�
�G�`c@s
dd
lj
Z
dd
lZdd
lZdd
lZddlmZ
ddlmZ
ddl	m
Z
mZmZ
ddl
mZmZmZ
ddlmZ
ddlmZ
ddlmZ
dd	lmZ
dd
lmZ
def
d��YZd
ef
d��YZd
S(i����N(
tconfig(
tLastUpdatedOrderedDict(t	splitArgstjoinArgst
u2b_if_py2(t	IO_ObjecttIO_Object_ContentHandlertIO_Object_XMLGenerator(
tlog(
t	ipXtables(
tebtables(
terrors(
t
FirewallErrortdirect_ContentHandlerc
Bs#eZ
d�Zd
�Zd�ZRS(cCstj
||
�
t|_dS(
N(Rt__init__tFalsetdirect(tselftitem((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR(s

cCs�
tj
||
|�
|jj|
|�
|
d
kr\|jrPttjd��
nt|_n�
|
dkr�|js�t	j
d�

dS|d}|d}|d}|jjt|�
t|�
t|�
�
n+
|
dkr�
|js�t	j
d�

dS|d}|dkr 
ttj
d|��
n|d}|d}yt|d
�
}Wn'tk
rq



t	j
d|d
�

dSXt|�
t|�
t|�
|g|_nZ|
dkr�
|js�
t	j
d�

dS|d}t|�
g
|_nt	j
d|
�

dSdS(NRsMore than one direct tag.tchains$Parse Error: chain outside of directtipvttabletrules#Parse Error: rule outside of directtipv4tipv6tebs"'%s' not from {'ipv4'|'ipv6'|'eb'}tprioritys'Parse Error: %s is not a valid prioritytpassthroughs&Parse Error: command outside of directsUnknown XML element %s(RRR(RtstartElementRtparser_check_element_attrsRRRtPARSE_ERRORtTrueRterrort	add_chainRtINVALID_IPVtintt
ValueErrort_rulet_passthrough(RtnametattrsRRRR((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR,sT


	
	


	











	






	









	




	






cCs
tj
||
�
|
d
kr�|jrm|jjgt|j�
D]}t|�
^q>�

|jj|j�
n
t	j
d�

d|_nz|
dkr
|jr�|jjgt|j�
D]}t|�
^q��

|jj
|j�
nt	j
dd�

d|_ndS(NRs2Error: rule does not have any arguments, ignoring.Rs0Error: passthrough does not have any arguments, s	ignoring.(Rt
endElementt_elementR%tappendRRRtadd_ruleRR tNoneR&tadd_passthrough(RR't
x((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR)^s 

	
&




	
&
	

(t__name__t
__module__RRR)(((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR
's
		2tDirectcBs�
eZ
dZd
d(g
fddddddg
fg
fdddg
fg
ffZdZid)d6dd	d
gd
6dd	d
dgd6dg
d
6ZiZd�Zd�Z	d�Z
d�Zd�Zd�Z
d�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd �Zd!�Zd"�Zd#�Zd$�Zd%�Zd&�Z d'�Z!RS(*s Direct class tchainsttrulesitpassthroughss(a(sss)a(sssias)a(sas))RRRRRRRcCsDtt
|�j�
|
|_t�|_t�|_t�|_dS(
N(tsuperR2RtfilenameR
R3R5R6(RR8((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR�s


	


c
CsdS(
N((RtconfR((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
_check_config�s
c
CsN
g}
g}xO|jD]D}x;|j|D],}|j
tt|�
t|g
�
�
�

q*WqW|
j
|�

g}xe|jD]Z}xQ|j|D]B}|j
t|d
|d|d|d
t|d�
f�
�

q�Wq{W|
j
|�

g}xH|jD]=}x4|j|D]%}|j
t|t|�
f�
�

q

Wq�W|
j
|�

t|
�
S(Nii
i(R3R+ttupletlistR5R6(RtretR/tkeyRR((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
export_config�s$




.





