Current File : //lib/python2.7/site-packages/fail2ban/server/ipdns.pyc
�
��&dc @ s� d Z d Z d Z d d l Z d d l Z d d l Z d d l m Z d d l m Z e e
� Z d � Z d
d � Z
d f d
� � YZ d e f d � � YZ e d d � e _ d S( sJ Fail2Ban Developers, Alexander Koeppe, Serg G. Brester, Yaroslav Halchenkos+ Copyright (c) 2004-2016 Fail2ban Developerst GPLi����Ni ( t Utilsi ( t getLoggerc C s t | t � r | St | � S( s8 A little helper to guarantee ip being an IPAddr instance( t
isinstancet IPAddr( t ip( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt asip' s t c C s� y� | p t j � } d � t j | d d t j d t j � D� } | r� | d } d } x0 | D]( } | j | � ry | S| s` | } q` q` W| SWn t j k
r� n Xt j | � S( s� Get fully-qualified hostname of given host, thereby resolve of an external
IPs and name will be preferred before the local domain (or a loopback), see gh-2438
c s s# | ] } | d r | d Vq d S( i N( ( t .0t ai( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pys <genexpr>4 s i t .N( t sockett gethostnamet getaddrinfot Nonet
SOCK_DGRAMt AI_CANONNAMEt
startswitht errort getfqdn( t namet namest preft firstR ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyR - s "
t DNSUtilsc B s� e Z e j d d d d � Z e j d d d d
� Z e d � � Z e d � � Z e d � � Z e e
d � � Z e d � � Z e d
� � Z
e d � � Z RS( t maxCounti� t maxTimei i< c C sH t j j | � } | d k r" | St � } d } x� t j t j f t j t j
f f D]� \ } } y� x� t j | d | d t j � D]e } t
| � d k s� t
| d � r� q� n t t | d d � | � } | j r� | j | � q� q� WWqV t k
r } | } qV XqV W| r1| r1t j d | | � n t j j | | � | S( s_ Convert a DNS into an IP address using the Python socket module.
Thanks to Kevin Drapel.
i i s4 Unable to find a corresponding IP address for %s: %sN( R t CACHE_nameToIpt getR t setR t AF_INETR t FAM_IPv4t AF_INET6t FAM_IPv6R
t IPPROTO_TCPt lent strt isValidt addt Exceptiont logSyst warning( t dnst ipst saveerrt famt ipfamt resultR t e( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt dnsToIpS s& 1%#
c C s� t j j | d � } | d k r% | Sy t j | � d } Wn/ t j k
rm } t j d | | � d } n Xt j j | | � | S( Ni s' Unable to find a name for the IP %s: %s( ( (
R t CACHE_ipToNameR R t
gethostbyaddrR R( t debugR R ( R t vR0 ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt ipToNameq s
c C s� t � } t j | � } | d k rL t | � } | j rL | j | � qL n | d k r� | r� t j | � } | j | � | r� | d k r� t j
d | | � q� n | S( s/ Return the IP of DNS found in a given text.
t yest warns' Determined IP using DNS Lookup: %s = %sN( s yess warn( R R t searchIPR R% R& R R1 t updateR( R) ( t textt useDnst ipListt plainIPR ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt textToIp� s
c C s� d d | f } t j j | � } | d k r� d } xc | rK t t j f n t j t f D]: } y | � } PWqX t k
r� } t j d | � qX XqX Wn t j j
| | � | S( s; Get short hostname or fully-qualified hostname of host selft selft hostnameR s# Retrieving own hostnames failed: %sN( R R2 R R R R R R' R( R) R ( t fqdnt keyR RA R0 ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt getHostname� s ( c C sr d } t j j | � } | d k r[ t d t j t � t j t � g � t d g � } n t j j | | � | S( s Get own host names of selfR@ R* t localhostR ( s selfs dnsN( R R2 R R R RD t Falset True( RC R ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt getSelfNames� s !c C s� d } t j j | � } | d k r� t � } x` t j � D]O } y | t t j | d � � O} Wq: t k
r� } t j d | | � q: Xq: Wn t j j | | � | S( s Get own IP addresses of selfR@ R+ R7 s# Retrieving own IPs of %s failed: %s( s selfs ipsN(
R R R R R RH R? R' R( R) ( RC R+ RA R0 ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt
getSelfIPs� s c C s t d � t j � D� � S( Nc s s | ] } d | j k Vq d S( t :N( t ntoa( R R ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pys <genexpr>� s ( t anyR RI ( ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt
IPv6IsAllowed� s i, i, ( t __name__t
__module__R t CacheR R2 t staticmethodR1 R6 R? RG RD RH RI RM ( ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyR M s R c B s e Z d Z d Z d Z e j d e e f � Z d1 Z d2 Z
e j d d
