| Server IP : 182.53.201.61 / Your IP : 216.73.217.175 Web Server : Apache/2.2.15 (Fedora) System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686 User : apache ( 48) PHP Version : 5.3.3 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/share/system-config-firewall/ |
Upload File : |
Ñò
‘¾ÍJc
@ s— d d k l Z d d k l Z l Z l Z l Z l Z l Z d d k Z d d k Z d d k
l Z l Z l
Z
l Z d d k l Z d d k l Z d d k Z d d k Z d „ Z d „ Z d „ Z d „ Z d
„ Z d „ Z d e f d
„ ƒ YZ d „ Z d „ Z d „ Z d d „ Z" d e f d „ ƒ YZ# d d „ Z$ d e% d d „ Z& d d d „ Z' d d e% d „ Z( d d e% d „ Z) d „ Z* d S( iÿÿÿÿ( t copy( t Optiont OptionErrort OptionParsert Valuest
SUPPRESS_HELPt BadOptionErrorN( t getPortIDt getPortRanget getServiceNamet checkIP( t getByKeyc C s6 t } y | i d ƒ \ } } Wn
t } n™ Xt | i ƒ ƒ } | d j o
t } np | d j o t t d ƒ | | ƒ ‚ nF t | ƒ d j o2 | d | d j o t t d ƒ | | ƒ ‚ n | p: | i ƒ } | d j o t t d
ƒ | | ƒ ‚ qn | o t t d ƒ | | ƒ ‚ n | | f S(
Nt :iÿÿÿÿs port range %s is not unique.i i i s1 %s is not a valid range (start port >= end port).t tcpt udps %s is not a valid protocol.s invalid port definition %s.( R
R ( t Falset splitt TrueR t stript NoneR t _t len( t optiont optt valuet failuret portst protocolt range( ( s. /usr/share/system-config-firewall/fw_parser.pyt _check_port s(
(
! c C s d } d } | i d d ƒ } t | ƒ d j o8 | d t i j o$ | d } | d i d d ƒ } n t | ƒ d j o8 | d t i j o$ | d } | d i d d ƒ } n d i | ƒ } | d j o& | d j o t t d ƒ | ƒ ‚ n | | | f S( Nt ipv4t filterR i i t ipv6t nats ipv6 has no nat support.( R R t fw_configt FIREWALL_TYPESt FIREWALL_TABLESt joinR R ( R R R t typet tablet splitst filename( ( s. /usr/share/system-config-firewall/fw_parser.pyt _check_rulesfile6 s '
'
c C s. t | ƒ p t t d ƒ | | ƒ ‚ n | S( Ns invalid service '%s'.( t getServiceByKeyR R ( R R R ( ( s. /usr/share/system-config-firewall/fw_parser.pyt _check_serviceG s
c C sB t | ƒ p1 h | d 6| d 6} t t d ƒ | | ƒ ‚ n | S( NR R s1 option %(option)s: invalid icmp type '%(value)s'.( t getICMPTypeByKeyR R ( R R R t dict( ( s. /usr/share/system-config-firewall/fw_parser.pyt _check_icmp_typeL s
c
C ss h } d } | i d d ƒ } xjt | ƒ d j oV| d i d ƒ } t | ƒ d j o t d ƒ | d } Pn | \ } } | d j p4 | d j o
| d j p | d j o t | ƒ o | | | <nW | d j p
| d
j o' t | ƒ d j o t | ƒ | | <n t d ƒ | d } Pt | ƒ d j oE | d i d ƒ d j o | d g } q†| d i d d ƒ } q! | i ƒ q! W| o8 h | d 6| d 6| d 6} t t d ƒ | | ƒ ‚ n t } x4 d d d g D]# } | | i
ƒ j o
t } qàqàWd
| i
ƒ j o d | i
ƒ j o
t } n | o1 h | d 6| d 6} t t d ƒ | | ƒ ‚ n | S( NR i i t =i s Invalid argument %st ift protoR
R t toaddrt portt toportR R t errors? option %(option)s: invalid forward_port '%(value)s': %(error)s.s4 option %(option)s: invalid forward_port '%(value)s'.( s tcps udp( R R R R R
R t countt popR R t keysR (
R R R t resultR6 R( t key_valt keyt valR. ( ( s. /usr/share/system-config-firewall/fw_parser.pyt _check_forward_portS sN
