??????????????
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 173
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 174
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 175
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 176
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 177
Warning: Cannot modify header information - headers already sent by (output started at /home/mybf1/public_html/mentol.bf1.my/SS1.php:4) in /home/mybf1/public_html/mentol.bf1.my/SS1.php on line 178
ó
c‰`c @ s d d d d d d d d d d d
d d d
d d d d g Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d e
f d „ ƒ YZ d e
f d „ ƒ YZ d e
f d „ ƒ YZ
d e
f d „ ƒ YZ d e f d „ ƒ YZ d e
f d „ ƒ YZ d e
f d „ ƒ YZ d e
f d „ ƒ YZ d e
f d „ ƒ YZ d e
f d! „ ƒ YZ d
e
f d" „ ƒ YZ d e
f d# „ ƒ YZ d e
f d$ „ ƒ YZ d
e
f d% „ ƒ YZ d e f d& „ ƒ YZ d e
f d' „ ƒ YZ d e
f d( „ ƒ YZ d e
f d) „ ƒ YZ d* S(+ t Rich_Sourcet Rich_Destinationt Rich_Servicet Rich_Portt
Rich_Protocolt Rich_Masqueradet Rich_IcmpBlockt
Rich_IcmpTypet Rich_SourcePortt Rich_ForwardPortt Rich_Logt
Rich_Auditt Rich_Acceptt Rich_Rejectt Rich_Dropt Rich_Markt
Rich_Limitt Rich_Ruleiÿÿÿÿ( t functions( t check_ipset_name( t REJECT_TYPES( t errors( t
FirewallErrorc B s e Z e d „ Z d „ Z RS( c C sî | | _ | j d k r$ d | _ n | | _ | j d k sK | j d k rW d | _ n$ | j d k r{ | j j ƒ | _ n | | _ | j d k rŸ d | _ n | | _ | j d k rê | j d k rê | j d k rê t t j d ƒ ‚ n d S( Nt s no address, mac and ipset( t addrt Nonet mact uppert ipsett invertR R t INVALID_RULE( t selfR R R R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt __init__$ s - c C s‰ d | j r d n d } | j d k r7 | d | j S| j d k rU | d | j S| j d k rs | d | j St t j d ƒ ‚ d S( Ns source%s s NOTR s address="%s"s mac="%s"s
ipset="%s"s no address, mac and ipset( R R R R R R R R ( R t ret( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt __str__5 s ( t __name__t
__module__t FalseR R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR # s c B s e Z e d „ Z d „ Z RS( c C s | | _ | | _ d S( N( R R ( R R R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR B s c C s d | j r d n d | j f S( Ns destination %saddress="%s"s not R ( R R ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" F s ( R# R$ R% R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR A s c B s e Z d „ Z d „ Z RS( c C s
| | _ d S( N( t name( R R& ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR K s c C s d | j S( Ns service name="%s"( R& ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" N s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR J s c B s e Z d „ Z d „ Z RS( c C s | | _ | | _ d S( N( t portt protocol( R R' R( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR R s c C s d | j | j f S( Ns port port="%s" protocol="%s"( R' R( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" V s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR Q s c B s e Z d „ Z RS( c C s d | j | j f S( Ns# source-port port="%s" protocol="%s"( R' R( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" Z s ( R# R$ R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR Y s c B s e Z d „ Z d „ Z RS( c C s
| | _ d S( N( t value( R R) ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR _ s c C s d | j S( Ns protocol value="%s"( R) ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" b s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR ^ s c B s e Z d „ Z d „ Z RS( c C s d S( N( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR f s c C s d S( Nt
masquerade( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" i s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR e s c B s e Z d „ Z d „ Z RS( c C s
| | _ d S( N( R& ( R R& ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR m s c C s d | j S( Ns icmp-block name="%s"( R& ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" p s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR l s c B s e Z d „ Z d „ Z RS( c C s
