File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/__pycache__/win_firewall.cpython-310.pyc
Back
o ;j�R � @ s� d Z ddlZddlZddlZddlmZ dZdd� Zdd� Z d*d d �Z d*d d �Z d+dd�Z d,dd�Z d-dd�Zdd� Zd.d d �Zd.d d �Zd.d d!�Zd/d"d#�Zd.d$d%�Zd.d&d'�Zd.d(d)�ZdS )0z9 Module for configuring Windows Firewall using ``netsh`` � N)�CommandExecutionError�firewallc C s t jj�� sdS tS )z' Only works on Windows systems )Fz5Module win_firewall: module only available on Windows)�salt�utils�platformZ is_windows�__virtualname__� r r �M/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/win_firewall.py� __virtual__ s r c C s� i } d}g d�}t d |ddd�}|d dkr t|d ��|d �� D ]#}|s5t�d |�}|r4|�d �}q#|�d �rF|�� d d k| |< d}q#| S )a Get the status of all the firewall profiles Returns: dict: A dictionary of all profiles on the system Raises: CommandExecutionError: If the command fails CLI Example: .. code-block:: bash salt '*' firewall.get_config N)�netsh� advfirewall�show� allprofiles� cmd.run_allFT�Z python_shellZignore_retcode�retcoder �stdoutz(.*) Profile Settings:� �StateZON)�__salt__r � splitlines�re�search�group� startswith�split)Zprofiles�curr�cmd�ret�line�tmpr r r � get_config s" � �r! r c C �> ddd| ddg}t d |ddd �}|d d kr t|d ��dS ) a� Disable firewall profile Args: profile (:obj:`str`, optional): The name of the profile to disable. Valid options are: - allprofiles - domainprofile - privateprofile - publicprofile Default is ``allprofiles``. Returns: bool: ``True`` if successful Raises: CommandExecutionError: If the command fails CLI Example: .. code-block:: bash salt '*' firewall.disable r r �set�stateZoffr FTr r r r �r r ��profiler r r r r �disable@ s r( c C r" ) a .. versionadded:: 2015.5.0 Enable firewall profile Args: profile (:obj:`str`, optional): The name of the profile to enable. Default is ``allprofiles``. Valid options are: - allprofiles - domainprofile - privateprofile - publicprofile Returns: bool: ``True`` if successful Raises: CommandExecutionError: If the command fails CLI Example: .. code-block:: bash salt '*' firewall.enable r r r# r$ �onr FTr r r r r% r& r r r �enabled s r* �allc C sL dddddd| � �g}t d |dd d �}|d d kr t|d ��| |d iS )a� .. versionadded:: 2015.5.0 Display all matching rules as specified by name Args: name (:obj:`str`, optional): The full name of the rule. ``all`` will return all rules. Default is ``all``. Returns: dict: A dictionary of all rules or rules that match the name exactly Raises: CommandExecutionError: If the command fails CLI Example: .. code-block:: bash salt '*' firewall.get_rule 'MyAppPort' r r r r �rule�name=r FTr r r r r% )�namer r r r r �get_rule� s r/ �tcp�allow�in�anyc C s� dddddd| � �d|� �d|� �d |� �d |� �g }|d u s'd |vr/d |vr/|� d|� �� td |ddd�}|d dkrDt|d ��dS )a� .. versionadded:: 2015.5.0 Add a new inbound or outbound rule to the firewall policy Args: name (str): The name of the rule. Must be unique and cannot be "all". Required. localport (int): The port the rule applies to. Must be a number between 0 and 65535. Can be a range. Can specify multiple ports separated by commas. Required. protocol (:obj:`str`, optional): The protocol. Default is ``tcp``. Can be any of the following: - A number between 0 and 255 - icmpv4 - icmpv6 - tcp - udp - any action (:obj:`str`, optional): The action the rule performs. Default is ``allow``. Can be any of the following: - allow - block - bypass dir (:obj:`str`, optional): The direction. Can be ``in`` or ``out``. Default is ``in``. remoteip (:obj:`str`, optional): The remote IP. Default is ``any``. Can be any of the following: - any - localsubnet - dns - dhcp - wins - defaultgateway - Any valid IPv4 address (192.168.0.12) - Any valid IPv6 address (2002:9b3b:1a31:4:208:74ff:fe39:6c43) - Any valid subnet (192.168.1.0/24) - Any valid range of IP addresses (192.168.0.1-192.168.0.12) - A list of valid IP addresses Can be combinations of the above separated by commas. Returns: bool: ``True`` if successful Raises: CommandExecutionError: If the command fails CLI Example: .. code-block:: bash salt '*' firewall.add_rule 'test' '8080' 'tcp' salt '*' firewall.add_rule 'test' '1' 'icmpv4' salt '*' firewall.add_rule 'test_remote_ip' '8000' 'tcp' 'allow' 'in' '192.168.0.1' r r r �addr, r- � protocol=�dir=zaction=� remoteip=N�icmpv4�icmpv6� localport=r FTr r r r ��appendr r )r. � localport�protocol�action�dir�remoteipr r r r r �add_rule� s" F� rB c C s� g d�}| r|� d| � �� |r|� d|� �� |r"|� d|� �� |r,|� d|� �� |du s8d|vrId|vrI|rI|sA|� d � |� d |� �� td |d d d�}|d dkr^t|d ��d S )a� .. versionadded:: 2015.8.0 Delete an existing firewall rule identified by name and optionally by ports, protocols, direction, and remote IP. Args: name (str): The name of the rule to delete. If the name ``all`` is used, you must specify additional parameters. localport (:obj:`str`, optional): The port of the rule. If protocol is not specified, protocol will be set to ``tcp``. Default is ``None``. protocol (:obj:`str`, optional): The protocol of the rule. Default is ``tcp`` when ``localport`` is specified. Default is ``None``. dir (:obj:`str`, optional): The direction of the rule. Default is ``None``. remoteip (:obj:`str`, optional): The remote IP of the rule. Default is ``None``. Returns: bool: ``True`` if successful Raises: CommandExecutionError: If the command fails CLI Example: .. code-block:: bash # Delete incoming tcp port 8080 in the rule named 'test' salt '*' firewall.delete_rule 'test' '8080' 'tcp' 'in' # Delete the incoming tcp port 8000 from 192.168.0.1 in the rule named # 'test_remote_ip' salt '*' firewall.delete_rule 'test_remote_ip' '8000' 'tcp' 'in' '192.168.0.1' # Delete all rules for local port 80: salt '*' firewall.delete_rule all 80 tcp # Delete a rule called 'allow80': salt '*' firewall.delete_rule allow80 )r r r �deleter, r- r5 r6 r7 Nr8 r9 z protocol=tcpr: r FTr r r r r; )r. r= r> r@ rA r r r r r � delete_rule s$ 2 rD c C s$ zt | � W dS ty Y dS w )aj .. versionadded:: 2016.11.6 Checks if a firewall rule exists in the firewall policy Args: name (str): The name of the rule Returns: bool: ``True`` if exists, otherwise ``False``. CLI Example: .. code-block:: bash # Is there a rule named RemoteDesktop salt '*' firewall.rule_exists RemoteDesktop TF)r/ r )r. r r r � rule_existsN s �rE �localc C � t jjj| ||d�S )aE Get the firewall property from the specified profile in the specified store as returned by ``netsh advfirewall``. .. versionadded:: 2018.3.4 .. versionadded:: 2019.2.0 Args: profile (str): The firewall profile to query. Valid options are: - domain - public - private Required. section (str): The property to query within the selected profile. Valid options are: - firewallpolicy : inbound/outbound behavior - logging : firewall logging settings - settings : firewall properties - state : firewalls state (on | off) Required. store (:obj:`str`, optional): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local``. Returns: dict: A dictionary containing the properties for the specified profile Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect CLI Example: .. code-block:: bash # Get the inbound/outbound firewall settings for connections on the # local domain profile salt * win_firewall.get_settings domain firewallpolicy # Get the inbound/outbound firewall settings for connections on the # domain profile as defined by local group policy salt * win_firewall.get_settings domain firewallpolicy lgpo �r' �section�store)r r �win_lgpo_netsh� get_settingsrH r r r rL h s :�rL c C s t jjj| |d�S )a� Gets all the properties for the specified profile in the specified store .. versionadded:: 2018.3.4 .. versionadded:: 2019.2.0 Args: domain (str): The firewall profile to query. Valid options are: - domain - public - private Required. store (:obj:`str`, optional): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local``. Returns: dict: A dictionary containing the specified settings CLI Example: .. code-block:: bash # Get all firewall settings for connections on the domain profile salt * win_firewall.get_all_settings domain # Get all firewall settings for connections on the domain profile as # defined by local group policy salt * win_firewall.get_all_settings domain lgpo )r' rJ )r r rK �get_all_settings)�domainrJ r r r rM � s )rM c C s t jjj| d�S )a Gets all properties for all profiles in the specified store .. versionadded:: 2018.3.4 .. versionadded:: 2019.2.0 Args: store (:obj:`str`, optional): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local``. Returns: dict: A dictionary containing the specified settings for each profile CLI Example: .. code-block:: bash # Get all firewall settings for all profiles salt * firewall.get_all_settings # Get all firewall settings for all profiles as defined by local group # policy salt * firewall.get_all_settings lgpo �rJ )r r rK �get_all_profilesrO r r r rP � s !rP c C � t jjj| |||d�S )a� Set the firewall inbound/outbound settings for the specified profile and store .. versionadded:: 2018.3.4 .. versionadded:: 2019.2.0 Args: profile (str): The firewall profile to query. Valid options are: - domain - public - private inbound (:obj:`str`, optional): The inbound setting. If ``None`` is passed, the setting will remain unchanged. Valid values are: - blockinbound - blockinboundalways - allowinbound - notconfigured Default is ``None``. outbound (:obj:`str`, optional): The outbound setting. If ``None`` is passed, the setting will remain unchanged. Valid values are: - allowoutbound - blockoutbound - notconfigured Default is ``None``. store (:obj:`str`, optional): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local``. Returns: bool: ``True`` if successful Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect CLI Example: .. code-block:: bash # Set the inbound setting for the domain profile to block inbound # connections salt * firewall.set_firewall_settings domain='domain' inbound='blockinbound' # Set the outbound setting for the domain profile to allow outbound # connections salt * firewall.set_firewall_settings domain='domain' outbound='allowoutbound' # Set inbound/outbound settings for the domain profile in the group # policy to block inbound and allow outbound salt * firewall.set_firewall_settings domain='domain' inbound='blockinbound' outbound='allowoutbound' store='lgpo' �r' ZinboundZoutboundrJ )r r rK �set_firewall_settingsrR r r r rS � s F�rS c C rQ )aS Configure logging settings for the Windows firewall. .. versionadded:: 2018.3.4 .. versionadded:: 2019.2.0 Args: profile (str): The firewall profile to configure. Valid options are: - domain - public - private setting (str): The logging setting to configure. Valid options are: - allowedconnections - droppedconnections - filename - maxfilesize value (str): The value to apply to the setting. Valid values are dependent upon the setting being configured. Valid options are: allowedconnections: - enable - disable - notconfigured droppedconnections: - enable - disable - notconfigured filename: - Full path and name of the firewall log file - notconfigured maxfilesize: - 1 - 32767 - notconfigured .. note:: ``notconfigured`` can only be used when using the lgpo store store (:obj:`str`, optional): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local``. Returns: bool: ``True`` if successful Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect CLI Example: .. code-block:: bash # Log allowed connections and set that in local group policy salt * firewall.set_logging_settings domain allowedconnections enable lgpo # Don't log dropped connections salt * firewall.set_logging_settings profile=private setting=droppedconnections value=disable # Set the location of the log file salt * firewall.set_logging_settings domain filename C:\windows\logs\firewall.log # You can also use environment variables salt * firewall.set_logging_settings domain filename %systemroot%\system32\LogFiles\Firewall\pfirewall.log # Set the max file size of the log to 2048 Kb salt * firewall.set_logging_settings domain maxfilesize 2048 �r' Zsetting�valuerJ )r r rK �set_logging_settingsrT r r r rV B s X�rV c C rQ )a� Configure firewall settings. .. versionadded:: 2018.3.4 .. versionadded:: 2019.2.0 Args: profile (str): The firewall profile to configure. Valid options are: - domain - public - private setting (str): The firewall setting to configure. Valid options are: - localfirewallrules - localconsecrules - inboundusernotification - remotemanagement - unicastresponsetomulticast value (str): The value to apply to the setting. Valid options are - enable - disable - notconfigured .. note:: ``notconfigured`` can only be used when using the lgpo store store (:obj:`str`, optional): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local``. Returns: bool: ``True`` if successful Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect CLI Example: .. code-block:: bash # Merge local rules with those distributed through group policy salt * firewall.set_settings domain localfirewallrules enable # Allow remote management of Windows Firewall salt * firewall.set_settings domain remotemanagement enable rT )r r rK � set_settingsrT r r r rW � s =�rW c C rG )a� Configure the firewall state. .. versionadded:: 2018.3.4 .. versionadded:: 2019.2.0 Args: profile (str): The firewall profile to configure. Valid options are: - domain - public - private state (str): The firewall state. Valid options are: - on - off - notconfigured .. note:: ``notconfigured`` can only be used when using the lgpo store store (:obj:`str`, optional): The store to use. This is either the local firewall policy or the policy defined by local group policy. Valid options are: - lgpo - local Default is ``local``. Returns: bool: ``True`` if successful Raises: CommandExecutionError: If an error occurs ValueError: If the parameters are incorrect CLI Example: .. code-block:: bash # Turn the firewall off when the domain profile is active salt * firewall.set_state domain off # Turn the firewall on when the public profile is active and set that in # the local group policy salt * firewall.set_state public on lgpo �r' r$ rJ )r r rK � set_staterX r r r rY � s 5�rY )r )r+ )r0 r1 r2 r3 )NNNNN)rF )NNrF )�__doc__r Zsalt.utils.platformr Zsalt.utils.win_lgpo_netshZsalt.exceptionsr r r r! r( r* r/ rB rD rE rL rM rP rS rV rW rY r r r r �<module> s* ' $ % \I ? , $ K ]B
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings