??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
ó
àUdac @` s“ d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d d
l m
Z
d d l m Z m
Z
y$ d d l m Z d d
l m Z Wn e k
r© n Xd e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d e f d „ ƒ YZ d „ Z e d! k re ƒ n d" S(# i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bysÒ
---
module: firewalld
short_description: Manage arbitrary ports/services with firewalld
description:
- This module allows for addition or deletion of services and ports (either TCP or UDP) in either running or permanent firewalld rules.
version_added: "1.4"
options:
service:
description:
- Name of a service to add/remove to/from firewalld.
- The service must be listed in output of firewall-cmd --get-services.
type: str
port:
description:
- Name of a port or port range to add/remove to/from firewalld.
- Must be in the form PORT/PROTOCOL or PORT-PORT/PROTOCOL for port ranges.
type: str
rich_rule:
description:
- Rich rule to add/remove to/from firewalld.
type: str
source:
description:
- The source/network you would like to add/remove to/from firewalld.
type: str
version_added: "2.0"
interface:
description:
- The interface you would like to add/remove to/from a zone in firewalld.
type: str
version_added: "2.1"
icmp_block:
description:
- The ICMP block you would like to add/remove to/from a zone in firewalld.
type: str
version_added: "2.8"
icmp_block_inversion:
description:
- Enable/Disable inversion of ICMP blocks for a zone in firewalld.
type: str
version_added: "2.8"
zone:
description:
- The firewalld zone to add/remove to/from.
- Note that the default zone can be configured per system but C(public) is default from upstream.
- Available choices can be extended based on per-system configs, listed here are "out of the box" defaults.
- Possible values include C(block), C(dmz), C(drop), C(external), C(home), C(internal), C(public), C(trusted), C(work).
type: str
permanent:
description:
- Should this configuration be in the running firewalld configuration or persist across reboots.
- As of Ansible 2.3, permanent operations can operate on firewalld configs when it is not running (requires firewalld >= 3.0.9).
- Note that if this is C(no), immediate is assumed C(yes).
type: bool
immediate:
description:
- Should this configuration be applied immediately, if set as permanent.
type: bool
default: no
version_added: "1.9"
state:
description:
- Enable or disable a setting.
- 'For ports: Should this port accept (enabled) or reject (disabled) connections.'
- The states C(present) and C(absent) can only be used in zone level operations (i.e. when no other parameters but zone and state are set).
type: str
required: true
choices: [ absent, disabled, enabled, present ]
timeout:
description:
- The amount of time the rule should be in effect for when non-permanent.
type: int
default: 0
masquerade:
description:
- The masquerade setting you would like to enable/disable to/from zones within firewalld.
type: str
version_added: "2.1"
offline:
description:
- Whether to run this module even when firewalld is offline.
type: bool
version_added: "2.3"
notes:
- Not tested on any Debian based system.
- Requires the python2 bindings of firewalld, which may not be installed by default.
- For distributions where the python2 firewalld bindings are unavailable (e.g Fedora 28 and later) you will have to set the
ansible_python_interpreter for these hosts to the python3 interpreter path and install the python3 bindings.
- Zone transactions (creating, deleting) can be performed by using only the zone and state parameters "present" or "absent".
Note that zone transactions must explicitly be permanent. This is a limitation in firewalld.
This also means that you will have to reload firewalld after adding a zone that you wish to perform immediate actions on.
The module will not take care of this for you implicitly because that would undo any previously performed immediate actions which were not
permanent. Therefore, if you require immediate access to a newly created zone it is recommended you reload firewalld immediately after the zone
creation returns with a changed state and before you perform any other immediate, non-permanent actions on that zone.