| | _ d S( N( R& ( R R& ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR t s c C s d | j S( Ns icmp-type name="%s"( R& ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" w s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR s s c B s e Z d „ Z d „ Z RS( c C s^ | | _ | | _ | | _ | | _ | j d k r? d | _ n | j d k rZ d | _ n d S( NR ( R' R( t to_portt
to_addressR ( R R' R( R+ R, ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR { s c C sR d | j | j | j d k r+ d | j n d | j d k rJ d | j n d f S( Ns( forward-port port="%s" protocol="%s"%s%sR s
to-port="%s"s
to-addr="%s"( R' R( R+ R, ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" † s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR z s c B s# e Z d d d d „ Z d „ Z RS( c C s | | _ | | _ | | _ d S( N( t prefixt levelt limit( R R- R. R/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR s c C sS d | j r d | j n d | j r2 d | j n d | j rK d | j n d f S( Ns log%s%s%ss prefix="%s"R s level="%s"s %s( R- R. R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" “ s N( R# R$ R R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR
Œ s c B s e Z d d „ Z d „ Z RS( c C s
| | _ d S( N( R/ ( R R/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR š s c C s d | j r d | j n d S( Ns audit%ss %sR ( R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" ž s N( R# R$ R R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR ™ s c B s e Z d d „ Z d „ Z RS( c C s
| | _ d S( N( R/ ( R R/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR ¢ s c C s d | j r d | j n d S( Ns accept%ss %sR ( R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" ¥ s N( R# R$ R R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR ¡ s c B s) e Z d d d „ Z d „ Z d „ Z RS( c C s | | _ | | _ d S( N( t typeR/ ( R t _typeR/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR © s c C s: d | j r d | j n d | j r2 d | j n d f S( Ns
reject%s%ss
type="%s"R s %s( R0 R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" s c C s | j r{ | s$ t t j d ƒ ‚ n | d k r{ | j t | k r{ d j t | ƒ } t t j d | j | f ƒ ‚ q{ n d S( Ns9 When using reject type you must specify also rule family.t ipv4t ipv6s , s% Wrong reject type %s.
Use one of: %s.( R2 R3 ( R0 R R R R t join( R t familyt valid_types( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt check± s N( R# R$ R R R" R7 ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR
¨ s c B s e Z d „ Z RS( c C s d | j r d | j n d S( Ns drop%ss %sR ( R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" » s ( R# R$ R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR º s c B s& e Z d d „ Z d „ Z d „ Z RS( c C s | | _ | | _ d S( N( t setR/ ( R t _setR/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR À s c C s' d | j | j r d | j n d f S( Ns
mark set=%s%ss %sR ( R8 R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" Ä s c C s× | j d k r | j } n t t j d ƒ ‚ d | k r¯ | j d ƒ } t | ƒ d k ro t t j | ƒ ‚ n t j | d ƒ s— t j | d ƒ rÓ t t j | ƒ ‚ qÓ n$ t j | ƒ sÓ t t j | ƒ ‚ n d S( Ns no value sett /i i i ( R8 R R R t INVALID_MARKt splitt lenR t checkUINT32( R t xt splits( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR7 È s N( R# R$ R R R" R7 ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR ¿ s c B s, e Z d „ Z d „ Z d „ Z d „ Z RS( c C su | | _ d | j k rq | j j d ƒ } t | ƒ d k rq | d d
k rq d | d | d d f | _ qq n d S( NR: i i t secondt minutet hourt days %s/%si ( RA RB RC RD ( R) R< R= ( R R) R@ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR Ü s c C sˆ d } d | j k r* | j j d ƒ } n | sC t | ƒ d k r[ t t j | j ƒ ‚ n | \ } } y t | ƒ } Wn t t j | j ƒ ‚ n X| d k s® | d k rÆ t t j | j ƒ ‚ n d } | d k rá d } n? | d k rö d } n* | d k r d } n | d k r d } n d
