File: //lib/python3.6/site-packages/sshuttle/methods/__pycache__/tproxy.cpython-36.pyc
3
7��]V* � @ s& d dl Z d dlmZ d dlmZ d dlmZmZmZ d dl m
Z
d dlm Z m Z m
Z
dZy d dlZeejd� eZdZW nR ek
r� y d dlZeejd� eZd ZW n ek
r� d dlZY nX Y nX d
Zd ZeZd Zd
ZeZedkr�dd� Zn ed k�r
dd� Zndd� ZG dd� de
�Z dS )� N)�
subnet_weight)�family_to_string)�ipt�ipt_ttl�ipt_chain_exists)�
BaseMethod)�debug1�debug3�Fatal�recvmsg�python�
socket_ext� � �) �J c C s6 t d� | jdtjd��\}}}}d }d }� x�|D ]�\}} }
|tjkr�| tkr�tjd|
dd� �\}} tj| �} |tj kr�d} d}
n t
d| ��tj ||
| | |
� �}|| f}P q2|t ko�| t
kr2tjd|
dd� �\}} tj| �} |tjkr�d} d }
n t
d| ��tj ||
| | |
� �}|| f}P q2W |||fS )
Nz!Accept UDP python using recvmsg.
i � z=HHr � z Unsupported socket type '%s'� � )r r �socket�
CMSG_SPACE�SOL_IP�IP_ORIGDSTADDR�struct�unpack�htons�AF_INETr
� inet_ntop�SOL_IPV6�IPV6_ORIGDSTADDR�AF_INET6)�listener�bufsize�dataZancdata�_�srcip�dstip�family�
cmsg_level� cmsg_type� cmsg_data�port�start�length�ip� r0 � /usr/lib/python3.6/tproxy.py�recv_udp" s6
r2 c
C sJ t d� | j|ftjd��\}}}}d }d }�x |D �]}|jtjkr�|jtkr�tj d|j
dd� �\}} tj | �} |tj kr�d}
d} n t
d| ��tj||j
|
|
| � �} | | f}P q4|jtko�|jtkr4tj d|j
dd� �\}} tj | �} |tjk�rd}
d} n t
d| ��tj||j
|
|
| � �} | | f}P q4W |||d fS ) Nz%Accept UDP using socket_ext recvmsg.
r z=HHr r z Unsupported socket type '%s'r r )r r r r r) r r* r r r r+ r r r
r r r r! )
r" r# r& r$ Zadatar% r' r( �ar, r- r. r/ r0 r0 r1 r2 A s:
c C s t d� | j|�\}}|d |fS )NzAccept UDP using recvfrom.
)r Zrecvfrom)r" r# r$ r& r0 r0 r1 r2 b s c sT e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
� Z S )�Methodc s: t t| �j� }d|_td kr*d|_d|_n d|_d|_|S )NTF)�superr4 �get_supported_featuresZipv6r �udpZdns)�self�result)� __class__r0 r1 r6 j s z Method.get_supported_featuresc C s |j � S )N)Z getsockname)r8 �sockr0 r0 r1 �
get_tcp_dstipu s zMethod.get_tcp_dstipc C s0 t ||�\}}}|s&td|f � d S |||fS )NzB-- ignored UDP from %r: couldn't determine destination IP address
)r2 r )r8 � udp_listenerr# r& r' r$ r0 r0 r1 r2 x s
zMethod.recv_udpc C sj |st d|f � d S tj|jtj�}|jtjtjd� |jtjtd� |j |� |j
||� |j � d S )Nz;-- ignored UDP to %r: couldn't determine source IP address
� ) r r r( Z
SOCK_DGRAM�
setsockoptZ
SOL_SOCKETZ SO_REUSEADDRr �IP_TRANSPARENTZbindZsendto�close)r8 r; r& r' r$ Zsenderr0 r0 r1 �send_udp� s
zMethod.send_udpc C s |j tjtd� d S )Nr> )r? r r r@ )r8 Z tcp_listenerr0 r0 r1 �setup_tcp_listener� s zMethod.setup_tcp_listenerc C sJ |j tjtd� |jd k r,|jj tjtd� |jd k rF|jj ttd� d S )Nr> ) r? r r r@ Zv4�IP_RECVORIGDSTADDRZv6r �IPV6_RECVORIGDSTADDR)r8 r= r0 r0 r1 �setup_udp_listener� s
