PNG  IHDRQgAMA a cHRMz&u0`:pQ<bKGDgmIDATxwUﹻ& ^CX(J I@ "% (** BX +*i"]j(IH{~R)[~>h{}gy)I$Ij .I$I$ʊy@}x.: $I$Ii}VZPC)I$IF ^0ʐJ$I$Q^}{"r=OzI$gRZeC.IOvH eKX $IMpxsk.쒷/&r[޳<v| .I~)@$updYRa$I |M.e JaֶpSYR6j>h%IRز if&uJ)M$I vLi=H;7UJ,],X$I1AҒJ$ XY XzI@GNҥRT)E@;]K*Mw;#5_wOn~\ DC&$(A5 RRFkvIR}l!RytRl;~^ǷJj اy뷦BZJr&ӥ8Pjw~vnv X^(I;4R=P[3]J,]ȏ~:3?[ a&e)`e*P[4]T=Cq6R[ ~ޤrXR Հg(t_HZ-Hg M$ãmL5R uk*`%C-E6/%[t X.{8P9Z.vkXŐKjgKZHg(aK9ڦmKjѺm_ \#$5,)-  61eJ,5m| r'= &ڡd%-]J on Xm|{ RҞe $eڧY XYrԮ-a7RK6h>n$5AVڴi*ֆK)mѦtmr1p| q:흺,)Oi*ֺK)ܬ֦K-5r3>0ԔHjJئEZj,%re~/z%jVMڸmrt)3]J,T K֦OvԒgii*bKiNO~%PW0=dii2tJ9Jݕ{7"I P9JKTbu,%r"6RKU}Ij2HKZXJ,妝 XYrP ެ24c%i^IK|.H,%rb:XRl1X4Pe/`x&P8Pj28Mzsx2r\zRPz4J}yP[g=L) .Q[6RjWgp FIH*-`IMRaK9TXcq*I y[jE>cw%gLRԕiFCj-ďa`#e~I j,%r,)?[gp FI˨mnWX#>mʔ XA DZf9,nKҲzIZXJ,L#kiPz4JZF,I,`61%2s $,VOϚ2/UFJfy7K> X+6 STXIeJILzMfKm LRaK9%|4p9LwJI!`NsiazĔ)%- XMq>pk$-$Q2x#N ؎-QR}ᶦHZډ)J,l#i@yn3LN`;nڔ XuX5pF)m|^0(>BHF9(cզEerJI rg7 4I@z0\JIi䵙RR0s;$s6eJ,`n 䂦0a)S)A 1eJ,堌#635RIgpNHuTH_SԕqVe ` &S)>p;S$魁eKIuX`I4춒o}`m$1":PI<[v9^\pTJjriRŭ P{#{R2,`)e-`mgj~1ϣLKam7&U\j/3mJ,`F;M'䱀 .KR#)yhTq;pcK9(q!w?uRR,n.yw*UXj#\]ɱ(qv2=RqfB#iJmmL<]Y͙#$5 uTU7ӦXR+q,`I}qL'`6Kͷ6r,]0S$- [RKR3oiRE|nӦXR.(i:LDLTJjY%o:)6rxzҒqTJjh㞦I.$YR.ʼnGZ\ֿf:%55 I˼!6dKxm4E"mG_ s? .e*?LRfK9%q#uh$)i3ULRfK9yxm܌bj84$i1U^@Wbm4uJ,ҪA>_Ij?1v32[gLRD96oTaR׿N7%L2 NT,`)7&ƝL*꽙yp_$M2#AS,`)7$rkTA29_Iye"|/0t)$n XT2`YJ;6Jx".e<`$) PI$5V4]29SRI>~=@j]lp2`K9Jaai^" Ԋ29ORI%:XV5]JmN9]H;1UC39NI%Xe78t)a;Oi Ҙ>Xt"~G>_mn:%|~ޅ_+]$o)@ǀ{hgN;IK6G&rp)T2i୦KJuv*T=TOSV>(~D>dm,I*Ɛ:R#ۙNI%D>G.n$o;+#RR!.eU˽TRI28t)1LWϚ>IJa3oFbu&:tJ*(F7y0ZR ^p'Ii L24x| XRI%ۄ>S1]Jy[zL$adB7.eh4%%누>WETf+3IR:I3Xה)3אOۦSRO'ٺ)S}"qOr[B7ϙ.edG)^ETR"RtRݜh0}LFVӦDB^k_JDj\=LS(Iv─aTeZ%eUAM-0;~˃@i|l @S4y72>sX-vA}ϛBI!ݎߨWl*)3{'Y|iSlEڻ(5KtSI$Uv02,~ԩ~x;P4ցCrO%tyn425:KMlD ^4JRxSهF_}شJTS6uj+ﷸk$eZO%G*^V2u3EMj3k%)okI]dT)URKDS 7~m@TJR~荪fT"֛L \sM -0T KfJz+nإKr L&j()[E&I ߴ>e FW_kJR|!O:5/2跌3T-'|zX ryp0JS ~^F>-2< `*%ZFP)bSn"L :)+pʷf(pO3TMW$~>@~ū:TAIsV1}S2<%ޟM?@iT ,Eūoz%i~g|`wS(]oȤ8)$ ntu`өe`6yPl IzMI{ʣzʨ )IZ2= ld:5+請M$-ї;U>_gsY$ÁN5WzWfIZ)-yuXIfp~S*IZdt;t>KūKR|$#LcԀ+2\;kJ`]YǔM1B)UbG"IRߊ<xܾӔJ0Z='Y嵤 Leveg)$znV-º^3Ւof#0Tfk^Zs[*I꯳3{)ˬW4Ւ4 OdpbZRS|*I 55#"&-IvT&/윚Ye:i$ 9{LkuRe[I~_\ؠ%>GL$iY8 9ܕ"S`kS.IlC;Ҏ4x&>u_0JLr<J2(^$5L s=MgV ~,Iju> 7r2)^=G$1:3G< `J3~&IR% 6Tx/rIj3O< ʔ&#f_yXJiގNSz; Tx(i8%#4 ~AS+IjerIUrIj362v885+IjAhK__5X%nV%Iͳ-y|7XV2v4fzo_68"S/I-qbf; LkF)KSM$ Ms>K WNV}^`-큧32ŒVؙGdu,^^m%6~Nn&͓3ŒVZMsRpfEW%IwdǀLm[7W&bIRL@Q|)* i ImsIMmKmyV`i$G+R 0tV'!V)֏28vU7͒vHꦼtxꗞT ;S}7Mf+fIRHNZUkUx5SAJㄌ9MqμAIRi|j5)o*^'<$TwI1hEU^c_j?Е$%d`z cyf,XO IJnTgA UXRD }{H}^S,P5V2\Xx`pZ|Yk:$e ~ @nWL.j+ϝYb퇪bZ BVu)u/IJ_ 1[p.p60bC >|X91P:N\!5qUB}5a5ja `ubcVxYt1N0Zzl4]7­gKj]?4ϻ *[bg$)+À*x쳀ogO$~,5 زUS9 lq3+5mgw@np1sso Ӻ=|N6 /g(Wv7U;zωM=wk,0uTg_`_P`uz?2yI!b`kĸSo+Qx%!