✏️ 编辑：ipset.cpython-39.pyc
路径：
/usr/lib/python3.9/site-packages/firewall/core/io/__pycache__/ipset.cpython-39.pyc
大小：10.3 KB · 修改：2026-09-15 17:58:31 · 权限：0644 · 只读（保存会失败）
← 返回目录
👁 查看
⬇ 下载
检测到二进制内容，直接保存可能损坏文件。请改用「上传替换」。
a F��j7S � @ s� d Z g d�ZddlmZ ddlZddlZddlZddlmZ ddl m Z m Z m Z m Z mZmZmZmZ ddlmZmZmZ ddlmZmZ ddlmZmZm Z m Z dd l m Z dd lm Z dd l!m"Z" G d d � d e�Z#G dd� de�Z$dd� Z%ddd�Z&dS )z$ipset io XML handler, reader, writer)�IPSet� ipset_reader� ipset_writer� N)�config)�checkIP�checkIP6� checkIPnMask� checkIP6nMask� check_mac� check_port�checkInterface� checkProtocol)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)� IPSET_TYPES�IPSET_CREATE_OPTIONS)�check_icmp_name�check_icmp_type_code�check_icmpv6_name�check_icmpv6_type_code)�log)�errors)� FirewallErrorc s� e Zd ZdddddddifddgffZdZg d �Zd d d gd gd d �Zdgdgd�Z� fdd�Zdd� Z e dd� �Z dd� Z � fdd�Z � ZS )r )�version� )�shortr )� descriptionr )�typer �optionsr �entriesz (ssssa{ss}as))�_�-�:�.Nr �name)r r �ipset�option�entryr �value)r& r' c s< t t| ��� d| _d| _d| _d| _g | _i | _d| _ d S �Nr F) �superr �__init__r r r r r r �applied��self�� __class__� �:/usr/lib/python3.9/site-packages/firewall/core/io/ipset.pyr, C s zIPSet.__init__c C s8 d| _ d| _d| _d| _| jd d �= | j�� d| _d S r* )r r r r r r �clearr- r. r2 r2 r3 �cleanupM s z IPSet.cleanupc C sB d}d|v r |d dkr d}|� d�s6ttjd| ��|dd � �d�}| �d�}t|�t|�ksnt|�d k r�ttjd | |f ��t|�D �]�\}}|| }|d k�r�d |v �rV|dk�rV|d kr�ttjd || |f ��|�d �} t| �dk�rttjd|| ||f ��| D ]F} |dk�r$t| ��r8|dk�r t | ��s ttjd| | ||f ���q nh|dk�r�|dk�r�ttjd|| ||f ��|dk�r�t } nt} nt } | |��s<ttjd|| ||f ��q�|dk�r"d |v �r�|�d �} t| �dk�rttjd|| ||f ��|dk�r t| d ��r4|dk�rPt | d ��sPttjd| d | ||f ��|dk�rht | d ��r�|dk�r t | d ��s ttjd| d | ||f ��n�|� d��r�|dk�r�|dk�r�|dk�s�ttjd|| ||f ��|dk�r�t |��r|dk�r<t |��s<ttjd|| ||f ��q�|dk�rVt |��r@|dk�r<ttjd|| f ��q�|dk�rDd|v �r$|�d�} t| �dk�r�ttjd| ��| d d k�r,|dk�r�ttjd || f ��t| d ��s�d | d v�r�ttjd | d | f ��n6| d �d �\} } t| | ��s"ttjd | d | f ��n�| d d v �r�|dk�rXttjd || f ��t| d ��s�d | d v�r�ttjd!| d | f ��n6| d �d �\} } t| | ��s"ttjd!