File: //usr/lib/python3.6/site-packages/fail2ban/server/__pycache__/observer.cpython-36.opt-1.pyc
3
UB(d�D � @ s� d Z dZdZddlZddlmZ ddlmZ ddlZddl Z ddl
Z
ddl Z ddl Z ddl
Z
ddlZddlZdd lmZ dd
lmZ dd lmZ ee�ZG d d
� d
e�ZG dd� d�Ze� ZdS )zSerg G. Brester (sebres)z"Copyright (c) 2014 Serg G. BresterZGPL� N� )�
JailThread)�FailManagerEmpty� )� getLogger)�MyTime)�Utilsc sN e Zd ZdZejd Z� fdd�Zdd� Zdd� Zd d
� Z d d � Z
d
d� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� ZdGd$d%�Z� fd&d'�ZdHd*d+�Zed,d-� �ZdId.d/�ZdJd0d1�Z ed2d3� �Z e j d4d3� �Z ed5d6� �Z d7d8� Z d9d:� Z!d;d<� Z"G d=d>� d>�Z#d?d@� Z$dAdB� Z%dCdD� Z&dEdF� Z'� Z(S )K�ObserverThreada8 Handles observing a database, managing bad ips and ban increment.
Parameters
----------
Attributes
----------
daemon
ident
name
status
active : bool
Control the state of the thread.
idle : bool
Control the idle state of the thread.
sleeptime : int
The time the thread sleeps for in the loop.
�
c sZ t t| �jdd� d| _tj� | _g | _tj� | _ d| _
i | _ d| _ d | _
d| _d| _d S )Nz f2b/observer)�nameT�< Fi )�superr �__init__�idle� threading�RLock� _queue_lock�_queueZEvent�_notify� sleeptime�_timers�_paused�_ObserverThread__db�"_ObserverThread__db_purge_intervalZdaemon)�self)� __class__� � /usr/lib/python3.6/observer.pyr ? s
zObserverThread.__init__c C s0 y
| j | S tk
r* td| ��Y nX d S )NzInvalid event index : %s)r �KeyError)r �ir r r � __getitem__T s
zObserverThread.__getitem__c C s2 y | j |= W n tk
r, td| ��Y nX d S )NzInvalid event index: %s)r r )r r r r r � __delitem__Z s zObserverThread.__delitem__c C s
t | j�S )N)�iterr )r r r r �__iter__` s zObserverThread.__iter__c C s
t | j�S )N)�lenr )r r r r �__len__c s zObserverThread.__len__c C s dS )NFr )r �otherr r r �__eq__f s zObserverThread.__eq__c C s t | �S )N)�id)r r r r �__hash__i s zObserverThread.__hash__c G sD | j j|d�}|dk r |j� tj|| j|�}|| j |< |j� dS )z�Add a named timer event to queue will start (and wake) in 'starttime' seconds
Previous timer event with same name will be canceled and trigger self into
queue after new 'starttime' value
N)r �getZcancelr �Timer�add�start)r r � starttime�event�tr r r �add_named_timerl s
z ObserverThread.add_named_timerc G s^ t jdk rB|rBtjtj| jt j� | tj� | |f�}|j� dS tj|| j |�}|j� dS )zJAdd a timer event to queue will start (and wake) in 'starttime' seconds
N)
r ZmyTimer r+ r �DEFAULT_SLEEP_INTERVAL�
_delayedEvent�timer- r, )r r. r/ r0 r r r � add_timery s zObserverThread.add_timerc C sN t j� |kstj� |kr*| jd|�� d S tjtj| j|||f�}|j� d S )Nr )r ) r r4 r5 r r+ r r2 r3 r- )r Z endMyTimeZendTimer/ r0 r r r r3 � s z ObserverThread._delayedEventc C s | j s| j}|r|j� dS )z1Notify wakeup (sets /and resets/ notify event)
N)r r �set)r �nr r r � pulse_notify� s zObserverThread.pulse_notifyc G s* | j � | jj|� W dQ R X | j� dS )z5Add a event to queue and notify thread to wake up.
N)r r �appendr8 )r r/ r r r r, � s zObserverThread.addc G s" | j � | jj|� W dQ R X dS )z=Add a event to queue withouth notifying thread to wake up.
