Current File : //usr/lib/python2.7/site-packages/fail2ban/server/database.pyc
�
��&dc @ s] d Z d Z d Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l Z d d l m
Z
d d l m Z d d l
m Z d d l m Z d d
l m Z d d l m Z m Z m Z e e � Z d
� Z e j d k r� d � Z d � Z n d � Z d � Z d � Z e j e e � e j d e � d � Z! d e" f d � � YZ# d S( s Steven Hiscockss" Copyright (c) 2013 Steven Hiscockst GPLi����N( t wraps( t RLocki ( t MyTime( t
FailTicket( t Utilsi ( t getLoggert
uni_stringt
PREFER_ENCc C s( t | t � r t | � } n t | � S( s/ Avoid errors on types unknown in json-adapters.( t
isinstancet sett listR ( t x( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt
_json_default* s i c C sm y+ t j | d t d t �j t d � } Wn; t k
rh } t j d | d t j � d k �d } n X| S( Nt ensure_asciit defaultt replaces json dumps failed: %rt exc_infoi s {}(
t jsont dumpst FalseR
t encodeR t Exceptiont logSyst errort getEffectiveLevel( R t e( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt _json_dumps_safe1 s "
c C sa y t j | j t d � � } Wn; t k
r\ } t j d | d t j � d k �i } n X| S( NR s json loads failed: %rR i ( R t loadst decodeR R R R R ( R R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt _json_loads_safe; s "
c C s� t | t � r) t d � | j � D� � St | t t f � r[ g | D] } t | � ^ qE St | t � r� | j t d � j t � St | t
� r� | j t d � S| S( Nc s s- | ]# \ } } t | � t | � f Vq d S( N( t
_normalize( t .0t kt v( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pys <genexpr>F s R ( R t dictt iteritemsR R
R t unicodeR R R t
basestring( R t element( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR D s c C sg y% t j t | � d t d t �} Wn; t k
rb } t j d | d t j � d k �d } n X| S( NR R s json dumps failed: %rR i s {}( R R R R R
R R R R ( R R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR P s %"
c C sa y t j | j t d � � } Wn; t k
r\ } t j d | d t j � d k �i } n X| S( NR s json loads failed: %rR i ( R R R R R R R R ( R R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR Y s "
t JSONc s t � � � f d � � } | S( Nc
s@ | j �1 | j �! � | | j j � | | � SWd QXWd QXd S( N( t _lockt _dbt cursor( t selft argst kwargs( t f( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt wrapperg s
( R ( R/ R0 ( ( R/ s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt commitandrollbackf s t
Fail2BanDbc B sE e Z d Z d Z d2 d3 d4 d5 d6 f Z e e � Z d8 d d � Z e d � Z d � Z
e d � � Z d � Z
e d � � Z e d � � Z e j d � � Z e d � Z e e d � � Z d � Z e d � � Z e d � � Z e d � � Z e d � � Z e d9 d � � Z e d � � Z d d9 d! � Z e d9 d" � � Z e d# � � Z d$ � Z e d d9 d% � � Z e d& � � Z! e d' � � Z" e d( � � Z# e d9 d9 d9 d) � � Z$ d* � Z% d9 d9 d9 d+ � Z& e d9 d9 d9 d9 d, � � Z' d9 d9 d9 d9 d- � Z( e d9 d9 d9 d9 e) d9 d. � � Z* d/ � Z+ d0 � Z, e d1 � � Z- RS(: s� Fail2Ban database for storing persistent data.
This allows after Fail2Ban is restarted to reinstated bans and
to continue monitoring logs from the same point.
This will either create a new Fail2Ban database, connect to an
existing, and if applicable upgrade the schema in the process.
Parameters
----------
filename : str
File name for SQLite3 database, which will be created if
doesn't already exist.
purgeAge : int
Purge age in seconds, used to remove old bans from
database during purge.
Raises
------
sqlite3.OperationalError
Error connecting/creating a SQLite3 database.
RuntimeError
If exisiting database fails to update to new schema.
Attributes
----------
filename
purgeage
i t
fail2banDbs7 CREATE TABLE IF NOT EXISTS fail2banDb(version INTEGER);t jailss� CREATE TABLE IF NOT EXISTS jails(name TEXT NOT NULL UNIQUE, enabled INTEGER NOT NULL DEFAULT 1);CREATE INDEX IF NOT EXISTS jails_name ON jails(name);t logssS CREATE TABLE IF NOT EXISTS logs(jail TEXT NOT NULL, path TEXT, firstlinemd5 TEXT, lastfilepos INTEGER DEFAULT 0, FOREIGN KEY(jail) REFERENCES jails(name) ON DELETE CASCADE, UNIQUE(jail, path),UNIQUE(jail, path, firstlinemd5));CREATE INDEX IF NOT EXISTS logs_path ON logs(path);CREATE INDEX IF NOT EXISTS logs_jail_path ON logs(jail, path);t banss� CREATE TABLE IF NOT EXISTS bans(jail TEXT NOT NULL, ip TEXT, timeofban INTEGER NOT NULL, bantime INTEGER NOT NULL, bancount INTEGER NOT NULL default 1, data JSON, FOREIGN KEY(jail) REFERENCES jails(name) );CREATE INDEX IF NOT EXISTS bans_jail_timeofban_ip ON bans(jail, timeofban);CREATE INDEX IF NOT EXISTS bans_jail_ip ON bans(jail, ip);CREATE INDEX IF NOT EXISTS bans_ip ON bans(ip);t bipssZ CREATE TABLE IF NOT EXISTS bips(ip TEXT NOT NULL, jail TEXT NOT NULL, timeofban INTEGER NOT NULL, bantime INTEGER NOT NULL, bancount INTEGER NOT NULL default 1, data JSON, PRIMARY KEY(ip, jail), FOREIGN KEY(jail) REFERENCES jails(name) );CREATE INDEX IF NOT EXISTS bips_timeofban ON bips(timeofban);CREATE INDEX IF NOT EXISTS bips_ip ON bips(ip);i i< i c C s> d | _ t � | _ | | _ | | _ | | _ | j � d S( Ni
( t
maxMatchesR R) t _dbFilenamet _purgeAget _outDatedFactort
_connectDB( R, t filenamet purgeAget outDatedFactor( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt __init__� s c
C s� | j } y> t j | d t d t j �| _ i | _ t j d | � Wn3 t j k
r| } t j
d | | j d � � n Xy d d l } t
} Wn t k
r� t } n X| j j � } z[yN | j d � | j d � | s� | j d � n | j d
� | j d � Wn� t j k
r9t j d | j � � n� t j k
r�} t j
d
| | j d � t j j | � s}� n | j � d } | j � n| X| j � d } | t j k r| j | � } | t j k r�t j d | | � qt j
d t j | | � t d � � n Wd | r�t j d � | j | d t
�t j d � t j d � | j d � x- | j! � D] } t j d d j" | � � qtW| j j# � n | r�| r�| j d � n | j � n Xd S( Nt check_same_threadt detect_typess. Connected to fail2ban persistent database '%s's9 Error connecting to fail2ban persistent database '%s': %si i����s PRAGMA foreign_keys = ONs PRAGMA synchronous = OFFs PRAGMA journal_mode = MEMORYs PRAGMA temp_store = MEMORYs& SELECT version FROM fail2banDb LIMIT 1s" New database created. Version '%r's3 Error opening fail2ban persistent database '%s': %ss" Database updated from '%r' to '%r'sI Database update failed to achieve version '%r': updated from '%r' to '%r's Failed to fully updates# Create missing tables/indices ...t incrementals -> oks Check integrity ...s PRAGMA integrity_checks -> %st ($ R9 t sqlite3t connectR t PARSE_DECLTYPESR* t _bansMergedCacheR t infot OperationalErrorR R- t __pypy__t Truet ImportErrorR+ t executet warningt createDbt Errort ost patht isfilet closet Nonet repairDBt fetchoneR2 t __version__t updateDbt RuntimeErrort debugt _createDbt fetchallt joint commit(
