Current File : //usr/lib/python2.7/site-packages/salt/modules/ipset.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l m Z d d l m Z m
Z
d d l Z d d l
m Z e j e � Z d � Z i d d 6d d
6d d 6d d
6Z e d d d d d d d d d d d d d d d g � Z i e d d d d d! d" g � d 6e d d d d! d" g � d 6e d d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d$ d% d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d# d& d$ d% d d d! d" g � d 6e d# d$ d% d d d d! d" g � d 6e d' d d d! g � d 6Z e d! d d" g � Z i d g d 6d g d 6d g d 6g d 6g d 6g d 6g d 6g d 6g d 6g d 6g d 6g d 6g d 6g d 6g d 6Z i e d d( d) d* d+ d, g � d 6e d d( d) d* d+ d, g � d 6e d d( d) d* d+ d+ g � d 6e d d( d) d* d+ d, g � d 6e d d( d) d* d+ d, g � d 6e d d- d( d) d* d+ d, g � d 6e d d- d( d) d* d+ d, g � d 6e d d- d( d) d* d+ d, g � d 6e d d- d( d) d* d+ d, g � d 6e d d( d) d* d+ d, g � d 6e d d- d( d) d* d+ d, g � d 6e d d- d( d) d* d+ d, g � d 6e d d- d( d) d* d+ d, g � d 6e d d( d) d* d+ d, g � d 6e d d( d) d* d+ d, g � d 6Z d. � Z d/ � Z d0 � Z d d d e d1 � Z d d d2 � Z d d d d3 � Z! d d4 � Z" d d d5 � Z# d d d d6 � Z$ d d d d7 � Z% d d d d8 � Z& d d d d9 � Z' d d d: � Z( d; � Z) d< � Z* d= � Z+ d> � Z, e d? � Z- d@ � Z. dA � Z/ dB � Z0 dC � Z1 dD � Z2 d S(E u
Support for ipset
i ( t absolute_importt print_functiont unicode_literalsN( t six( t mapt range( t ipaddressc c@ s& x | | k r! | V| d 7} q Wd S( Ni ( ( t startt end( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt
long_range s u inetu ipv4u ip4u inet6u ipv6u ip6u bitmap:ipu
bitmap:ip,macu bitmap:portu hash:ipu hash:macu hash:ip,portu hash:ip,port,ipu hash:ip,port,netu hash:netu hash:net,netu hash:net,ifaceu
hash:net,portu hash:net,port,netu hash:ip,marku list:setu rangeu netmasku timeoutu countersu commentu skbinfou familyu hashsizeu maxelemu markmasku sizeu packetsu bytesu skbmarku skbpriou skbqueueu nomatchc C@ s# t j j j d � r t St d f S( u4
Only load the module if ipset is installed
u ipsetuG The ipset execution modules cannot be loaded: ipset binary not in path.( t saltt utilst patht whicht Truet False( ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt __virtual__r s c C@ s t j j j d � S( u
Return correct command
u ipset( R
R R R
( ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt
_ipset_cmd{ s c C@ s0 d j t � � } t d | � j � } | d S( uz
Return version from ipset --version
CLI Example:
.. code-block:: bash
salt '*' ipset.version
u
{0} --versionu cmd.runi ( t formatR t __salt__t split( t cmdt out( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt version� s c K@ s8 t | } | s d S| s d S| t k r. d Sx+ t | D] } | | k r9 d j | � Sq9 Wd j t � | | � } x[ t | D]O } | | k r | t k r� d j | | � } q� d j | | | | � } q q Wd t | k r� d j | | � } n | rd
j | � } n t d | d t �} | s4t } n | S(
u.
.. versionadded:: 2014.7.0
Create new custom set
CLI Example:
.. code-block:: bash
salt '*' ipset.new_set custom_set list:set
salt '*' ipset.new_set custom_set list:set comment=True
IPv6:
salt '*' ipset.new_set custom_set list:set family=ipv6
u Error: Set needs to be specifiedu% Error: Set Type needs to be specifiedu Error: Set Type is invalidu! Error: {0} is a required argumentu {0} create {1} {2}u {0} {1} u {0} {1} {2} u familyu {0} family {1}u {0} commentu cmd.runt python_shell(
t _IPSET_FAMILIESt _IPSET_SET_TYPESt _CREATE_OPTIONS_REQUIREDR R t _CREATE_OPTIONSt _CREATE_OPTIONS_WITHOUT_VALUER R R ( t sett set_typet familyt commentt kwargst ipset_familyt itemR R ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt new_set� s0
c C@ sH | s
d Sd j t � | � } t d | d t �} | sD t } n | S( u�
.. versionadded:: 2014.7.0
Delete ipset set.
