARGSr z reject ARGSr" z limit ARGSr$ zdelete RULE|NUMuruleRULEr# zinsert NUM RULEr% z prepend RULEr) z route RULEz route-deletezroute delete RULE|NUMz route-insertzroute insert NUM RULEnumberNUMr r status statusnumzstatus numberedrulesRULES statusverbosezstatus verboseshowzshow ARGr appcommandsz Application profile commandsapplistzapp listappinfozapp info PROFILEprofilePROFILE appupdatezapp update PROFILE appdefaultzapp default ARG)_r- common programName)help_msgs rF get_command_helpre e s >"* CJJ** "* I"* Z"* 8"* I "* M "* O "* '"* ,"* "* "* ="* ,"* $"* & "* $ "* N!"*" ,#"*$ 0%"*& 0'"*( 5)"** 8+"*, '-"*. 8/"*0 '1"*2 '3"*4 *5"*6 7"*8 I9"*: 6;"*< J="*> &?"*@ IA"*B *C"*D (E"*?A+ A,HF c e Zd ZdZ ddZd Zd Zd ZddZddZ d Z d Z d Z dd Z dd Zd Zd Zd Zd Zd Zd Zd ZddZy) UFWFrontendUINc |dk( r t ||| | _ nt d|z t d | _ t d | _ t d | _ y # t $ r w xY w)Niptables)rootdirdatadirz Unsupported backend type '%s'nyyes)r backendr> r ra norp yes_full)selfdryrun backend_typerl rm s rF __init__zUFWFrontend.__init__ sm : % 1&':A C :lKL L C&S6% s A A%c t d}d}|rd}d}|r| j j r |s | j j rd}|r5 | j j | j j d d| d}|rm | j j |dk7 r@ | j j | j j d dd t | t d }|S | j j t d }|S # t $ r }t |j Y d}~d}~ww xY w# t $ r}|r |j }Y d}~d}~ww xY w# t $ r }t |j Y d}~d}~ww xY w# t $ r }t |j Y d}~d}~ww xY w) zlToggles ENABLED state in <config_dir>/ufw/ufw.conf and starts or stops running firewall. rr rp FTconfENABLEDNz0Firewall is active and enabled on system startupz/Firewall stopped and disabled on system startup) rq is_enabled set_defaultfilesr r r= start_firewallra stop_firewall)rt enabledres config_strchangedrE error_strs rF set_enabledzUFWFrontend.set_enabled s J DLL 3 3 5DLL 3 3 5G (( ););F)C)2J@ ( ++- B#LL,,T\\-?-?-G-6> i FGC **, EFC A agg ( !I ( #!''NN# agg s` 4D E !4E$ .F D= D88D= E! E E!$ F -FF F7F22F7c 8 d} | j j || }| j j r4| j j | j j |S # t $ r }t |j Y d}~|S d}~ww xY w)z Sets default policy of firewallry N)rq set_default_policyr| r r r r r= )rt policy directionr rE s rF r z UFWFrontend.set_default_policy s} ,,11&)DC||&&( **, ++- !''NN s A*A0 0 B9BBc d} | j j | }|S # t $ r }t |j Y d}~|S d}~ww xY w)zSets log level of firewallry N)rq set_loglevelr r r= )rt rN r rE s rF r zUFWFrontend.set_loglevel sK ,,++E2C !''NN ! A AA c | j j || }|S # t $ r }t |j Y d}~S d}~ww xY w)zShows status of firewallN)rq get_statusr r r= )rt r show_countoutrE s rF r zUFWFrontend.get_status sH ,,))':>C !''NN s A AA c | j j | }|S # t $ r }t |j Y d}~S d}~ww xY w)z Shows raw output of firewallN)rq get_running_rawr r r= )rt rules_typer rE s rF get_show_rawzUFWFrontend.get_show_raw sF ,,..z:C !''NN s AAAc d} t j j | j j }| j j }t |j }|j |D ] }| j j s|dv r#|d|z z }t || j }|j |D ] }|| | D ] } | d } | j d r| j d r-d} |d|z z }| d k( s| d k( r|d z }d | d z } n'|d | z z }t j j | } |dt j j! | d z z }t j" j% d|dd || dd } | j' |j) d | dk7 r| j+ d| | j- | j j/ | } t1 | dkD r[|dz }| D ]Q }|dkD s |dz t1 | k s|d|t j2 j4 j7 ||dz fz z }S |dz } | j j s t j j9 d |S # t $ r t d }t | w xY w) zMShows listening services and incoming rules that might affect themry z Could not get listening status)tcp6udp6z%s: laddrz127.z::1z %s z0.0.0.0z::z* z%s/0z%s z(%s)exer Nr+ inF)actionprotocoldportdstr forward6r r' z [%2d] %s z)Skipping tcp6 and udp6 (IPv6 is disabled)) r- utilparse_netstat_outputrq use_ipv6r> ra r get_rulesr keyssort startswithget_if_from_ipospathbasenamerb UFWRuleset_v6endswith set_interface normalize get_matchingr9 r. r7 get_commanddebug)rt r derr_msgrV protocolsprotoportsportitemaddrifnamer* matchingrA s rF get_show_listeningz UFWFrontend.get_show_listening s $--dll.C.C.EFA &&(N E<<((*u8H/H 7e$ $C5 )E JJL eHTND =D ??62 ??51!#w~- 9, 4KC#)T']#;D 54< /C%(XX%<%<T%BFv(8(8e(E EE #zz 1 1;@!98<6:<@:? 2 3 ENN3$78!R< . .tV < ( $(<<#<#<T#B x=1, 4KC%-#$q5QUSZ-?$'?a(+ (A(A(M(M*/!*)6>& ,& %&C &. t Y + j ||$$& HHNNF G A $89G7# # $s 7J? ? K c | j j }t d }t | dk( r|t d z S g }| j j D ] }|j r-dt j j j | z }n)t j j j | }||v rj|j | |d|z z } |S )z!Shows added rules to the firewallz9Added user rules (see 'ufw status' for running firewall):r z (None)route %sz ufw %s) rq r ra r9 r r- r. r8 r r7 append)rt rV r r! rrstrs rF get_show_addedzUFWFrontend.get_show_addedf s &&(KL u:?: & & '')Ayy! 66BB1EF zz00<<Q? u} LL :$ $C *" rf c d}d}d}g }|j dk( r"|j dk( r|j | ng } |j r|dk( r | j j |d }n|dk( r | j j |d }n|dk( r| j j |d }| j j |d }|D ]F } |D ]? } | j } d| _ | j | r(| | _ |j | A H nt d |z }t | t | dk( rH| j j s2t d }|dk( r|}|S |dk( r|d z }|S |dk( r |d z |z d z }|S |D ]j }|j } |j | _ | j |j | j |j |j | l n:| j j# | }|j$ dk7 r|j' d} d}t d }| j j+ d }| j j+ d }t- | D ] \ }} |} | j$ ||z kD r&|t/ | j$ d z z }t | | j j1 r|dk( r| j$ dk( r | dk( r|dk( rdnd}| j3 | n5| j$ |kD r&|t/ | j$ d z z }t | | j5 d | j j7 | }n|dk( r| j$ dk( r | dk( r|dk( rdnd}| j3 | nr| j$ |kD r | j3 | j$ |z nD| j$ dk7 r5| j$ |k r&|t/ | j$ d z z }t | | j5 d | j j7 | }n|dk( r| j$ }| j5 d |dk( r | dk( r|dk( rdnd}| j3 | n[| j sO||kD rJ| j j9 ||z | z d }|dkD r| j3 | n| j3 d | j j7 | }| j s4|dkD r/| j j+ d }| j3 |dz | j5 d |dk( r | dk( r|dk( rdnd}| j3 | n{| j so| j$ dkD r`| j$ |k rQ| j j9 | j$ d }|dkD r| j3 || z n| j3 d |dk7 r|d z }| j s2| j$ |kD r#|dk7 r | j3 | j$ |z || j j7 | z }nt d |z }t | | j$ dk( r | dk( r|dk( rdnd}| j3 | |dk( s|dk( r-| j5 d | j j7 | }n4|dk( rt d }t | t d |z }t | | j< st d }t? j@ | |s||z }|S t | dk( r tC | |S d}tE tG | dz }|j' |D ]; }| dkD s || s|| j }d|_ | j7 || = |t d z }|r|t d z }t | |t d z }t | # t( $ r w xY w# t $ r}|j: }d}Y d}~ d}~ww xY w# t( $ r, d}t d jI z }tA | Y w xY w)zUpdates firewall with rulery v4Fv6TbothzInvalid IP version '%s'r z"Could not delete non-existent rulez (v6)r zInvalid position ''r' zIPv6 support not enabledNz Rule changed after normalizationz Could not back out rule '%s'z" Error applying application rules.z# Some rules could not be unapplied.z( Attempted rules successfully unapplied.)