R, t checkIntegrityR= R RK t pypyt curt versiont
newversiont s( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR< � sz
c C s+ t j d � | j j � t j d � d S( Ns Close connection to database ...s Connection to database closed.( R R\ R* RU RI ( R, ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyRU s
c C sM y | j SWn; t k
rH | j d t j d t j � � | _ | j SXd S( Nt .s
%Y%m%d-%H%M%S( t _Fail2BanDb__dbBackupFilenamet AttributeErrorR9 t timet strftimeR t gmtime( R, ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt _dbBackupFilename s
&c C sh d t f d � � Y} | j } d | _ z/y� t j d | j � t j | j | j � t j d | j � t j
d | j | j f � t j | j � j
} | r� t j d | � | j d t � n t j d | � | d � � Wnr t k
rU} t j d
| j | j d d t | | � o.t j � d
k �t j | j � | j d t � n XWd | | _ Xd S( Nt RepairExceptionc B s e Z RS( ( t __name__t
__module__( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyRn ( s s Trying to repair database %ss Database backup created: %ssH f2b_db=$0; f2b_dbbk=$1; sqlite3 "$f2b_dbbk" ".dump" | sqlite3 "$f2b_db" s5 Repair seems to be successful, restored %d byte(s).Ra s1 Repair seems to be failed, restored %d byte(s).s Recreate ...s/ Error repairing of fail2ban database '%s': %si R i
( R RW RV R RI R9 t shutilt moveRm R t
executeCmdRR t statt st_sizeR< RL R R- R R t remove( R, Rn t _repairDBt
dbFileSizeR ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyRW ' s. #c C s | j S( s& File name of SQLite3 database file.
( R9 ( R, ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR= H s c C s | j S( s Purge age in seconds.
( R: ( R, ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt purgeageN s c C s t j | � | _ d S( N( R t str2secondsR: ( R, t value( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyRy T s c C sX x$ t j D] \ } } | j | � q
W| j d t j f � | j d � | j � d S( s8 Creates a new database, called during initialisation.
s\ INSERT INTO fail2banDb(version) SELECT ? WHERE NOT EXISTS (SELECT 1 FROM fail2banDb LIMIT 1)s& SELECT version FROM fail2banDb LIMIT 1i ( R2 t _CREATE_SCRIPTSt
executescriptRN RY RX ( R, Rc RC t nRf ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR] X s
c C s | j | | � S( N( R] ( R, Rc RC ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyRP e s c C s3 | j d | f � | j � } | d k o2 | d S( NsQ select 1 where exists (select 1 from sqlite_master WHERE type='table' AND name=?)i ( RN RX RV ( R, Rc t tablet res( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt _tableExistsi s
c C s� | t j k r t d � � n yDt j d | j | � t j j | j � sx t j
| j | j � t j d | j � n | d k r� | j | d � r� | j
d t j d � n | d k r� | j | d � r� | j
d t j d � n | d
k rF| j | d � rF| j
d t j d � | j | d � rF| j d
� qFn | j d � | j � d SWnE t k
r�} t j d | j | j d d t j � d k �� n Xd S( s� Update an existing database, called during initialisation.
A timestamped backup is also created prior to attempting the update.
