Current File : //usr/lib/python2.7/site-packages/salt/modules/pf.pyc
�
���^c @@ s� d Z d d l m Z m Z m Z d d l Z d d l Z d d l Z d d l m
Z
m Z e j e
� Z d � Z d � Z d � Z d � Z d e d
� Z d � Z d � Z d
� Z d S( u{
Control the OpenBSD packet filter (PF).
:codeauthor: Jasper Lievisse Adriaanse <j@jasper.la>
.. versionadded:: 2019.2.0
i ( t absolute_importt print_functiont unicode_literalsN( t CommandExecutionErrort SaltInvocationErrorc C@ s3 t d d k r) t j j j d � r) t St d f S( u�
Only works on OpenBSD for now; other systems with pf (macOS, FreeBSD, etc)
need to be tested before enabling them.
u osu OpenBSDu pfctlul The pf execution module cannot be loaded: either the system is not OpenBSD or the pfctl binary was not found( t
__grains__t saltt utilst patht whicht Truet False( ( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyt __virtual__ s %c C@ s� i } t d d d d d t �} | d d k rI i d d 6t d
6} nN | d d k rp i d
d 6t d
6} n' t d d i | d g d 6t d
6�� | S( uk
Enable the Packet Filter.
CLI example:
.. code-block:: bash
salt '*' pf.enable
u cmd.run_allu pfctl -et output_loglevelu tracet python_shellu retcodei u
pf enabledu commentu changesu stderru pfctl: pf already enabledu pf already enabledu Could not enable pft infou errors( t __salt__R R
R ( t rett result( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyt enable" s
c C@ s� i } t d d d d d t �} | d d k rI i d d 6t d
6} nN | d d k rp i d
d 6t d
6} n' t d d i | d g d 6t d
6�� | S( um
Disable the Packet Filter.
CLI example:
.. code-block:: bash
salt '*' pf.disable
u cmd.run_allu pfctl -dR
u traceR u retcodei u pf disabledu commentu changesu stderru pfctl: pf not enabledu pf already disabledu Could not disable pfR u errors( R R R
R ( R R ( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyt disableA s
c C@ s� i t d 6} d d d d d d d d g } | | k rO t d
j | � � � n t d d j | � d
d d t �} | d d k r� t d d i | d g d 6t d 6�� n | S( u-
Set the debug level which limits the severity of log messages printed by ``pf(4)``.
level:
Log level. Should be one of the following: emerg, alert, crit, err, warning, notice,
info or debug.
CLI example:
.. code-block:: bash
salt '*' pf.loglevel emerg
u changesu emergu alertu critu erru warningu noticeu infou debugu Unknown loglevel: {0}u cmd.run_allu pfctl -x {0}R
u traceR u retcodei u$ Problem encountered setting loglevelR u stderru errors( R
R t formatR R R ( t levelR t
all_levelsR ( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyt loglevel` s
!u /etc/pf.confc C@ s� i t d 6} d d | g } | r< t | d <| j d � n t d | d d d t �} | d d
k r� t d j | � d i | d
g d 6t d 6�� n | S( uA
Load a ruleset from the specific file, overwriting the currently loaded ruleset.
file:
Full path to the file containing the ruleset.
noop:
Don't actually load the rules, just parse them.
CLI example:
.. code-block:: bash
salt '*' pf.load /etc/pf.conf.d/lockdown.conf
u changesu pfctlu -fu -nu cmd.run_allR
u traceR u retcodei u$ Problem loading the ruleset from {0}R u stderru errors( R
R t appendR R R ( t filet noopR t cmdR ( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyt load� s
!c C@ s) i } d d d d d d d g } d d g } | | 7} | j � | k rX | j � } n | | k r| t d
j | � � � n d j | � } t d | d
d d t �} | d d k r� t j d | d � r� t | d <n
t | d <| d | d <n0 t d j | � d i | d g d 6t d 6�� | S( u�
Flush the specified packet filter parameters.
modifier:
Should be one of the following:
- all
- info
- osfp
- rules
- sources
- states
- tables
Please refer to the OpenBSD `pfctl(8) <https://man.openbsd.org/pfctl#T>`_
documentation for a detailed explanation of each command.
CLI example:
.. code-block:: bash
salt '*' pf.flush states
u rulesu statesu infou osfpu allu sourcesu tablesu Sourcesu Tablesu Unknown modifier: {0}u pfctl -v -F {0}u cmd.run_allR
u traceR u retcodei u ^0.*u stderru changesu commentu Could not flush {0}R u errors( t titleR R R R t ret matchR
R ( t modifierR t
all_modifierst capital_modifiersR R ( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyt flush� s*
c K@ s� i } d d d d d d d d d g } | | k rK t d
j | � � � n d d | d
| g } | d! k r� | | j d g � 7} nC | d k r� | j d d" � } | s� t d � � q� | j | � n t d | d d d t �} | d d k r| d k ri | d j � d 6} q�| d k rAi | d d 6t d 6} q�t j
d | d � rdt | d <n
t | d <| d | d <np | d k r�t j
d | d � r�i | d d 6t d 6} n3 t d j | | � d i | d g d 6t d 6�� | S(# u�
Apply a command on the specified table.
table:
Name of the table.
command:
Command to apply to the table. Supported commands are:
- add
- delete
- expire
- flush
- kill
- replace
- show
- test
- zero
Please refer to the OpenBSD `pfctl(8) <https://man.openbsd.org/pfctl#T>`_
documentation for a detailed explanation of each command.
CLI example:
.. code-block:: bash
salt '*' pf.table expire table=spam_hosts number=300
salt '*' pf.table add table=local_hosts addresses='["127.0.0.1", "::1"]'
u killu flushu addu deleteu expireu replaceu showu testu zerou Unknown table command: {0}u pfctlu -tu -Tu addressesu numberu. need expire_number argument for expire commandu cmd.run_allt output_levelu traceR u retcodei u stdoutu commentu stderru matchesu ^(0.*|no changes)u changesu ^\d+/\d+ addresses match.$u Could not apply {0} on table {1}R u errors( u addu deleteu replaceu testN( R R t gett NoneR R R t splitR
R R R ( t commandt tablet kwargsR t all_commandsR t numberR ( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyR* � s< !
" c C@ s� i t d 6} d g } d d d g } | | 7} | j � | k rP | j � } n | | k rt t d j | � � � n d j | � } t d | d d
d t �} | d d
k r� | d j d � | d <n0 t d j | � d i | d g d 6t d 6�� | S( u#
Show filter parameters.
modifier:
Modifier to apply for filtering. Only a useful subset of what pfctl supports
can be used with Salt.
- rules
- states
- tables
CLI example:
.. code-block:: bash
salt '*' pf.show rules
u changesu Tablesu rulesu statesu tablesu Unknown modifier: {0}u pfctl -s {0}u cmd.run_allR
u traceR u retcodei u stdoutu
u commentu Could not show {0}R u stderru errors( R R R R R R( R ( R! R R# R" R R ( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyt show2 s$
( t __doc__t
__future__R R R t loggingR t salt.utils.pathR t salt.exceptionsR R t getLoggert __name__t logR R R R R R R$ R* R. ( ( ( s3 /usr/lib/python2.7/site-packages/salt/modules/pf.pyt <module> s #& ; N
Mini Shell