CLI Example:
.. code-block:: bash
salt '*' ipset.delete_set custom_set
IPv6:
salt '*' ipset.delete_set custom_set family=ipv6
u Error: Set needs to be specifiedu {0} destroy {1}u cmd.runR ( R R R R R ( R R R R ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt
delete_set� s c C@ s� | s
d S| s d St | � } | s* d St | � } | r@ d Sd j t � | | � } t d | d t �} | s} t } n | S( u
.. versionadded:: 2014.7.0
Delete ipset set.
CLI Example:
.. code-block:: bash
salt '*' ipset.rename_set custom_set new_set=new_set_name
IPv6:
salt '*' ipset.rename_set custom_set new_set=new_set_name family=ipv6
u Error: Set needs to be specifiedu- Error: New name for set needs to be specifiedu Error: Set does not existu Error: New Set already existsu {0} rename {1} {2}u cmd.runR ( t _find_set_typeR R R R R ( R R% R t settypeR R ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt
rename_set� s c C@ s� d j t � � } t d | d t �} | j d � } d } g } | j i � xg | D]_ } t | � d k r� | d } | j i � qW n | j d d � \ } } | d | | | <qW W| S( u�
.. versionadded:: 2014.7.0
List all ipset sets.
CLI Example:
.. code-block:: bash
salt '*' ipset.list_sets
u {0} list -tu cmd.runR u
i i u :( R R R R R t appendt len( R R R t _tmpt countt setsR$ t keyt value( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt list_sets s
c C@ s$ | s
d St | � } | s t St S( u�
Check that given ipset set exists.
.. versionadded:: 2014.7.0
CLI Example:
.. code-block:: bash
salt '*' ipset.check_set setname
u Error: Set needs to be specified( t _find_set_infoR R ( R R t setinfo( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt check_set* s
c
K@ s | s
d S| s d St | � } | s3 d j | � S| d } d j | � } d | k rx d | d k rx d j | � Sn d | k s� d
| k r� d | d k r� d j | � Sn d
| k rd
| d k r� d j | � Sd
| k rd j | | d
� } qn t t d d d g � t | j � � @� d k rRd | d k rRd j | � Sn x: t | D]. } | | k r]d j | | | | � } q]q]Wt | � } | | k r�d j | | � Sd j t � | | � } t d | d t �} t | � d k r�d Sd j | � S( u�
Append an entry to the specified set.
CLI Example:
.. code-block:: bash
salt '*' ipset.add setname 192.168.1.26
salt '*' ipset.add setname 192.168.0.3,AA:BB:CC:DD:EE:FF
u Error: Set needs to be specifiedu" Error: Entry needs to be specifiedu Error: Set {0} does not existu Typeu {0}u timeoutu Headeru/ Error: Set {0} not created with timeout supportu packetsu bytesu countersu0 Error: Set {0} not created with counters supportu commentu/ Error: Set {0} not created with comment supportu {0} comment "{1}"u skbmarku skbpriou skbqueuei u skbinfou/ Error: Set {0} not created with skbinfo supportu {0} {1} {2}u) Warn: Entry {0} already exists in set {1}u {0} add -exist {1} {2}u cmd.runR u Successu
Error: {0}(
R2 R R+ R t keyst _ADD_OPTIONSt _find_set_membersR R R (
t setnamet entryR R" R3 R( R R$ t current_membersR ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt add@ sD
1 c K@ s� | s
d S| s d St | � } | s3 d j | � Sd j t � | | � } t d | d t �} t | � d k rw d Sd j | � S(
u�
Delete an entry from the specified set.
CLI Example:
.. code-block:: bash
salt '*' ipset.delete setname 192.168.0.3,AA:BB:CC:DD:EE:FF
u Error: Set needs to be specifiedu" Error: Entry needs to be specifiedu Error: Set {0} does not existu {0} del {1} {2}u cmd.runR i u Successu
Error: {0}( R' R R R R R+ ( R R9 R R" R( R R ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt delete} s
c C@ s� | s
d S| s d St | � } | s3 d j | � St | t | � � } t | � sX t St | t � ry t | | � } n t | | � g } x2 | D]* } x! | D] } t | | � r� t
Sq� Wq� Wt S( u
Check that an entry exists in the specified set.
set
The ipset name
entry
An entry in the ipset. This parameter can be a single IP address, a
range of IP addresses, or a subnet block. Example:
.. code-block:: cfg
192.168.0.1
192.168.0.2-192.168.0.19
192.168.0.0/25
family
IP protocol version: ipv4 or ipv6
CLI Example:
.. code-block:: bash
salt '*' ipset.check setname '192.168.0.1 comment "Hello"'
u Error: Set needs to be specifiedu" Error: Entry needs to be specifiedu Error: Set {0} does not exist( R' R t _parse_membersR7 R+ R t
isinstancet listt
_parse_membert _member_containsR ( R R9 R R( R: t entriest current_member( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt check� s$
c K@ sy | s
d S| s d St | � } | s3 d j | � Sd j t � | | � } t d | d t �} | d d k ru t St S( u�
Test if an entry is in the specified set.