N)r r r9 )r r/ r r r �add_wn� s zObserverThread.add_wnc G s ||� d S )Nr )r �l�argsr r r � call_lambda� s zObserverThread.call_lambdac C s� t jd� | jd| jd� | j| j| j| j| j| j | j
dd� dd� d� }�y8| j d� �x| j �rfd | _
x�| j�s yrd
}| j� t| j�r�| jjd �}W d
Q R X |d
kr�P |d }t|d �s�|j|�p�t| |�}||d d
� � W qj tk
�r } zt jd
|dd� W Y d
d
}~X qjX qjW | j}|�rPd| _
|j| j� |j� | j�rdqZqZt j t j � | j sZP qZW t jdt| j�� d
| _W n4 tk
�r� } zt jd|dd� W Y d
d
}~X nX | j� g | _W d
Q R X d| _
dS )z�Main loop for Threading.
This function is the main loop of the thread.
Returns
-------
bool
True when the thread exits nicely.
zObserver start...�DB_PURGE�db_purgec S s f S )Nr r r r r �<lambda>� s z$ObserverThread.run.<locals>.<lambda>c S s f S )Nr r r r r r@ � s ) Zcall�db_setr? �is_aliveZ is_activer- �stop�nop�shutdownrB FNr r z%sT)�exc_infoz&Observer stopped, %s events remaining.z Observer stopped after error: %s)!�logSys�infor1 r r= rA r? �isAlive�isActiver- rC r, �activer r r r$ r �pop�callabler* �getattr� Exception�errorr �waitr �clearr4 �sleepr r2 �is_full)r Z_ObserverThread__methZev�meth�er7 r r r �run� s^
&
"zObserverThread.runc C s dS )NTr )r r r r rI � s zObserverThread.isAliveNc C s | j S )N)rK )r ZfromStrr r r rJ s zObserverThread.isActivec
s* | j � | js tt| �j� W d Q R X d S )N)r rK r
r r- )r )r r r r- s zObserverThread.start� Tc C s� | j r�| jr�tjd|� | j�& | jd� | j}| jj� d | _W d Q R X | j|�sX|rt|j� d| _ d| _ d | _
n|| _| j t |d��o�| j
S dS )Nz-Observer stop ... try to end queue %s secondsrE FTg �?)rK r rG rH r r: r6 �
wait_emptyrR r r � wait_idle�minrT )r ZwtimeZ forceQuitr7 r r r rC s
zObserverThread.stopc C s$ | j � t| j�rdS dS Q R X d S )NTF)r r$ r )r r r r rT # s zObserverThread.is_fullc C s� t jtj� |dk r tj � | }| jdk rH| jd� | jrH| jrH| j � x,| jrt|dk rftj � |krfP t jtj� qJW | j
d� | j S )zWWait observer is running and returns if observer has no more events (queue is empty)
NrD g����MbP?) r4 rS r r2 r r r: rT r r8 rZ )r r rV r r r rY ( s
zObserverThread.wait_emptyc C s^ t jtj� | jrdS |dk r*tj � | }x,| jsV|dk rHtj � |krHP t jtj� q,W | jS )zJWait observer is running and returns if observer idle (observer sleeps)
TN)r4 rS r r2 r r )r r rV r r r rZ < s zObserverThread.wait_idlec C s | j S )N)r )r r r r �pausedJ s zObserverThread.pausedc C s | j |krd S || _ | j� d S )N)r r8 )r �pauser r r r\ N s
c C s dS )z/Status of observer to be implemented. [TODO]
� )r^ r^ r )r r r r �statusW s zObserverThread.statusc C s
|| _ d S )N)r )r �dbr r r rA a s zObserverThread.db_setc C s2 t jd� | jd k r | jj� | jd| jd� d S )Nz Purge database event occurredr> r? )rG �debugr �purger1 r )r r r r r? d s
zObserverThread.db_purgec C s� |j � s|jd� rdS |j� }|j� }tjd|j|� d}d}d}�y|jjj � }|j
} | dk r�xF| j ||�D ]6\}}}
t ||j
� �}d|dk r�|nd> d d }P qrW t||�}|dk r�||kr�tjd|j|||� dS |dkr�dS tjd |j|tj|�||||k�rd
nd � |jjj||d d �}|j|� ||k�rL|jj|� W n> tk
�r� } z tjd
| tj� tjkd� W Y dd} ~ X nX dS )z} Notify observer a failure for ip was found
Observer will check ip was known (bad) and possibly increase an retry count
� incrementNz [%s] Observer: failure found %sr r � r z8[%s] Ignore failure %s before last ban %s < %s, restoredz%[%s] Found %s, bad - %s, %s # -> %s%sz, Banr^ Tz%s)rF )rI �getBanTimeExtra�getID�getTimerG ra r �filterZ failManagerZ getMaxRetry�database�getBan�max� getBanCountr[ rH r �time2strZ
addFailure� setBanCountZ
performBanrO rP �getEffectiveLevel�logging�DEBUG) r �jail�ticket�ipZunixTime�banCountZ
retryCount� timeOfBanZmaxRetryr` � lastBanTimerV r r r � failureFoundo s@
zObserverThread.failureFoundc @ s e Zd Zdd� ZdS )zObserverThread.BanTimeIncrc C s || _ || _d S )N)ZTimeZCount)r �banTimeru r r r r � s z#ObserverThread.BanTimeIncr.__init__N)�__name__�
__module__� __qualname__r r r r r � BanTimeIncr� s r} c C s |j � }|d | j||��S )N� evformula)re r} )r rr ry ru �ber r r � calcBanTime� s zObserverThread.calcBanTimec C sD |j � s|j r|S |j� }|j� }|}y�|dkr�|jdd�r�x�|jj|||jdd�d�D ]�\}}} ||j� kr�|j|d � tj d|||� |dkr�|d | j
||��}|j |� |j � |kr�tj
d |j||tj|�tj|�tj|�f � nd
|_P q\W W n> tk
�r> }
z tjd |
tj� tjkd � W Y d
d
}
~
X nX |S )ztCheck for IP address to increment ban time (if was already banned).
Returns
-------
float
new ban time.
r rc F� overalljails)r� r z"IP %s was already banned: %s #, %sr~ z/[%s] IP %s is bad: %s # last %s - incr %s to %sTz%s)rF N)rI ri re rf r* rj rl rn rG ra r} �
setBanTimerg rH r r rm � seconds2str�restoredrO rP ro rp rq ) r rr ry rs r rt Z
orgBanTimeru rv rw rV r r r � incrBanTime� s0 $
,zObserverThread.incrBanTimec C s� |j r
dS �y4|}|j� }tjd|j||� |dkrh|j� dkrh| j|||�}|dks^||krh|j|� |dkr�|j� | }t j
|�t j |�f}|t j � k r�tjd|d � dS nd}||k�rtj
d|j||j� f|�� tjd d
|j|||f� | jtd td || d ��| j||� |jdk �r>|j �r>|jj||� W n> tk
�r~ } z tjd
|tj� tjkd� W Y dd}~X nX dS )z� Notify observer a ban occured for ip
Observer will check ip was known (bad) and possibly increase/prolong a ban time
Secondary we will actualize the bans and bips (bad ip) in database
Nz [%s] Observer: ban found %s, %sr zIgnore old bantime %sF� permanent�infinitez$[%s] Increase Ban %s (%d # %s -> %s)rX z [%s] Observer: prolong %s in %sr
r z%s)rF ���r� r� )r� r� )r� rf rG ra r �
getBanTimer� r� rg r r� rm r4 Znoticerl �logr5 r[ rk �
prolongBanri ZaddBanrO rP ro rp rq ) r rs rr �btimeZoldbtimert ZbendtimeZlogtimerV r r r �banFound� s4
&zObserverThread.banFoundc C st y2|j � }|j� }tjd|j||� |jj|� W n< tk
rn } z tjd|tj � t
j kd� W Y dd}~X nX dS )z� Notify observer a ban occured for ip
Observer will check ip was known (bad) and possibly increase/prolong a ban time
Secondary we will actualize the bans and bips (bad ip) in database
z [%s] Observer: prolong %s, %sz%s)rF N) r� rf rG ra r ZactionsZ _prolongBanrO rP ro rp rq )r rs rr r� rt rV r r r r� � s zObserverThread.prolongBan)N)rX T)N)N))rz r{ r| �__doc__r r2 r r r! r# r% r' r) r1 r5 r3 r8 r, r: r= rW rI rJ r- rC �propertyrT rY rZ r\ �setterr_ rA r? rx r} r� r� r� r� �
__classcell__r r )r r r ( sF
P
2)*r c @ s e Zd Zdd� ZdS )�
_Observersc C s
d | _ d S )N)ZMain)r r r r r s z_Observers.__init__N)rz r{ r| r r r r r r�
s r� )�
__author__Z
__copyright__Z __license__r Z
jailthreadr Z failmanagerr �osrp r4 ZdatetimeZmathZjsonZrandom�sysZhelpersr Zmytimer Zutilsr rz rG r r� Z Observersr r r r �<module> s" 8 h