| d | f ��n\| d d"v�r�t| d ��s�ttjd#| d | f ��n&t| d ��sBttjd$| d | f ��n t|��s<ttjd%|| f ��q�|d&k�r�|� d'��r�zt|d(�}W n( t�y� ttjd)|| f ��Y n0 n6z t|�}W n( t�y� ttjd)|| f ��Y n0 |dk �s�|d*k�r<ttjd)|| f ��q�|d+k�r,t|��rt|�d,k�r<ttjd-|| f ��q�ttjd| ��q�d S ).NZipv4�family�inet6Zipv6zhash:zipset type '%s' not usable� �,� z)entry '%s' does not match ipset type '%s'�ipr" z invalid address '%s' in '%s'[%d]� z.invalid address range '%s' in '%s' for %s (%s)z(invalid address '%s' in '%s' for %s (%s)z0.0.0.0r �netz/0zhash:net,ifaceZmacz00:00:00:00:00:00z invalid mac address '%s' in '%s'�portr# zinvalid port '%s'Zicmpz(invalid protocol for family '%s' in '%s'�/z invalid icmp type '%s' in '%s')Zicmpv6z ipv6-icmpz invalid icmpv6 type '%s' in '%s')ZtcpZsctpZudpZudplitez invalid protocol '%s' in '%s'zinvalid port '%s'in '%s'zinvalid port '%s' in '%s'Zmark�0x� zinvalid mark '%s' in '%s'l �� Ziface� z invalid interface '%s' in '%s')� startswithr r � INVALID_IPSET�split�lenZ INVALID_ENTRY� enumerater r r r �endswithr r r r r r r �int� ValueErrorr )r( r Z ipset_typer6 �flags�items�i�flag�itemZsplitsZ_splitZip_checkZ_type�_codeZint_valr2 r2 r3 � check_entryV s� � �� �� ���� �� �� �� ��� ���� ��� � ���� �� � � �� �� �� �� �� �� ���� � � � � ��zIPSet.check_entryc C s� |dkr |t vr ttjd| ��|dkr�|�� D ]�}|tvrLttjd| ��|dv r�zt|| �}W n* ty� ttj d||| f ��Y n0 |dk r�ttj d||| f ��q0|d kr0|| d vr0ttj || ��q0d S ) Nr z '%s' is not valid ipset typer zipset invalid option '%s'��timeout�hashsize�maxelem�)Option '%s': Value '%s' is not an integerr �#Option '%s': Value '%s' is negativer6 �Zinetr7 ) r r r � INVALID_TYPE�keysr rD rI rJ � INVALID_VALUE�INVALID_FAMILY)r/ r rO Z all_config�all_io_objects�key� int_valuer2 r2 r3 � _check_config s@ � � �� �� �zIPSet._check_configc sp d|d v r6|d d dkr6t |d �dkr6ttj��|d D ]}t�||d |d � q>tt| ��||� d S )NrS � �0r8 r � )rF r r ZIPSET_WITH_TIMEOUTr rQ r+ � import_config)r/ r r] r( r0 r2 r3 rd 4 s zIPSet.import_config)�__name__� __module__� __qualname__ZIMPORT_EXPORT_STRUCTUREZDBUS_SIGNATUREZADDITIONAL_ALNUM_CHARSZ PARSER_REQUIRED_ELEMENT_ATTRSZ PARSER_OPTIONAL_ELEMENT_ATTRSr, r5 � staticmethodrQ r` rd � __classcell__r2 r2 r0 r3 r , s2 ��� Cr c @ s e Zd Zdd� Zdd� ZdS )�ipset_ContentHandlerc C s� t �| ||� | j�||� |dkrpd|v rX|d tvrLttjd|d ��|d | j_d|v rl|d | j_ �nt|dkr|�nh|dkr��n\|dk�r�d}d |v r�|d }|d d vr�ttj d |d ��| jjd kr�|d dv r�ttj d|d | jjf ��|d d v �r"|�s"ttj d|d ��|d dv �r�z t |�}W n, t �yh ttj d|d |f ��Y n0 |dk �r�ttj d|d |f ��|d dk�r�|dv�r�ttj|��|d | jjv�r�|| jj|d < nt�d|d � d S )Nr& r z%sr r r r' r r) r% )r6 rS rT rU zUnknown option '%s'zhash:mac)r6 z%Unsupported option '%s' for type '%s'z&Missing mandatory