| | d k rPt t j d | j ƒ ‚ n | d k r„| d k r„t t j d
| j ƒ ‚ n d S( NR: i i t st mt ht di< i i' i s %s too fasts %s too slow( RE RF RG RH i i i€Q ( R R) R< R= R R t
INVALID_LIMITt int( R R@ t ratet durationt mult( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR7 ä s6 c C s d | j S( Ns limit value="%s"( R) ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" s c C s d S( NR ( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt command s ( R# R$ R R7 R" RN ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR Û s " c B s; e Z d d d „ Z d „ Z d „ Z d „ Z d „ Z RS( c C sw | d k r t | ƒ | _ n d | _ d | _ d | _ d | _ d | _ d | _ d | _ | rs | j | ƒ n d S( N(
R t strR5 t sourcet destinationt elementt logt auditt actiont _import_from_string( R R5 t rule_str( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR
s c C sÎ g } x t j | ƒ D]œ } d | k rž | j d ƒ } t | ƒ d k s_ | d s_ | d rx t t j d | ƒ ‚ n | j i | d d 6| d d 6ƒ q | j i | d 6ƒ q W| j i d d 6ƒ | S(
s Lexical analysis t =i i i s internal error in _lexer(): %st attr_namet
attr_valueRR t EOL( R t splitArgsR< R= R R R t append( R RW t tokenst rt attr( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt _lexer s ( &c C sÐ
| s t t j d ƒ ‚ n d | _ d | _ d | _ d | _ d | _ d | _ d | _
| j | ƒ } | r | d j d ƒ d k r t t j d ƒ ‚ n i } g } d } x
| | j d ƒ d k o× | d g k sÁ
| | j d ƒ } | | j d ƒ } | | j d ƒ } | rA| d? k r|t t j d | ƒ ‚ q|n;| d@ k rf| d k rw| j rwt t j d) ƒ ‚ q|| d k r¡| j r¡t t j d* ƒ ‚ q|| dA k rØ| j rØt t j d+ | | j f ƒ ‚ q|| d k r| j rt t j d, ƒ ‚ q|| d! k r,| j r,t t j d- ƒ ‚ q|| dB k r|| j
r|t t j d. | | j
f ƒ ‚ q|n t t j d/ | ƒ ‚ t
| ƒ d k r¢| t
| ƒ d0 n d1 } | d1 k r<| r| r| d k rât t j d2 ƒ ‚ q9t t j d3 | | f ƒ ‚ q´
d | k r,t t j d4 | | f ƒ ‚ q´
| j d ƒ nx| d k rÕ| d k r…| dC k ryt t j d7 | ƒ ‚ n | | _ q´
| rÅ| d k r d8 }
n d9 | | f }
t t j |
ƒ ‚ q´
| j | ƒ nß| d k rs| dD k rú| | | ƒ ‚ n | d0 } q² W| j$ ƒ d S(L Ns
empty rulei RR R[ t ruleRY RZ R5 t addressR R R R) R' R( s to-ports to-addrR& R- R. R0 R8 s bad attribute '%s'RP RQ t services
icmp-blocks icmp-typeR* s forward-ports source-portRS RT t acceptt dropt rejectt markR/ t nott NOTs more than one 'source' elements# more than one 'destination' elementsF more than one element. There cannot be both '%s' and '%s' in one rule.s more than one 'log' elements more than one 'audit' elementsO more than one 'action' element. There cannot be both '%s' and '%s' in one rule.s unknown element %si R s0 'family' outside of rule. Use 'rule family=...'.s: '%s' outside of any element. Use 'rule %s= ...'.s, '%s' outside of rule. Use 'rule ... %s ...'.R2 R3 sH 'family' attribute cannot have '%s' value. Use 'ipv4' or 'ipv6' instead.sd wrong 'protocol' usage. Use either 'rule protocol value=...' or 'rule [forward-]port protocol=...'.sD attribute '%s' outside of any element. Use 'rule %s= ...'.s invalid 'protocol' elements invalid 'service' elements invalid 'icmp-block' elements invalid 'icmp-type' elements invalid 'limit' element( s familyRc s macs ipsets inverts values ports protocols to-ports to-addrs names prefixs levels types set( Rb s sources destinations protocolRd s ports
icmp-blocks icmp-types
masquerades forward-ports source-ports logs auditRe Rf Rg s marks limitRi Rj s EOL( s protocolRd s ports
icmp-blocks icmp-types
masquerades forward-ports source-port( Re Rf Rg s mark( s ipv4s ipv6( Rc s macs ipsets invert( Ri Rj ( Rc s invert( Ri Rj ( s ports protocol( s ports protocols to-ports to-addr( s ports protocol( s prefixs level(% R R R R R5 RP RQ RR RS RT RU Ra t getR= R] t TrueR R% t popt clearR R R R R R R R R R
R R R R
R R R7 ( R RW R^ t attrst in_elementst indexRR RY RZ t
in_elementt err_msg( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyRV . st + "%,
?