zMethod.setup_udp_listenerc sH � t jt jgkr tdt� � ��d�� �fdd�}� �fdd�} dd� }
d | } d
| } d | }
| j|� ||� |d | � |d
| � |d |
� |d
|
� |d | � |d
| � |dddd| � |dddd| � |d|
dddd� |d|
dd� |d| ddd|
dddd�
|�r&|d| ddd|
dddd�
xt� fd d �|D �D ]^\}}|d| ddddd d | ddddd d!� |d| dd"d#d$d d | ddddd d!d%t|�� �q:W �x�t|td&d'�D �]�\}}}}}}d*}|
|||�}|�r |d| dd(d d)||f ddf|�� |d| dd(d d)||f ddf|�� n\|d| ddddd d)||f ddf
|�� |d| dd"d#d$d d)||f ddf
|d%t|�f �� |�r�d+}|
|||�}|�r�|d| dd(d d)||f ddf|�� |d| dd(d d)||f ddf|�� n\|d| ddddd d)||f ddf
|�� |d| dd"d#d$d d)||f ddf
|d%t|�f �� �q�W d S ),Nz0Address family "%s" unsupported by tproxy method�manglec s t � �f| �� S )N)r )�args)r( �tabler0 r1 �_ipt� s z#Method.setup_firewall.<locals>._iptc s t � �f| �� S )N)r )rH )r( rI r0 r1 �_ipt_ttl� s z'Method.setup_firewall.<locals>._ipt_ttlc S s |r| dd||f f S | S )Nz--dportz%d:%dr0 )�proto�fport�lportr0 r0 r1 �_ipt_proto_ports� s z/Method.setup_firewall.<locals>._ipt_proto_portsz
sshuttle-m-%sz
sshuttle-t-%sz
sshuttle-d-%sz-Nz-Fz-I�OUTPUT�1z-j�
PREROUTINGz-A�MARKz
--set-markZACCEPTz-mr �tcp�-pr7 c s g | ]}|d � kr|�qS )r r0 )�.0�i)r( r0 r1 �
<listcomp>� s z)Method.setup_firewall.<locals>.<listcomp>z--destz%s/32z--dportZ53ZTPROXYz
--tproxy-markz0x1/0x1z --on-portT)�key�reverseZRETURNz%s/%s)rU rT )rU r7 ) r r r! � Exceptionr �restore_firewall�str�sortedr )r8 r, ZdnsportZnslistr( Zsubnetsr7 �userrJ rK rO �
mark_chain� tproxy_chain� divert_chainr% r/ ZswidthZsexcludeZsnetrM rN Z tcp_portsZ udp_portsr0 )r( rI r1 �setup_firewall� s�
zMethod.setup_firewallc
s� � t jt jgkr tdt� � ��d�� �fdd�}� �fdd�}d| }d| }d | } t� �|�r�|d
d d |� |d
|� |d|� t� �|�r�|d
dd |� |d
|� |d|� t� �| �r�|d
| � |d| � d S )Nz0Address family "%s" unsupported by tproxy methodrG c s t � �f| �� S )N)r )rH )r( rI r0 r1 rJ s z%Method.restore_firewall.<locals>._iptc s t � �f| �� S )N)r )rH )r( rI r0 r1 rK
s z)Method.restore_firewall.<locals>._ipt_ttlz
sshuttle-m-%sz
sshuttle-t-%sz
sshuttle-d-%sz-DrP z-jz-Fz-XrR )r r r! r[ r r )
r8 r, r( r7 r_ rJ rK r` ra rb r0 )r( rI r1 r\ � s*
zMethod.restore_firewall) �__name__�
__module__� __qualname__r6 r< r2 rB rC rF rc r\ �
__classcell__r0 r0 )r: r1 r4 h s
fr4 ) r Zsshuttle.firewallr Zsshuttle.helpersr Zsshuttle.linuxr r r Zsshuttle.methodsr r r r
r r Z pythonsocket�getattr�AttributeErrorr
� ImportErrorr@ r rD r r rE r2 r4 r0 r0 r0 r1 �<module> s>
!