File: //usr/lib/python3.6/site-packages/sshuttle/methods/__pycache__/ipfw.cpython-36.pyc
3
�f4_�! � @ s: d dl Z d dlZd dlmZ d dlmZmZmZm Z m
Z
dZ y d dl Z
ee
j d� e
Z dZ W nR ek
r� y d dlZeej d� eZ dZ W n ek
r� d dl Z Y nX Y nX dZdZd Zd
Ze dkr�d d � Zne dkr�d
d � Zndd � Zdd� Zi Zdd� Zdd� Zg Zd dd�Z dd� Z dd� Z G d d � d e�Z dS ) � N)�
BaseMethod)�log�debug1�debug3�Fatal�family_to_string�recvmsg�python�
socket_ext� � �) �J c C sz t d� | jdtjd��\}}}}d }xH|D ]@\}}} |tjkr,|tkr,d}
tjtj| dd� �} | |
f}P q,W |||fS )Nz!Accept UDP python using recvmsg.
i � �5 r )r r �socket�
CMSG_SPACE�SOL_IP�IP_RECVDSTADDR� inet_ntop�AF_INET) �listener�bufsize�dataZancdata�_�srcip�dstip�
cmsg_level� cmsg_type� cmsg_data�port�ip� r" �/usr/lib/python3.6/ipfw.py�recv_udp s r$ c
C s� t d� | j|ftjd��\}}}}d }xH|D ]@}|jtjkr.|jtkr.d}tjtj |j
dd� �} | |f}P q.W |||d fS )Nz%Accept UDP using socket_ext recvmsg.
r r r ) r r r r r r r r r r r )
r r r r Zadatar r �ar r! r" r" r# r$ + s
c C s t d� | j|�\}}|d |fS )NzAccept UDP using recvfrom.
)r Zrecvfrom)r r r r r" r" r# r$ 8 s c C s� ddg}t jd dd�}tj|tj|d�}d}xL|jD ]B}|jd| �r6d |kpVd
|ksttd |j� � t d | ��d
}q6W |j
� }|r�t d||f ��|S )N�ipfw�list�PATH�C)r( �LC_ALL)�stdout�envFs %05d zipttl 63z check-stateznon-sshuttle ipfw rule: %r
z*non-sshuttle ipfw rule #%d already exists!Tz%r returned %d) �os�environ� ssubprocess�Popen�PIPEr+ �
startswithr �stripr �wait)�n�argvr, �p�found�line�rvr" r" r# �ipfw_rule_exists> s r; c C s� d| g}t jd dd�}tj|tj|d�}xJ|jD ]@}|j� }|d dksNt�|d d � jdd�\}}|j � t
|< q2W |j � }|r�t d ||f ��|s�t d
|f ��d S )
N�sysctlr( r) )r( r* )r+ r, � �
z: z%r returned %dz%r returned no data���r? )
r- r. r/ r0 r1 r+ �decode�AssertionError�splitr3 �_oldctlsr4 r )�prefixr6 r, r7 r9 �k�vr: r" r" r# �
_fill_oldctlsV s rG c C s: ddd| |f g}t ddj|� � tj|ttjd�d�S )Nr< z-wz%s=%sz>> %s
� �w)r+ )r �joinr/ �call�openr- �devnull)�name�valr6 r" r" r# � _sysctl_seti s rP Fc C s� d}| j |d �st�t|�}ts*t|� | tkrBtd| � dS t| }||kr�t| |�}|dkr�|r�td� tdd�}|jd | |f � |j � n
t
j | � d
S d S ) Nz net.inet.ip�.z>> No such sysctl: %r
Fr z/>> ...saving permanently in /etc/sysctl.conf
z/etc/sysctl.confr% z
# Added by sshuttle
%s=%s
T) r2 rA �strrC rG r rP rL �write�close� _changedctls�append)rN rO Z permanentZPREFIX�oldvalr: �fr" r" r# �
sysctl_sets s&
rY c G sD ddgt | � }tddj|� � tj|�}|r@td||f ��d S )Nr& z-qz>> %s
rH z%r returned %d)r' r rJ r/ rK r )�argsr6 r: r" r" r# r& � s
r& c G s0 ddgt | � }tddj|� � tj|� d S )Nr& z-qz>> %s