\οe|އԁKS-s6pu_(ֿ$i++T8=eY; צP+phxWQv*|p1. ά. XRkIQYP,drZ | B%wP|S5`~́@i޾ E;Չaw{o'Q?%iL{u D?N1BD!owPHReFZ* k_-~{E9b-~P`fE{AܶBJAFO wx6Rox5 K5=WwehS8 (JClJ~ p+Fi;ŗo+:bD#g(C"wA^ r.F8L;dzdIHUX݆ϞXg )IFqem%I4dj&ppT{'{HOx( Rk6^C٫O.)3:s(۳(Z?~ٻ89zmT"PLtw䥈5&b<8GZ-Y&K?e8,`I6e(֍xb83 `rzXj)F=l($Ij 2*(F?h(/9ik:I`m#p3MgLaKjc/U#n5S# m(^)=y=đx8ŬI[U]~SцA4p$-F i(R,7Cx;X=cI>{Km\ o(Tv2vx2qiiDJN,Ҏ!1f 5quBj1!8 rDFd(!WQl,gSkL1Bxg''՞^ǘ;pQ P(c_ IRujg(Wz bs#P­rz> k c&nB=q+ؔXn#r5)co*Ũ+G?7< |PQӣ'G`uOd>%Mctz# Ԫڞ&7CaQ~N'-P.W`Oedp03C!IZcIAMPUۀ5J<\u~+{9(FbbyAeBhOSܳ1 bÈT#ŠyDžs,`5}DC-`̞%r&ڙa87QWWp6e7 Rϫ/oY ꇅ Nܶըtc!LA T7V4Jsū I-0Pxz7QNF_iZgúWkG83 0eWr9 X]㾮݁#Jˢ C}0=3ݱtBi]_ &{{[/o[~ \q鯜00٩|cD3=4B_b RYb$óBRsf&lLX#M*C_L܄:gx)WΘsGSbuL rF$9';\4Ɍq'n[%p.Q`u hNb`eCQyQ|l_C>Lb꟟3hSb #xNxSs^ 88|Mz)}:](vbۢamŖ࿥ 0)Q7@0=?^k(*J}3ibkFn HjB׻NO z x}7p 0tfDX.lwgȔhԾŲ }6g E |LkLZteu+=q\Iv0쮑)QٵpH8/2?Σo>Jvppho~f>%bMM}\//":PTc(v9v!gոQ )UfVG+! 35{=x\2+ki,y$~A1iC6#)vC5^>+gǵ@1Hy٪7u;p psϰu/S <aʸGu'tD1ԝI<pg|6j'p:tպhX{o(7v],*}6a_ wXRk,O]Lܳ~Vo45rp"N5k;m{rZbΦ${#)`(Ŵg,;j%6j.pyYT?}-kBDc3qA`NWQū20/^AZW%NQ MI.X#P#,^Ebc&?XR tAV|Y.1!؅⨉ccww>ivl(JT~ u`ٵDm q)+Ri x/x8cyFO!/*!/&,7<.N,YDŽ&ܑQF1Bz)FPʛ?5d 6`kQձ λc؎%582Y&nD_$Je4>a?! ͨ|ȎWZSsv8 j(I&yj Jb5m?HWp=g}G3#|I,5v珿] H~R3@B[☉9Ox~oMy=J;xUVoj bUsl_35t-(ՃɼRB7U!qc+x4H_Qo֮$[GO<4`&č\GOc[.[*Af%mG/ ňM/r W/Nw~B1U3J?P&Y )`ѓZ1p]^l“W#)lWZilUQu`-m|xĐ,_ƪ|9i:_{*(3Gѧ}UoD+>m_?VPۅ15&}2|/pIOʵ> GZ9cmíتmnz)yߐbD >e}:) r|@R5qVSA10C%E_'^8cR7O;6[eKePGϦX7jb}OTGO^jn*媓7nGMC t,k31Rb (vyܴʭ!iTh8~ZYZp(qsRL ?b}cŨʊGO^!rPJO15MJ[c&~Z`"ѓޔH1C&^|Ш|rʼ,AwĴ?b5)tLU)F| &g٣O]oqSUjy(x<Ϳ3 .FSkoYg2 \_#wj{u'rQ>o;%n|F*O_L"e9umDds?.fuuQbIWz |4\0 sb;OvxOSs; G%T4gFRurj(֍ڑb uԖKDu1MK{1^ q; C=6\8FR艇!%\YÔU| 88m)֓NcLve C6z;o&X x59:q61Z(T7>C?gcļxѐ Z oo-08jہ x,`' ҔOcRlf~`jj".Nv+sM_]Zk g( UOPyεx%pUh2(@il0ݽQXxppx-NS( WO+轾 nFߢ3M<;z)FBZjciu/QoF 7R¥ ZFLF~#ȣߨ^<쩡ݛкvџ))ME>ώx4m#!-m!L;vv#~Y[đKmx9.[,UFS CVkZ +ߟrY٧IZd/ioi$%͝ب_ֶX3ܫhNU ZZgk=]=bbJS[wjU()*I =ώ:}-蹞lUj:1}MWm=̛ _ ¾,8{__m{_PVK^n3esw5ӫh#$-q=A̟> ,^I}P^J$qY~Q[ Xq9{#&T.^GVj__RKpn,b=`żY@^՝;z{paVKkQXj/)y TIc&F;FBG7wg ZZDG!x r_tƢ!}i/V=M/#nB8 XxЫ ^@CR<{䤭YCN)eKOSƟa $&g[i3.C6xrOc8TI;o hH6P&L{@q6[ Gzp^71j(l`J}]e6X☉#͕ ׈$AB1Vjh㭦IRsqFBjwQ_7Xk>y"N=MB0 ,C #o6MRc0|$)ف"1!ixY<B9mx `,tA>)5ػQ?jQ?cn>YZe Tisvh# GMމȇp:ԴVuږ8ɼH]C.5C!UV;F`mbBk LTMvPʍϤj?ԯ/Qr1NB`9s"s TYsz &9S%U԰> {<ؿSMxB|H\3@!U| k']$U+> |HHMLޢ?V9iD!-@x TIî%6Z*9X@HMW#?nN ,oe6?tQwڱ.]-y':mW0#!J82qFjH -`ѓ&M0u Uγmxϵ^-_\])@0Rt.8/?ٰCY]x}=sD3ojަЫNuS%U}ԤwHH>ڗjܷ_3gN q7[q2la*ArǓԖ+p8/RGM ]jacd(JhWko6ڎbj]i5Bj3+3!\j1UZLsLTv8HHmup<>gKMJj0@H%,W΃7R) ">c, xixј^ aܖ>H[i.UIHc U1=yW\=S*GR~)AF=`&2h`DzT󑓶J+?W+}C%P:|0H܆}-<;OC[~o.