sI Attempt to travel to future version of database ...how did you get here??s& Upgrade database: %s from version '%r's Database backup created: %si R5 s� BEGIN TRANSACTION;CREATE TEMPORARY TABLE logs_temp AS SELECT * FROM logs;DROP TABLE logs;%s;INSERT INTO logs SELECT * from logs_temp;DROP TABLE logs_temp;UPDATE fail2banDb SET version = 2;COMMIT;i R6 s� BEGIN TRANSACTION;CREATE TEMPORARY TABLE bans_temp AS SELECT jail, ip, timeofban, -2 as bantime, 1 as bancount, data FROM bans;DROP TABLE bans;%s;
INSERT INTO bans SELECT * from bans_temp;DROP TABLE bans_temp;COMMIT;i R7 s? BEGIN TRANSACTION;%s;
UPDATE fail2banDb SET version = 4;COMMIT;s� INSERT OR REPLACE INTO bips(ip, jail, timeofban, bantime, bancount, data) SELECT ip, jail, timeofban, bantime, bancount, data FROM bans order by timeofbans& SELECT version FROM fail2banDb LIMIT 1i s# Failed to upgrade database '%s': %sR i
N( R2 RY t NotImplementedErrorR RI Rm RR RS RT Rq t copyfileR= R� R} t _CREATE_TABSRN RX R R R9 R- R ( R, Rc Rd R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyRZ o s6
c C sB | j d | j f � | j d k r> | j d | j f � n d S( sm Adds a jail to the database.
Parameters
----------
jail : Jail
Jail to be added to the database.
s7 INSERT OR IGNORE INTO jails(name, enabled) VALUES(?, 1)i s< UPDATE jails SET enabled = 1 WHERE name = ? AND enabled != 1N( RN t namet rowcount( R, Rc t jail( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt addJail� s
c C s | j d | j f � d S( sv Deletes a jail from the database.
Parameters
----------
jail : Jail
Jail to be removed from the database.
s' UPDATE jails SET enabled=0 WHERE name=?N( RN R� ( R, Rc R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt delJail� s
c C s | j d � d S( s' Deletes all jails from the database.
s UPDATE jails SET enabled=0N( RN ( R, Rc ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt delAllJails� s c C sP | d k r | j d � n | j d t | � f � t d � | j � D� � S( s Get name of jails in database.
Currently only used for testing purposes.
Returns
-------
set
Set of jail names.
s SELECT name FROM jailss' SELECT name FROM jails WHERE enabled=%sc s s | ] } | d Vq d S( i N( ( R t row( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pys <genexpr>� s N( RV RN t intR
t fetchmany( R, Rc t enabled( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt getJailNames� s
c C s+ | j | | | j � | j � | j � � S( s7 Adds a log to the database.
Parameters
----------
jail : Jail
Jail that log is being monitored by.
container : FileContainer
File container of the log file being added.
Returns
-------
int
If log was already present in database, value of last position
in the log file; else `None`
( t _addLogt getFileNamet getPost getHash( R, Rc R� t container( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt addLog� s i c C s� d } | j d | j | f � y | j � \ } } Wn t k
rN d } n X| r� | sb | r� | j d | j | | | f � n | d k r� | | k r� d } n | S( NsB SELECT firstlinemd5, lastfilepos FROM logs WHERE jail=? AND path=?sU INSERT OR REPLACE INTO logs(jail, path, firstlinemd5, lastfilepos) VALUES(?, ?, ?, ?)( RV RN R� RX t TypeError( R, Rc R� R� t post md5t lastLinePost firstLineMD5( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR� � s
c C s_ d } g } | d k r5 | d 7} | j | j � n | j | | � t d � | j � D� � S( s� Gets all the log paths from the database.
Currently only for testing purposes.
Parameters
----------
jail : Jail
If specified, will only reutrn logs belonging to the jail.
Returns
-------
set
Set of log paths.
s SELECT path FROM logss
WHERE jail=?c s s | ] } | d Vq d S( i N( ( R R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pys <genexpr> s N( RV t appendR� RN R
R� ( R, Rc R� t queryt queryArgs( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt getLogPaths s
c C s/ | j | | | j � | j � | j � � d S( s� Updates hash and last position in log file.
Parameters
----------
jail : Jail
Jail of which the log file belongs to.
container : FileContainer
File container of the log file being updated.
