File: //usr/lib/python3/dist-packages/fail2ban/server/__pycache__/server.cpython-39.pyc
a
���`�q � @ sT d Z dZdZddlZddlmZmZ ddlZddlZddlZddl Z ddl
Z
ddl m Z m
Z
ddlmZ dd lmZmZ dd
lmZ dd lmZmZ d d
lmZ d dlmZm Z m Z m Z m Z m Z m!Z! ee"�Z#dZ$dZ%dZ&zddl'm(Z( W n e)y� dZ(Y n0 dd� Z*ze+ W n e,�y( e-Z+Y n0 dd� Z.G dd� d�Z/G dd� de0�Z1dS )z
Cyril Jaquierz Copyright (c) 2004 Cyril JaquierZGPL� N)�Lock�RLock� )� Observers�ObserverThread)�Jails)�
FileFilter�
JournalFilter)� Transmitter)� AsyncServer�AsyncServerException� )�version)� getLogger�_as_bool�extractOptions� str2LogLevel�getVerbosityFormat�
excepthook�prctl_set_th_name�auto�INFO�STDOUT)�
Fail2BanDbc C s t �� jjS �N)� threadingZcurrent_thread� __class__�__name__� r r �8/usr/lib/python3/dist-packages/fail2ban/server/server.py� _thread_name: s r c
C s` t j�| �} t j�| �r\zt �| � W n4 ttfyZ } z|jdkrF� W Y d}~n
d}~0 0 dS )z0Creates path of file (last level only) on demand� N)�os�path�dirname�isabs�mkdir�OSError�FileExistsError�errno)�name�er r r �_make_file_pathB s
r, c @ s� e Zd Zd�dd�Zdd� Zdd� Zdd � Zdd
i fd d �Zd
d� Zdd� Z d�dd�Z
dd� Z dd� Z dd� Z
dd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd�d)d*�Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Zd5d6� Z d7d8� Z d9d:� Z d;d<� Z d=d>� Z d?d@� Z!dAdB� Z"dCdD� Z#dEdF� Z$dGdH� Z%dIdJ� Z&dKdL� Z'dMdN� Z(dOdP� Z)d�dQdR�Z*d�dTdU�Z+dVdW� Z,d�dXdY�Z-dZd[� Z.d\d]� Z/d^d_� Z0d`da� Z1dbdc� Z2ddde� Z3dfdg� Z4dhdi� Z5djdk� Z6dldm� Z7dndo� Z8dpdq� Z9drds� Z:dtdu� Z;dvdw� Z<dxdy� Z=dzd{� Z>d�d|d}�Z?d�d~d�Z@d�d�� ZAd�d�d��ZBd�d�� ZCd�d�� ZDd�d�� ZEd�d�d��ZFd�d�� ZGd�d�d��ZHd�d�� ZId�d�� ZJd�d�� ZKd�d�� ZLd�d�� ZMd�d�� ZNd�d�� ZOd�d�� ZPd�d�� ZQd�d�� ZRd�d�� ZSd�d�� ZTdSS )��ServerFc C sj t � | _t� | _t� | _d | _|| _t| �| _ i | _
d | _ d | _ d | _
d | _d | _dddd�| _i | _d S )Nz/var/run/syslogz /var/run/logz/dev/log)ZDarwinZFreeBSDZLinux)r �_Server__loggingLockr �
_Server__lockr �_Server__jails� _Server__db�_Server__daemonr
�_Server__transm�_Server__reload_state�_Server__asyncServer�_Server__logLevel�_Server__logTarget�_Server__verbose�_Server__syslogSocket� _Server__autoSyslogSocketPaths�_Server__prev_signals)�selfZdaemonr r r �__init__Q s"
�zServer.__init__c C s t �d|� | �� d S )NzCaught signal %d. Exiting)�logSys�debug�quit)r< �signum�framer r r Z__sigTERMhandlerf s zServer.__sigTERMhandlerc C s t �d|� | �� d S )Nz Caught signal %d. Flushing logs)r> r? � flushLogs)r< rA �fnamer r r Z__sigUSR1handlerj s zServer.__sigUSR1handlerc C s t �|�| j|< t � ||� dS )z>Bind new signal handler while storing old one in _prev_signalsN)�signal� getsignalr; )r< �s�newr r r �
_rebindSignaln s zServer._rebindSignalTc
C s� t �d� | jrXt�d� | �� }|d u r.dS |d sXd|dd � f}t�|� t|��t|� dd�� |� d d �| _
| � |� d
| j d ur�| j nt
�� | �|� d | jd ur�| jnt�� | �|� d | jd ur�| jnt�� t�d
� t�dtj� | j�rt�d� t� dk�rDtjtjfD ]}| �|| j� �q | �tj| j � t t _ z<t� d|� t |� t!|d�} | �"dt �#� � | �$� W n6 t%t&f�y� }
zt�d|
� W Y d }
~
n
d }
~
0 0 |�r�t'j(d u �r�t)� t'_(t'j(�*� t� d� z4t |� t+| j,�| _-|� d�| j-_.| j-�*||� W n2 t/�yR }
zt�d|
� W Y d }
~
n
d }
~
0 0 | �0� zt� d|� t �1|� W n6 t%t&f�y� }
zt�d|
� W Y d }
~
n
d }
~
0 0 d S )N�? zStarting in daemon modeFr zCould not create daemon %sr Zpnamezfail2ban-server�verbose� syslogsocketZloglevelZ logtargetz2--------------------------------------------------zStarting Fail2ban v%szDaemon started� _MainThreadzCreating PID file %s�wz%s
z Unable to create PID file: %szStarting communication�onstartzCould not start server: %szRemove PID file %sz Unable to remove PID file: %s)2r" �umaskr2 r> �info�_Server__createDaemon�error�ServerInitializationErrorr �getr8 �setSyslogSocketr9 �DEF_SYSLOGSOCKET� setLogLevelr6 � DEF_LOGLEVEL� setLogTargetr7 �
DEF_LOGTARGETr r rE �SIGTERM�SIGINTrI �_Server__sigTERMhandler�SIGUSR1�_Server__sigUSR1handlerr �sysr? r, �open�write�getpid�closer' �IOErrorr �Mainr �startr r3 r5 rO r r@ �remove) r< ZsockZpidfileZforce�observerZconf�ret�errrG ZpidFiler+ r r r rh s sp
�
�
�
"
" z Server.startc C s� dd� | _ t�d� | jd ur(| j�� t� dkrR| j�� D ]\}}t�||� q<t j
}|d urv|j dd�rpd }d t _
| � � |d ur�|� � | j
r�| j
�� d | _
| jd ur�| j� � d | _t�d� d S )Nc S s dS )NFr r r r r �<lambda>� � z Server.quit.<locals>.<lambda>zShutdown in progress...rM F)Z forceQuitzExiting Fail2ban)r@ r> rQ r5 Zstop_communicationr r; �itemsrE r rg �stop� stopAllJailr1 re )r< rG ZshZobsMainr r r r@ � s,
z Server.quitc C s� d}| j �|�rt| j�|�rt| j| }|j|krLd}t�d|� d | j |< n(t�d||j|� | j|dd� | j |= |r�| j�||| j � | j d ur�| j �
| j| � d S )NTFzReload jail %rz"Restart jail %r (reason: %r != %r)�rp ) r4 rU r0 �exists�backendr> rQ �delJail�addr1 �addJail)r< r* rt Zaddflg�jailr r r rw � s
zServer.addJailc C sJ | j | }|s|�� r$|j||d� |rF| jd ur>| j�|� | j |= d S )N�rp �join)r0 �isAliverp r1 ru )r< r* rp rz rx r r r ru s
zServer.delJailc C sp | j �V | j| }|�� s$|�� n || jv rBt�d|� | j|= |jrNd|_W d � n1 sb0 Y d S )NzJail %r reloadedF)r/ r0 r{ rh r4 r> rQ �idle)r< r* rx r r r � startJail s
zServer.startJailc C s8 | j � | j|dd� W d � n1 s*0 Y d S )NTrr )r/ ru �r< r* r r r �stopJail s zServer.stopJailc C s| t �d� | j�X t| j�� �D ]}| j|ddd� q t| j�� �D ]}| j|ddd� qDW d � n1 sn0 Y d S )NzStopping all jailsTFry )r> rQ r/ �listr0 �keysru r~ r r r rq s
zServer.stopAllJailc C s� |�r4| j r(|dks | j �|�r(td��t�d|dkr>d| nd � | j�� |dkr�d }d|vsn| j�|�rx| j| }|r�d|v r�| �|� d|v r�| � |� n d|v r�| �� d|v r�| �
