| Server IP : 182.53.201.61 / Your IP : 216.73.217.175 Web Server : Apache/2.2.15 (Fedora) System : Linux km10.dyndns.org 2.6.31.5-127.fc12.i686.PAE #1 SMP Sat Nov 7 21:25:57 EST 2009 i686 User : apache ( 48) PHP Version : 5.3.3 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/share/system-config-firewall/ |
Upload File : |
Ñò
‘¾ÍJc @ sÉ d d k Z d d k Z d d k Z e i i d ƒ d d k l Z d d k Td d k Z d d k
Z
d d k l Z l
Z
l Z l Z d d k Td d k Td d k Z d d k Td d d „ ƒ YZ d S( iÿÿÿÿNs /usr/share/system-config-network( t NCDeviceList( t *( t getPortIDt getServiceNamet getPortRanget checkIPt uic B s% e Z d „ Z d „ Z d „ Z d „ Z d „ Z d e d ƒ d f f d „ Z d e d ƒ d f f d „ Z
d e d ƒ d f f d „ Z d
„ Z d „ Z
d d d „ Z d d d d d d
„ Z d d d d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d d „ Z d „ Z d „ Z RS( c C s¶ t ƒ | _ | i i d d t ƒ d | _ t | i t d ƒ d d ƒ | _ t d t d ƒ ƒ } | i i
| d d d d< d d ƒt d d ƒ } | i t
t d
ƒ ƒ d d d d= ƒt t d ƒ ƒ | _ | i | i d d d d> ƒ| i i
| d d d d? ƒt | i t d ƒ d
f t d ƒ d f t d ƒ d f f ƒ | i _ | i i
| i i d d d d ƒg | _ t | i t d ƒ d d ƒ } d | _ d | _ t d t d ƒ ƒ } | i
| d d d d@ d d ƒt d d d ƒ| _ g } t i D] } | | i qû~ } | i ƒ x9 | D]1 } t i | ƒ } | i i | i | d t ƒq%W| i
| i d d d dA d d d d ƒ| i i | ƒ t | i t d ƒ d d ƒ } d | _ d | _ t d t d ƒ ƒ } | i
| d d d dB d d ƒt d d d ƒ| _ g | _ t | i t d ƒ d f t d ƒ d f t d ƒ d! f f d" d ƒ| _ t d d ƒ } | i | i d d d dC d d ƒ| i | i d d d dD d d ƒ| i
| d d d dE d d ƒ| i i | ƒ t | i t d# ƒ d d ƒ } d | _ d | _ t d t d$ ƒ ƒ } | i
| d d d dF d d ƒt d d d ƒ| _ | i
| i d d d dG d d ƒ| i i | ƒ t | i t d% ƒ d d ƒ } d | _ d | _ t d t d& ƒ ƒ } | i
| d d d dH d d d' d d d ƒt d d d ƒ| _! | i
| i! d d d dI d d ƒ| i i | ƒ t | i t d( ƒ d d ƒ } d | _ d | _ t d t d) ƒ ƒ } | i
| d d d dJ d d d' d d d ƒt d d d ƒ| _" g | _# t | i t d ƒ d* f t d ƒ d+ f t d ƒ d, f f d" d ƒ| _ t d d ƒ } | i | i" d d d dK d d ƒ| i | i d d d dL d d ƒ| i
| d d d dM d d ƒ| i i | ƒ t | i t d- ƒ d d ƒ } d | _ d | _ t d t d. ƒ ƒ } | i
| d d d dN d d d' d d d ƒt d d d ƒ| _$ x* t% i& D] } | i$ i | i d t ƒq'W| i
| i$ d d d dO d d ƒ| i i | ƒ t | i t d/ ƒ d d ƒ } d | _ d | _ t d t d0 ƒ ƒ } | i
| d d d dP d d d' d d d ƒt d d d ƒ| _' g | _( t | i t d ƒ d1 f t d ƒ d2 f t d ƒ d3 f f d" d ƒ| _ t d d ƒ } | i | i' d d d dQ d d ƒ| i | i d d d dR d d ƒ| i
| d d d dS d d ƒ| i i | ƒ xÛ t) t* | i ƒ ƒ D]Ä } | i | } g }
| t* | i ƒ d j o |
i t d4 ƒ d5 f ƒ n | d j o |
i t d6 ƒ d7 f ƒ n |
i t d8 ƒ d9 f ƒ t | i |
ƒ | _ | i
| i d d: d; d ƒqêWd S(T Ni s Firewall Configurationi i i2 s¶ A firewall protects against unauthorized network intrusions. Enabling a firewall blocks all incoming connections. Disabling a firewall allows all connections and is not recommended. t paddingt growxi s Firewall:t Enabledt OKt okt Customizet customizet Cancelt canceli s Trusted Servicesi< sl Here you can define which services are trusted. Trusted services are accessible from all hosts and networks.t scrollt selectedt anchorTops Other Portss[ Add additional ports or port ranges, which need to be accessible for all hosts or networks.i t Addt ports_addt Editt
ports_editt Removet ports_removet compacts Trusted InterfacessK Mark all interfaces as trusted which should have full access to the system.t Masqueradings& Mark the interfaces to be masqueraded.t