requirements:
- firewalld >= 0.2.11
author:
- Adam Miller (@maxamillion)
sƒ
- firewalld:
service: https
permanent: yes
state: enabled
- firewalld:
port: 8081/tcp
permanent: yes
state: disabled
- firewalld:
port: 161-162/udp
permanent: yes
state: enabled
- firewalld:
zone: dmz
service: http
permanent: yes
state: enabled
- firewalld:
rich_rule: rule service name="ftp" audit limit value="1/m" accept
permanent: yes
state: enabled
- firewalld:
source: 192.0.2.0/24
zone: internal
state: enabled
- firewalld:
zone: trusted
interface: eth2
permanent: yes
state: enabled
- firewalld:
masquerade: yes
state: enabled
permanent: yes
zone: dmz
- firewalld:
zone: custom
state: present
permanent: yes
- firewalld:
zone: drop
state: present
permanent: yes
icmp_block_inversion: yes
- firewalld:
zone: drop
state: present
permanent: yes
icmp_block: echo-request
- name: Redirect port 443 to 8443 with Rich Rule
firewalld:
rich_rule: rule family=ipv4 forward-port port=443 protocol=tcp to-port=8443
zone: public
permanent: yes
immediate: yes
state: enabled
( t
AnsibleModule( t FirewallTransactiont
fw_offline( t Rich_Rule( t FirewallClientZoneSettingst IcmpBlockTransactionc B` s\ e Z d Z d d d e e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( s
IcmpBlockTransaction
c C` s8 t t | ƒ j | d | d | d | d | d | ƒd S( Nt action_argst
desired_statet zonet permanentt immediate( t superR
t __init__( t selft moduleR R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR Ê s c C` s | | j j | j ƒ k S( N( t fwt
getIcmpBlocksR ( R t
icmp_blockt timeout( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyt get_enabled_immediateÏ s c C` s" | j ƒ \ } } | | j ƒ k S( N( t get_fw_zone_settingsR ( R R R t fw_zonet fw_settings( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyt get_enabled_permanentÒ s c C` s | j j | j | | ƒ d S( N( R t addIcmpBlockR ( R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyt set_enabled_immediateÖ s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R R t update_fw_settings( R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyt set_enabled_permanentÙ s
c C` s | j j | j | ƒ d S( N( R t removeIcmpBlockR ( R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyt set_disabled_immediateÞ s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R R$ R" ( R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyt set_disabled_permanentá s
N( t __name__t
__module__t __doc__t Nonet FalseR R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR
Å s t IcmpBlockInversionTransactionc B` s\ e Z d Z d d d e e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( s'
IcmpBlockInversionTransaction
c C` s8 t t | ƒ j | d | d | d | d | d | ƒd S( NR R R R R ( R R, R ( R R R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR ì s c C` s' | j j | j ƒ t k r t St Sd S( N( R t queryIcmpBlockInversionR t TrueR+ ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR ñ s c C` s0 | j ƒ \ } } | j ƒ t k r( t St Sd S( N( R t getIcmpBlockInversionR. R+ ( R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR ÷ s c C` s | j j | j ƒ d S( N( R t addIcmpBlockInversionR ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR! þ s c C` s3 | j ƒ \ } } | j t ƒ | j | | ƒ d S( N( R t setIcmpBlockInversionR. R" ( R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR# s
c C` s | j j | j ƒ d S( N( R t removeIcmpBlockInversionR ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR% s c C` s3 | j ƒ \ } } | j t ƒ | j | | ƒ d S( N( R R1 R+ R" ( R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR& s
N( R' R( R) R* R+ R R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR, ç s t ServiceTransactionc B` s\ e Z d Z d d d e e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( s
ServiceTransaction