- &
c O sQ t | i | i ƒ } | o | | j o d S| i i | i g ƒ i | ƒ d S( N( t getattrt valuest destt ensure_valuet append( R R R t parsert argst kwargst vals( ( s. /usr/share/system-config-firewall/fw_parser.pyt _append_unique‚ s t _Optionc B sV e Z e i d Z e e i ƒ Z e e d <e e d <e e d <e e d <e
e d <RS( R4 t rulesfilet servicet forward_portt icmp_type( s portRJ RK RL RM ( t __name__t
__module__R t TYPESR t TYPE_CHECKERR R* R, R> R/ ( ( ( s. /usr/share/system-config-firewall/fw_parser.pyRI ˆ s
c C s¹ | i d d d d d d t d t d ƒ ƒ| i d d d
d d d t d ƒ ƒ| i d d d
d d d d d t d ƒ d
t d t d ƒ ƒ| i d d d
d d d d d t d ƒ d
t d t d ƒ ƒ| i d d d d
d d d d d g d t d ƒ d
t d t d ƒ ƒ| i d d d d
d d d d d t d! ƒ d
t d t d" ƒ ƒ| i d# d$ d d
d d% d d d t d& ƒ d
t d t d' ƒ ƒ| i d( d) d d
d d* d d d t d& ƒ d
t d t d+ ƒ ƒ| i d, d- d d d d d t d. ƒ ƒ| i d/ d d
d d0 d d1 d t d2 ƒ d
t d t d3 ƒ ƒ| i d4 d d
d d5 d d5 d t d6 ƒ d
t d t d7 ƒ ƒ| i d8 d d
d d9 d d: d g d
t d t d; ƒ d t d< ƒ ƒd S(= Ns --enabledt actiont
store_trueRA t enabledt defaultt helps Enable firewall (default)s
--disabledt store_falses Disable firewalls --addmodulet callbackt
add_moduleR& t stringt metavars <module>s Enable an iptables modules --removemodulet
remove_modules Disable an iptables modules -ss --servicet servicesRK s <service>s* Open the firewall for a service (e.g, ssh)s -ps --portR R4 s <port>[-<port>]:<protocol>s2 Open specific ports in the firewall (e.g, ssh:tcp)s -ts --trustt trusts <interface>s) Allow all traffic on the specified devices -ms --masqt masqsA Masquerades traffic from the specified device. This is IPv4 only.s --highs --mediums, Backwards compatibilty, aliased to --enableds --custom-rulest custom_rulesRJ s [<type>:][<table>:]<filename>s¿ Specify a custom rules file for inclusion in the firewall, after the default rules. Default protocol type: ipv4, default table: filter. (Example: ipv4:filter:/etc/sysconfig/ipv4_filter_addon)s --forward-portRL sf if=<interface>:port=<port>:proto=<protocol>[:toport=<destination port>][:toaddr=<destination address>]sÑ Forward the port with protocol for the interface to either another local destination port (no destination address given) or to an other destination address with an optional destination port. This is IPv4 only.s --block-icmpt
block_icmpRM s <icmp type>s? Block this ICMP type. The default is to accecpt all ICMP types.( t
add_optionR R RH ( RD ( ( s. /usr/share/system-config-firewall/fw_parser.pyt _addStandardOptions’ sh
c C ss | i d d d d d d t d ƒ ƒ| i d d d d d d t d
ƒ ƒ| i d d d d d d t d
ƒ ƒd S( Ns
--no-ipsecRR RS RA t no_ipsecRV s* Disable Internet Protocol Security (IPsec)s --no-ippt no_ipps( Disable Internet Printing Protocol (IPP)s --no-mdnst no_mdnss Disable Multicast DNS (mDNS)( Rb R ( RD ( ( s. /usr/share/system-config-firewall/fw_parser.pyt _addCompatOptionsÖ s