$~i}~HQ TvXΈr=b}$vizL4:ȰT|4~*!oXQR6Lk+#t/g lԁߖ[Jڶ_N$k*". xsxX7jRVbAAʯKҎU3)zSNN _'s?f)6X!%ssAkʱ>qƷb hg %n ~p1REGMHH=BJiy[<5 ǁJҖgKR*倳e~HUy)Ag,K)`Vw6bRR:qL#\rclK/$sh*$ 6덤 KԖc 3Z9=Ɣ=o>X Ώ"1 )a`SJJ6k(<c e{%kϊP+SL'TcMJWRm ŏ"w)qc ef꒵i?b7b('"2r%~HUS1\<(`1Wx9=8HY9m:X18bgD1u ~|H;K-Uep,, C1 RV.MR5άh,tWO8WC$ XRVsQS]3GJ|12 [vM :k#~tH30Rf-HYݺ-`I9%lIDTm\ S{]9gOڒMNCV\G*2JRŨ;Rҏ^ڽ̱mq1Eu?To3I)y^#jJw^Ńj^vvlB_⋌P4x>0$c>K†Aļ9s_VjTt0l#m>E-,,x,-W)سo&96RE XR.6bXw+)GAEvL)͞K4$p=Ũi_ѱOjb HY/+@θH9޼]Nԥ%n{ &zjT? Ty) s^ULlb,PiTf^<À] 62R^V7)S!nllS6~͝V}-=%* ʻ>G DnK<y&>LPy7'r=Hj 9V`[c"*^8HpcO8bnU`4JȪAƋ#1_\ XϘHPRgik(~G~0DAA_2p|J묭a2\NCr]M_0 ^T%e#vD^%xy-n}-E\3aS%yN!r_{ )sAw ڼp1pEAk~v<:`'ӭ^5 ArXOI驻T (dk)_\ PuA*BY]yB"l\ey hH*tbK)3 IKZ򹞋XjN n *n>k]X_d!ryBH ]*R 0(#'7 %es9??ښFC,ՁQPjARJ\Ρw K#jahgw;2$l*) %Xq5!U᢯6Re] |0[__64ch&_}iL8KEgҎ7 M/\`|.p,~`a=BR?xܐrQ8K XR2M8f ?`sgWS%" Ԉ 7R%$ N}?QL1|-эټwIZ%pvL3Hk>,ImgW7{E xPHx73RA @RS CC !\ȟ5IXR^ZxHл$Q[ŝ40 (>+ _C >BRt<,TrT {O/H+˟Pl6 I B)/VC<6a2~(XwV4gnXR ϱ5ǀHٻ?tw똤Eyxp{#WK qG%5],(0ӈH HZ])ג=K1j&G(FbM@)%I` XRg ʔ KZG(vP,<`[ Kn^ SJRsAʠ5xՅF`0&RbV tx:EaUE/{fi2;.IAwW8/tTxAGOoN?G}l L(n`Zv?pB8K_gI+ܗ #i?ޙ.) p$utc ~DžfՈEo3l/)I-U?aԅ^jxArA ΧX}DmZ@QLےbTXGd.^|xKHR{|ΕW_h] IJ`[G9{).y) 0X YA1]qp?p_k+J*Y@HI>^?gt.06Rn ,` ?);p pSF9ZXLBJPWjgQ|&)7! HjQt<| ؅W5 x W HIzYoVMGP Hjn`+\(dNW)F+IrS[|/a`K|ͻ0Hj{R,Q=\ (F}\WR)AgSG`IsnAR=|8$}G(vC$)s FBJ?]_u XRvύ6z ŨG[36-T9HzpW̞ú Xg큽=7CufzI$)ki^qk-) 0H*N` QZkk]/tnnsI^Gu't=7$ Z;{8^jB% IItRQS7[ϭ3 $_OQJ`7!]W"W,)Iy W AJA;KWG`IY{8k$I$^%9.^(`N|LJ%@$I}ֽp=FB*xN=gI?Q{٥4B)mw $Igc~dZ@G9K X?7)aK%݅K$IZ-`IpC U6$I\0>!9k} Xa IIS0H$I H ?1R.Чj:4~Rw@p$IrA*u}WjWFPJ$I➓/6#! LӾ+ X36x8J |+L;v$Io4301R20M I$-E}@,pS^ޟR[/s¹'0H$IKyfŸfVOπFT*a$I>He~VY/3R/)>d$I>28`Cjw,n@FU*9ttf$I~<;=/4RD~@ X-ѕzἱI$: ԍR a@b X{+Qxuq$IЛzo /~3\8ڒ4BN7$IҀj V]n18H$IYFBj3̵̚ja pp $Is/3R Ӻ-Yj+L;.0ŔI$Av? #!5"aʄj}UKmɽH$IjCYs?h$IDl843.v}m7UiI=&=0Lg0$I4: embe` eQbm0u? $IT!Sƍ'-sv)s#C0:XB2a w I$zbww{."pPzO =Ɔ\[ o($Iaw]`E).Kvi:L*#gР7[$IyGPI=@R 4yR~̮´cg I$I/<tPͽ hDgo 94Z^k盇΄8I56^W$I^0̜N?4*H`237}g+hxoq)SJ@p|` $I%>-hO0eO>\ԣNߌZD6R=K ~n($I$y3D>o4b#px2$yڪtzW~a $I~?x'BwwpH$IZݑnC㧄Pc_9sO gwJ=l1:mKB>Ab<4Lp$Ib o1ZQ@85b̍ S'F,Fe,^I$IjEdù{l4 8Ys_s Z8.x m"+{~?q,Z D!I$ϻ'|XhB)=…']M>5 rgotԎ 獽PH$IjIPhh)n#cÔqA'ug5qwU&rF|1E%I$%]!'3AFD/;Ck_`9 v!ٴtPV;x`'*bQa w I$Ix5 FC3D_~A_#O݆DvV?<qw+I$I{=Z8".#RIYyjǪ=fDl9%M,a8$I$Ywi[7ݍFe$s1ՋBVA?`]#!oz4zjLJo8$I$%@3jAa4(o ;p,,dya=F9ً[LSPH$IJYЉ+3> 5"39aZ<ñh!{TpBGkj}Sp $IlvF.F$I z< '\K*qq.f<2Y!S"-\I$IYwčjF$ w9 \ߪB.1v!Ʊ?+r:^!I$BϹB H"B;L'G[ 4U#5>੐)|#o0aڱ$I>}k&1`U#V?YsV x>{t1[I~D&(I$I/{H0fw"q"y%4 IXyE~M3 8XψL}qE$I[> nD?~sf ]o΁ cT6"?'_Ἣ $I>~.f|'!N?⟩0G KkXZE]ޡ;/&?k OۘH$IRۀwXӨ<7@PnS04aӶp.:@\IWQJ6sS%I$e5ڑv`3:x';wq_vpgHyXZ 3gЂ7{{EuԹn±}$I$8t;b|591nءQ"P6O5i }iR̈́%Q̄p!I䮢]O{H$IRϻ9s֧ a=`- aB\X0"+5"C1Hb?߮3x3&gşggl_hZ^,`5?ߎvĸ%̀M!OZC2#0x LJ0 Gw$I$I}<{Eb+y;iI,`ܚF:5ܛA8-O-|8K7s|#Z8a&><a&/VtbtLʌI$I$I$I$I$I$IRjDD%tEXtdate:create2022-05-31T04:40:26+00:00!Î%tEXtdate:modify2022-05-31T04:40:26+00:00|{2IENDB`Mini Shell

