File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/pf.cpython-310.pyc
Back
o ;j�% � @ s| d Z ddlZddlZddlZddlmZmZ e�e �Z dd� Z dd� Z dd � Z d d � Zddd�Zdd� Zdd� Zdd� ZdS )z{ Control the OpenBSD packet filter (PF). :codeauthor: Jasper Lievisse Adriaanse <j@jasper.la> .. versionadded:: 2019.2.0 � N)�CommandExecutionError�SaltInvocationErrorc C s8 ddg} t d | v rtjj�d�rdS dd�t d �fS )z� Only works on OpenBSD and FreeBSD for now; other systems with pf (macOS, FreeBSD, etc) need to be tested before enabling them. �FreeBSDZOpenBSD�os�pfctlTFzlThe pf execution module cannot be loaded: either the OS ({}) is not tested or the pfctl binary was not found)� __grains__�salt�utils�path�which�format)Z tested_oses� r �C/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/pf.py� __virtual__ s �r c C �b i } t d dddd�}|d dkrdd d �} | S |d d kr%d dd �} | S td|d gdd�d��)zk Enable the Packet Filter. CLI Example: .. code-block:: bash salt '*' pf.enable � cmd.run_allzpfctl -e�traceF�Zoutput_loglevel� python_shell�retcoder z pf enabledT��comment�changes�stderrzpfctl: pf already enabledzpf already enabledzCould not enable pf��errorsr ��info��__salt__r ��ret�resultr r r �enable" � � � ��r# c C r )zm Disable the Packet Filter. CLI Example: .. code-block:: bash salt '*' pf.disable r zpfctl -dr Fr r r z pf disabledTr r zpfctl: pf not enabledzpf already disabledzCould not disable pfr r r r r r r �disableA r$ r% c C s� ddi}t d }|dkrg d�}ng d�}| |vr td| � ���td d | � �d d d �}|d dkr>td|d gd d�d��|S )a^ Set the debug level which limits the severity of log messages printed by ``pf(4)``. level: Log level. Should be one of the following: emerg, alert, crit, err, warning, notice, info or debug (OpenBSD); or none, urgent, misc, loud (FreeBSD). CLI Example: .. code-block:: bash salt '*' pf.loglevel emerg r Tr r )�noneZurgentZmiscZloud)ZemergZalertZcrit�err�warningZnoticer �debugzUnknown loglevel: r z pfctl -x r Fr r r z$Problem encountered setting loglevelr r r )r r r r )�levelr! ZmyosZ all_levelsr" r r r �loglevel` s � �r+ � /etc/pf.confFc C sh ddi}dd| g}|rd|d< |� d� td |ddd �}|d d kr2td | � �|d gdd�d��|S )aA Load a ruleset from the specific file, overwriting the currently loaded ruleset. file: Full path to the file containing the ruleset. noop: Don't actually load the rules, just parse them. CLI Example: .. code-block:: bash salt '*' pf.load /etc/pf.conf.d/lockdown.conf r Tr z-fFz-nr r r r r z!Problem loading the ruleset from r r r )�appendr r )�fileZnoopr! �cmdr" r r r �load� s �r0 c C s� i }g d�}ddg}||7 }| � � |v r| � � } | |vr#td| � ���d| � �}td |ddd �}|d d krPt�d |d �rDd|d< nd|d< |d |d< |S td| � �|d gdd�d��)a� Flush the specified packet filter parameters. modifier: Should be one of the following: - all - info - osfp - rules - sources - states - tables Please refer to the OpenBSD `pfctl(8) <https://man.openbsd.org/pfctl#T>`_ documentation for a detailed explanation of each command. CLI Example: .. code-block:: bash salt '*' pf.flush states )�rules�statesr Zosfp�allZsources�tablesZSources�Tables�Unknown modifier: z pfctl -v -F r r Fr r r z^0.*r r Tr zCould not flush r r )�titler r �re�matchr )�modifierr! � all_modifiers�capital_modifiersr/ r" r r r �flush� s( ��r= c K sH i }g d�}| |vrt d| � ���dd|d| g}| dv r%||�dg �7 }n| dkr:|�d d �}|s5t d ��|�|� td |d dd�}|d dkr}| dkrWd|d �� i}|S | dkrd|d dd�}|S t�d|d �rqd|d< nd|d< |d |d< |S | dkr�t�d|d �r�|d dd�}|S td | � d |� �|d gdd �d ��) a� Apply a command on the specified table. table: Name of the table. command: Command to apply to the table. Supported commands are: - add - delete - expire - flush - kill - replace - show - test - zero Please refer to the OpenBSD `pfctl(8) <https://man.openbsd.org/pfctl#T>`_ documentation for a detailed explanation of each command. CLI Example: .. code-block:: bash salt '*' pf.table expire table=spam_hosts number=300 salt '*' pf.table add table=local_hosts addresses='["127.0.0.1", "::1"]' ) �killr= �add�delete�expire�replace�show�testZzerozUnknown table command: r z-tz-T)r? r@ rB rD � addressesrA �numberNz.need expire_number argument for expire commandr r F)Z output_levelr r r rC r �stdoutrD r T)r �matchesz^(0.*|no changes)r z^\d+/\d+ addresses match.$zCould not apply z on table r r )r �getr- r �splitr8 r9 r )Zcommand�table�kwargsr! Z all_commandsr/ rF r" r r r rK � sD �� ����rK c C s� ddi}dg}g d�}||7 }| � � |v r| � � } | |vr$td| � ���d| � �}td |ddd �}|d d krC|d �d �|d< |S td| � �|d gdd�d��)a# Show filter parameters. modifier: Modifier to apply for filtering. Only a useful subset of what pfctl supports can be used with Salt. - rules - states - tables CLI Example: .. code-block:: bash salt '*' pf.show rules r Fr5 )r1 r2 r4 r6 z pfctl -s r r r r r rG � r zCould not show r r r )r7 r r rJ r )r: r! r< r; r/ r" r r r rC E s" ��rC )r, F)�__doc__�loggingr8 Zsalt.utils.pathr Zsalt.exceptionsr r � getLogger�__name__�logr r# r% r+ r0 r= rK rC r r r r �<module> s 0$9 X
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings