File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/firewalld.cpython-310.pyc
Back
o ;j�P � @ s� d Z ddlZddlZddlZddlmZ e�e�Z dd� Z dd� Z dd � Z d d � Z d d � Zdd� Zdd� Zdhdd�Zdhdd�Zdhdd�Zdhdd�Zdhdd �Zdhd d �Zd d � Zdhd!d"�Zdhd#d$�Zdid%d&�Zdid'd(�Zdid)d*�Z did+d,�Z d-d.� Z d/d0� Z d1d2� Z d3d4� Z!d5d6� Z"d7d8� Z#did9d:�Z$did;d<�Z%did=d>�Z&djd@dA�Z'dhdBdC�Z(dhdDdE�Z) ?dkdHdI�Z*dldJdK�Z+dhdLdM�Z,dhdNdO�Z-dhdPdQ�Z.dhdRdS�Z/dTdU� Z0dhdVdW�Z1dhdXdY�Z2dhdZd[�Z3dhd\d]�Z4dhd^d_�Z5dhd`da�Z6dhdbdc�Z7dhddde�Z8dhdfdg�Z9dS )mz4 Support for firewalld. .. versionadded:: 2015.2.0 � N)�CommandExecutionErrorc C s t jj�d�r dS dS )z- Check to see if firewall-cmd exists � firewall-cmdT)Fz\The firewalld execution module cannot be loaded: the firewall-cmd binary is not in the path.)�salt�utils�path�which� r r �J/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/firewalld.py� __virtual__ s r c C s^ d� tjj�d�| �}td |�}|d dkr+|d s |d }n|d }td|� ���|d S ) z* Return the firewall-cmd location z{} {}r z cmd.run_all�retcoder �stderr�stdoutzfirewall-cmd failed: )�formatr r r r Z__salt__r )�cmdZ firewall_cmd�out�msgr r r �__firewall_cmd s r c C s d|� d|� d| � d�}t |�S )z! Perform zone management z--�-�=� --permanent�r )�nameZ_type�actionr r r r �__mgmt. s r c C s� i }d}t | ��� D ]L}|�� rVt�d|tj�r |�� }q |�d�r.|| | �|�� � q |� dd�\}}|�� }|� |d�rM|| � ||�� gi� q ||�� gi||< q |S )z1 Return zone information in a dictionary � z ^[a-z0-9]� �:� N) r � splitlines�strip�re�match�I�rstrip� startswith�append�split�get�update)r Z_zoneZid_�iZ zone_name�valr r r � __parse_zone8 s �r+ c C � t d�S )zz Return version from firewall-cmd CLI Example: .. code-block:: bash salt '*' firewalld.version z --versionr r r r r �versionS � r- c C r, )a Reload the firewall rules, which makes the permanent configuration the new runtime configuration without losing state information. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.reload_rules �--reloadr r r r r � reload_rules` s r0 c C r, )z� Print default zone for connections and interfaces CLI Example: .. code-block:: bash salt '*' firewalld.default_zone z--get-default-zoner r r r r � default_zonep r. r1 Tc C s d}| r|d7 }t |�S )z� List everything added for or enabled in all zones CLI Example: .. code-block:: bash salt '*' firewalld.list_zones z--list-all-zonesr �r+ �� permanentr r r r � list_zones} s r5 c C � d}| r|d7 }t |��� S )zr Print predefined zones CLI Example: .. code-block:: bash salt '*' firewalld.get_zones z --get-zonesr �r r& r3 r r r � get_zones� � r8 c C r6 )zx Print predefined services CLI Example: .. code-block:: bash salt '*' firewalld.get_services z--get-servicesr r7 r3 r r r � get_services� r9 r: c C r6 )z{ Print predefined icmptypes CLI Example: .. code-block:: bash salt '*' firewalld.get_icmp_types z--get-icmptypesr r7 r3 r r r �get_icmp_types� r9 r; c C �$ t | dd�}|r|dkrtd�S |S )a3 Add a new zone CLI Example: .. code-block:: bash salt '*' firewalld.new_zone my_zone By default firewalld will be reloaded. However, to avoid reloading you need to specify the restart as False .. code-block:: bash salt '*' firewalld.new_zone my_zone False �zone�new�successr/ �r r �r= �restartr r r r �new_zone� � rC c C r< )aB Delete an existing zone CLI Example: .. code-block:: bash salt '*' firewalld.delete_zone my_zone By default firewalld will be reloaded. However, to avoid reloading you need to specify the restart as False .. code-block:: bash salt '*' firewalld.delete_zone my_zone False r= �deleter? r/ r@ rA r r r � delete_zone� rD rF c C s t d| � ��S )zz Set default zone CLI Example: .. code-block:: bash salt '*' firewalld.set_default_zone damian z--set-default-zone=r )r= r r r �set_default_zone� s rG c C r< )aB Add a new service CLI Example: .. code-block:: bash salt '*' firewalld.new_service my_service By default firewalld will be reloaded. However, to avoid reloading you need to specify the restart as False .. code-block:: bash salt '*' firewalld.new_service my_service False �servicer> r? r/ r@ �r rB r r r r � new_service rD rJ c C r< )aQ Delete an existing service CLI Example: .. code-block:: bash salt '*' firewalld.delete_service my_service By default firewalld will be reloaded. However, to avoid reloading you need to specify the restart as False .. code-block:: bash salt '*' firewalld.delete_service my_service False rH rE r? r/ r@ rI r r r �delete_service# rD rK c C �* | r d| � d�}nd}|r|d7 }t |�S )z� List everything added for or enabled in a zone CLI Example: .. code-block:: bash salt '*' firewalld.list_all List a specific zone .. code-block:: bash salt '*' firewalld.list_all my_zone �--zone=z --list-allz --list-allr r2 �r= r4 r r r r �list_all> s rO c C s. | r d| � d�}nd}|r|d7 }t |��� S )a0 List services added for zone as a space separated list. If zone is omitted, default zone will be used. CLI Example: .. code-block:: bash salt '*' firewalld.list_services List a specific zone .. code-block:: bash salt '*' firewalld.list_services my_zone rM z --list-servicesz--list-servicesr r7 rN r r r � list_servicesY s rP c C �4 |r d|� d| � �}nd| � �}|r|d7 }t |�S )a# Add a service for zone. If zone is omitted, default zone will be used. CLI Example: .. code-block:: bash salt '*' firewalld.add_service ssh To assign a service to a specific zone: .. code-block:: bash salt '*' firewalld.add_service ssh my_zone rM z --add-service=z--add-service=r r �rH r= r4 r r r r � add_serviceu s rS c C rQ )a[ Remove a service from zone. This option can be specified multiple times. If zone is omitted, default zone will be used. CLI Example: .. code-block:: bash salt '*' firewalld.remove_service ssh To remove a service from a specific zone .. code-block:: bash salt '*' firewalld.remove_service ssh dmz rM z --remove-service=z--remove-service=r r rR r r r �remove_service� s rT c C �. | t dd�vr td��d| � d|� �}t|�S )z� Add a new port to the specified service. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.add_service_port zone 80 T�r4 �The service does not exist.�--permanent --service=� --add-port=�r: r r �rH �portr r r r �add_service_port� � r] c C rU )z� Remove a port from the specified service. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.remove_service_port zone 80 TrV rW rX � --remove-port=rZ r[ r r r �remove_service_port� r^ r` c C � d| � d�}t |��� S )z� List ports of a service. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.get_service_ports zone rX z --get-portsr7 �rH r r r r �get_service_ports� � rc c C � d| � d|� �}t |�S )z� Add a new protocol to the specified service. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.add_service_protocol zone ssh rX z --add-protocol=r �rH �protocolr r r r �add_service_protocol� � rh c C re )z� Remove a protocol from the specified service. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.remove_service_protocol zone ssh rX z --remove-protocol=r rf r r r �remove_service_protocol� ri rj c C ra )z� List protocols of a service. .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.get_service_protocols zone rX z --get-protocolsr7 rb r r r �get_service_protocols rd rk c s( t | |�� d� fdd�� D �v rdS dS )z� Show if masquerading is enabled on a zone. If zone is omitted, default zone will be used. CLI Example: .. code-block:: bash salt '*' firewalld.get_masquerade zone �noc s g | ] }� | d d �qS )Z masquerader r )�.0r) �Z zone_infor r � <listcomp> s z"get_masquerade.<locals>.<listcomp>FT)rO )r= r4 r rn r �get_masquerade s rp c C rL )aF Enable masquerade on a zone. If zone is omitted, default zone will be used. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.add_masquerade To enable masquerade on a specific zone .. code-block:: bash salt '*' firewalld.add_masquerade dmz rM z --add-masqueradez--add-masquerader r rN r r r �add_masquerade% � rq c C rL )aL Remove masquerade on a zone. If zone is omitted, default zone will be used. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.remove_masquerade To remove masquerade on a specific zone .. code-block:: bash salt '*' firewalld.remove_masquerade dmz rM z --remove-masqueradez--remove-masquerader r rN r r r �remove_masqueradeC rr rs Fc C s8 |r t | �s t| � d| � d|� �}|r|d7 }t|�S )a Allow specific ports in a zone. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.add_port internal 443/tcp force_masquerade when a zone is created ensure masquerade is also enabled on that zone. rM rY r )rp rq r )r= r\ r4 �force_masquerader r r r �add_porta s ru c C s$ d| � d|� �}|r|d7 }t |�S )z� Remove a specific port from a zone. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.remove_port internal 443/tcp rM r_ r r )r= r\ r4 r r r r � remove_port| s rv c C �$ d| � d�}|r |d7 }t |��� S )z� List all ports in a zone. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.list_ports rM z --list-portsr r7 rN r r r � list_ports� � rx �tcpr c C s: |r t | �s t| � d�| ||||�}|r|d7 }t|�S )a Add port forwarding. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.add_port_fwd public 80 443 tcp force_masquerade when a zone is created ensure masquerade is also enabled on that zone. zA--zone={} --add-forward-port=port={}:proto={}:toport={}:toaddr={}r )rp rq r r )r= �src�dest�proto�dstaddrr4 rt r r r r � add_port_fwd� s �r c C s& d� | ||||�}|r|d7 }t|�S )z� Remove Port Forwarding. .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.remove_port_fwd public 80 443 tcp zD--zone={} --remove-forward-port=port={}:proto={}:toport={}:toaddr={}r )r r )r= r{ r| r} r~ r4 r r r r �remove_port_fwd� s �r� c C s� g }d| � d�}|r|d7 }t |��� D ])}|�d�\}}}}|�|�d�d |�d�d |�d�d |�d�d d�� q|S )z� List port forwarding .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.list_port_fwd public rM z --list-forward-portsr r r r )z Source port�ProtocolzDestination portzDestination address)r r r& r% ) r= r4 �retr r) r{ r} r| �addrr r r � list_port_fwd� s �� r� c C sZ |t |�vr t�d� dS |t| |�v rt�d� dS d| � d|� �}|r)|d7 }t|�S )z� Block a specific ICMP type on a zone .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.block_icmp zone echo-reply �Invalid ICMP typeFzICMP block already existsr? rM z --add-icmp-block=r �r; �log�error�list_icmp_block�infor �r= Zicmpr4 r r r r � block_icmp� � r� c C sZ |t |�vr t�d� dS |t| |�vrt�d� dS d| � d|� �}|r)|d7 }t|�S )z� Allow a specific ICMP type on a zone .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewalld.allow_icmp zone echo-reply r� Fz ICMP Type is already permittedr? rM z --remove-icmp-block=r r� r� r r r � allow_icmp r� r� c C rw )z� List ICMP blocks on a zone .. versionadded:: 2015.8.0 CLI Example: .. code-block:: bash salt '*' firewlld.list_icmp_block zone rM z --list-icmp-blocksr r7 rN r r r r� 3 ry r� c C r, )z� Make current runtime configuration permanent. .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt '*' firewalld.make_permanent z--runtime-to-permanentr r r r r �make_permanentG s r� c C rw )z� List interfaces bound to a zone .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt '*' firewalld.get_interfaces zone rM z --list-interfacesr r7 rN r r r �get_interfacesV ry r� c C �< |t | |�v r t�d� d| � d|� �}|r|d7 }t|�S )z� Bind an interface to a zone .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt '*' firewalld.add_interface zone eth0 z#Interface is already bound to zone.rM z --add-interface=r �r� r� r� r �r= Z interfacer4 r r r r � add_interfacej � r� c C �< |t | |�vr t�d� d| � d|� �}|r|d7 }t|�S )z� Remove an interface bound to a zone .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt '*' firewalld.remove_interface zone eth0 z Interface is not bound to zone.rM z --remove-interface=r r� r� r r r �remove_interface� r� r� c C rw )z� List sources bound to a zone .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt '*' firewalld.get_sources zone rM z --list-sourcesr r7 rN r r r � get_sources� ry r� c C r� )z� Bind a source to a zone .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt '*' firewalld.add_source zone 192.168.1.0/24 z Source is already bound to zone.rM z --add-source=r �r� r� r� r �r= �sourcer4 r r r r � add_source� r� r� c C r� )z� Remove a source bound to a zone .. versionadded:: 2016.3.0 CLI Example: .. code-block:: bash salt '*' firewalld.remove_source zone 192.168.1.0/24 z Source is not bound to zone.rM z --remove-source=r r� r� r r r � remove_source� r� r� c C rw )z� List rich rules bound to a zone .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.get_rich_rules zone rM z --list-rich-rulesr )r r rN r r r �get_rich_rules� ry r� c C �& d| � d|� d�}|r|d7 }t |�S )z� Add a rich rule to a zone .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.add_rich_rule zone 'rule' rM z --add-rich-rule='�'r r �r= Zruler4 r r r r � add_rich_rule� � r� c C r� )z� Add a rich rule to a zone .. versionadded:: 2016.11.0 CLI Example: .. code-block:: bash salt '*' firewalld.remove_rich_rule zone 'rule' rM z --remove-rich-rule='r� r r r� r r r �remove_rich_rule r� r� )T)NT)TF)rz r TF)rz r T):�__doc__�loggingr Zsalt.utils.pathr Zsalt.exceptionsr � getLogger�__name__r� r r r r+ r- r0 r1 r5 r8 r: r; rC rF rG rJ rK rO rP rS rT r] r` rc rh rj rk rp rq rs ru rv rx r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r �<module> sn � "
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings