Current File : //usr/lib/python2.7/site-packages/fail2ban/server/observer.pyc
�
��&dc @ s d Z d Z d Z d d l Z d d l m Z d d l m Z d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l
Z
d d l Z d d l Z d d l m Z d d
l m Z d d l m Z e e � Z d e f d
� � YZ d f d � � YZ e � Z d S( s Serg G. Brester (sebres)s" Copyright (c) 2014 Serg G. Brestert GPLi����Ni ( t
JailThread( t FailManagerEmptyi ( t getLogger( t MyTime( t Utilst ObserverThreadc B sx e Z d Z e j d Z d � Z d � Z d � Z d � Z d � Z d � Z
d � Z d � Z d
� Z
d � Z d � Z d
� Z d � Z d � Z d � Z d � Z d% d � Z d � Z d e d � Z e d � � Z d% d � Z d% d � Z e d � � Z e j d � � Z e d � � Z d � Z! d � Z" d � Z# d d& d � � YZ$ d! � Z% d" � Z& d# � Z' d$ � Z( RS(' s8 Handles observing a database, managing bad ips and ban increment.
Parameters
----------
Attributes
----------
daemon
ident
name
status
active : bool
Control the state of the thread.
idle : bool
Control the idle state of the thread.
sleeptime : int
The time the thread sleeps for in the loop.
i
c C s� t t | � j d d � t | _ t j � | _ g | _ t j � | _
d | _ i | _ t
| _ d | _ d | _ t | _ d S( Nt names f2b/observeri< i ( t superR t __init__t Truet idlet threadingt RLockt _queue_lockt _queuet Eventt _notifyt sleeptimet _timerst Falset _pausedt Nonet _ObserverThread__dbt" _ObserverThread__db_purge_intervalt daemon( t self( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR ? s c C s7 y | j | SWn! t k
r2 t d | � � n Xd S( Ns Invalid event index : %s( R t KeyError( R t i( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt __getitem__T s
c C s6 y | j | =Wn! t k
r1 t d | � � n Xd S( Ns Invalid event index: %s( R R ( R R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt __delitem__Z s
c C s
t | j � S( N( t iterR ( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt __iter__` s c C s
t | j � S( N( t lenR ( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt __len__c s c C s t S( N( R ( R t other( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt __eq__f s c C s
t | � S( N( t id( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt __hash__i s c G sa | j j | d � } | d k r. | j � n t j | | j | � } | | j | <| j � d S( s� Add a named timer event to queue will start (and wake) in 'starttime' seconds
Previous timer event with same name will be canceled and trigger self into
queue after new 'starttime' value
N( R t getR t cancelR t Timert addt start( R R t starttimet eventt t( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt add_named_timerl s
c G s� t j d k r[ | r[ t j t j | j t j � | t j � | | f � } | j � d St j | | j
| � } | j � d S( sJ Add a timer event to queue will start (and wake) in 'starttime' seconds
N( R t myTimeR R R) R t DEFAULT_SLEEP_INTERVALt
_delayedEventt timeR+ R* ( R R, R- R. ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt add_timery s &
c C sj t j � | k s$ t j � | k r8 | j d | � d St j t j | j | | | f � } | j � d S( Ni ( R R3 R4 R R) R R1 R2 R+ ( R t endMyTimet endTimeR- R. ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR2 � s $c C s, | j s( | j } | r( | j � q( n d S( s1 Notify wakeup (sets /and resets/ notify event)
N( R R t set( R t n( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt pulse_notify� s c G s. | j � | j j | � Wd QX| j � d S( s5 Add a event to queue and notify thread to wake up.
N( R R t appendR9 ( R R- ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR* � s
c G s$ | j � | j j | � Wd QXd S( s= Add a event to queue withouth notifying thread to wake up.
N( R R R: ( R R- ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt add_wn� s
c G s | | � d S( N( ( R t lt args( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt call_lambda� s c C sU t j d � | j d | j d � i | j d 6| j d 6| j d 6| j d 6| j d 6| j d 6| j
d 6d
� d 6d � d
6} y�| j d � xJ| j r�t
| _ x� | j szy� d } | j �) t | j � r� | j j d � } n Wd QX| d k rPn | d } t | d � s<| j | � p6t | | � } n | | d � Wq� t k
rv} t j d | d t �q� Xq� W| j } | r�t | _ | j | j � | j � | j r�q� q�q� t j t! j" � | j# s� Pq� q� Wt j d t | j � � d | _ Wn) t k
r.} t j d | d t �n X| j � g | _ Wd QXt | _ t S( s� Main loop for Threading.
This function is the main loop of the thread.
Returns
-------
bool
True when the thread exits nicely.
s Observer start...t DB_PURGEt db_purget callt db_sett is_alivet is_activeR+ t stopc S s d S( N( ( ( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt <lambda>� s t nopc S s d S( N( ( ( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyRF � s t shutdowni Ni s %st exc_infos& Observer stopped, %s events remaining.s Observer stopped after error: %s($ t logSyst infoR/ R R> RB R@ t isAlivet isActiveR+ RE R* t activeR R R R R R! R t popt callableR' t getattrt Exceptiont errorR
R t waitR t clearR3 t sleepR R1 t is_full( R t _ObserverThread__metht evt metht eR8 ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt run� s`
!
c C s t S( N( R
( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyRL � s c C s | j S( N( RN ( R t fromStr( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyRM s c C s3 | j �$ | j s) t t | � j � n Wd QXd S( N( R RN R R R+ ( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR+ s
i c C s� | j r� | j r� t j d | � | j �1 | j d � | j } | j j � d | _ Wd QX| j | � ss | r� | j � t
| _ t | _ d | _
n | | _ | j t | d � � o� | j St S( Ns- Observer stop ... try to end queue %s secondsRH g �?( RN R RJ RK R R; R7 R t
wait_emptyRU R R
R R t wait_idlet minRW ( R t wtimet forceQuitR8 ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyRE s
c C s+ | j � t | j � r t St SWd QXd S( N( R R! R R
R ( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyRW # s
c C s� t j t j � | d k r/ t j � | } n | j d k rm | j d � | j rm | j rm | j
� qm n x? | j r� | d k r� t j � | k r� Pn t j t j � qp W| j d � | j S( sW Wait observer is running and returns if observer has no more events (queue is empty)
RG g����MbP?N( R3 RV R R1 R R R R; RW R R9 R_ ( R R R[ ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR^ ( s
c C s� t j t j � | j r t S| d k r< t j � | } n x? | j s} | d k rj t j � | k rj Pn t j t j � q? W| j S( sJ Wait observer is running and returns if observer idle (observer sleeps)
N( R3 RV R R1 R R
R R ( R R R[ ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR_ < s c C s | j S( N( R ( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt pausedJ s c C s* | j | k r d S| | _ | j � d S( N( R R9 ( R t pause( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyRc N s c C s d S( s/ Status of observer to be implemented. [TODO]
t ( Re Re ( ( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt statusW s c C s
| | _ d S( N( R ( R t db( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyRB a s c C sF t j d � | j d k r, | j j � n | j d | j d � d S( Ns Purge database event occurredR? R@ ( RJ t debugR R t purgeR/ R ( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR@ d s
c
C sE | j � s | j d � r! d S| j � } | j � } t j d | j | � d } d } d } y�| j � } | j }
|
d k r/x] |
j
| | � D]I \ } } } t | | j � � } d | d k r� | n d >d d } Pq� Wt
| | � } | d k r/| | k r/t j d | j | | | � d Sn | d k r?d St j d | j | t j | � | | | | k rud
n d � | j | | d t � } | j | � | | k ry- x& t r�| j | � } | j | � q�WWqt k
r| j t j � � qXn Wn8 t k
r@} t j d | d
t j � t j k �n Xd S( s} Notify observer a failure for ip was found
Observer will check ip was known (bad) and possibly increase an retry count
t incrementNs [%s] Observer: failure found %si i i i s8 [%s] Ignore failure %s before last ban %s < %s, restoreds% [%s] Found %s, bad - %s, %s # -> %s%ss , BanRe s %sRI ( RL t getBanTimeExtrat getIPt getTimeRJ Rh R R t getMaxRetryt databaset getBant maxt getBanCountR` RK R t time2strt
addFailureR
t setBanCountt toBant
putFailTicketR t cleanupR3 RR RS t getEffectiveLevelt loggingt DEBUG(
R t failManagert jailt tickett ipt unixTimet banCountt
retryCountt timeOfBant maxRetryRg t lastBanTimeR[ ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt failureFoundo sJ "$
t BanTimeIncrc B s e Z d � Z RS( c C s | | _ | | _ d S( N( t Timet Count( R t banTimeR� ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR � s ( t __name__t
__module__R ( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR� � s c C s& | j � } | d | j | | � � S( Nt evformula( Rk R� ( R R} R� R� t be( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt calcBanTime� s c C s� | j � s | j r | S| j � } | j � } | } yF| d k r~| j d t � r~x!| j j | | d | j d t � �D]� \ } } } | | j � k r� | j | d � n t j
d | | | � | d k r� | d | j | | � � } n | j | � | j
� | k rmt j d | j | | t j | � t j d t | � � t j d t | � � f � n t | _ Pq� Wn Wn8 t k
r�}
t j d |
d
t j � t j k �n X| S( st Check for IP address to increment ban time (if was already banned).
Returns
-------
float
new ban time.
i Rj t overalljailsi s" IP %s was already banned: %s #, %sR� s/ [%s] IP %s is bad: %s # last %s - incr %s to %st secondss %sRI ( RL Ro Rk Rl R' R Rp Rr Ru RJ Rh R� t
setBanTimeRm RK R R Rs t datetimet timedeltat intR
t restoredRR RS Ry Rz R{ ( R R} R� R~ R� R t
orgBanTimeR� R� R� R[ ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt incrBanTime� s0 4
5 )c C s | j r
d Sy�| } | j � } t j d | j | | � | d k r� | j � d k r� | j | | | � } | d k s� | | k r� | j | � q� n | d k r | j � | } t
j d t | � � t
j | � f } | t
j � k rt j d | d � t Sn d } | | k r�t j d | j | | j � | � t j d
d | j | | | f � | j t d t d
| | d
� � | j | | � n | j d k r�| j r�| j j | | � n Wn8 t k
r�} t j d | d t j � t j k �n Xd S( s� Notify observer a ban occured for ip
Observer will check ip was known (bad) and possibly increase/prolong a ban time
Secondary we will actualize the bans and bips (bad ip) in database
Ns [%s] Observer: ban found %s, %si����R� s Ignore old bantime %si t permanentt infinites$ [%s] Increase Ban %s (%d # %s -> %s)i s [%s] Observer: prolong %s in %si
i s %sRI ( R� R� ( R� Rl RJ Rh R t
getBanTimeR R� R� Rm R� R� R� R Rs R3 R t noticeRr t logR4 R` Rq t
prolongBanRo t addBanRR RS Ry Rz R{ ( R R~ R} t btimet oldbtimeR t bendtimet logtimeR[ ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt banFound� s6 "6c C s� yE | j � } | j � } t j d | j | | � | j j | � Wn8 t k
r } t j d | d t j � t
j k �n Xd S( s� Notify observer a ban occured for ip
Observer will check ip was known (bad) and possibly increase/prolong a ban time
Secondary we will actualize the bans and bips (bad ip) in database
s [%s] Observer: prolong %s, %ss %sRI N( R� Rl RJ Rh R t actionst _prolongBanRR RS Ry Rz R{ ( R R~ R} R� R R[ ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR� s N( () R� R� t __doc__R R1 R R R R R" R$ R& R/ R4 R2 R9 R* R; R> R\ RL R RM R+ R
RE t propertyRW R^ R_ Rc t setterRf RB R@ R� R� R� R� R� R� ( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR ( sF
P
8 ) +t
_Observersc B s e Z d � Z RS( c C s
d | _ d S( N( R t Main( R ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR s ( R� R� R ( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyR� s ( t
__author__t
__copyright__t __license__R t
jailthreadR t failmanagerR t osRz R3 R� t matht jsont randomt syst helpersR t mytimeR t utilsR R� RJ R R� t Observers( ( ( s< /usr/lib/python2.7/site-packages/fail2ban/server/observer.pyt <module> s T � �
Mini Shell