N( t
_updateLogR� R� R� ( R, Rc R� R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt updateLog s c C sN | j d | | | j | f � | j sJ | j d | j | | | f � n d S( NsE UPDATE logs SET firstlinemd5=?, lastfilepos=? WHERE jail=? AND path=?sU INSERT OR REPLACE INTO logs(jail, path, firstlinemd5, lastfilepos) VALUES(?, ?, ?, ?)( RN R� R� ( R, Rc R� R� R� R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR� & s c C s | j | | | | | � S( sA Get journal position from database.
Parameters
----------
jail : Jail
Jail of which the journal belongs to.
name, time, iso :
Journal name (typically systemd-journal) and last known time.
Returns
-------
int (or float)
Last position (as time) if it was already present in database; else `None`
( R� ( R, Rc R� R� Rj t iso( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt
getJournalPos0 s c C s | j | | | | | � d S( s� Updates last position (as time) of journal.
Parameters
----------
jail : Jail
Jail of which the journal belongs to.
name, time, iso :
Journal name (typically systemd-journal) and last known time.
N( R� ( R, Rc R� R� Rj R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt
updateJournalB s c C s� t | j � � } y | j | | f =Wn t k
r9 n Xy | j | d f =Wn t k
ra n X| j � } | j d � } | j r� | r� t | � | j k r� | j � } | | j | d <q� n | r� | j � } | d =n | j
d | j | t t
| j � � � | j | j j � � | j � | f � | j
d | | j t t
| j � � � | j | j j � � | j � | f � d S( s� Add a ban to the database.
Parameters
----------
jail : Jail
Jail in which the ban has occurred.
ticket : BanTicket
Ticket of the ban to be added.
t matchessW INSERT INTO bans(jail, ip, timeofban, bantime, bancount, data) VALUES(?, ?, ?, ?, ?, ?)sb INSERT OR REPLACE INTO bips(ip, jail, timeofban, bantime, bancount, data) VALUES(?, ?, ?, ?, ?, ?)N( t strt getIPRH t KeyErrorRV t getDatat getR8 t lent copyRN R� R� t roundt getTimet
getBanTimet actionst getBanCount( R, Rc R� t tickett ipt dataR� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt addBanO s4
<
<c G s� d } d } | j g } t | � sH | j | | � | j | | � d S| d 7} | d 7} | j d � x> | D]6 } t | � | d <| j | | � | j | | � qp Wd S( s� Delete a single or multiple tickets from the database.
Parameters
----------
jail : Jail
Jail in which the ticket(s) should be removed.
args : list of IP
IPs to be removed, if not given all tickets of jail will be removed.
s DELETE FROM bips WHERE jail = ?s DELETE FROM bans WHERE jail = ?Ns AND ip = ?t i ( R� R� RN R� R� ( R, Rc R� R- t query1t query2R� R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt delBanv s
c C s� d } g } | d k r5 | d 7} | j | j � n | d k rq | d k rq | d 7} | j t j � | � n | d k r� | d 7} | j t | � � n | d 7} t | j | | � � S( Ns, SELECT ip, timeofban, data FROM bans WHERE 1s AND jail=?i s AND timeofban > ?s AND ip=?s ORDER BY ip, timeofban desc( RV R� R� R Rj R� R RN ( R, Rc R� t bantimeR� R� R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt _getBans� s
c K sT g } xG | j | � D]6 \ } } } | j t | | � � | d j | � q W| S( s� Get bans from the database.
Parameters
----------
jail : Jail
Jail that the ban belongs to. Default `None`; all jails.
bantime : int
Ban time in seconds, such that bans returned would still be
valid now. Negative values are equivalent to `None`.
Default `None`; no limit.
ip : str
IP Address to filter bans by. Default `None`; all IPs.
Returns
-------
list
List of `Ticket`s for bans stored in database.
i����( R� R� R t setData( R, R. t ticketsR� t timeofbanR� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt getBans� s
c
C s | j �d } | d k s( | d k rQ | | f } | | j k rQ | j | Sn g } d } t | j d | d | d | � � } | r�| d d } g } d }
i } x | D]\ } }
} | | k rt | | | � } | j |
� | j | � | } g } d }
i } n | j d g � } | j t
| � } | d k rrt
| � | k r`| | } qr| | | } n |
| j d d � 7}
|
| d <| | d <| j | � |
} q� Wt | | d | �} | j | � n | r | d k r�| n | | j | <n | d k r| S| SWd QXd S(
s} Get bans from the database, merged into single ticket.