%dappsappr removerq get_app_rules_from_systemr matchra r r9 ru dup_rule set_actionr set_logtypelogtypeget_app_rules_from_templatepositionreverser> get_rules_count enumeratestrr set_positionr set_rulefind_other_positionr= updatedwarningsr r r range format_rule) rt r* ip_versionr r tmprV tmprules tmprules6xro prev6r count set_error pos_err_msgnum_v4num_v6rA beginuser_posr@ rE warn_msg undo_errorindexesj backout_rules rF r zUFWFrontend.set_rule s 99?tyyB LL H2 ;;!T)#'<<#I#ICG$P#t+#'<<#I#ICG$O#v-#'<<#I#ICG$P$(LL$J$JCG%O "*A%.()','(wwqz+0AD$,OOA$6 &/ "* #$$=">*"M &w // 8})$,,2E2E D E%-"%C # (4 /"%-C # (6 1"%*s"2W"<C " ' LLN#';; T[[1 dll3 Q ( !LL D DT JE }}) ,- --e4 --d3 e$DAqEzzFVO+s1:: 44 {++Z <<((*!T) ::+).!! AE NN5 1 ZZ& 0 '3qzz?S+@ @K"*;"7 7 "ll 3 3A 6#t+ ::+).!! AE NN5 1 ZZ& 0 NN1::+> ? ZZ1_v1E '3qzz?S+@ @K"*;"7 7 "ll 3 3A 6#v-#$::#r>).!! AE NN5 1!"h.? !% @ @ (6 1E 94!AA 1u !q 1 !"q 1 "ll 3 3A 6 !xxHqL%)\\%A%A%%HF NN8a< 8#r>).!! AE NN5 1!"ajj1n ::/ !% @ @AF!HA 1u !q5y 9 !"q 1 "9 4KC !xxAJJ,?#r> NN1::+> ?t|| 4 4Q 77"#$=">*"M &w //zzR'%*aZFaKQu-!T)Z6-A "ll 3 3A 6#t+"#$>"? &w //"#$=">*"M &w // yy ?@ h'G %J 3JC> = Z1_ 'N8 1 J5q>*G OO 19q#(8#4#4#6L*.L'' lJ? q>? ?G1 BCC 7# # 1 GHH7# #Y H '' 6 % '%) #$%C#D%&]]_$5 X 'sQ B<` :A-` ( ` 4` B*` Q` :a ` a '`;;a 2a87a8c t | }| j j }|dk s|t | kD rt d |z }t | | j j | }|st d |z }t | d|_ d}|j rd}d}|s |j r-dt j j j | z } n)t j j j | } t d | | j | j" d z } t% | t& j( d t& j* j- j/ j1 } | d k7 r<| | j j/ k7 r | | j2 j/ k7 rd }d } |r| j5 || } | S t d } | S # t $ r t d |z }t | w xY w)z Delete rulezCould not find rule '%s'r zCould not find rule '%d'Tr r r z=Deleting: %(rule)s Proceed with operation (%(yes)s|%(no)s)? )r* rp rr Foutputnewlinero ry Aborted)intr> ra r rq r r9 get_rule_by_numberr r r r- r. r8 r r7 rp rr r sysstdoutstdinreadliner: striprs r ) rt rR forcern r rV r* r proceedr promptansr s rF delete_rulezUFWFrontend.delete_ruleO s $F A &&( 6QU^23a7G7# #||..q123a7G7# # 77 J||! 66BB4HI zz00<<TB , -9=8<7;ww1@AF szz5 9))$$&,,.446CczcTXX^^%5 5dmm))++ --j1C I,C W $23f<G7# # $s G) )#H c d}|j d rH|j d }t | dkD r| j |d }|S | j d }|S |dk( r| j d }|S |j d rOt d }|j d }t | d k7 r t | | j |d |d }|S |d k( r| j | }|S |dk( r| j }|S |dk( r| j d }|S |j d rU|j d d }|dk( r| j }|S |dk( r| j }|S | j | }|S |dk( r| j dd }|S |dk( r| j d }|S |dk( r| j d }|S |dk( rV| j j r/| j d | j d t d }|S t d }|S |j d r&| j |j d d | }|S |d