File: //usr/lib/python3.6/site-packages/fail2ban/server/__pycache__/jail.cpython-36.pyc
3
UB(d1- � @ sx d Z dZdZddlZddlZddlZddlZddlmZ ddl m
Z
m Z m Z m
Z
dd lm
Z
e
e�ZG d
d � d e�ZdS ) z.Cyril Jaquier, Lee Clemens, Yaroslav HalchenkozPCopyright (c) 2004 Cyril Jaquier, 2011-2012 Lee Clemens, 2012 Yaroslav HalchenkoZGPL� N� )�Actions� )� getLogger�_as_bool�extractOptions�MyTime)r c @ s e Zd ZdZddddgZd:dd �Zd
d � Zd d
� Zdd� Zdd� Z dd� Z
dd� Z e dd� �Z
e dd� �Zejdd� �Ze dd � �Ze d d � �Ze d d � �Zejd!d � �Zd;d#d$�Ze d%d&� �Zd'd(� Zd)d*� Zd+d,� Zd<d-d.�Zd/d0� Zd=d2d3�Zd4d5� Zd>d6d7�Z d8d9� Z dS )?�Jailag Fail2Ban jail, which manages a filter and associated actions.
The class handles the initialisation of a filter, and actions. It's
role is then to act as an interface between the filter and actions,
passing bans detected by the filter, for the actions to then act upon.
Parameters
----------
name : str
Name assigned to the jail.
backend : str
Backend to be used for filter. "auto" will attempt to pick
the most preferred backend method. Default: "auto"
db : Fail2BanDb
Fail2Ban persistent database instance. Default: `None`
Attributes
----------
name
database
filter
actions
idle
status
Z pyinotifyZgaminZpollingZsystemd�autoNc C sh || _ t|�dkr tjd| � || _tj� | _d | _i | _ tj
d| j � |d k r^| j |� || _
d S )N� z]Jail name %r might be too long and some commands might not function correctly. Please shortenzCreating new jail '%s')� _Jail__db�len�logSys�warning� _Jail__name�queueZQueue� _Jail__queue�
_Jail__filter� _banExtra�info�name� _setBackend�backend)�selfr r Zdb� r �/usr/lib/python3.6/jail.py�__init__G s
z
Jail.__init__c C s d| j j| jf S )Nz%s(%r))� __class__�__name__r )r r r r �__repr__X s z
Jail.__repr__c C s6 t |�\}}|j� }| j}|dkr`|| jkrNtjd||f � td||f ��||j|�d � }x�|D ]�}t| d|j� �}yJ|f |� |dkr�||kr�tj d||f � ntj
d| � t | �| _ d S t
k
�r } z*tj|dkr�tjntjd||f � W Y d d }~X qfX qfW tjd| j � td| j ��d S )Nr
z.Unknown backend %s. Must be among %s or 'auto'z_init%sz9Could only initiated %r backend whenever %r was requestedzInitiated %r backendz)Backend %r failed to initialize due to %sz,Failed to initialize any backend for Jail %r)r �lower� _BACKENDSr �error�
ValueError�index�getattr�
capitalizer r r �_Jail__actions� ImportError�log�logging�DEBUGZERRORr � RuntimeError)r r ZbeArgsZbackends�bZ
initmethod�er r r r [ s8
$ zJail._setBackendc K s2 ddl m} tjd| j|f � || f|�| _d S )Nr )�
FilterPollzJail '%s' uses poller %r)Z
filterpollr/ r r r r )r �kwargsr/ r r r � _initPolling� s zJail._initPollingc K s2 ddl m} tjd| j|f � || f|�| _d S )Nr )� FilterGaminzJail '%s' uses Gamin %r)Z filtergaminr2 r r r r )r r0 r2 r r r �
_initGamin� s zJail._initGaminc K s2 ddl m} tjd| j|f � || f|�| _d S )Nr )�FilterPyinotifyzJail '%s' uses pyinotify %r)Zfilterpyinotifyr4 r r r r )r r0 r4 r r r �_initPyinotify� s zJail._initPyinotifyc K s2 ddl m} tjd| j|f � || f|�| _d S )Nr )�
FilterSystemdzJail '%s' uses systemd %r)Z
filtersystemdr6 r r r r )r r0 r6 r r r � _initSystemd� s zJail._initSystemdc C s | j S )zName of jail.
)r )r r r r r � s z Jail.namec C s | j S )z;The database used to store persistent data for the jail.
)r )r r r r �database� s z
Jail.databasec C s
|| _ d S )N)r )r �valuer r r r8 � s c C s | j S )z;The filter which the jail is using to monitor log files.
)r )r r r r �filter� s z Jail.filterc C s | j S )z2Actions object used to manage actions for jail.
)r' )r r r r �actions� s z Jail.actionsc C s | j jp| jjS )z-A boolean indicating whether jail is idle.
)r: �idler; )r r r r r< � s z Jail.idlec C s || j _|| j_d S )N)r: r< r; )r r9 r r r r< � s �basicc C s$ d| j j|d�fd| jj|d�fgS )zThe status of the jail.
