??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
c`c @ s d d l Z d d l Z d d l m Z m Z d d l m Z d d l m Z d d l
m Z m Z m
Z
m Z m Z m Z m Z m Z d d l m Z d d l m Z m Z m Z d d l m Z m Z m Z m Z d d l Z i d d
d g d 6d
d
g d 6d
d d d
d g d 6d
d d
g d 6d d
d g d 6Z i d d 6d d 6Z i d d 6d d 6Z! d Z" d Z# d Z$ d e% f d YZ& d e& f d YZ' d S( iN( t SHORTCUTSt DEFAULT_ZONE_TARGET( t runProg( t log( t tempFilet readfilet splitArgst check_mact portStrt check_single_addresst
check_addresst normalizeIP6( t config( t
FirewallErrort INVALID_PASSTHROUGHt INVALID_RULE( t Rich_Acceptt Rich_Rejectt Rich_Dropt Rich_Markt INPUTt OUTPUTt FORWARDt securityt
PREROUTINGt rawt POSTROUTINGt manglet natt filters icmp-host-prohibitedt ipv4s icmp6-adm-prohibitedt ipv6t icmps ipv6-icmpc C s i d d 6d d 6d d 6d d 6d d 6d d
6} | } x | D] } y | j | } Wn t k
rm q> n X| d k r y t | | d Wn t k
r q X| j | d n | | | | W| S(
s Inverse valid rule s -Ds -As --deletes --appends -Is --inserts -Xs -Ns --delete-chains --new-chaini ( s -Is --insert( t indext Exceptiont intt pop( t argst replace_argst ret_argst argt idx( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt common_reverse_rule7 s*
c C s i d d 6d d 6d d 6d d 6d d 6d d
6} | } x | D] } y | j | } Wn t k
rm q> n X| d k r y t | | d Wn t k
r q X| j | d n | | | | <| SWt t d d
S( s Reverse valid passthough rule s -Ds -As --deletes --appends -Is --inserts -Xs -Ns --delete-chains --new-chaini s no '-A', '-I' or '-N' argN( s -Is --insert( R! t
ValueErrorR# R$ R
R ( R% R& R' t xR) ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt common_reverse_passthrough\ s.
c C s t | } t d d d d d d d d d d
d d d
d d d d d d d g } t | | @ d k r t t d t | | @ d n t d d d d d d g } t | | @ d k r t t d n d S( sZ Check if passthough rule is valid (only add, insert and new chain
rules are allowed) s -Cs --checks -Ds --deletes -Rs --replaces -Ls --lists -Ss --list-ruless -Fs --flushs -Zs --zeros -Xs --delete-chains -Ps --policys -Es --rename-chaini s arg '%s' is not alloweds -As --appends -Is --inserts -Ns --new-chains no '-A', '-I' or '-N' argN( t sett lenR
R t list( R% t not_allowedt needed( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt common_check_passthrough s* t ip4tablesc B s e Z d Z d Z e Z d Z d Z d Z d. d Z
d Z d Z d Z
d Z d
Z d Z d Z d
Z d Z d Z d Z d. d Z d Z d Z d Z d Z d Z d Z d d Z d Z e d Z d Z! d Z" d Z# d Z$ d Z% d! Z& d" Z' d# Z( d. d. d$ Z) d. d. d% Z* d. d. d& Z+ d' Z, d. d( Z- d. d) Z. d. d* Z/ d+ Z0 d, Z1 d- Z2 RS(/ R R4 c C sz | | _ t j | j | _ t j d | j | _ | j | _ | j | _ | j
g | _ g | _ i | _
d S( Ns
%s-restore( t _fwR t COMMANDSt ipvt _commandt _restore_commandt _detect_wait_optiont wait_optiont _detect_restore_wait_optiont restore_wait_optiont fill_existst available_tablest zone_source_index_cachet
our_chains( t selft fw( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt __init__ s
c C s4 t j j | j | _ t j j | j | _ d S( N( t ost patht existsR8 t command_existsR9 t restore_command_exists( RB ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyR> s c C s | j rB | j | k rB | j g g | D] } d | ^ q( } n g | D] } d | ^ qI } t j d | j | j d j | t | j | \ } } | d k r t d | j d j | | f n | S( Ns %ss %s: %s %st i s '%s %s' failed: %s( R; R t debug2t __class__R8 t joinR R+ ( RB R% t itemt _argst statust ret( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt __run s * % c C s | d k r | Sg } x | D] } t } x | D] } y | j | } Wn t k
r\ q0 Xt | | k r0 d | | d k r0 t } | | d j d } x3 | D]( } | }