d d3 � Z
d Z d Z e e j Z e e j Z e d � Z e d � � Z e d � Z d � Z d � Z d � Z e d � � Z e d � � Z i d e j 6d e j 6Z e d � � Z e d � � Z! e d � � Z" e d � � Z# e d � � Z$ d � Z% d � Z& d! � Z' d" � Z( d# � Z) d$ � Z* e d% � � Z+ e d& � � Z, d1 d' � Z- d( � Z. e d) � � Z/ e d* � � Z0 d+ � Z1 d, � Z2 d- � Z3 e3 � Z4 e d. � � Z5 e d/ � � Z6 e d0 � � Z7 RS(4 s7 Encapsulate functionality for IPv4 and IPv6 addresses
s (?:\d{1,3}\.){3}\d{1,3}s; (?:[0-9a-fA-F]{1,4}::?|::){1,7}(?:[0-9a-fA-F]{1,4}|(?<=:):)s% ^(?:(?P<IPv4>%s)|\[?(?P<IPv6>%s)\]?)$t _familyt _addrt _plent _maskplent _rawR i' R i i< i����i����c C s$ | t j k r; t t | � j | � } | j | | � | S| | f } t j j | � } | d k ri | S| t j k r� t j | � \ } } | | f } | t j k r� t j j | � } | d k r� | Sq� n t t | � j | � } | j | | � | j
t j k r t j j | | � n | S( N( R t CIDR_RAWt supert __new__t
_IPAddr__initt CACHE_OBJR R t CIDR_UNSPECt _IPAddr__wrap_ipstrRR R ( t clst ipstrt cidrR t args( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyRY � s(
c C s� t | � d k rB | d d k rB | d d k rB | d d !} n d | k r[ | t j f S| j d d � } t | � d k r� t d | f � � n d | d k s� d
| d k r� t j | d � | d <n t | d � | d <| S( Ni i t [i����t ]i t /s. invalid ipstr %r, too many plen representationR
RJ ( R# R R\ t splitt
ValueErrort
masktoplent long( R_ t s( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __wrap_ipstr s 2
c C s
t j | _ d | _ d | _ d | _ | | _ | t j k r�| d k rm | t j k rm t j | g } n t j
t j g } xH | D]@ } y t j | | � } | | _ PWq� t j
k
r� q� q� Xq� W| j t j
k r>t j d | � \ | _ d | _ | d k r�| d k r�d | ?} | j | M_ | | _ q�q | j t j k r t j d | � \ } } | d >| B| _ d | _ | d k r�| d k r�d | ?} | j | M_ | | _ q�| j t j � r�| d @| _ t j
| _ d | _ q�q n t j | _ d S(
sP initialize IP object by converting IP address string
to binary to integer
i s !Li l �� s !QQi@ i� l ��������� N( R t AF_UNSPECRR RS RT R RU RV R RW R R t inet_ptonR t structt unpackt isInNett IP6_4COMPAT( R@ R_ R` t familyt binaryt maskt hit lo( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __init sH
c C s
t | j � S( N( t reprRK ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __repr__P s c C s& t | j t � r | j St | j � S( N( R RK t
basestringR$ ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __str__S s c C s t | j f f S( s� IPAddr pickle-handler, that simply wraps IPAddr to the str
Returns a string as instance to be pickled, because fail2ban-client can't
unserialize IPAddr objects
( R$ RK ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt
__reduce__V s c C s | j S( N( RS ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt addr^ s c C s | j S( N( RR ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyRq b s t inet4t inet6c C s t j j | j � S( N( R t FAM2STRR RR ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt familyStrg s c C s | j S( N( RT ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt plenk s c C s | j S( sl The raw address
Should only be set to a non-empty string if prior address
conversion wasn't possible
( RV ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt rawo s c C s | j t j k S( s6 Either the object corresponds to a valid IP address
( RR R Rk ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyR% x s c C s0 | j i d t j 6d t j 6j | j d � k S( sI Returns whether the object is a single IP address (not DNS and subnet)
i i� i���( RT R R R R RR ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt isSingle~ s c C s� | j t j k r/ t | t � r/ | j | k St | t � s] | d k rN t St | � } n | j | j k rs t S| j t j k r� | j | j k S| j | j k o� | j
| j
k S( N( RR R RW R RV R RF R Rk RS RT ( R@ t other( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __eq__� s "
c C s | | k S( N( ( R@ R� ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __ne__� s c C s | j t j k r/ t | t � r/ | j | k St | t � s] | d k rN t St | � } n | j | j k p~ | j | j k S( N( RR R RW R RV R RF RS ( R@ R� ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __lt__� s "