%






'


cCs�|j�
|j
|
�

x�t|j�
D]�\}\}}|d
krjx"|
|D]}|j|�
qPWn|dkr�x"|
|D]}|j|�
q�Wn|dkr'x"|
|D]}|j|�
q�Wq'q'WdS(NR3R5R6(tcleanuptcheck_configt	enumeratetIMPORT_EXPORT_STRUCTURER!R,R.(RR9t
itelementtdummyR/((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
import_config�s




"








c


Cs+|jj
�
|jj
�
|jj
�
dS(
N(R3tclearR5R6(
R((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR@�s




c
Cs
d
GHx;|jD]0}
d|
d|
ddj
|j|
�
fGHqWdGHxe|jD]Z}
d|
d|
d|
dfGHx3|j|
D]$\}}d	|d
j
|�
fGHq�WqRWdGHxD|jD]9}
d|
GHx'|j|
D]}d
d
j
|�
GHq�Wq�WdS(NR3s  (%s, %s): %sii
t
,R5s  (%s, %s, %s):is    (%d, ('%s'))s','R6s  %s:s
    ('%s')(R3tjoinR5R6(RR>Rtargs((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytoutput�s








 


	

cCs>d
ddg}|
|kr:tt
jd|
|f��
ndS(NRRRs'%s' not in '%s'(RRR"(RRtipvs((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
_check_ipv�s


	
cCsf|j|
�

|
dkr(t
jj�ntjj�}||krbttjd||f��
ndS(NRRs'%s' not in '%s'(sipv4sipv6(RNR	tBUILT_IN_CHAINStkeysR
RRt
INVALID_TABLE(RRRttables((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt_check_ipv_table�s




	
cCs�|j|
|�
|
|f}||j
kr;g|j
|<n||j
|kre|j
|j|�

ntjd
|||
fd�

dS(Ns(Chain '%s' for table '%s' with ipv '%s' salready in list, ignoring(RSR3R+Rtwarning(RRRRR>((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR!�s





	
cCs�|j|
|�
|
|f}||j
kr{||j
|kr{|j
|j|�

t|j
|�
d
kr�|j
|=q�ntd|||
f�
�
dS(Nis4Chain '%s' with table '%s' with ipv '%s' not in list(RSR3tremovetlenR$(RRRRR>((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytremove_chain�s


"




cCs<|j|
|�
|
|f}||j
ko;||j
|kS(
N(RSR3(RRRRR>((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytquery_chain�s


cCsP|j|
|�
|
|f}||j
kr6|j
|Std
||
f�
�
dS(Ns&No chains for table '%s' with ipv '%s'(RSR3R$(RRRR>((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
get_chains�s




c


Cs|jS(
N(
R3(
R((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytget_all_chains
s
cCs�|j|
|�
|
||f}||j
krAt�|j
|<n|t|�
f}||j
|krz||j
||<n5tjd
dj|�
||fd|
|fd�

dS(Ns(Rule '%s' for table '%s' and chain '%s' s',swith ipv '%s' and priority %d salready in list, ignoring(RSR5R
R;RRTRJ(RRRRRRKR>tvalue((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR,
s






'
cCs�|j|
|�
|
||f}|t
|�
f}||jkr�||j|kr�|j||=t|j|�
d
kr�|j|=q�n0tddj|�
||fd|
|f�
�
dS(Nis(Rule '%s' for table '%s' and chain '%s' s',s)with ipv '%s' and priority %d not in list(RSR;R5RVR$RJ(RRRRRRKR>R[((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytremove_rule
s