k( s|d k( s |d k( s|d k( r|j dk7 rN | j j# |j }||j k7 r||_ |j% |d |j2 dk7 rN | j j# |j2 }||j2 k7 r||_ |j% |d | j5 || }|S t d# |z }t | # t $ rj}|j& st) |j* t, j. j1 |j st d! }t | Y d"}~d"}~ww xY w# t $ rk}|j& st) |j* t, j. j1 |j2 st d! }t | Y d"}~d"}~ww xY w)$zPerform action on rule. action, rule and ip_version are usually based on return values from parse_command(). ry z logging-onra r' r z logging-offr zdefault-zUnsupported default policy-r+ r& r rT zstatus-verboseTrY r r! zstatus-numberedFr r r Firewall reloadedz&Firewall not enabled (skipping reload)zdelete-r r r r" r Invalid profile nameNUnsupported action '%s')r splitr9 r ra r r r r r r r r rq r| r r find_application_nameset_portr r r= r- applicationsvalid_profile_namer r ) rt r r* r r r r r rE s rF do_actionzUFWFrontend.do_action sh \ *,,s#C3x!|''A/X U ''-T S } $##E*CP O z *45G,,s#C3x1} w''))#a&#a&9CD C w **U#C@ x //#C| { ' '//$'Cx w v &,,s#A&Ck!--/p o ))+l i '',h g ( (//%.Cd c x ""4(C` _ y ""5)C\ [ x ||&&( ' &+,R O @AN M y )""6<<#4Q#7?CJ I w &F"2f6H w yyB 0 ,,<<TYYGCdii'$' c51 yyB 0 ,,<<TYYGCdii'$' c51 --j1C 12f=G7# #3 0 ;; agg ++>>tyyI"#$:"; &w // J 0 0 ;; agg ++>>tyyI"#$:"; &w // J 0s4 A M A O O A OO QA P<<Qc d} | j j | }|S # t $ r }t |j Y d}~|S d}~ww xY w)z+Sets default application policy of firewallry N)rq set_default_application_policyr r r= )rt r r rE s rF r z*UFWFrontend.set_default_application_policy sK ,,==fEC !''NN r c t | j j j }|j t d }|D ] }|d|z z } |S )z*Display list of known application profileszAvailable applications: %s)r rq profilesr r ra )rt namesr rn s rF get_application_listz UFWFrontend.get_application_list sP T\\**//12 *+A HN "D rf c g }|dk( r>t | j j j }|j nFt j j | st d }t | |j | d}|D ] }|| j j vs| j j | st d |z }t | t j j || j j | st d }t | |t d |z z }|t d t j j | j j | z z }|t d t j j | j j | z z }t j j | j j | }t | d kD sd |d v r|t d z }n|t d z }|D ] }|d|z z } ||t | d z k7 s|dz } t j j# | S )z Display information on profileallr ry zCould not find profile '%s'zInvalid profilez Profile: %s z Title: %s zDescription: %s r' ,r zPorts:zPort:r z -- )r rq r r r r- r r ra r r verify_profile get_titleget_description get_portsr9 r wrap_text)rt pnamer r r namer r@ s rF get_application_infoz UFWFrontend.get_application_info s2 E> ..3356E JJL##66u= 23 w'' LL D4<<000<<((. 9:dC w''##224||$$T*, -. w'' Ao&$/ /D Am$(8(8(B(B(, (=(=d(C)E F FD A+,-0-=-=-M-M-1\\-B-B4-H.JK KD $$..t||/D/DT/JKE5zA~a ( #' "A& uSZ\** $; > xx!!$''rf c d}d}d} | j j r t j j rd}|dk( rwt | j j j }|j |D ]4 }| j j | \ }}|s$|dk7 r|dz }||z }|}6 n(| j j | \ }}|dk7 r|dz }|rU| j j r;|r+ | j j |t d z }|S |t d z }|S # t $ r d}Y w xY w# t $ r w xY w)Refresh application profilery TFr r r zSkipped reloading firewall)rq do_checksr- r under_sshr> r r r r update_app_ruler| _reload_user_rulesra ) rt r] r allow_reloadtrigger_reloadr r@ r founds rF application_updatez UFWFrontend.application_update sZ !