File: //lib/python3.6/site-packages/sshuttle/__pycache__/firewall.cpython-36.opt-1.pyc
3
��^�' � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dljZd dl m
Z
m Z m Z d dl
mZmZ dZdd� Zdd� Zd d
� Zd d � Zd
d� ZdS )� N)�debug1�debug2�Fatal)�get_auto_method�
get_methodz
/etc/hostsc C sf dt }d| }d}d }ytt �j� }tjt �}W n2 tk
rd } z|jtjkrRn� W Y d d }~X nX |j� r�tj j
|� r�tj t |� dt |f }t|d�}x4|j � j
d�D ]"} | j|�dkr�q�|jd| � q�W x2t| j� �D ]"\}
} |jd d
| |
f |f � q�W |j� |d k �r<tj||j|j� tj||j� ntj|dd� tj|d � tj|t � d S ) Nz%s.sbakz"# sshuttle-firewall-%d AUTOCREATED� z %s.%d.tmp�w�
r z%s
z %-30s %s
z%s %si� )� HOSTSFILE�open�read�os�stat�IOError�errno�ENOENT�strip�path�exists�link�rstrip�split�find�write�sorted�items�close�chown�st_uid�st_gid�chmod�st_mode�rename) �hostmap�portZBAKFILEZAPPENDZ old_content�st�eZtmpname�f�line�name�ip� r+ � /usr/lib/python3.6/firewall.py�rewrite_etc_hosts s8
r- c C s t i | � d S )N)r- )r$ r+ r+ r, �restore_etc_hosts2 s r. c C st t j� dkrtd��tjtjtj� tjtjtj� tjtjtj� tjtjtj� t j � t j
dd� t j t j
fS )Nr z8you must be root (or enable su/sudo) to set the firewall� )r
�getuidr �signal�SIGHUP�SIG_IGN�SIGPIPE�SIGTERM�SIGINT�setsid�dup2�sys�stdin�stdoutr+ r+ r+ r, � setup_daemon7 s r< c C s$ | d | d pd | d | d fS )Nr/ � i�� ������i ��r+ )�sr+ r+ r, �
subnet_weightT s rA c D C s6 t � \}}i }tdtj� � | dkr.t� }nt| �}|rJtj� tj� td|j � |j
d|j � |j � |j d�}|s�d S g }|dkr�t
d| ��x�|j d�}|s�t
d| ��n |jd �r�P y |j� jd
d �\}} }
} } }
W n" tk
�r t
d | ��Y nX |jt|�t| �tt|
��| t| �t|
�f� q�W td
| � g }|d k�r`t
d| ��x�|j d�}|�s�t
d| ��n|jd��r�P y|j� jd
d�\}} W n" tk
�r� t
d| ��Y nX |jt|�| f� td| � �qbW td| � |jd��st
d| ��|jd�\}}}|jd
�}t|�dk�rJt
dt|� ��t|d �}t|d �}t|d �}t|d �}td ||||f � |j d�}|�s�t
d | ��n|jd ��s�t
d | ��|jd�\}}}|j� jdd�\}}tt|��}|d k�rd }td ||f � d!d"� |D �}d#d"� |D �}d$d"� |D �}d%d"� |D �}�ztd&� |�sb|�r�td'� |j|||tj|||� |�s�|�r�td(� |j|||tj|||� |j
d)� y |j � W n t k
�r� d S X x||j d�}|jd*��r2|d d � j� jd
d�\} } | || < td+� t ||�p,|� n"|�rR|j |��sTt
d,| ��nP �q�W W d y td-� W n tk
�r� td.� Y nX y*|�s�|�r�td/� |j |tj||� W nf tk
�r y0td0� x"t j!� j"� D ]}td1| � �q�W W n tk
�r td.� Y nX Y nX y*|�s*|�rDtd2� |j |tj||� W nf tk
�r� y0td3� x"t j!� j"� D ]}td4| � �qpW W n tk
�r� td.� Y nX Y nX ytd5� t#|�p�|� W nf tk
�r. y0td6� x"t j!� j"� D ]}td4| � �q�W W n tk
�r( td.� Y nX Y nX X d S )7Nz;firewall manager: Starting firewall with Python version %s
�autoz(firewall manager: ready method name %s.
z READY %s
� zROUTES
z$firewall: expected ROUTES but got %rz#firewall: expected route but got %rzNSLIST
�,� z-firewall: expected route or NSLIST but got %rz"firewall manager: Got subnets: %r
z$firewall: expected NSLIST but got %rz$firewall: expected nslist but got %rzPORTS r/ z-firewall: expected nslist or PORTS but got %rz)firewall manager: Got partial nslist: %r
z!firewall manager: Got nslist: %r
z#firewall: expected PORTS but got %r� � z%firewall: expected 4 ports but got %dr r= � z)firewall manager: Got ports: %d,%d,%d,%d
z firewall: expected GO but got %rzGO �-z(firewall manager: Got udp: %r, user: %r
c S s g | ]}|d t jkr|�qS )r )�socket�AF_INET6)�.0�ir+ r+ r, �
<listcomp>� s zmain.<locals>.<listcomp>c S s g | ]}|d t jkr|�qS )r )rJ rK )rL rM r+ r+ r, rN � s c S s g | ]}|d t jkr|�qS )r )rJ �AF_INET)rL rM r+ r+ r, rN � s c S s g | ]}|d t jkr|�qS )r )rJ rO )rL rM r+ r+ r, rN � s z firewall manager: setting up.
z#firewall manager: setting up IPv6.
z#firewall manager: setting up IPv4.
zSTARTED
zHOST z)firewall manager: setting up /etc/hosts.
z"firewall: expected command, got %rz#firewall manager: undoing changes.
z An error occurred, ignoring it.z(firewall manager: undoing IPv6 changes.
z6firewall manager: Error trying to undo IPv6 firewall.
z---> %s
z(firewall manager: undoing IPv4 changes.
z6firewall manager: Error trying to undo IPv4 firewall.
zfirewall manager: ---> %s
z.firewall manager: undoing /etc/hosts changes.
z;firewall manager: Error trying to undo /etc/hosts changes.
)$r< r �platformZpython_versionr r �ssyslogZ start_syslogZstderr_to_syslogr) r �flush�readliner �
startswithr r �
BaseException�append�int�boolr � partition�lenZsetup_firewallrJ rK rO r r- Zfirewall_commandZrestore_firewall� traceback�
format_exc�
splitlinesr. ) Z method_nameZsyslogr: r; r# �methodr( ZsubnetsZfamily�width�excluder* ZfportZlportZnslist�_ZportsZport_v6Zport_v4Z
dnsport_v6Z
dnsport_v4�argsZudp�userZ
subnets_v6Z nslist_v6Z
subnets_v4Z nslist_v4r) r+ r+ r, �main` s$
rd )r rJ r1 r9 r
rP r[ Zsshuttle.ssyslogrQ Zsshuttle.helpersr r r Zsshuttle.methodsr r r
r- r. r< rA rd r+ r+ r+ r, �<module> s
"