"




cCs�|j|
|�
|
||f}||j
kr�x)|j
|j�D]}|j
||=qBWt|j
|�
d
kr�|j
|=q�ndS(Ni(RSR5RPRV(RRRRR>R[((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytremove_rules"
s






cCsQ|j|
|�
|
||f}|t
|�
f}||jkoP||j|kS(
N(RSR;R5(RRRRRRKR>R[((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
query_rule+
s



cCs[|j|
|�
|
||f}||j
kr9|j
|Std
||fd|
�
�
dS(Ns'No rules for table '%s' and chain '%s' s
with ipv '%s'(RSR5R$(RRRRR>((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt	get_rules1
s




c


Cs|jS(
N(
R5(
R((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt
get_all_rules:
s
cCs~|j|
�

|
|j
kr,g|j
|
<n||j
|
krV|j
|
j|�

n$tjd
dj|�
|
fd�

dS(NsPassthrough '%s' for ipv '%s's',salready in list, ignoring(RNR6R+RRTRJ(RRRK((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR.?
s





	
cCs�|j|
�

|
|j
krl||j
|
krl|j
|
j|�

t|j
|
�
d
kr�|j
|
=q�n#tddj|�
|
fd�
�
dS(NisPassthrough '%s' for ipv '%s's',snot in list(RNR6RURVR$RJ(RRRK((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytremove_passthroughI
s


"



cCs-|j|
�

|
|j
ko,||j
|
kS(
N(RNR6(RRRK((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytquery_passthroughS
s


cCs;|j|
�

|
|j
kr'|j
|
Std
|
�
�
dS(NsNo passthroughs for ipv '%s'(RNR6R$(RR((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytget_passthroughsW
s



c


Cs|jS(
N(
R6(
R((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytget_all_passthroughs^
s
c
	Cs�|j�
|j
jd
�
s8ttjd|j
��
nt|�
}
tj�}|j	|
�

t
|j
d��i}tjd�
}|j
|�

y|j|�

Wn2tjk
r�
}
ttjd|j���
n
XWdQXdS(Ns.xmls'%s' is missing .xml suffixtrbsNot a valid file: %s(R@R8tendswithRRtINVALID_NAMER
tsaxtmake_parsertsetContentHandlertopentInputSourceR-t
setByteStreamtparsetSAXParseExceptiontINVALID_TYPEtgetException(Rthandlertparsert
ftsourcetmsg((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytreadc
s 



	












	

c

Cs�tj
j|j�
reytj|jd
|j�
Wqetk
ra
}

td|j|
f�
�
qeXntj
jtj	�
s�tj
tj	d�
ntj|jdddd�
}t
|�
}|j�
|jdi�
|jd	�

xt|jD]i}|\}}xT|j|D]E}|jd
�

|jdi|d6|d
6|d6�
|jd	�

q
Wq�Wx�|jD]�}|\}}}x�|j|D]�\}}	t|	�
dkr�
q�
n|jd
�

|jdi|d6|d
6|d6d|d6�
|jtjjt|	�
�
�

|jd�

|jd	�

q�
Wqb
Wx�|jD]�}x�|j|D]{}	t|	�
dkrcqEn|jd
�

|jdi
|d6�
|jtjjt|	�
�
�

|jd�

|jd	�

qEWq1W|jd�

|jd	�

|j�
|j�
~dS(Ns%s.oldsBackup of '%s' failed: %si�
tmodetwttencodingsUTF-8Rs

s  RRRi
Rs%dRR(tostpathtexistsR8tshutiltcopy2t	ExceptiontIOErrorRt
ETC_FIREWALLDtmkdirtioRkRt
startDocumentRtignorableWhitespaceR3t
simpleElementR5RVRhtsaxutilstescapeRR)R6tendDocumenttclose(
RRvRtRrR>RRRRRK((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pytwriteu
sZ




 











































(R4R4R4N("R0R1t__doc__RCtDBUS_SIGNATURER-tPARSER_REQUIRED_ELEMENT_ATTRStPARSER_OPTIONAL_ELEMENT_ATTRSRR:R?RGR@RLRNRSR!RWRXRYRZR,R\R]R^R_R`R.RaRbRcRdRwR�(((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyR2usJ






																
							
	
				(txml.saxRhR{R�R~tfirewallRtfirewall.fw_typesR
tfirewall.functionsRRRtfirewall.core.io.io_objectRRRtfirewall.core.loggerRt
firewall.coreR	R
Rtfirewall.errorsRR
R2(((s;/usr/lib/python2.7/site-packages/firewall/core/io/direct.pyt<module>s









N