HOME


Mini Shell 1.0
DIR:/usr/lib/python3/dist-packages/ufw/__pycache__/
Upload File :
Current File : //usr/lib/python3/dist-packages/ufw/__pycache__/common.cpython-311.pyc
�

0fdX���dZddlZddlZddlZddlmZdZdZdZeZ	dZ
dZd	Zd
Z
Gd�de��ZGd
�d��ZdS)z!common.py: common classes for ufw�N)�debug�ufwz/lib/ufwz/usr/share/ufwz/etcz/usrz	/usr/sbinTc��eZdZdZd�Zd�ZdS)�UFWErrorz$This class represents ufw exceptionsc��||_dS�N)�value)�selfr	s  �,/usr/lib/python3/dist-packages/ufw/common.py�__init__zUFWError.__init__#s
����
�
�
�c�*�t|j��Sr)�reprr	�r
s r�__str__zUFWError.__str__&s���D�J���r
N)�__name__�
__module__�__qualname__�__doc__rr�r
rrr!s8������.�.���� � � � � r
rc��eZdZdZ			d!d�Zd�Zd	�Zd
�Zd�Zd�Z	d"d�Z
d�Zd�Zd�Z
d�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd�Zd S)#�UFWRulez$This class represents firewall rules�any�	0.0.0.0/0�inF�c
��d|_d|_d|_d|_d|_d|_d|_d|_d|_d|_	d|_
d|_d|_d|_
d|_d|_d|_||_d|_	|�|��|�|��|�|��|�|d��|�|��|�|��|�|��|�|	��dS#t4$r�wxYw)NFrr�src)�remove�updated�v6�dstr�dport�sport�protocol�multi�dapp�sapp�action�position�logtype�interface_in�
interface_out�	direction�forward�comment�
set_action�set_protocol�set_port�set_src�set_dst�
set_direction�set_commentr)
r
r)r%r#r"r$rr.r/r0s
          rrzUFWRule.__init__,sL�������������������
���
���
���
���	���	������
�������������������
	��O�O�F�#�#�#����h�'�'�'��M�M�%� � � ��M�M�%��'�'�'��L�L������L�L��������y�)�)�)����W�%�%�%�%�%���	�	�	��	���s
�B)D2�2D>c�*�|���Sr)�format_rulers rrzUFWRule.__str__Os�����!�!�!r
c��d|z}t|j��}|���|D]}|d|�d|j|��z
}�|S)zPrint rule to stdoutz'%s'z, �=)�list�__dict__�sort)r
�res�keys�ks    r�_get_attribzUFWRule._get_attribRs\����o���D�M�"�"���	�	�����	5�	5�A��C����4�=��#3�#3�4�4�C�C��
r
c���t|j|j��}|j|_|j|_|j|_|j|_|j|_|j|_|j	|_	|j
|_
|j|_|j|_|j
|_
|j|_|j|_|j|_|j|_|j|_|j|_|S)zReturn a duplicate of a rule)rr)r%rr r!r"rr#r$r&r'r(r*r+r,r-r.r/r0)r
�rules  r�dup_rulezUFWRule.dup_rule[s����t�{�D�M�2�2���k����|����'����8����8����Z��
��Z��
��Z��
��I��	��I��	��
��
��|��� �-���!�/��������|����|����r
c���d}|jdkr
|d|jzz
}|jdkr
|d|jzz
}|jdkr|dz
}n�|d|jzz
}|jrl|dz
}|jdkr+|jdkr |d|jzz
}|dz
}|d	|jzz
}n1|jdkr|d|jzz
}n|jdkr
|d	|jzz
}|jd
kr|jdkr
|d|jzz
}|js|jdkr
|d
|jzz
}|jd
kr|jdkr
|d|jzz
}|js|jdkr
|d|jzz
}d}|jdkr
d|jz}|j	dkr	|d|zz
}n@|j	dkr|d|zz
}|jdkr|dz
}n|j	dkr	|d|zz
}n|d|zz
}|j
dks|jdkr�d}tj
d��}|j
dkr!|d|�d|j
��zz
}|j
dkr|jdkr|dz
}|jdkr!|d|�d|j��zz