This is the same as `getBans`, but bans merged into single
ticket.
Parameters
----------
jail : Jail
Jail that the ban belongs to. Default `None`; all jails.
bantime : int
Ban time in seconds, such that bans returned would still be
valid now. Negative values are equivalent to `None`.
Default `None`; no limit.
ip : str
IP Address to filter bans by. Default `None`; all IPs.
Returns
-------
list or Ticket
Single ticket representing bans stored in database per IP
in a list. When `ip` argument passed, a single `Ticket` is
returned.
i R� R� R� R� t failuresi R� N( R) RV RH R R� R t
setAttemptR� R� R8 R� t update( R, R� R� R� t cacheKeyR� R� t resultst
prev_banipR� R� t tickdatat banipR� R� t prev_timeofbant mt maxadd( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt
getBansMerged� sN
$
"c C s� t | � } | s d } n d } | d 7} | g } | rd | d k rd | d 7} | j | j � n | d k r� | d 7} | j t j � | � n | d k r� | d 7} | j | � n | s� | d k r� | d 7} n | j j � } t | j | | � � S( Ns- SELECT bancount, timeofban, bantime FROM bipss< SELECT sum(bancount), max(timeofban), sum(bantime) FROM bipss
WHERE ip = ?s AND jail=?s AND timeofban > ?s, GROUP BY ip ORDER BY timeofban DESC LIMIT 1(
R� RV R� R� R Rj R* R+ R RN ( R, Rc R� R� t
forbantimet overalljailst fromtimeR� R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt getBan s&
c C s� g } | d k r+ d } | j | j � n d } | d k rW | d 7} | j | � n | d 7} | j | � | d k r� | d 7} | j | | � n | d k r� | d 7} n
| d 7} | j j � } | j | | � S(
NsD SELECT ip, timeofban, bantime, bancount, data FROM bips WHERE jail=?sD SELECT ip, max(timeofban), bantime, bancount, data FROM bips WHERE 1s AND ip=?s/ AND (timeofban + bantime > ? OR bantime <= -1)i����s AND timeofban > ?s( GROUP BY ip ORDER BY ip, timeofban DESCs ORDER BY timeofban DESC LIMIT 1( Ni����( RV R� R� R* R+ RN ( R, Rc R� R� R� R� R� R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt _getCurrentBans s$
c C sv | d k r t j � } n g } d } | t k ri | d k rK | j � n d } | d k ri d } qi n x| j | d | d | d | d | �D]�} y� | \ }
} } }
} |
d k s� |
d k r� t d |
f � � n | d k r| d k r| j j � n | r| n d } n6 | rO| d
k rO| d k sC| | k rO| } qOn | d k r�| | | k r�t j
d | | | | | � w� n Wn) t k
r�} t j
d | | � q� n Xt |
| d
| �} | d k r�| j } n | r*| j
� } | r7t | � | k r7| j | | � q7n
| j d � | j | � | j |
� | d k ra| S| j | � q� W| S( s� Reads tickets (with merged info) currently affected from ban from the database.
There are all the tickets corresponding parameters jail/ip, forbantime,
fromtime (normally now).