c C` s8 t t | ƒ j | d | d | d | d | d | ƒd S( NR R R R R ( R R3 R ( R R R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR s c C` s' | | j j | j ƒ k r t St Sd S( N( R t getServicesR R. R+ ( R t serviceR ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR s c C` s0 | j ƒ \ } } | | j ƒ k r( t St Sd S( N( R R4 R. R+ ( R R5 R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR s c C` s | j j | j | | ƒ d S( N( R t
addServiceR ( R R5 R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR! ' s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R R6 R" ( R R5 R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR# * s
c C` s | j j | j | ƒ d S( N( R t
removeServiceR ( R R5 R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR% / s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R R7 R" ( R R5 R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR& 2 s
N( R' R( R) R* R+ R R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR3 s t MasqueradeTransactionc B` s\ e Z d Z d d d e e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( s
MasqueradeTransaction
c C` sX t t | ƒ j | d | d | d | d | d | ƒd | j | _ d | j | _ d S( NR R R R R s Added masquerade to zone %ss Removed masquerade from zone %s( R R8 R R t enabled_msgt disabled_msg( R R R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR = s %c C` s' | j j | j ƒ t k r t St Sd S( N( R t queryMasqueradeR R. R+ ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR E s c C` s0 | j ƒ \ } } | j ƒ t k r( t St Sd S( N( R t
getMasqueradeR. R+ ( R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR K s c C` s | j j | j ƒ d S( N( R t
addMasqueradeR ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR! R s c C` s3 | j ƒ \ } } | j t ƒ | j | | ƒ d S( N( R t
setMasqueradeR. R" ( R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR# U s
c C` s | j j | j ƒ d S( N( R t removeMasqueradeR ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR% Z s c C` s3 | j ƒ \ } } | j t ƒ | j | | ƒ d S( N( R R> R+ R" ( R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR& ] s
N( R' R( R) R* R+ R R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR8 8 s t PortTransactionc B` s\ e Z d Z d d d e e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( s
PortTransaction
c C` s8 t t | ƒ j | d | d | d | d | d | ƒd S( NR R R R R ( R R@ R ( R R R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR h s c C` sS | j r1 | j ƒ \ } } | j d | d | ƒ S| j j d | j d | d | ƒ S( Nt portt protocolR ( R
R t queryPortR R ( R RA RB R t dummyR ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR m s c C` s( | j ƒ \ } } | j d | d | ƒ S( NRA RB ( R RC ( R RA RB R RD R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR s s c C` s | j j | j | | | ƒ d S( N( R t addPortR ( R RA RB R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR! w s c C` s6 | j ƒ \ } } | j | | ƒ | j | | ƒ d S( N( R RE R" ( R RA RB R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR# z s c C` s | j j | j | | ƒ d S( N( R t
removePortR ( R RA RB R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR% s c C` s6 | j ƒ \ } } | j | | ƒ | j | | ƒ d S( N( R RF R" ( R RA RB R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR& ‚ s N( R' R( R) R* R+ R R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR@ c s t InterfaceTransactionc B` s\ e Z d Z d d d e e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( s
InterfaceTransaction
c C` sr t t | ƒ j | d | d | d | d | d | ƒd | j d | j f | _ d | j d | j f | _ d S( NR R R R R s Changed %s to zone %si s Removed %s from zone %s( R RG R R R R9 R: ( R R R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR s %c C` sW | j r* | j ƒ \ } } | j ƒ } n | j j | j ƒ } | | k rO t St Sd S( N( R
R t
getInterfacesR R R. R+ ( R t interfaceR R t interface_list( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR ˜ s c C` s0 | j ƒ \ } } | | j ƒ k r( t St Sd S( N( R RH R. R+ ( R RI R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR £ s c C` s | j j | j | ƒ d S( N( R t changeZoneOfInterfaceR ( R RI ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR! « s c C` sÄ | j ƒ \ } } | j r5g } xN | j j j ƒ D]: } | j j j | ƒ } | | j k r4 | j | ƒ q4 q4 Wt | ƒ d k r¬ | j j