� | j� � D ]D\}}|dks�||kr�d |_ || j |< |j
jd d
� |jjd d
� q�W d � n1 �s(0 Y n�| j�t g }| j� � D ]>\}}|| j v �rj|�|� n |j
jd d
� |jjd d
� �qJ|D ]}| �|� �q�W d � n1 �s�0 Y i | _ t�d � d S )
Nz--allzReload already in progresszReload zjail %sz all jailsz --if-existsz--unbanz --restartT)�beginFzReload finished.)r4 rU �
ValueErrorr> rQ r/ r0 rs �
setUnbanIPr rq ro r| �filter�reload�actions�appendru )r< r* Zoptsr� rx ZjnZdeljailsr r r � reloadJails( sH
" .zServer.reloadJailsc C s || j | _dS )NT�r0 r| �r< r* �valuer r r � setIdleJail] s zServer.setIdleJailc C s | j | jS r r� r~ r r r � getIdleJaila s zServer.getIdleJailc C s t |�| j| j_d S r )r r0 r� �
ignoreSelfr� r r r �
setIgnoreSelfe s zServer.setIgnoreSelfc C s | j | jjS r )r0 r� r� r~ r r r �
getIgnoreSelfh s zServer.getIgnoreSelfc C s | j | j�|� d S r )r0 r� � addIgnoreIP�r< r* �ipr r r r� k s zServer.addIgnoreIPc C s | j | j�|� d S r )r0 r� � delIgnoreIPr� r r r r� n s zServer.delIgnoreIPc C s | j | j�� S r )r0 r� � getIgnoreIPr~ r r r r� q s zServer.getIgnoreIPc C s& | j | j}t|t�r"|�||� d S r )r0 r� �
isinstancer �
addLogPath)r< r* �fileName�tail�filter_r r r r� t s
zServer.addLogPathc C s$ | j | j}t|t�r |�|� d S r )r0 r� r� r �
delLogPath)r< r* r� r� r r r r� y s
zServer.delLogPathc C s4 | j | j}t|t�r |�� S t�d| � g S d S )Nz$Jail %s is not a FileFilter instance)r0 r� r� r Z getLogPathsr> rQ �r< r* r� r r r �
getLogPath~ s
zServer.getLogPathc C s$ | j | j}t|t�r |�|� d S r )r0 r� r� r �addJournalMatch�r< r* �matchr� r r r r� � s
zServer.addJournalMatchc C s$ | j | j}t|t�r |�|� d S r )r0 r� r� r �delJournalMatchr� r r r r� � s
zServer.delJournalMatchc C s4 | j | j}t|t�r |�� S t�d| � g S d S )Nz'Jail %s is not a JournalFilter instance)r0 r� r� r �getJournalMatchr> rQ r� r r r r� � s
zServer.getJournalMatchc C s | j | j}|�|� d S r )r0 r� �setLogEncoding)r< r* �encodingr� r r r r� � s zServer.setLogEncodingc C s | j | j}|�� S r )r0 r� �getLogEncodingr� r r r r� � s zServer.getLogEncodingc C s | j | j�|� d S r )r0 r� � setFindTimer� r r r r� � s zServer.setFindTimec C s | j | j�� S r )r0 r� � getFindTimer~ r r r r� � s zServer.getFindTimec C s | j | j�|� d S r )r0 r� �setDatePattern)r< r* �patternr r r r� � s zServer.setDatePatternc C s | j | j�� S r )r0 r� �getDatePatternr~ r r r r� � s zServer.getDatePatternc C s | j | j�|� d S r )r0 r� �setLogTimeZone)r< r* Ztzr r r r� � s zServer.setLogTimeZonec C s | j | j�� S r )r0 r� �getLogTimeZoner~ r r r r� � s zServer.getLogTimeZonec C s || j | j_d S r �r0 r� Z