}|d z
}|d|zz
}|���S)!zFormat rule for later parsingrz -i %sz -o %srz -p allz -p z
 -m multiportz
 --dports z
 --sports r�::/0z -d z	 --dport z -s z	 --sport �_�allowz -j ACCEPT%s�rejectz -j REJECT%s�tcpz --reject-with tcp-reset�limitz -j LIMIT%sz
 -j DROP%sz-m comment --comment '� �dapp_z%20�,�sapp_�')r,r-r%r&r#r$r"rr+r)r'r(�re�compile�sub�strip)r
�rule_str�lstrr0�	pat_spaces     rr9zUFWRule.format_rulers�������"�"���D�$5�6�6�H����#�#���D�$6�7�7�H��=�E�!�!��	�!�H�H�����.�.�H��z�	
:��O�+���:��&�&�4�:��+>�+>���t�z� 9�9�H���/�H���t�z� 9�9�H�H��Z�5�(�(���t�z� 9�9�H�H��Z�5�(�(���t�z� 9�9�H��8�{�"�"�t�x�6�'9�'9�����)�)�H��z�	1�d�j�E�1�1���d�j�0�0�H��8�{�"�"�t�x�6�'9�'9�����)�)�H��z�	1�d�j�E�1�1���d�j�0�0�H����<�2������%�D��;�'�!�!���$�/�/�H�H�
�[�H�
$�
$���$�/�/�H��}��%�%��6�6���
�[�G�
#�
#��
��.�.�H�H����-�-�H��9��?�?�d�i�2�o�o�.�G��
�3���I��y�B����7�Y�]�]�5�$�)�%D�%D�D�D���y�B���4�9��?�?��3����y�B����7�Y�]�]�5�$�)�%D�%D�D�D���s�N�G���g�
�%�H��~�~���r
c�*�|����d��}|ddks|ddks|ddkr|d|_nd|_d}t|��dkr|d}|�|��d	S)
zSets action of the rulerHrrIrJrL�denyr�N)�lower�splitr)�len�set_logtype)r
r)�tmpr+s    rr1zUFWRule.set_action�s����l�l�n�n�"�"�3�'�'���q�6�W����A��(� 2� 2�c�!�f��6G�6G��a�&�D�K�K� �D�K����s�8�8�a�<�<��!�f�G�����!�!�!�!�!r
r"c��td��|z}|dkr�n@|dkr	|jr�n1|dkr	|jr�n"tjd|��stjd|��rt|���|�d��|�d��zd	krt|���|�d��}t|��d
krd|_	d}|D�]t}tjd
|��r�d|_	|�d��}|D]7}t|��d
kst|��dkrt|����8t|d��t|d
��krt|���n�tjd|��r6t|��d
kst|��dkrt|���nWtjd|��r3	tj|��}n,#t$rt|���wxYwt|���|r|dt|��zz
}��et|��}��v|}|dkrt|��|_dSt|��|_dS)z:Sets port and location (destination or source) of the rulez
Bad port '%s'rr"rz^[,:]z[,:]$rO�:�r[Trz	^\d+:\d+$i��rz^\d+$z
^\w[\w\-]+N)rHr'r(rR�matchr�countr]r^r&�int�socket�
getservbyname�	Exception�strr$r#)	r
�port�loc�err_msg�portsr`�p�ran�qs	         rr3zUFWRule.set_port�s����O�$�$��-���5�=�=��
�E�\�\�d�i�\��
�E�\�\�d�i�\��
�X�h��
%�
%�%	���(�D�)A�)A�%	��7�#�#�#��j�j��o�o��
�
�3���/�2�
5�
5��7�#�#�#��J�J�s�O�O�E��5�z�z�A�~�~�!��
��C��
!�
!���8�L�!�,�,�,�!%�D�J��'�'�#�,�,�C� �4�4���q�6�6�A�:�:��Q���%���"*�7�"3�"3�3�*8��3�q�6�{�{�c�#�a�&�k�k�1�1�&�w�/�/�/�2��X�g�q�)�)�	,��1�v�v��z�z�S��V�V�e�^�^�&�w�/�/�/�&4��X�m�Q�/�/�,�0�"�0��3�3����$�0�0�0�&�w�/�/�/�0����#�7�+�+�+��!��3��Q���<�'�C�C��a�&�&�C�C��D��%�<�<��T���D�J�J�J��T���D�J�J�Js�.H�Hc��|tjjdgzvr	||_dSt	d��|z}t|���)zSets protocol of the rulerzUnsupported protocol '%s'N)r�util�supported_protocolsr%rHr)r
r%rms   rr2zUFWRule.set_protocol�sE���s�x�3�u�g�=�=�=�$�D�M�M�M��3�4�4��A�G��7�#�#�#r
c�H�|jrN|jr|jdks|jdkrd|_|jr|jdks|jdkrd|_dSdSdS|jr|jdks|jdkrd|_|jr|jdks|jdkrd|_dSdSdS)zAdjusts src and dst based on v6rrrGN)r!r"rrs r�
_fix_anywherezUFWRule._fix_anywhere�s����7�		'��x�
"�T�X��.�.�$�(�k�2I�2I�!����x�
"�T�X��.�.�$�(�k�2I�2I�!�����
"�
"�2I�2I��x�
'�T�X��.�.�$�(�f�2D�2D�&����x�
'�T�X��.�.�$�(�f�2D�2D�&�����
'�
'�2D�2Dr
c�<�||_|���dS)zXSets whether this is ipv6 rule, and adjusts src and dst
           accordingly.
        N)r!rv)r
r!s  r�set_v6zUFWRule.set_v6s#������������r
c���|���}|dkr>tj�|d��st	d��}t|���||_|���dS)zSets source address of rulerzBad source addressN)r\rrs�
valid_addressrHrrrv�r
�addrr`rms    rr4zUFWRule.set_srcsi���j�j�l�l���%�<�<��� 6� 6�s�E� B� B�<��,�-�-�G��7�#�#�#�����������r
c���|���}|dkr>tj�|d��st	d��}t|���||_|���dS)z Sets destination address of rulerzBad destination addressN)r\rrsrzrHrr"rvr{s    rr5zUFWRule.set_dstsi���j�j�l�l���%�<�<��� 6� 6�s�E� B� B�<��1�2�2�G��7�#�#�#�����������r
c�B�|dkr$|dkrtd��}t|���dt|��vrtd��}t|���dt|��vrtd��}t|���t|��dkst|��d	krtd
��}t|���tt|����dkrtd��}t|���tt|����d
krtd��}t|���t	jdt|����std��}t|���|dkr	||_dS||_dS)zSets an interface for ruler�outzBad interface type�!z+Bad interface name: reserved character: '!'rbz/Bad interface name: can't use interface aliases�.z..z)Bad interface name: can't use '.' or '..'rz+Bad interface name: interface name is empty�z+Bad interface name: interface name too longz^[a-zA-Z0-9_\-\.\+,=%@]+$zBad interface nameN)rHrrjr^rRrdr,r-)r
�if_type�namerms    r�
set_interfacezUFWRule.set_interface's����d�?�?�w�%�/�/��,�-�-�G��7�#�#�#��#�d�)�)����E�F�F�G��7�#�#�#��#�d�)�)����I�J�J�G��7�#�#�#��t�9�9����s�4�y�y�D�0�0��C�D�D�G��7�#�#�#���D�	�	�N�N�a����E�F�F�G��7�#�#�#���D�	�	�N�N�R����E�F�F�G��7�#�#�#��x�4�c�$�i�i�@�@�	$��,�-�-�G��7�#�#�#��d�?�?� $�D����!%�D���r
c���t|��dkrCtjdt|����s!td��|z}t	|���t|��|_dS)zSets the position of the rulez-1z^[0-9]+z,Insert position '%s' is not a valid positionN)rjrRrdrHrrfr*)r
�numrms   r�set_positionzUFWRule.set_positionWs^��
�s�8�8�t���B�H�Z��S���$B�$B���F�G�G�3�O�G��7�#�#�#��C����
�
�
r
c���|���dks|���dks|dkr|���|_dStd��|z}t|���)zSets logtype of the rule�logzlog-allrzInvalid log type '%s'N)r\r+rHr)r
r+rms   rr_zUFWRule.set_logtypeasd���=�=�?�?�e�#�#�w�}�}���)�'C�'C��b�=�=�"�=�=�?�?�D�L�L�L��/�0�0�G�<�G��7�#�#�#r
c�n�|dks|dkr	||_dStd��|z}t|���)zSets direction of the rulerrzUnsupported direction '%s'N)r.rHr)r
r.rms   rr6zUFWRule.set_directionjsC������	�U� 2� 2�&�D�N�N�N��4�5�5��C�G��7�#�#�#r
c�J�tj�|j��S)zGet decoded comment of the rule)rrs�
hex_decoder0rs r�get_commentzUFWRule.get_commentrs���x�"�"�4�<�0�0�0r
c��||_dS)zSets comment of the ruleN)r0)r
r0s  rr7zUFWRule.set_commentvs
������r
c�6�d}|jri	tj�|j|j��\|_}n,#t
$rt
d��}t|���wxYw|r||_|j	ri	tj�|j	|j��\|_	}n,#t
$rt
d��}t|���wxYw|r||_|j
rS|j