�Filter)�flavorr )r: �statusr; )r r? r r r r@ � s z Jail.statusc C s | j j� S )z-Retrieve whether queue has tickets to ban.
)r �empty)r r r r �hasFailTickets� s zJail.hasFailTicketsc C s | j j|� dS )zQAdd a fail ticket to the jail.
Used by filter to add a failure for banning.
N)r Zput)r �ticketr r r �
putFailTicket� s zJail.putFailTicketc C s, y| j jd�}|S tjk
r& dS X dS )zTGet a fail ticket from the jail.
Used by actions to get a failure for banning.
FN)r �getr ZEmpty)r rC r r r �
getFailTicket� s
zJail.getFailTicketc s� | j }|dkrd }|d k r$|||< n||kr2||= tjd||� |dkrrt|�||< |j|�rr| jd krrtjd� |dkr�|d k r�tj|�||< |dks�|jd
d �d k�r�|d kr�d d � |d k r�|dkr�|j d
�ng D �|d< |jdg ��t
|jdd��}t ���r|f�fdd� }n&|jdd�}t |dd�}||fdd�}|jdd �d k �rf|d � |f� fdd� }|jdd �d k �r�|d �|f�fdd� }||d
< d S )N� zSet banTime.%s = %s� incrementzDban time increment is not available as long jail database is not set�maxtime�rndtime�formula�factor� multipliers� evformulac S s g | ] }t |��qS r )�int)�.0�ir r r �
<listcomp>� s z(Jail.setBanTimeExtra.<locals>.<listcomp>� Z
evmultipliers�1c s& | j | � | jt� �k r | jnd S )Nr ���)�TimeZCountr
)�ban� banFactor)rM r r �<lambda>� s z&Jail.setBanTimeExtra.<locals>.<lambda>z?ban.Time * (1<<(ban.Count if ban.Count<20 else 20)) * banFactorz~inline-conf-expr~�evalc S s t | jt|��S )N)�maxrV rZ )rW rX rK r r r rY s c s t || �� �S )N)�min)rW rN )rI r r rY s c s || �t j � � S )N)�random)rW rN )rJ r r rY s )rI rJ )rK rL rI rJ rM )
r r r r rE r8 r r Z str2seconds�splitrZ r
�compile)r �optr9 ZberX rN rK r )rI rM rJ r �setBanTimeExtra� s@
,
zJail.setBanTimeExtrac C s |d k r| j j|d �S | j S )N)r rE )r r` r r r �getBanTimeExtra s zJail.getBanTimeExtrac C s$ | j jd�r| j jdd�S | jj� S )z)Returns max possible ban-time of jail.
rH rI r rU )r rE r; �
getBanTime)r r r r �
getMaxBanTime s zJail.getMaxBanTimeTc C sP �y
| j dk �r
| jjd�r.d}|r8| j� }n
| jj� }x�| j j| ||| jjj d�D ]�}yn| jj
|j � dd�rpwTd|_ |j|�}t
j� |j� }|d kr�|dkr�||8 }|d kr�|dkr�wT| j|� W qT tk
�r } z tjd|tj� tjkd � W Y dd}~X qTX qTW W n> tk
�rJ } z tjd
|tj� tjkd � W Y dd}~X nX dS )
z5Restore any previous valid bans from the database.
NrH )Zjail�
forbantime�correctBanTimeZ
maxmatchesT)Z
log_ignorer r zRestore ticket failed: %s)�exc_infozRestore bans failed: %srU rU )r8 r rE rd r; rc ZgetCurrentBansr: Z failManagerZ
maxMatchesZinIgnoreIPListZgetIDZrestoredr ZtimeZgetTimerD � Exceptionr r" �getEffectiveLevelr* r+ )r rf re rC ZbtmZdiftmr. r r r �restoreCurrentBans s4
,zJail.restoreCurrentBansc C s< t jd| j� | jj� | jj� | j� t jd| j� dS )z�Start the jail, by starting filter and actions threads.
Once stated, also queries the persistent database to reinstate
any valid bans.
zStarting jail %rzJail %r startedN)r �debugr r: �startr; rj r )r r r r rl = s
z
Jail.startc C s� |rt jd| j� xt| j| jfD ]d}y |r2|j� |r>|j� W q tk
r� } z&t jd|| j|t j � t
j kd� W Y dd}~X q X q W |r�t j d| j� dS )z9Stop the jail, by stopping filter and actions threads.
zStopping jail %rz Stop %r of jail %r failed: %s)rg NzJail %r stopped)
r rk r r: r; �stop�joinrh r" ri r* r+ r )r rm rn �objr. r r r rm I s (z Jail.stopc C s | j j� p| jj� S )z?Check jail "isAlive" by checking filter and actions threads.
)r: �isAliver; )r r r r rp \ s z Jail.isAlive)r
N)r= )N)T)TT) r �
__module__� __qualname__�__doc__r! r r r r1 r3 r5 r7 �propertyr r8 �setterr: r; r< r@ rB rD rF ra rb rd rj rl rm rp r r r r r ' s6
&
-
$
r )�
__author__Z
__copyright__Z __license__r* Zmathr] r r; r Zhelpersr r r r Zmytimer r �objectr r r r r �<module> s