Current File : //usr/lib/python2.7/site-packages/salt/states/win_firewall.pyc
�
���^c @@ sr d Z d d l m Z m Z m Z d d l m Z m Z d � Z d d � Z d d d d
d � Z
d d � Z d
S( u(
State for configuring Windows Firewall
i ( t absolute_importt unicode_literalst print_function( t CommandExecutionErrort SaltInvocationErrorc C@ s d t k r d St S( u/
Load if the module firewall is loaded
u firewall.get_configu win_firewall( t __salt__t False( ( ( s< /usr/lib/python2.7/site-packages/salt/states/win_firewall.pyt __virtual__ s u allprofilesc C@ s� i | d 6t d 6i d 6d d 6} i d d 6d d 6d
d 6d d
6} | | k rh t d j | � � � n t d � } | d
k r� | | | k r� t | d <d j | � | d <| SxH | D]@ } | | r� | d
k s� | | | k r� d | d | <q� q� q� Wt d r8| d pd | d <| d | d <i | d <| S| d r�y t d | � | d <Wq�t k
r�d j | | � | d <q�Xn. | d
k r�d } n d j | � } | | d <| S( uZ
Disable all the firewall profiles (Windows only)
Args:
profile (Optional[str]): The name of the profile to disable. Default is
``allprofiles``. Valid options are:
- allprofiles
- domainprofile
- privateprofile
- publicprofile
Example:
.. code-block:: yaml
# To disable the domain profile
disable_domain:
win_firewall.disabled:
- name: domainprofile
# To disable all profiles
disable_all:
win_firewall.disabled:
- name: allprofiles
u nameu resultu changesu u commentu Domainu
domainprofileu Privateu privateprofileu Publicu
publicprofileu Allu allprofilesu Invalid profile name: {0}u firewall.get_configu1 Profile {0} does not exist in firewall.get_configu disabledu testu firewall.disableu* Firewall Profile {0} could not be disabledu& All the firewall profiles are disabledu Firewall profile {0} is disabledN( t TrueR t formatR R t __opts__t NoneR ( t namet rett profile_mapt current_configt keyt msg( ( s< /usr/lib/python2.7/site-packages/salt/states/win_firewall.pyt disabled sH
u tcpu allowu inu anyc C@ s� i | d 6t d 6i d 6d d 6} t d | � sF i | d 6| d <n d | d <| St d r� | d pl d | d <| d | d <i | d <| Sy! t d
| | | | | | � Wn t k
r� d | d <n X| S(
um
Add a new inbound or outbound rule to the firewall policy
Args:
name (str): The name of the rule. Must be unique and cannot be "all".
Required.
localport (int): The port the rule applies to. Must be a number between
0 and 65535. Can be a range. Can specify multiple ports separated by
commas. Required.
protocol (Optional[str]): The protocol. Can be any of the following:
- A number between 0 and 255
- icmpv4
- icmpv6
- tcp
- udp
- any
action (Optional[str]): The action the rule performs. Can be any of the
following:
- allow
- block
- bypass
dir (Optional[str]): The direction. Can be ``in`` or ``out``.
remoteip (Optional [str]): The remote IP. Can be any of the following:
- any
- localsubnet
- dns
- dhcp
- wins
- defaultgateway
- Any valid IPv4 address (192.168.0.12)
- Any valid IPv6 address (2002:9b3b:1a31:4:208:74ff:fe39:6c43)
- Any valid subnet (192.168.1.0/24)
- Any valid range of IP addresses (192.168.0.1-192.168.0.12)
- A list of valid IP addresses
Can be combinations of the above separated by commas.
.. versionadded:: 2016.11.6
Example:
.. code-block:: yaml
open_smb_port:
win_firewall.add_rule:
- name: SMB (445)
- localport: 445
- protocol: tcp
- action: allow
u nameu resultu changesu u commentu firewall.rule_existsu new ruleu$ A rule with that name already existsu testu firewall.add_ruleu Could not add ruleN( R R R
R R ( R t localportt protocolt actiont dirt remoteipR
( ( s< /usr/lib/python2.7/site-packages/salt/states/win_firewall.pyt add_rule^ s& A
c C@ s� i | d 6t d 6i d 6d d 6} i d d 6d d 6d
d 6d d
6} | | k rh t d j | � � � n t d � } | d
k r� | | | k r� t | d <d j | � | d <| SxH | D]@ } | | s� | d
k s� | | | k r� d | d | <q� q� q� Wt d r8| d pd | d <| d | d <i | d <| S| d r�y t d | � | d <Wq�t k
r�d j | | � | d <q�Xn. | d
k r�d } n d j | � } | | d <| S( uR
Enable all the firewall profiles (Windows only)
Args:
profile (Optional[str]): The name of the profile to enable. Default is
``allprofiles``. Valid options are:
- allprofiles
- domainprofile
- privateprofile
- publicprofile
Example:
.. code-block:: yaml
# To enable the domain profile
enable_domain:
win_firewall.enabled:
- name: domainprofile
# To enable all profiles
enable_all:
win_firewall.enabled:
- name: allprofiles
u nameu resultu changesu u commentu Domainu
domainprofileu Privateu privateprofileu Publicu
publicprofileu Allu allprofilesu Invalid profile name: {0}u firewall.get_configu1 Profile {0} does not exist in firewall.get_configu enabledu testu firewall.enableu) Firewall Profile {0} could not be enabledu% All the firewall profiles are enabledu Firewall profile {0} is enabledN( R R R R R R
R R ( R R
R R R R ( ( s< /usr/lib/python2.7/site-packages/salt/states/win_firewall.pyt enabled� sH
N( t __doc__t
__future__R R R t salt.exceptionsR R R R R R ( ( ( s< /usr/lib/python2.7/site-packages/salt/states/win_firewall.pyt <module> s N X
Mini Shell