If correctBanTime specified (default True) it will fix the restored ban-time
(and therefore endOfBan) of the ticket (normally it is ban-time of jail as maximum)
for all tickets with ban-time greater (or persistent).
i����R� R� R� R� R� s unexpected value %ri����iX i sF ignore ticket (with new max ban-time %r): too old %r <= %r, ticket: %rs$ get current bans: ignore row %r - %sR� N( RV R Rj RL t
getMaxBanTimeR� t
ValueErrorR� R� R R\ R R8 t
getMatchesR� t
setMatchest
setBanTimet setBanCountR� ( R, Rc R� R� R� R� t correctBanTimet
maxmatchesR� R� R� R� R� t bancountR� R R� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt getCurrentBans2 sR
c C s | j d � d S( s8 Remove empty jails jails and log files from database.
s� DELETE FROM jails WHERE enabled = 0 AND NOT EXISTS(SELECT * FROM bans WHERE jail = jails.name) AND NOT EXISTS(SELECT * FROM bips WHERE jail = jails.name)N( RN ( R, Rc ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt _cleanjailsu s c C sF | j d t t j � � | j | j t t j � � | j f � d S( s� Purge old bad ips (jails and log files from database).
Currently it is timed out IP, whose time since last ban is several times out-dated (outDatedFactor is default 3).
Permanent banned ips will be never removed.
sZ DELETE FROM bips WHERE timeofban < ? and bantime != -1 and (timeofban + (bantime * ?)) < ?N( RN R� R Rj R: R; ( R, Rc ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt _purge_bips} s c C sG i | _ | j d t j � | j f � | j | � | j | � d S( s5 Purge old bans, jails and log files from database.
s$ DELETE FROM bans WHERE timeofban < ?N( RH RN R Rj R: R� R� ( R, Rc ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt purge� s
( R3 s7 CREATE TABLE IF NOT EXISTS fail2banDb(version INTEGER);( R4 s� CREATE TABLE IF NOT EXISTS jails(name TEXT NOT NULL UNIQUE, enabled INTEGER NOT NULL DEFAULT 1);CREATE INDEX IF NOT EXISTS jails_name ON jails(name);( s logssS CREATE TABLE IF NOT EXISTS logs(jail TEXT NOT NULL, path TEXT, firstlinemd5 TEXT, lastfilepos INTEGER DEFAULT 0, FOREIGN KEY(jail) REFERENCES jails(name) ON DELETE CASCADE, UNIQUE(jail, path),UNIQUE(jail, path, firstlinemd5));CREATE INDEX IF NOT EXISTS logs_path ON logs(path);CREATE INDEX IF NOT EXISTS logs_jail_path ON logs(jail, path);( s banss� CREATE TABLE IF NOT EXISTS bans(jail TEXT NOT NULL, ip TEXT, timeofban INTEGER NOT NULL, bantime INTEGER NOT NULL, bancount INTEGER NOT NULL default 1, data JSON, FOREIGN KEY(jail) REFERENCES jails(name) );CREATE INDEX IF NOT EXISTS bans_jail_timeofban_ip ON bans(jail, timeofban);CREATE INDEX IF NOT EXISTS bans_jail_ip ON bans(jail, ip);CREATE INDEX IF NOT EXISTS bans_ip ON bans(ip);( s bipssZ CREATE TABLE IF NOT EXISTS bips(ip TEXT NOT NULL, jail TEXT NOT NULL, timeofban INTEGER NOT NULL, bantime INTEGER NOT NULL, bancount INTEGER NOT NULL default 1, data JSON, PRIMARY KEY(ip, jail), FOREIGN KEY(jail) REFERENCES jails(name) );CREATE INDEX IF NOT EXISTS bips_timeofban ON bips(timeofban);CREATE INDEX IF NOT EXISTS bips_ip ON bips(ip);i� i�Q N(. Ro Rp t __doc__RY R| R# R� R@ R R< RU t propertyRm RW R= Ry t setterR] R1 RP R� RZ R� R� R� RV R� R� R� R� R� R� R� R� R� R� R� R� R� R� R� RL R� R� R� R� ( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyR2 o sd
Q !
5
' G A ( i ($ t
__author__t
__copyright__t __license__R RR Rq RE t sysRj t functoolsR t threadingR t mytimeR R� R t utilsR t helpersR R R Ro R R
t version_infoR R R t register_adapterR# t register_converterR1 t objectR2 ( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/database.pyt <module> s4
Mini Shell