Current File : //lib/python2.7/site-packages/salt/states/ipset.pyo
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z e j e � Z d � Z d d � Z
d d � Z d d d � Z
d d d d � Z d d
� Z d S( u
Management of ipsets
======================
This is an ipset-specific module designed to manage IPSets for use
in IPTables Firewalls.
.. code-block:: yaml
setname:
ipset.set_present:
- set_type: bitmap:ip
- range: 192.168.0.0/16
- comment: True
setname:
ipset.set_absent:
- set_type: bitmap:ip
- range: 192.168.0.0/16
- comment: True
setname_entries:
ipset.present:
- set_name: setname
- entry: 192.168.0.3
- comment: Hello
- require:
- ipset: baz
setname_entries:
ipset.present:
- set_name: setname
- entry:
- 192.168.0.3
- 192.168.1.3
- comment: Hello
- require:
- ipset: baz
setname_entries:
ipset.absent:
- set_name: setname
- entry:
- 192.168.0.3
- 192.168.1.3
- comment: Hello
- require:
- ipset: baz
setname:
ipset.flush:
i ( t absolute_importt print_functiont unicode_literalsNc C@ s
d t k S( u@
Only load if the ipset module is available in __salt__
u
ipset.version( t __salt__( ( ( s5 /usr/lib/python2.7/site-packages/salt/states/ipset.pyt __virtual__= s u ipv4c K@ s i | d 6i d 6d d 6d d 6} t d | � } | t k rb t | d <d j | | � | d <| St d r� d j | | � | d <| St d
| | | | � } | t k r� i | d 6| d <t | d <d j | | � | d <| St | d <d
j | | j � | � | d <| Sd S( u�
.. versionadded:: 2014.7.0
Verify the set exists.
name
A user-defined set name.
set_type
The type for the set.
family
Networking family, either ipv4 or ipv6
u nameu changesu resultu u commentu ipset.check_setu$ ipset set {0} already exists for {1}u testu$ ipset set {0} would be added for {1}u
ipset.new_setu localeu* ipset set {0} created successfully for {1}u% Failed to create set {0} for {2}: {1}N( t NoneR t Truet formatt __opts__t Falset strip( t namet set_typet familyt kwargst rett set_checkt command( ( s5 /usr/lib/python2.7/site-packages/salt/states/ipset.pyt set_presentD s8
c K@ sH i | d 6i d 6d d 6d d 6} t d | | � } | s_ t | d <d j | | � | d <| St d r� d j | | � | d <| St d
| | � } | rt d | | � } | t k r� i | d 6| d <t | d <d
j | | � | d <qDt | d <d j | | j � | � | d <n) t | d <d j | | j � | � | d <| S( u~
.. versionadded:: 2014.7.0
Verify the set is absent.
family
Networking family, either ipv4 or ipv6
u nameu changesu resultu u commentu ipset.check_setu' ipset set {0} for {1} is already absentu testu& ipset set {0} for {1} would be removedu ipset.flushu ipset.delete_setu localeu1 ipset set {0} deleted successfully for family {1}u% Failed to delete set {0} for {2}: {1}u$ Failed to flush set {0} for {2}: {1}N( R R R R R R R
( R R
R R R t flush_setR ( ( s5 /usr/lib/python2.7/site-packages/salt/states/ipset.pyt
set_absentv s@
c
K@ s: i | d 6i d 6t d 6d d 6} | s@ t | d <d | d <| Sg } t | t � r^ | } n
| j | � x�| D]�} d } d | k r� | j d d � \ } } n d | k r� d | k r� d
j | d | � } n d | k rd | k rd j | | d � } n d j | | j � g � j � } t
d | d
| | � t k rn| d c d j | | d
| � 7<qr t d r�d | d <| d c d j | | d
| � 7<qr t
d | d
| | | � } d | k ri | d 6| d <| d c d j | | d
| � 7<qr t | d <d j | d
| | | � | d <qr W| S( uZ
.. versionadded:: 2014.7.0
Append a entry to a set
name
A user-defined name to call this entry by in another part of a state or
formula. This should not be an actual entry.
entry
A single entry to add to a set or a list of entries to add to a set
family
Network family, ipv4 or ipv6.
u nameu changesu resultu u commentu ipset entry must be specifiedu i u timeoutu timeout {0} {1}u {0} comment "{1}"u ipset.checku set_nameu) entry for {0} already in set {1} for {2}
u testu3 entry {0} would be added to set {1} for family {2}
u ipset.addu Erroru localeu* entry {0} added to set {1} for family {2}
u9 Failed to add to entry {1} to set {0} for family {2}.
{3}N(
R R t
isinstancet listt appendt splitR t joint lstripR
R R R ( R t entryR
R R t entriest
entry_optst _entryR ( ( s5 /usr/lib/python2.7/site-packages/salt/states/ipset.pyt present� s\
!
c
K@ sX i | d 6i d 6t d 6d d 6} | s@ t | d <d | d <| Sg } t | t � r^ | } n
| j | � x�| D]�} d } d | k r� | j d d � \ } } n d | k r� d | k r� d
j | d | � } n d | k rd | k rd j | | d � } n d j | | g � j � } t j
d | � t d
| d | | � t k r�t | d <| d c d j | | d | � 7<qr t d r�d | d <| d c d j | | d | � 7<qr t d | d | | | � } d | k r&i | d 6| d <t | d <| d c d j | d | | � 7<qr t | d <d j | d | | | � | d <qr W| S( u
.. versionadded:: 2014.7.0
Remove a entry or entries from a chain
name
A user-defined name to call this entry by in another part of a state or
formula. This should not be an actual entry.
family
Network family, ipv4 or ipv6.
u nameu changesu resultu u commentu ipset entry must be specifiedu i u timeoutu timeout {0} {1}u {0} comment "{1}"u _entry %su ipset.checku set_nameu3 ipset entry for {0} not present in set {1} for {2}
u testu6 ipset entry {0} would be removed from set {1} for {2}
u ipset.deleteu Erroru localeu- ipset entry {1} removed from set {0} for {2}
uP Failed to delete ipset entry from set {0} for {2}. Attempted entry was {1}.
{3}
N( R R R R R R R R R
t logt debugR R R ( R R R R
R R R R R ( ( s5 /usr/lib/python2.7/site-packages/salt/states/ipset.pyt absent� s`
c K@ s� i | d 6i d 6d d 6d d 6} t d | � } | t k rb t | d <d j | | � | d <| St d r� d j | | � | d <| St d
| | � r� i | d 6| d <t | d <d j | | � | d <| St | d <d
j | | � | d <| Sd S( u}
.. versionadded:: 2014.7.0
Flush current ipset set
family
Networking family, either ipv4 or ipv6
u nameu changesu resultu u commentu ipset.check_setu$ ipset set {0} does not exist for {1}u testu1 ipset entries in set {0} for {1} would be flushedu ipset.flushu localeu* Flushed ipset entries from set {0} for {1}u2 Failed to flush ipset entries from set {0} for {1}N( R R R R R R ( R R
R R R ( ( s5 /usr/lib/python2.7/site-packages/salt/states/ipset.pyt flush8 s4
( t __doc__t
__future__R R R t loggingt getLoggert __name__R R R R R R R" R# ( ( ( s5 /usr/lib/python2.7/site-packages/salt/states/ipset.pyt <module>6 s 2 0II
Mini Shell