CLI Example:
.. code-block:: bash
salt '*' ipset.test setname 192.168.0.2
IPv6:
salt '*' ipset.test setname fd81:fc56:9ac7::/48
u Error: Set needs to be specifiedu" Error: Entry needs to be specifiedu Error: Set {0} does not existu {0} test {1} {2}u cmd.run_allR u retcodei ( R' R R R R R ( R R9 R R" R( R R ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt test� s
c C@ s� t | � } | s d j | � St | } | rG d j t � | � } n d j t � � } t d | d t �} t | � d k r� t St Sd S( u
Flush entries in the specified set,
Flush all sets if set is not specified.
CLI Example:
.. code-block:: bash
salt '*' ipset.flush
salt '*' ipset.flush set
IPv6:
salt '*' ipset.flush
salt '*' ipset.flush set
u Error: Set {0} does not existu
{0} flush {1}u {0} flushu cmd.runR i N( R' R R R R R R+ R ( R R R( R# R R ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt flush� s
c C@ s� d j t � | � } t d | d t �} | d d k r? t S| d j d � } g } t } x9 | D]1 } | r� | j | � n d | k re t } qe qe W| S( u*
Return list of members for a set
u {0} list {1}u cmd.run_allR u retcodei u stdoutu
u Members:( R R R R R R* R ( R R R R, t memberst startMemberst i( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyR7 s
c C@ s� d j t � | � } t d | d t �} | d d k r? t Si } | d j d � } xC | D]; } d | k r_ | j d d � \ } } | d | | <q_ q_ W| S(
u*
Return information about the set
u {0} list -t {1}u cmd.run_allR u retcodei u stdoutu
u :i ( R R R R R ( R R R R3 R, R$ R/ R0 ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyR2 + s
c C@ s" t | � } | r | d St Sd S( u"
Find the type of the set
u TypeN( R2 R ( R R3 ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyR' A s c C@ sB t | t j � r" t | | � g Sg | D] } t | | � ^ q) S( N( R> R t string_typesR@ ( R( RG t member( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyR= M s c C@ sr | j d � d j d � } | j d d � } | d j d � } g } x� t t | � � D]� } | | } | | } | d k r y� d | k r� t j | d | �} n] d
| k r� t t t j | j d
� � � \ }
} t t j |
| � � } n t j | � } Wq7t k
rq7Xn | d k r7t
| � } n | j | � qZ Wt | � d k rn| j | d � n | S(
Nu :i u ,u i u ipu netu /t strictu -u port( u ipu net( R R R+ R t
ip_networkR? R t
ip_addresst summarize_address_ranget
ValueErrort intR* ( R( RK RL t subtypest all_partst partst
parsed_memberRI t subtypet partR R ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyR@ U s.
'
c C@ s d S( N( ( RG R9 ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt _members_containx s c C@ sX t | � t | � k r t Sx5 t t | � � D]! } t | | | | � s/ t Sq/ Wt S( N( R+ R R t _compare_member_partsR ( RK R9 RI ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyRA | s c C@ s� | | k r t St | t � rG x! | D] } t | | � s& t Sq& Wt St | � rl t | � r� | | k Sn& t | � r� t | � r� | | k St St S( N( R R> R? RY R t _is_addresst _is_network( t member_partt
entry_partt entry_part_item( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyRY � s
c C@ s" t | t j � p! t | t j � S( N( R> R t IPv4Networkt IPv6Network( t o( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyR[ � s c C@ s" t | t j � p! t | t j � S( N( R> R t IPv4Addresst IPv6Address( Ra ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyRZ � s (3 t __doc__t
__future__R R R t loggingt salt.extR t salt.ext.six.movesR R t salt.utils.pathR
t salt._compatR t getLoggert __name__t logR R R R R R R R6 R R R t NoneR R% R& R) R1 R4 R; R< RD RE RF R7 R2 R' R= R@ RX RA RY R[ RZ ( ( ( s6 /usr/lib/python2.7/site-packages/salt/modules/ipset.pyt <module> s�
% %%%%%%%%%
"""" """ " 8& = 6 $ # "
Mini Shell