c C s‹ | i d d d d d d d d t d ƒ d
t i d t d ƒ d
i t i ƒ ƒ| i d d d d d d d d t d ƒ d t d ƒ ƒd S( Ns --selinuxRR t storeRA t selinuxR& t choiceR[ s <mode>t choicesRV s Configure SELinux mode: %ss , s
--selinuxtypet selinuxtypeRZ s <type>s9 Configure SELinux type: Usually targeted or strict Policy( Rb R R" t
SELINUX_MODESR% ( RD ( ( s. /usr/share/system-config-firewall/fw_parser.pyt _addSELinuxOptionsá s c C sø y | i | | ƒ \ } } Wn# t j
o } | i | ƒ d SXt | ƒ d j o, x) | D] } | i t d ƒ | ƒ q\ Wn | i o/ t i o t i i d ƒ qº t
i d ƒ n t | d ƒ p
d | _
n t | d ƒ p
t | _ n | S( Ni s no such option: %si R) t converted( t
parse_argst ExceptionR6 R R R t _fw_exitR" t uit
parse_exitt syst exitt hasattrR) R Ro ( RD RE t optionst _optionst _argsR6 t arg( ( s. /usr/share/system-config-firewall/fw_parser.pyt _parse_argsí s$
t
_OptionParserc B s\ e Z d d „ Z d d „ Z d d d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z
RS(
c C sl | d j o
t i } n | i ƒ } t | t ƒ o% | i | ƒ } | i | d ƒ } n | i | ƒ d S( Nt replace( R Ru t stdoutt format_helpt
isinstancet unicodet
_get_encodingt encodet write( t selft filet strt encoding( ( s. /usr/share/system-config-firewall/fw_parser.pyt
print_help s
c C s d S( N( ( R† R‡ ( ( s. /usr/share/system-config-firewall/fw_parser.pyt print_usage
s i c C sQ | o/ t i o t i i | ƒ q6 t i | IJn t i p
t | _ n d S( N( R" Rs t parse_errorRu t stderrR Rr ( R† t statust msg( ( s. /usr/share/system-config-firewall/fw_parser.pyRv s
c C sD | i o d | i | f } n
t | ƒ } | i d d | ƒd S( Ns %s: %si R ( t
_fw_sourceRˆ Rv ( R† R t text( ( s. /usr/share/system-config-firewall/fw_parser.pyR6 s
c C s( | i i | ƒ o | St | ƒ ‚ d S( N( t _long_optt has_keyR ( R† R ( ( s. /usr/share/system-config-firewall/fw_parser.pyt _match_long_opt s c C s= y | i | | ƒ Wn" t j
o } | i | ƒ n Xd S( N( t _OptionParser__process_long_optRq R6 ( R† t rargsR@ R ( ( s. /usr/share/system-config-firewall/fw_parser.pyt _process_long_opt! s c C s@ y t i | | | ƒ Wn" t j
o } | i | ƒ n Xd S( N( R t _process_short_optsRq R6 ( R† R– R@ R ( ( s. /usr/share/system-config-firewall/fw_parser.pyR˜ ( s c C sÈ | i d ƒ } d | j o" | i d d ƒ \ } } t } n
| } t } | i | ƒ } | i | } | i ƒ o| i } t | ƒ t | ƒ | j oW | d j o | i
t d ƒ | ƒ q‚h | d 6| d 6} | i
t d ƒ | ƒ q®| d j o | o
| }
q®| d j o | i d ƒ }
q®| o0 t | g | d | d !ƒ }
| d | d 5q®t | d | !ƒ }
| d | 5n) | o | i
t d ƒ | ƒ n d }
| i | |
| | ƒ d S( Ni R0 i s %s option requires an argumentR R7 s. %(option)s option requires %(count)s argumentss %s option does not take a value( R8 R R R R” R’ t takes_valuet nargsR t intR6 R t tupleR t process( R† R– R@ R{ R t next_argt had_explicit_valueR Rš R. R ( ( s. /usr/share/system-config-firewall/fw_parser.pyt __process_long_opt. s:
N( RN RO R RŠ R‹ Rv R6 R” R— R˜ R• ( ( ( s. /usr/share/system-config-firewall/fw_parser.pyR} s c C s+ t d t d t ƒ } | | _ t | _ | S( Nt add_help_optiont option_class( R} R RI R Rr ( t sourceRD ( ( s. /usr/share/system-config-firewall/fw_parser.pyt _gen_parserX s c C s; t | ƒ } t | ƒ | o t | ƒ n t | | | ƒ S( N( R¤ Rc Rg R| ( RE Rx t compatR£ RD ( ( s. /usr/share/system-config-firewall/fw_parser.pyt parseSysconfigArgs^ s
c C s& t | ƒ } t | ƒ t | | | ƒ S( N( R¤ Rn R| ( RE Rx R£ RD ( ( s. /usr/share/system-config-firewall/fw_parser.pyt parseSELinuxArgse s
c C s t ƒ } | i d d d d d d d t d ƒ ƒ| i d d d d
d d d t d
ƒ ƒ| i d d d d
d d d t d ƒ ƒ| i d d d
d d d t d ƒ ƒ| i d d d d
d d d t d ƒ ƒ| i d d d
d d d t d ƒ ƒ| i d d d
d d d t d ƒ ƒ| i d d d d d! d" d# d$ t d% ƒ d& t i d t d' ƒ d( i t i ƒ ƒ| i d) d d
d d* d t d+ ƒ ƒ| i d, d d
d d- d t d. ƒ ƒt | ƒ t | ƒ t t i
ƒ d/ j o | i ƒ t i d0 ƒ n t
| | | ƒ S(1 Ns -?s -hs --helps --usageRR RV s Show this help messages -qs --quietRS RA t quiets9 Run noninteractively; process only command-line argumentss -vs --verboset verboses Be more verboses --versiont versions Show versions -ns --nostartt nostarts< Configure firewall but do not activate the new configurations -ft forces Ignore actual settingss --updatet updates‰ Update firewall non-interactively if the firewall is enabled. This will also restart the firewall. The -n and -f options will be ignored.s --defaultRh RU R& Rj R[ s <type>Rk sJ Set firewall default type: %s. This overwrites any existing configuration.s , s --list-servicest
list_servicess List predefined services.s --list-icmp-typest list_icmp_typess List the supported icmp types.i i ( R¤ Rb R R" t
DEFAULT_TYPESR% Rn Rc R Ru t argvRŠ Rv R| ( RE Rx R¥ RD ( ( s. /usr/share/system-config-firewall/fw_parser.pyt parseLokkitArgsj sL
c C s t ƒ } | i d d d d d d d t d ƒ ƒ| i d d
d d d d d t d ƒ ƒ| i d
d d d d d t d ƒ ƒ| i d d d d d d t d ƒ ƒ| i d d d d d d d d t d ƒ d t i d t d ƒ d i t i ƒ ƒt | ƒ t | ƒ t | | | ƒ S( Ns -vs --verboseRR RS RA R© RV s Be more verboses -ns --nostartR« s< Configure firewall but do not activate the new configurations -fR¬ s Ignore actual settingss --updateR s‰ Update firewall non-interactively if the firewall is enabled. This will also restart the firewall. The -n and -f options will be ignored.s --defaultRh RU R& Rj R[ s <type>Rk sJ Set firewall default type: %s. This overwrites any existing configuration.s , ( R¤ Rb R R" R° R% Rn Rc R| ( RE Rx R¥ RD ( ( s. /usr/share/system-config-firewall/fw_parser.pyt
parseDBUSArgsš s*
c C s+ | p d St ƒ } t | i ƒ | _ | S( N( R R R t __dict__( R@ t
new_values( ( s. /usr/share/system-config-firewall/fw_parser.pyt
copyValues· s
(+ R t optparseR R R R R R t socketR" t fw_functionsR R R R
t fw_servicesR R+ t fw_icmpR- t os.patht osRu R R* R, R/ R> RH RI Rc Rg Rn R R| R} R¤ R R¦ R§ R² R³ R¶ ( ( ( s. /usr/share/system-config-firewall/fw_parser.pyt <module> s4 . " /
D V 0