ignoreCommandr� r r r �setIgnoreCommand� s zServer.setIgnoreCommandc C s | j | jjS r r� r~ r r r �getIgnoreCommand� s zServer.getIgnoreCommandc C s& t d| d �\}}|| j| j_d S )Nzcache[�])r r0 r� � ignoreCache)r< r* r� Zoptionsr r r �setIgnoreCache� s zServer.setIgnoreCachec C s | j | jjS r )r0 r� r� r~ r r r �getIgnoreCache� s zServer.getIgnoreCachec C s" | j | j}t�d|� ||_d S )Nz prefregex: %r)r0 r� r> r? � prefRegex)r< r* r� �fltr r r � setPrefRegex� s zServer.setPrefRegexc C s | j | jjS r )r0 r� r� r~ r r r � getPrefRegex� s zServer.getPrefRegexc C s: | j | j}|s|f}|D ]}t�d|� |�|� qd S )Nz failregex: %r)r0 r� r> r? � addFailRegex�r< r* r� Zmultipler� r r r r� � s
zServer.addFailRegexNc C s | j | j�|� d S r )r0 r� � delFailRegex�r< r* �indexr r r r� � s zServer.delFailRegexc C s | j | j�� S r )r0 r� � getFailRegexr~ r r r r� � s zServer.getFailRegexc C s: | j | j}|s|f}|D ]}t�d|� |�|� qd S )Nz ignoreregex: %r)r0 r� r> r? �addIgnoreRegexr� r r r r� � s
zServer.addIgnoreRegexc C s | j | j�|� d S r )r0 r� �delIgnoreRegexr� r r r r� � s zServer.delIgnoreRegexc C s | j | j�� S r )r0 r� �getIgnoreRegexr~ r r r r� � s zServer.getIgnoreRegexc C s | j | j�|� d S r )r0 r� � setUseDnsr� r r r r� � s zServer.setUseDnsc C s | j | j�� S r )r0 r� � getUseDnsr~ r r r r� � s zServer.getUseDnsc C s || j | jj_d S r �r0 r� Z failManagerZ
maxMatchesr� r r r �
setMaxMatches� s zServer.setMaxMatchesc C s | j | jjjS r r� r~ r r r �
getMaxMatches� s zServer.getMaxMatchesc C s | j | j�|� d S r )r0 r� � setMaxRetryr� r r r r� � s zServer.setMaxRetryc C s | j | j�� S r )r0 r� � getMaxRetryr~ r r r r� � s zServer.getMaxRetryc C s | j | j�|� d S r )r0 r� � setMaxLinesr� r r r r� � s zServer.setMaxLinesc C s | j | j�� S r )r0 r� � getMaxLinesr~ r r r r� � s zServer.getMaxLinesc G s* | j | jj|g|�R d|| jv i� d S )Nr� )r0 r� rv r4 )r< r* r� �argsr r r � addAction� s �zServer.addActionc C s | j | jS r �r0 r� r~ r r r �
getActions� s zServer.getActionsc C s | j | j|= d S r r� r� r r r � delAction s zServer.delActionc C s | j | j| S r r� r� r r r � getAction s zServer.getActionc C s | j | j�|� d S r )r0 r� �
setBanTimer� r r r r� s zServer.setBanTimec G s | j | jj|� S r )r0 r� Z
addAttempt)r< r* r� r r r � addAttemptIP s zServer.addAttemptIPc C s | j | j�|�S r )r0 r� Z addBannedIPr� r r r �setBanIP s zServer.setBanIPc C sV |d ur| j | g}nt| j �� �}d}||d u O }|D ]}||jj||d�7 }q8|S )Nr )�ifexists)r0 r� �valuesr� ZremoveBannedIP)r< r* r� r� �jailsZcntrx r r r r� s zServer.setUnbanIPc C s� |d ur| j | g}nt| j �� �}g }|d u rr|rr|D ]6}g }|D ] }|j�|g�rD|�|j� qD|�|� q8n6|D ]0}|j�|�}|d ur�| S |�|j|i� qv|S r )r0 r� r� r� Z getBannedr� r* )r< r* Zidsr� �resr� rk rx r r r �banned s$ z
Server.bannedc C s | j | j�� S r )r0 r� �
getBanTimer~ r r r r� 9 s zServer.getBanTimec C s | j | j�|�S )z�Returns the list of banned IP addresses for a jail.