�d��}tj�|��d�
|��|_
|jrU|j�d��}tj�|��d�
|��|_dSdS)z&Normalize src and dst to standard formFz"Could not normalize source addressz'Could not normalize destination addressrON)rrrs�normalize_addressr!rirHrr r"r#r]�
human_sort�joinr$)r
�changedrmrns    r�	normalizezUFWRule.normalizezs������8�		'�
(�&)�h�&@�&@���AE��'J�'J�#���7�7���
(�
(�
(��@�A�A���w�'�'�'�
(�����
'�&����8�		'�
(�&)�h�&@�&@���CG�7�'L�'L�#���7�7���
(�
(�
(��E�F�F���w�'�'�'�
(�����
'�&����:�	)��J�$�$�S�)�)�E��H����&�&�&����%���D�J��:�	)��J�$�$�S�)�)�E��H����&�&�&����%���D�J�J�J�	)�	)s�2>�)A'�;2B.�.)Cc� �|r|st���d|�d|�d�}|j|jkrt|��dS|j|jkrt|��dS|j|jkrt|��dS|j|jkrt|��dS|j|jkrt|��dS|j|jkrt|��dS|j|jkrt|��dS|j	|j	krt|��dS|j
|j
krt|��dS|j|jkrt|��dS|j|jkrt|��dS|j
|j
krt|��dS|j|jkr@|j|jkr0|j|jkr t#d��}t|��dS|j|jkr@|j|jkr0|j|jkr t#d��}t|��dSt#d	��|j|j|j|j|j|jd
�z}t|��dS)z�Check if rules match
        Return codes:
          0  match
          1  no match
         -1  match all but action, log-type and/or comment
         -2  match all but comment
        z
No match 'z' 'rQr[zFound exact matchrz$Found exact match, excepting comment���zZFound non-action/non-logtype/comment match (%(xa)s/%(ya)s/'%(xc)s' %(xl)s/%(yl)s/'%(yc)s'))�xa�ya�xl�yl�xc�yc���)�
ValueErrorr#rr$r%rr"r!r'r(r,r-r.r/r)r+r0rH)�x�y�dbg_msgs   rrdz
UFWRule.match�s����	��	��,�,��	�+,�!�!�Q�Q�Q�/���7�a�g����'�N�N�N��1��7�a�g����'�N�N�N��1��:���#�#��'�N�N�N��1��5�A�E�>�>��'�N�N�N��1��5�A�E�>�>��'�N�N�N��1��4�1�4�<�<��'�N�N�N��1��6�Q�V����'�N�N�N��1��6�Q�V����'�N�N�N��1��>�Q�^�+�+��'�N�N�N��1��?�a�o�-�-��'�N�N�N��1��;�!�+�%�%��'�N�N�N��1��9��	�!�!��'�N�N�N��1��8�q�x���A�I���$:�$:��	�Q�Y�&�&��+�,�,�G��'�N�N�N��1��8�q�x���A�I���$:�$:��	�Q�Y�&�&��>�?�?�G��'�N�N�N��2��F�G�G��H�A�H��I�Q�Y��I�Q�Y�8�8�9��
	�g�����rr
c��d�}|r|st���|�|��dkrdSd|�d|j�d|�d|j�d�	}|jdkrt	d|zd	z��d
S|j|jkrt	|dz��d
S|j|jkr|jdkrt	d
|z��d
S|jdkr*||j|j��st	d|z��d
S|jdkr�|jdkr|�	|j
��r�n�|j
|j
krd|j
vrt	d|z��d
S|j
|j
krqd|j
vrh|j|jkrXtj�
|j
|j
|j��s(t	d|zd|j
�d|j
�d�z��d
S�nF|jdkr8|j|jkr(t	d|zd|j�d|j�d�z��d
S	tj�|j|j��}n.#t$r!t	d|zd|jzz��Yd
SwxYw|j
|kr,d|j
vr#t	d|zd|j
�d|�d�z��d
S|j
|krgd|j
vr^|j|jkrNtj�
||j
|j��s#t	d|zd|�d|j
�d�z��d
S|j|jkr(t	d|zd|j
�d|j
�d�z��d
St	d|�d|j�d|�d|j�d�	��dS)a�This will match if x is more specific than y. Eg, for protocol if x
           is tcp and y is all or for address if y is a network and x is a
           subset of y (where x is either an address or network). Returns:

            0  match
            1  no match
           -1  fuzzy match

           This is a fuzzy destination match, so source ports or addresses
           are not considered, and (currently) only incoming.
        c�*�d|vsd|vr
||krdSdS|�d��D]j}||krdSd|vr[|�d��\}}t|��t|��kr#t|��t|��krdS�kdS)z:Returns True if p is an exact match or within a multi rulerOrbTF)r]rf)�test_p�to_matchrk�low�highs     r�_match_portsz-UFWRule.fuzzy_dst_match.<locals>._match_ports�s����f�}�}��v�
�
��X�%�%��4��u� ���s�+�+�
$�
$���T�>�>��4�4��$�;�;�"&�*�*�S�/�/�K�S�$��6�{�{�c�#�h�h�.�.�3�v�;�;�#�d�)�)�3K�3K�#�t�t���5r
rzNo fuzzy match 'z (v6=z)' 'z)'rz(direction) z (not incoming)r[z (forward does not match)rz(protocol) z(dport) r�/z(dst) z ('z' not in network 'z')z(interface) z (z != �)z %s does not existz(v6) z(fuzzy match) 'r�)r�rdr!r.rr/r%r#r,�_is_anywherer"rrs�
in_network�get_ip_from_if�IOError)r�r�r�r��if_ips     r�fuzzy_dst_matchzUFWRule.fuzzy_dst_match�s,��	�	�	�"�	��	��,�,��
�7�7�1�:�:��?�?��1���A�A�q�t�t�t�Q�Q�Q�����&��
�;�$����.�7�*�->�>�?�?�?��1�
�9��	�!�!��'�7�7�8�8�8��1�
�:���#�#��
�e�(;�(;��-�'�)�*�*�*��1�
�7�e���L�L���!�'�$B�$B���*�w�&�'�'�'��1��>�R����~��#�#����q�u�(=�(=�#����!�%���C�q�u�$4�$4��h��(�)�)�)��q���!�%���C�1�5�L�L�Q�T�Q�T�\�\��8�&�&�q�u�a�e�Q�T�:�:�6B��h��(�(��u�u�u�a�e�e�e�,%�%�&�&�&��q���~��#�#���!�.�(H�(H��n�w�.�.��~�~�~�q�~�~�~�27�7�8�8�8��q�
���/�/�����E�E�����
�
�
��n�w�.�1E��~�2'�'�(�(�(��q�q�
����
�u��~�~�#�Q�U�"2�"2��n�w�.�.��u�u�u�e�e�e�2%�%�&�&�&��q���%���C�1�5�L�L�Q�T�Q�T�\�\��8�&�&�u�a�e�Q�T�:�:�6B��n�w�.�.�7<�u�u�a�e�e�e�D�E�F�F�F��q��4�1�4�<�<��'�G�#�#�q�u�u�u�a�e�e�e�&D�D�E�E�E��1�	��1�1�1�a�d�d�d�A�A�A�q�t�t�t�L�M�M�M��rs�*I�'I0�/I0c�"�|dks|dkrdSdS)zCheck if address is anywhererGrTFr)r
r|s  rr�zUFWRule._is_anywhereNs���6�>�>�T�[�0�0��4��ur
c���d}|jdks|jdkr�|j�d|j�d|j�d|j��}|jdkr!|j�d|j�d|j�d|j��}|jdkr!|j�d|j�d|j�d|j��}|jdkr|jdkr|d|jzz
}n0|jdkr
|d|jzz
}|jdkr
|d|jzz
}|S)a�Returns a tuple to identify an app rule. Tuple is:
             dapp dst sapp src direction_iface|direction
           or
             dport dst sapp src direction_iface|direction
           or
             dapp dst sport src direction_iface|direction

           where direction_iface is of form 'in_eth0', 'out_eth0' or
           'in_eth0 out_eth0' (ie, both interfaces used). If no interfaces are
           specified, then tuple ends with the direction instead.
        rrMz %sz in_%sz out_%s)	r'r(r"rr#r$r,r-r.)r
�tupls  r�
get_app_tuplezUFWRule.get_app_tupleTs�����9��?�?�d�i�2�o�o�$(�I�I�I�t�x�x�x�����D�H�H�M�D��y�B���(,�
�
�
�D�H�H�H�d�i�i�i�)-���3���y�B���(,�	�	�	�4�8�8�8�T�Z�Z�Z�)-���3��� �B�&�&�4�+=��+C�+C�����0�0����$��*�*��H��(9�:�:�D��%��+�+��I��);�<�<�D��r
c���|jdkr<|jdks|jdkr&td��|jz}t	|���|jt
jjvr,|dkr&td��|jz}t	|���|jt
jjvr<|j	dks|j
dkr(td��|jz}t	|���dSdS)zVerify rulerrz3Improper rule syntax ('%s' specified with app rule)r!z'Invalid IPv6 address with protocol '%s'zInvalid port with protocol '%s'N)r%r(r'rHrrrs�ipv4_only_protocols�portless_protocolsr#r$)r
�rule_iptyperms   r�verifyzUFWRule.verifyvs����=�E�!�!��I��O�O�t�y�B����M�N�N��=�*�G��7�#�#�#��=�C�H�8�8�8��$����A�B�B���(�G��7�#�#�#��=�C�H�7�7�7��z�U�"�"�d�j�E�&9�&9��=�>�>�!�]�,���w�'�'�'�	8�7�&9�&9r
N)rrrrrFr)r")rrrrrrrBrEr9r1r3r2rvrxr4r5r�r�r_r6r�r7r�rdr�r�r�r�rr
rrr*s�������.�.�:E�GL��!�!�!�!�F"�"�"�������.A �A �A �F"�"�"�3#�3#�3#�3#�j$�$�$�'�'�'����������.&�.&�.&�`!�!�!�$�$�$�$�$�$�1�1�1����!)�!)�!)�FA�A�A�Fl�l�l�\��� � � �D(�(�(�(�(r
r)rrRrg�ufw.utilrr�programName�	state_dir�	share_dir�	trans_dir�
config_dir�
prefix_dir�iptables_dir�	do_checksrirrrr
r�<module>r�s���'�'�"
�	�	�	�
�
�
�
��������������	��	��	�
�
�
�
����	� � � � � �y� � � �`	(�`	(�`	(�`	(�`	(�`	(�`	(�`	(�`	(�`	(r