rH )r' r rJ r/ rK )rZ r6 r" r" r# � ipfw_noexit� s r[ c sL e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z � Z
S )�Methodc s$ t t| �j� }d|_d|_d|_|S )NFT)�superr\ �get_supported_featuresZipv6�udpZdns)�self�result)� __class__r" r# r^ � s
z Method.get_supported_featuresc C s |j � S )N)Z getsockname)r` �sockr" r" r# �
get_tcp_dstip� s zMethod.get_tcp_dstipc C s0 t ||�\}}}|s&td|f � d S |||fS )NzB-- ignored UDP from %r: couldn't determine destination IP address
)r$ r )r` � udp_listenerr r r r r" r" r# r$ � s
zMethod.recv_udpc C s� |st d|f � d S tj|jtj�}|jtjtd� |jtjtjd� |jtjtj d� |jtjtj
d� |j |� |j ||� |j
� d S )Nz;-- ignored UDP to %r: couldn't determine source IP address
r= �? )r r �familyZ
SOCK_DGRAM�
setsockoptr �
IP_BINDANYZ
SOL_SOCKETZ SO_REUSEADDRZ SO_REUSEPORTZIP_TTLZbindZsendtorT )r` rc r r r Zsenderr" r" r# �send_udp� s
zMethod.send_udpc C s |j d k r |j jtjtd� d S )Nr= )Zv4rh r r r )r` re r" r" r# �setup_udp_listener� s
zMethod.setup_udp_listenerc s� � t jgkr tdt� � ��tdd� x"trHtj� }t| } t|| � q(W |sR|r\t dd� t
ddddd d
d d
� t
ddd d
dd d
d d� t
dddd| dd d
d dddddd� tddd� d}
x8� fd d �|D �D ]"\} } t
dddd | � |
d7 }
q�W |
dk�r&t
dddd| d d d
d d ddd� t
ddd!d d d
d d
dd�
|�r�xVt |d"d#� d$d%�D ]*\} }
}}|�rZt
dd&dd'||
f � �qZW t
dd(dd'||
f � d S ))Nz3Address family "%s" unsupported by ipfw method_name�delete�1znet.inet.ip.fw.enabler= �addz check-stater! �from�anyZtoZskipto�2Ztcpz
table(125)Zfwdz 127.0.0.1,%dz
table(126)�notZipttlZ63z
keep-stateZsetup�table�124�flushr c s g | ]}|d � kr|�qS )r r" )�.0�i)rg r" r# �
<listcomp>� s z)Method.setup_firewall.<locals>.<listcomp>z%sr_ z
table(124)Zallowc S s | d S )Nr= r" )�sr" r" r# �<lambda>� s z'Method.setup_firewall.<locals>.<lambda>T)�key�reverse�125z%s/%s�126) r r � Exceptionr r[ rU �poprC rP rY r& �sorted)r` r ZdnsportZnslistrg Zsubnetsr_ �userrN rW Zdnscountr r! ZswidthZsexcludeZsnetr" )rg r# �setup_firewall� sR
zMethod.setup_firewallc C sN |t jgkr tdt|� ��tdd� tddd� tddd� tddd� d S ) Nz0Address family "%s" unsupported by tproxy methodrl rm rs rt ru r} r~ )r r r r r[ )r` r rg r_ r� r" r" r# �restore_firewall� s
zMethod.restore_firewall) �__name__�
__module__� __qualname__r^ rd r$ rj rk r� r� �
__classcell__r" r" )rb r# r\ � s 7r\ )F) r- �
subprocessr/ Zsshuttle.methodsr Zsshuttle.helpersr r r r r r r Z pythonsocket�getattr�AttributeErrorr
� ImportErrorri r ZSOL_IPV6ZIPV6_RECVDSTADDRr$ r; rC rG rP rU rY r& r[ r\ r" r" r" r# �<module> sF