Parameters
----------
name : str
The name of a jail.
Returns
-------
list
The list of banned IP addresses.
)r0 r� �
getBanList)r< r* ZwithTimer r r r� < s
zServer.getBanListc C s | j | �||� d S r )r0 �setBanTimeExtra)r< r* �optr� r r r r� K s zServer.setBanTimeExtrac C s | j | �|�S r )r0 �getBanTimeExtra)r< r* r� r r r r� N s zServer.getBanTimeExtrac C s | j d uo| j �� S r )r5 ZisActive�r< r r r � isStartedQ s zServer.isStartedc C s@ |d urt | j�|krdS t| j�� �D ]}|�� s( dS q(dS )Nr r )�lenr0 r� r� r{ )r< Zjailnumrx r r r r{ T s zServer.isAlivec C s^ zL| j �� t| j�}|�� d�|�}dt| j�fd|fg}|W | j �� S | j �� 0 d S )Nz, zNumber of jailz Jail list)r/ �acquirer� r0 �sortrz r� �release)r< r� ZjailListrk r r r �status] s
�
�z
Server.status�basicc C s | j | j|d�S )N)�flavor)r0 r� )r< r* r� r r r �
statusJaili s zServer.statusJailc C s~ |� � }| j�\ | j|kr*W d � d S t|�}td��tdksL|tjk rP|nt � || _W d � n1 sp0 Y d S )N�fail2ban� INHERITED)
�upperr. r6 r r ZsetLevelr[ �logging�DEBUGrY )r< r� Zllr r r rX y s
�zServer.setLogLevelc C s0 | j � | jW d � S 1 s"0 Y d S r )r. r6 r� r r r � getLogLevel� s zServer.getLogLevelc
C s� t |�\}}|�� }| j��� | j|kr8W d � dS |dkrV|| _W d � dS |�d�}|dk�rX|�dd��� }|d u r�d}zttjjd| �}W n. t y� t
� d |�d�� tjjj }Y n0 | j
d
kr�d d l}| j�|�� �| _
| j
d u�r6tj�| j
��r6t�t�| j
�j��r6tjj| j
|d �}n t
� d
| j
� W d � dS n�|dv �rpt�tj�}nt|dk�r�t�tj�}n\z t|d�� � tj� |�}W n< t �y� t
� d|� t
� d| j� Y W d � dS 0 t d�}|jd d d� D ]h} |�!| � z| �"� | � � W nB t#t$f�y` dtj% k�rLdk �sZn dtj%k�r\� Y n0 �q�|�&� tj'k�r�| j(d u �r�tj'|�&� d | _(|�d�}
|
d u�r�t)|
�}
n|dv}
|d u�r�t)|�}nd}|�d d �d k�r�|�d �} n4d } | j(d u�r| j(d k�r| j(d } t*| |
|d �} |�+t�,| �� |�-|� | jd u�r�t
� d t.j.� t
� d!|dk�rn|n d"|| j
f t.j.f � || _W d � dS 1 �s�0 Y d S )#NTr� �padding�SYSLOG�facilityZDAEMON�0ZLOG_z)Unable to set facility %r, using 'DAEMON'r r )r� z9Syslog socket file: %s does not exists or is not a socketF)r �SYSOUT�STDERR�azUnable to log to %rz Logging to previous target %rr� ���)r
� � )r� )r� r
r Zdatetime)r� r� �format� r
)�addtimer� zStart Fail2ban v%sz-Changed logging target to %s for Fail2ban v%sz%s (%s))/r r� r. r7 rU �getattrr� �handlersZ
SysLogHandler�AttributeErrorr> rS Z
LOG_DAEMONr9 �platformr: �systemr" r# rs �stat�S_ISSOCK�st_modeZ
StreamHandlerra �stdout�stderrrb re ZRotatingFileHandlerrf rQ r Z
removeHandler�flushr� �KeyError� version_infoZgetEffectiveLevelr� r8 r r Z setFormatterZ FormatterZ
addHandlerr )
r< �targetZ
logOptionsZ systargetr� r� r� ZhdlrZlogger�handlerr� ZfmtrK r r r rZ � s�
� ������
�
�����zServer.setLogTargetc C s\ | j �0 | j|kr"W d � dS || _W d � n1 s<0 Y | jdkpZ| �| j�S )NTr� )r. r9 r7 rZ )r< rL r r r rV s
$
�zServer.setSyslogSocketc C s0 | j � | jW d � S 1 s"0 Y d S r )r. r7 r� r r r � getLogTarget s zServer.getLogTargetc C s0 | j � | jW d � S 1 s"0 Y d S r )r. r9 r� r r r �getSyslogSocket s zServer.getSyslogSocketc C s� | j dvrftd�jD ]L}z |�� t�d| j � W q ty^ |�� t�d| j � Y q0 qdS td�jD ] }|�� t�d| j � qpdS d S )N)r� r r� r� zrollover performed on %szflush performed on %sz rolled overZflushed)r7 r r� Z
doRolloverr> rQ r� r )r< r r r r rC s
zServer.flushLogsc C s> |� � D ]0\}}|dkr,t�t|�d � qtd| ��qd S )N� stacksize� zunknown option %r)ro r �
stack_size�intr )r< r� �o�vr r r �setThreadOptions& s zServer.setThreadOptionsc C s dt �� d iS )Nr r
)r r r� r r r �getThreadOptions- s zServer.getThreadOptionsc C s� | j r| j j|krd S | j s,|�� dkr,d S t| j�dkrBtd��|�� dkrVd | _ n0td ur|t|� t|�| _ | j �� n
t �
d� t j d ur�t j �
| j � d S )NZnoner z3Cannot change database when there are jails presentzEUnable to import fail2ban database module as sqlite is not available.)r1 �filename�lowerr� r0 � RuntimeErrorr r, Z delAllJailsr> rS r rg Zdb_set)r< r r r r � setDatabase0 s& �
�
zServer.setDatabasec C s | j S r )r1 r� r r r � getDatabaseG s zServer.getDatabasec
C s� | � tjtj� z t�� }W n4 tyP } z d|j|jffW Y d}~S d}~0 0 |dkr�t� � z t�� }W n4 ty� } z d|j|jffW Y d}~S d}~0 0 |dkr�t�
d� q�t� d� ndS zt� d�}W n t
tf� y� d}Y n0 tjdd� dk�rht�d tj�}td|�D ]:}z tj�||��s@t�|� W n t�yV Y n0 �q t�|� n t�d|� t�d
tj� t�d
tj� t�d
tj� d S ) z� Detach a process from the controlling terminal and run it in the
background as a daemon.
http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/278731
FNr �/� SC_OPEN_MAX� r� )r� � r z /dev/urandomz /dev/null)T)rI rE �SIGHUP�SIG_IGNr" �forkr' r) �strerror�setsid�chdir�_exit�sysconfr� r� ra r rb �O_RDONLY�ranger# � sameopenfilere �
closerange�O_RDWR)r< �pidr+ ZmaxfdZ
urandom_fd�fdr r r Z__createDaemonJ sB
& &
zServer.__createDaemon)F)TT)F)F)N)F)NNT)NN)F)N)r� )Ur �
__module__� __qualname__r= r^ r` rI rh r@ rw ru r} r rq r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r{ r� r� rX r� rZ rV r
r rC r r r r rR r r r r r- O s�
P/
5
q r- c @ s e Zd ZdS )rT N)r r, r- r r r r rT � s rT )2�
__author__Z
__copyright__Z __license__r r r r� r" rE r ra rj r r r� r r� r r Z transmitterr
Z asyncserverr r r� r Zhelpersr r r r r r r r r> rW rY r[ Zdatabaser � ImportErrorr r( � NameErrorr' r, r- � ExceptionrT r r r r �<module> sL $
W