$
$
<
$
0
$
c C s¬ | j d k r6 | j d k r6 t t j | j ƒ ‚ n | j d k r± | j d k rf | j j d k su | j d k r‡ t t j ƒ ‚ n t | j
ƒ t k r± t t j ƒ ‚ q± n | j
d k r| j d k rä t t j
d ƒ ‚ n | j d k r| j d k rt t j
d ƒ ‚ qn t | j
ƒ t t t g k r}| j d k r}| j d k r}| j d k r}t t j
d ƒ ‚ q}n | j d k r| j j d k rL| j d k r¿t t j ƒ ‚ n | j j d k ræt t j
d ƒ ‚ n | j j d k r
t t j
d ƒ ‚ n t j | j | j j ƒ st t j t | j j ƒ ƒ ‚ qq| j j d k r¾| j j d k r…t t j
d ƒ ‚ n t j | j j ƒ st t j t | j j ƒ ƒ ‚ qq| j j d k rt | j j ƒ st t j t | j j ƒ ƒ ‚ qqt t j
d ƒ ‚ n | j d k r| j d k rKt t j ƒ ‚ n | j j d k syt j | j | j j ƒ rt t j t | j j ƒ ƒ ‚ qn t | j
ƒ t k r | j
j d k sÜt | j
j ƒ d
k r>t t j t | j
j ƒ ƒ ‚ q>n>t | j
ƒ t k rut j! | j
j" ƒ sEt t j# | j
j" ƒ ‚ n | j
j$ d k r>t t j% | j
j$ ƒ ‚ q>nÉt | j
ƒ t& k r½t j' | j
j( ƒ s>t t j% | j
j( ƒ ‚ q>nt | j
ƒ t k r/| j d k röt t j
d ƒ ‚ n | j d k r>| j j d k r>t t j
d ƒ ‚ q>nt | j
ƒ t k r°| j
j d k snt | j
j ƒ d
k rt t j) t | j
j ƒ ƒ ‚ n | j r>t t j
d ƒ ‚ q>nŽt | j
ƒ t* k r| j
j d k sït | j
j ƒ d
k r>t t j) t | j
j ƒ ƒ ‚ q>n+t | j
ƒ t k r˜t j! | j
j" ƒ sXt t j# | j
j" ƒ ‚ n | j
j$ d k r…t t j% | j
j$ ƒ ‚ n | j
j+ d k rÄ| j
j, d k rÄt t j# | j
j+ ƒ ‚ n | j
j+ d k rt j! | j
j+ ƒ rt t j# | j
j+ ƒ ‚ n | j
j, d k rPt j- | j | j
j, ƒ rPt t j | j
j, ƒ ‚ n | j d k rqt t j ƒ ‚ n | j d k r>t t j
d ƒ ‚ q>n¦ t | j
ƒ t. k r
t j! | j
j" ƒ sÝt t j# | j
j" ƒ ‚ n | j
j$ d k r>t t j% | j
j$ ƒ ‚ q>n1 | j
d k r>t t j
d t | j
ƒ ƒ ‚ n | j d k r®| j j/ r†| j j/ d! k r†t t j0 | j j/ ƒ ‚ n | j j1 d k r®| j j1 j2 ƒ q®n | j d k r! t | j ƒ t3 t4 t5 g k rùt t j6 t | j ƒ ƒ ‚ n | j j1 d k r! | j j1 j2 ƒ q! n | j d k r¨ t | j ƒ t4 k r[ | j j2 | j ƒ n% t | j ƒ t7 k r€ | j j2 ƒ n | j j1 d k r¨ | j j1 j2 ƒ q¨ n d S(" NR2 R3 s no element, no actions% no element, no source, no destinations no action, no log, no audits address and macs address and ipsets
mac and ipsets invalid sourcei t tcpt udpt sctpt dccps masquerade and actions masquerade and mac sources icmp-block and actionR s forward-port and actions Unknown element %st emergt alertt critt errort warningt noticet infot debug( s ipv4s ipv6( Rt Ru Rv Rw ( Rt Ru Rv Rw ( Rt Ru Rv Rw ( Rx Ry Rz s errorR| R} s infos debug(8 R5 R R R t INVALID_FAMILYRP R RQ t MISSING_FAMILYR0 RR R RU R R R RS RT R R R t
check_addresst INVALID_ADDRRO t check_mact INVALID_MACR t
INVALID_IPSETR R& R= t INVALID_SERVICER t
check_portR' t INVALID_PORTR( t INVALID_PROTOCOLR t
checkProtocolR) t INVALID_ICMPTYPER R+ R, t check_single_addressR R. t INVALID_LOG_LEVELR/ R7 R R
R t INVALID_AUDIT_TYPER ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR7 sä ! $$$ $*$ !*! *$$ c C së d } | j r# | d | j 7} n | j r@ | d | j 7} n | j r] | d | j 7} n | j rz | d | j 7} n | j r— | d | j 7} n | j r´ | d | j 7} n | j rÑ | d | j 7} n t j rç t j | ƒ S| S( NRb s family="%s"s %s(
R5 RP RQ RR RS RT RU R t PY2t u2b( R R! ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" ¨ s N( R# R$ R R Ra RV R7 R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR s
Û ŸN( t __all__t firewallR t firewall.core.ipsetR t firewall.core.baseR R t firewall.errorsR t objectR R R R R R R R R R R
R R R
R R R R ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt s8
1