d d j | t | ƒ ƒ ƒ n | d } | j | j
k rÀt | j j j | ƒ ƒ } | j | ƒ | j j j | | j ƒ | j | ƒ | j j j | | j ƒ qÀn‹ | j j ƒ j | ƒ } | | j
k rÀ| r£| j j ƒ j | ƒ } | j ƒ } | j | ƒ | j | ƒ n | j | ƒ | j | ƒ n d S( Ni t msgs@ ERROR: interface {0} is in {1} zone XML file, can only be in onei ( R R
R t configt get_zonest get_zonet
interfacest appendt lenR t fail_jsont formatt nameR R t get_zone_configt removeInterfacet set_zone_configt settingst addInterfacet getZoneOfInterfacet
getZoneByNamet getSettingst update( R RI R R t iface_zone_objsR t old_zone_objt old_zone_settingst
old_zone_name( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR# ® s>
c C` s | j j | j | ƒ d S( N( R RW R ( R RI ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR% Ö s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R RW R" ( R RI R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR& Ù s
N( R' R( R) R* R+ R R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyRG ˆ s ( t RichRuleTransactionc B` s\ e Z d Z d d d e e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( s
RichRuleTransaction
c C` s8 t t | ƒ j | d | d | d | d | d | ƒd S( NR R R R R ( R Rc R ( R R R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR ä s c C` s< t t d | ƒ ƒ } | | j j | j ƒ k r4 t St Sd S( Nt rule_str( t strR R t getRichRulesR R. R+ ( R t ruleR ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR é s c C` sE | j ƒ \ } } t t d | ƒ ƒ } | | j ƒ k r= t St Sd S( NRd ( R Re R Rf R. R+ ( R Rg R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR ò s
c C` s | j j | j | | ƒ d S( N( R t addRichRuleR ( R Rg R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR! ü s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R Rh R" ( R Rg R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR# ÿ s
c C` s | j j | j | ƒ d S( N( R t removeRichRuleR ( R Rg R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR% s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R Ri R" ( R Rg R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR& s
N( R' R( R) R* R+ R R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyRc ß s
t SourceTransactionc B` s\ e Z d Z d d d e e d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z RS( s
SourceTransaction
c C` sr t t | ƒ j | d | d | d | d | d | ƒd | j d | j f | _ d | j d | j f | _ d S( NR R R R R s Added %s to zone %si s Removed %s from zone %s( R Rj R R R R9 R: ( R R R R R R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR s %c C` s' | | j j | j ƒ k r t St Sd S( N( R t
getSourcesR R. R+ ( R t source( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR s c C` s0 | j ƒ \ } } | | j ƒ k r( t St Sd S( N( R Rk R. R+ ( R Rl R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR # s c C` s | j j | j | ƒ d S( N( R t addSourceR ( R Rl ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR! * s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R Rm R" ( R Rl R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR# - s
c C` s | j j | j | ƒ d S( N( R t removeSourceR ( R Rl ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR% 2 s c C` s3 | j ƒ \ } } | j | ƒ | j | | ƒ d S( N( R Rn R" ( R Rl R R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR& 5 s
N( R' R( R) R* R+ R R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyRj
s t ZoneTransactionc B` sb e Z d Z d d d e e d d d „ Z d „ Z d „ Z d „ Z d „ Z
d „ Z d „ Z RS( s
ZoneTransaction
c C` s t t | ƒ j | d | d | d | d | d | d | p? d g d | pN d g ƒd
| j | _ d | j | _ d | _ d S(
NR R R R R t enabled_valuest presentt disabled_valuest absents