c C s, t | t � s t | � } n d | | f S( Ns %s%s( R R ( R@ R� ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __add__� s c C s, t | t � s t | � } n d | | f S( Ns %s%s( R R ( R@ R� ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __radd__� s c C s
t | j � S( N( t hashRK ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __hash__� s c C sB | j t j k r d | j S| j t j k r: d | j Sd Sd S( s< Hex representation of the IP address (for debug purposes)
s %08xs %032xR N( RR R R RS R ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt hexdump� s
c C s� d } | j rO t j d | j � } | j r� | j d k r� d | j } q� nj | j r� | j d ?} | j d @} t j d | | � } | j r� | j d k r� d | j } q� n | j St j | j | � | S( si represent IP object as text like the deprecated
C pendant inet.ntoa but address family independent
R s !Li s /%di@ l ���� s !QQi� (
t isIPv4Rm t packRS RT t isIPv6RV R t inet_ntopRR ( R@ R& Rr Rt Ru ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyRK � s
c C s~ | j r3 | j j d � } | d k ra d } qa n. | j r] | j } | d k ra d } qa n d Sd d j t | � � | f S( s return the DNS PTR string of the provided IP address object
If "suffix" is provided it will be appended as the second and top
level reverse domain.
If omitted it is implicitly set to the second and top level reverse
domain of the according IP address family
R
s
in-addr.arpa.s ip6.arpa.R s %s.%sN( R� RK Re R R� R� t joint reversed( R@ t suffixt exploded_ip( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt getPTR� s c C s t j | j � S( s? Return the host name (DNS) of the provided IP address object
( R R6 RK ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt getHost� s c C s | j t j k S( s4 Either the IP object is of address family AF_INET
( Rq R R ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyR� � s c C s | j t j k S( s5 Either the IP object is of address family AF_INET6
( Rq R R ( R@ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyR� � s c C s� | j r/ | j d k r/ | t j | j � k S| j | j k rE t S| j r_ d | j ?} n | j ry d | j ?} n t S| j | @| j k S( s9 Return either the IP object is in the provided network
R l �� l ��������� (
R% R� R R1 Rq RF R� R� R� R| ( R@ t netRs ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyRo � s c C s( t | t � o' | | k p' | j | � S( s; Return whether the object (as network) contains given IP
( R R Ro ( R@ R ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt contains s c C s� d } d } i d | 6d | 6d d 6} d } xX t d d � D]G } | d | >O} | d k rr d | | | | A<n d
| | | | A<q= W| S( Ni i� i i l l ��������� I I���� i i ( t xrange( t m6t m4t mmapt mt i( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt __getMaskMap s c C sf d } | j d k r | j St j j | j � } | d k rY t d t | � f � � n | | _ | S( Ni s' invalid mask %r, no plen representation( RU R R t MAP_ADDR2MASKPLENR RS Rf R$ ( R@ t mplen( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt maskplen s c C s
t | � j S( sI Convert mask string to prefix length
To be used only for IPv4 masks
( R R� ( Rs ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyRg ' s c C sH t j j | � } | s d S| j d � } | d k r; | S| j d � S( sB Search if text is an IP address, and return it if so, else None
t IPv4R t IPv6N( R t
IP_4_6_CREt matchR t group( R; R� R_ ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyR9 / s N( s _familys _addrs _plens _maskplens _rawi, (8 RN RO t __doc__t IP_4_REt IP_6_REt ret compileR� R Rp t __slots__R RP R[ RW R\ R R R R R! RY RQ R] RZ Rx Rz R{ t propertyR| Rq R R� R� R� R% R� R� R� R� R� R� R� R� RK R� R� R� R� Ro R� t _IPAddr__getMaskMapR� R� Rg R9 ( ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyR � sZ
7 s
::ffff:0:0i` ( t
__author__t
__copyright__t __license__R Rm R� t utilsR t helpersR RN R( R R R t objectR Rp ( ( ( s9 /usr/lib/python2.7/site-packages/fail2ban/server/ipdns.pyt <module> s �� f
Mini Shell