value of option '%s'rR rV r rW r6 rX z Option %s already set, ignoring.)r � startElementrO Zparser_check_element_attrsr r r rY r r ZINVALID_OPTIONrI rJ r[ r\ r r �warning)r/ r% �attrsr) r_ r2 r2 r3 rk ? sx � ���� � �� �� z!ipset_ContentHandler.startElementc C s( t �| |� |dkr$| jj�| j� d S )Nr( )r � endElementrO r �appendZ_element)r/ r% r2 r2 r3 rn v s z ipset_ContentHandler.endElementN)re rf rg rk rn r2 r2 r2 r3 rj > s 7rj c C s& t � }| �d�s ttjd| ��| d d� |_|�|j� | |_||_|� t j �rVdnd|_ |j |_ t|�}t�� }|�|� d|| f }t|d��n}t�d �}|�|� z|�|� W n: tjy� } z ttjd|�� ��W Y d }~n d }~0 0 W d � n1 �s 0 Y ~~d |jv �r^|jd d k�r^t|j�d k�r^t � d |j� |jd d �= d } t � } | t|j�k �r |j| | v �r�t � d |j| � |j� | � ntz |� |j| |j|j!� W n> t�y } z$t � d| � |j� | � W Y d } ~ n"d } ~ 0 0 | �"|j| � | d7 } �qh~ |S )Nz.xmlz'%s' is missing .xml suffix���FT�%s/%s�rbznot a valid ipset file: %srS rb r z6ipset '%s': timeout option is set, entries are ignoredz Entry %s already set, ignoring.z %s, ignoring.r: )#r rH r r Z INVALID_NAMEr% Z check_name�filename�pathrC r � ETC_FIREWALLDZbuiltin�defaultrj �saxZ make_parserZsetContentHandler�openZ InputSourceZ setByteStream�parseZSAXParseExceptionrD Z getExceptionr rF r r rl �set�poprQ r �add) rs rt r& �handler�parserr% �f�source�msgrM Z entries_set�er2 r2 r3 r { sd � ��: �� " r c C s� |r|n| j }| jr$d|| jf }nd|| jf }tj �|�r�zt�|d| � W n2 ty� } zt� d||� W Y d }~n d }~0 0 tj � |�}|� t j �r�tj �|�s�tj �t j �s�t�t j d� t�|d� tj|ddd�}t|�}|�� d | ji}| j�r| jd k�r| j|d < |�d |� |�d � | j�rz| jd k�rz|�d� |�di � |�| j� |�d� |�d � | j�r�| jd k�r�|�d� |�di � |�| j� |�d� |�d � | j� � D ]L\} } |�d� | d k�r�|� d| | d�� n|� dd| i� |�d � �q�| j D ]:} |�d� |�di � |�| � |�d� |�d � �q"|�d � |�d � |� � |� � ~d S )Nrq z %s/%s.xmlz%s.oldz Backup of file '%s' failed: %si� ZwtzUTF-8)�mode�encodingr r r r& � z r r r' )r% r) r% r( )!rt rs r% �os�exists�shutil�copy2� Exceptionr �error�dirnamerC r ru �mkdir�iorx r Z startDocumentr r rk ZignorableWhitespacer Z charactersrn r r rL Z simpleElementr Z endDocument�close) r& rt �_pathr% r� �dirpathr r} rm r^ r) r( r2 r2 r3 r � sf $ r )N)'�__doc__�__all__Zxml.saxrw r� r� r� Zfirewallr Zfirewall.functionsr r r r r r r r Zfirewall.core.io.io_objectr r r Zfirewall.core.ipsetr r Zfirewall.core.icmpr r r r Zfirewall.core.loggerr r Zfirewall.errorsr r rj r r r2 r2 r2 r3 �<module> s& ( =3
💾 保存
取消
保存为 UTF-8，换行统一为 LF