||%%#((*<*<*> $ e DLL 1 1 6 6 89H MMO #|| ; ;A > ebyt CKD%*N &*\\%A%A'%J "T>rz dll 5 5 7LL335 -.. 677 ? ! !L !2 ! s 6D; E ; E E Ec d}d}|dk( rt d }t | | j j d }|dk( r(t j j d|d|d |S |d k( rd }n)|d k( rd }n!|d k( rd }nt d |z }t | dg}| j j r|j d |||gz } t | }d|j v r9| j |j |j d |j d }|S | j |j dd }|S # t $ r w xY w)r$ ry r z%Cannot specify 'all' with '--add-new'default_application_policyskipz Policy is 'z', not adding profile 'r acceptr dropr r zUnknown policy '%s'r- r( r* iptype)ra r rq defaultsr- r r ru r r< r> datar r )rt r] r r r r argsrD s rF application_addzUFWFrontend.application_addB sV e ?@G7# #,,''(DE f HHNN "G - .K F F F-.':G7# #y << KK $ &'## t$B RWW >>"))RWWV_"$''("35D >>"))R4D s D: : Ec d}|dk( r| j d }|S |dk( r| j d }|S |dk( r| j d }|S |dk( r| j d }|S |d k( r| j }|S |d k( r| j | }|S |d k( s|d k( r?| j | }d}|d k( r| j | }|dk7 r |dk7 r|dz }||z }|S t d |z }t | )zzPerform action on profile. action and profile are usually based on return values from parse_command(). ry z default-allowr z default-denyr zdefault-rejectr z default-skipr/ r r r zupdate-with-newr r )r r r" r, r6 ra r )rt r r] r str1str2r s rF do_application_actionz!UFWFrontend.do_application_actionl sO _ $55g>C0 / ~ %55f=C, + ' '55h?C( ' ~ %55f=C$ # v ++-C v ++G4C x 6->#>**73DD**++G4rzdbj +C 12f=G7# #rf c d}| j j rt j j rt d | j | j dz }t |t j d t j j j j }|dk7 r || j k7 r|| j k7 rd}|S )z6If running under ssh, prompt the user for confirmationTzWCommand may disrupt existing ssh connections. Proceed with operation (%(yes)s|%(no)s)? rp rr Fr ro )rq r% r- r r& ra rp rr r r r r r r: r rs )rt r r r s rF continue_under_sshz UFWFrontend.continue_under_ssh s << ! !chh&8&8&: C D $8:F szz5 9))$$&,,.446CczcTXXo# 2F rf c d}t d | j | j dz }| j j rCt j j r%t d | j | j dz }| j j r|st t j j | t j d t j j j j }|dk7 r+|| j k7 r || j k7 r t d }|S | j j# r|| j% d z }| j j' }|S ) zReset the firewallry zTResetting all rules to installed defaults. Proceed with operation (%(yes)s|%(no)s)? r< zResetting all rules to installed defaults. This may disrupt existing ssh connections. Proceed with operation (%(yes)s|%(no)s)? Fr ro r )ra rp rr rq r% r- r r& r r r r r r r: r rs r| r r )rt r r r r s rF r zUFWFrontend.reset s) 2 3 HHDGG46 << ! !chh&8&8&: 6 7 !%8:F << ! !% ""6*3::u M))$$&,,.446CczcTXXo# 2F l << " " $ 4##E* *Cll " rf )rk NN)FF)r )F)__name__ __module__ __qualname____doc__rw r r r r r r r r r r r r r" r, r6 r: r= r rf rF rh rh sv ,6'+! 4l FP:JX/bTl,(\)V(T @ rf rh )rB r r r ufw.commonr ufw.utilr- r r r ufw.backend_iptablesr ufw.parserr< re rh rC rf rF <module>rH s? -" % % 3 EPEPD D rf