Current File : //usr/lib/python2.7/site-packages/salt/modules/apf.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z y d d l Z e Z Wn e k
rQ e Z n Xd d l
Z d d l m
Z
d � Z d � Z d � Z d � Z d � Z d
� Z d � Z d � Z d d
� Z d � Z d � Z d S( u�
Support for Advanced Policy Firewall (APF)
==========================================
:maintainer: Mostafa Hussein <mostafa.hussein91@gmail.com>
:maturity: new
:depends: python-iptables
:platform: Linux
i ( t absolute_importt print_functiont unicode_literalsN( t CommandExecutionErrorc C@ s= t j j j d � d k r% t d f St s5 t d f St Sd S( u/
Only load if apf exists on the system
u apfu; The apf execution module cannot be loaded: apf unavailable.uF The apf execution module cannot be loaded: python-iptables is missing.N( t saltt utilst patht whicht Nonet Falset
IPTC_IMPORTEDt True( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt __virtual__ s c C@ s� d j t j j j d � | � } t d | � } | d d k rz | d sX | d } n
| d } t d j | � � � n | d S( u!
Return the apf location
u {0} {1}u apfu cmd.run_allu retcodei u stderru stdoutu apf failed: {0}( t formatR R R R t __salt__R ( t cmdt apf_cmdt outt msg( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt __apf_cmd' s !
c C@ s[ d } t j t j j � } x/ | j D]$ } d | j j � k r% d } q% q% W| rW t St S( u>
Return True if apf is running otherwise return False
i u sanityi ( t iptct Tablet FILTERt chainst namet lowerR R ( t statust tablet chain( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt _status_apf9 s
c C@ s t � r
t St S( uc
Check apf status
CLI Example:
.. code-block:: bash
salt '*' apf.running
( R R R ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt runningE s c C@ s t � r t d � Sd S( ur
Stop (flush) all firewall rules
CLI Example:
.. code-block:: bash
salt '*' apf.disable
u -fN( R R ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt disableQ s c C@ s t � s t d � Sd S( ui
Load all firewall rules
CLI Example:
.. code-block:: bash
salt '*' apf.enable
u -sN( R R ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt enable^ s c C@ s t � s t d � Sd S( uv
Stop (flush) & reload firewall rules
CLI Example:
.. code-block:: bash
salt '*' apf.reload
u -rN( R R ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt reloadk s c C@ s
t d � S( u}
Refresh & resolve dns names in trust rules
CLI Example:
.. code-block:: bash
salt '*' apf.refresh
u -e( R ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt refreshx s c C@ s# | d k r t d j | � � Sd S( u�
Add host (IP/FQDN) to allow_hosts.rules and immediately load new rule into firewall
CLI Example:
.. code-block:: bash
salt '*' apf.allow 127.0.0.1
u -a {0}N( R R R
( t ipt port( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt allow� s c C@ s t d j | � � S( u�
Add host (IP/FQDN) to deny_hosts.rules and immediately load new rule into firewall
CLI Example:
.. code-block:: bash
salt '*' apf.deny 1.2.3.4
u -d {0}( R R
( R# ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt deny� s c C@ s t d j | � � S( u�
Remove host from [glob]*_hosts.rules and immediately remove rule from firewall
CLI Example:
.. code-block:: bash
salt '*' apf.remove 1.2.3.4
u -u {0}( R R
( R# ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt remove� s ( t __doc__t
__future__R R R R R R
t ImportErrorR t salt.utils.pathR t salt.exceptionsR R R R R R R R! R" R R% R& R' ( ( ( s4 /usr/lib/python2.7/site-packages/salt/modules/apf.pyt <module> s&
Mini Shell