| |
| d <| j |
q Wq0 q0 W| s | j | q q W| S( s5 Split values combined with commas for options in optst ,i N( t Nonet FalseR! R+ R/ t Truet splitt append( RB t rulest optst out_rulest rulet processedt optt it itemsRN t _rule( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt split_value s(
&
c C sA y | j | } Wn t k
r' t SX| | | | d +t Sd S( Ni ( R! R+ RU RV ( RB R\ t patternt replacementR_ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt
_rule_replace s
c C s | t k o | t | k S( N( t BUILT_IN_CHAINS( RB R7 t tablet chain( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt is_chain_builtin s c C sC d | g } | r" | j d n
| j d | j | | g S( Ns -ts -Ns -X( RX ( RB t addRg Rh R\ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt build_chain_rules s
c C sL d | g } | r. | d | t | g 7} n | d | g 7} | | 7} | S( Ns -ts -Is -D( t str( RB Rj Rg Rh R! R% R\ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt
build_rule s
c C s
t | S( N( R* ( RB R% ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt reverse_rule s c C s t | d S( N( R3 ( RB R% ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt check_passthrough s c C s
t | S( N( R- ( RB R% ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt reverse_passthrough
s c C s d } y | j d } Wn t k
r, n( Xt | | d k rT | | d } n d } xn d d d d d d g D]T } y | j | } Wn t k
r qs Xt | | d k rs | | d } qs qs W| | f S(
NR s -ti s -As --appends -Is --inserts -Ns --new-chain( R! R+ R/ RT ( RB R% Rg R_ Rh R^ ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt passthrough_parse_table_chain
s$
c C s yb | j d } | j | | j | } d | d k rQ | | d f } n | | d f } WnL t k
r y& | j d } | j | d } Wq t k
r d SXn Xt } | d d k r t } n | r | r | | k r| j | qn | r| rI| | k r7| j | | j d
d n | j | } n! | j j
r^d } n t | } d | d <| j d
d | d n d S( Ns %%ZONE_SOURCE%%s -mi i i s %%ZONE_INTERFACE%%i s -Ds --deletet keyc S s | d S( Ni ( ( R, ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt @ s s -Ii s %di ( s -Ds --delete(
R! R$ R+ RT RV RU t removeRX t sortR5 t _allow_zone_driftingR/ t insert( RB R\ R@ R_ t zonet zone_sourcet rule_addR! ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt _run_replace_zone_source# s>
c C s# t } i } t j | j } x| D]} | } | j | d d d t | j g | j | d t | j g y | j d } Wn t k
r nL X| d k r q( n | d& k r d
d d | g | | | d
+n
| j
| | j | | d } xp d d g D]b }
y | j |
} Wn t k
r6q
Xt | | d
k r
| j
| | j
| } q
q
Wxz t
t | D]f } x] t j D]R } | | | k r| | j d o| | j d rd | | | | i } | j d r g | d R RT Rb Re Ri Rk Rm Rn Ro Rp Rq R{ R R R R: R< R R R R R R RU R R R R R R R R R R R R R R R R R R! R" ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyR4 s\
) ^
! i 7 , ! , 1 # t ip6tablesc B s e Z d Z d Z e d Z RS( R R& c C s g } | j d d d d d d d d d g | d
k rk | j d d d d d d d d d d d
g n | j d d d d d d d d d g | j d d d d d d d d d g | S( Ns -IR s -tR s -mt rpfilters --inverts -jR R} R s --log-prefixs rpfilter_DROP: s -ps ipv6-icmps$ --icmpv6-type=neighbour-solicitationR s" --icmpv6-type=router-advertisement( RX ( RB R RY ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt build_rpfilter_rules s"
( R# R$ R7 R RU R( ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyR& s (( t os.pathRE R t firewall.core.baseR R t firewall.core.progR t firewall.core.loggerR t firewall.functionsR R R R R R R
R t firewallR t firewall.errorsR
R R t firewall.core.richR R R R R Rf R R R* R- R3 t objectR4 R& ( ( ( s; /usr/lib/python2.7/site-packages/firewall/core/ipXtables.pyt s< : "
% *