Added zone %ss Removed zone %ss~ Zone operations must be permanent. Make sure you didn't set the 'permanent' flag to 'false' or the 'immediate' flag to 'true'.( R Ro R R R9 R: t tx_not_permanent_error_msg( R R R R R R R Rp Rr ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR @ s
c C` s | j j d | j ƒ d S( NRL ( R RS Rt ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR Q s c C` sd | j j ƒ j ƒ } g | D]' } | j j ƒ j | ƒ j d ƒ ^ q } | j | k r\ t St Sd S( NRU ( R RM t listZonest getZonet get_propertyR R. R+ ( R t zonest zt
zone_names( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR T s
4c C` s | j j d | j ƒ d S( NRL ( R RS Rt ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR! \ s c C` s# | j j ƒ j | j t ƒ ƒ d S( N( R RM t addZoneR R ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR# _ s c C` s | j j d | j ƒ d S( NRL ( R RS Rt ( R ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR% b s c C` s) | j j ƒ j | j ƒ } | j ƒ d S( N( R RM R\ R t remove( R t zone_obj( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyR& e s N(
R' R( R) R* R. R+ R R R R! R# R% R& ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyRo ; s c ! C` sê t d t d t d d ƒ d t d d ƒ d t d d ƒ d t d d ƒ d t d d ƒ d t d d ƒ d
t d d d t ƒ d
t d d ƒ d t d d ƒ d t d d d t d d d d d g ƒ d t d d d d ƒ d t d d ƒ d t d d ƒ d t d d ƒ ƒ d t d t d d1 d
d2 ƒ ƒ } | j d } | j d } | j d
} | j d } | j d } | j d } t j | ƒ | r•| r•t } n | r´t r´| j d d ƒ n t } g } | j d } | j d }
| j d } | j d } | j d
}
| j d } | j d d k r{d | j d k rY| j d j
ƒ j d ƒ \ } } n d } | s| j d d! ƒ qn d } d } | d k r | d" 7} n |
d k r¹| d" 7} n | d k rÒ| d" 7} n | d k rë| d" 7} n | d k r| d" 7} n | d k r | d" 7} n | d k r6| d" 7} n |
d k rO| d" 7} n | d" k rn| j d d# ƒ n+ | d k r™| d3 k r™| j d d$ ƒ n | d k rt | d% | | f d | d& | d | d
| ƒ} | j
ƒ \ } } | | } | t k r| j d' | | f ƒ qn |
d k r•t | d% d4 d | d& | d | d
| ƒ} | j
ƒ \ } } | | } | t k r•| j d( |
| f ƒ q•n | d k rt | d% | | f d | d& | d | d
| ƒ} | j
ƒ \ } } | | } | t k r| j d) | | f ƒ qn |
d k rnt | d% |
f d | d& | d | d
| ƒ} | j
ƒ \ } } | | } n | d k rüt | d% | | | f d | d& | d | d
| ƒ} | j
ƒ \ } } | | } | t k rü| j d* d+ | | f | f ƒ qün | d k r}t | d% | | f d | d& | d | d
| ƒ} | j
ƒ \ } } | | } | t k r}| j d, | | f ƒ q}n | d k rÕt | d% | f d | d& | d | d
| ƒ} | j
ƒ \ } } | | } n | d k r*t | d% d5 d | d& | d | d
| ƒ} | j
ƒ \ } } | | } n | d k r±| d6 k r±t | d% d7 d | d& | d | d
| ƒ} | j
ƒ \ } } | | } | t k r±| j d- | | f ƒ q±n t rÇ| j d. ƒ n | j d/ | d d0 j | ƒ ƒ d S(8 Nt
argument_specR t typeRe t icmp_block_inversionR5 RA t rich_ruleR R t boolt defaultRl R t statet requiredt choicesRs t disabledt enabledRq R t inti RI t
masqueradet offlinet supports_check_modet required_byRL sh firewall is not currently running, unable to perform immediate actions without a running firewall daemont /s( improper port format (missing protocol?)i sw can only operate on port, service, rich_rule, masquerade, icmp_block, icmp_block_inversion, interface or source at oncesB absent and present state can only be used in zone level operationsR R s Changed icmp-block %s to %ss% Changed icmp-block-inversion %s to %ss Changed service %s to %ss Changed port %s to %ss %s/%ss Changed rich_rule %s to %ss Changed zone %s to %ss6 (offline operation: only on-disk configs were altered)t changeds , ( R ( R ( s absents present( ( ( s absents present( ( R t dictR+ R. t paramsR t sanity_checkR
RS R* t stript splitR
t runRQ R, R3 Rj R@ Rc RG R8 Ro t exit_jsont join( R R R R R RI RŠ R t msgsR R€ R5 R Rl R RA RB t modification_countt transactiont transaction_msgs( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyt mainj s` '
%
t __main__N( t
__future__R R R R t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt ansible.module_utils.basicR t ansible.module_utils.firewalldR R
t firewall.clientR R t ImportErrorR
R, R3 R8 R@ RG Rc Rj Ro Rœ R' ( ( ( sD /usr/lib/python2.7/site-packages/ansible/modules/system/firewalld.pyt s2
eF
"()+%W../ ð