anchorLefts Port Forwardingsç Add entries to forward ports either from one port to another on the local system or from the local system to another system. Forwarding to another system is only useful if the interface is masqueraded. Port forwarding is IPv4 only.t forward_port_addt forward_port_editt forward_port_removes ICMP Filters Mark the ICMP types in the list, which should be rejected. All other ICMP types are allowed to pass the firewall. The default is no limitation.s Custom Ruless¡ Use custom rules files to add additional rules to the firewall. The custom rules are added after the default rules. The files must have the iptables-save format.t custom_rules_addt custom_rules_editt custom_rules_removet Forwardt forwardt Backt backt Closet closei t anchorRight( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i (+ t SnackScreent screent drawRootTextt APP_NAMEt Nonet configt GridFormt _t toplevelt TextboxReflowedt addt Gridt setFieldt Labelt Checkboxt enabledt ButtonBart bbt tabst bb_workt CheckboxTreet servicest fw_servicest service_listt namet sortt getByNamet appendt Falset Listboxt other_ports_boxt other_portst trustt masqt forward_port_boxt forward_portt
block_icmpt fw_icmpt icmp_listt custom_rules_boxt custom_rulest xranget len( t selft trt gridt tabt _[1]t svct keyst keyt icmpt it buttons( ( s+ /usr/share/system-config-firewall/fw_tui.pyt init% s !"% " '
( " " +" + " +
" + "
c
C s0 | | _ | i i o | i i d ƒ n | i i d ƒ g } x t D] } | i | d ƒ qG Wy t i ƒ } Wn nW XxS | D]K } | i o | i d j o qƒ n | i | j o | i | i ƒ qƒ qƒ W| i o6 x3 | i D]$ } | | j o | i | ƒ qæ qæ Wn | i
o6 x3 | i
D]$ } | | j o | i | ƒ q&q&Wn | i ƒ x: | D]2 } | i i | d t ƒ| i
i | d t ƒqcWxJ t
i D]? } t } | i | i j o
t } n | i i | d | ƒq£W| i i ƒ g | _ | i oi xf | i D]W } | i | d | d ƒ } | | i j o' | i i | ƒ | i i | | ƒ qqWn xN | D]F } t } | i o | | i j o
t } n | i i | d | ƒqvWxN | D]F } t } | i
o | | i
j o
t } n | i
i | d | ƒqÇW| i i ƒ g | _ | i o*x'| i D]} | d | d | d
| i d ƒ o | d n d | i d ƒ o | d n d f }
|
| i j o« d
| d | i | d
| d ƒ f } | i d ƒ o | d | d 7} n | i d ƒ o& | d | i | d | d ƒ 7} n | i i |
ƒ | i i | |
ƒ q;q;Wn xP t i D]E } t } | i | i i j o
t } n | i i | i d | ƒqeW| i i ƒ g | _ | i o^ x[ | i D]L } | | i j o6 d i! | ƒ } | i i | ƒ | i i | | ƒ qØqØWn d S( NR t t +t R i i t ift protot portt toaddrt toports %s %s ->s %st :(" R. R8 t setValuet STD_DEVICESRD R t
getDeviceListt Aliast DeviceRI RJ RB RE R? R@ R[ R> t Truet
setEntryValueRG t clearRH t portst _portStrRK RL t has_keyRN RO RM RA RP RQ t join(
RT R. t devicest devt listRY R8 t entryt strt fwdt arrayt lineR\ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt
loadConfigÈ sº
$
c C sC t | ƒ d j o d | d | f Sd | d | d | f Sd S( Ni s %s:%si s %s-%s:%s( RS ( RT Re Rd ( ( s+ /usr/share/system-config-firewall/fw_tui.pyRr 2 s c C s: t | ƒ d j o
d | d Sd | d | d f Sd S( Ni s %si s %s-%s( RS ( RT Re ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt __simplePortStr8 s
c C s^ d | | i | | ƒ f } | o | d | 7} n | o | d | i | | ƒ 7} n | S( Ns %s %s ->s %s( Rr ( RT t interfacet protocolRe t
to_addresst to_portR| ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt _forwardStr> s R
R c
C sÐ t | i | d d ƒ } | i t d | ƒ d d d d d d d d ƒ| o2 | i t d | ƒ d d d d
d d d d ƒn t | i | ƒ } | i | d d d d ƒ| i | i ƒ ƒ } | i i ƒ | S( Ni i i( i R R R i ( i i i i ( i i i i ( R/ R* R3 R2 R9 t
buttonPressedt runPopupt popWindow( RT t typet textt text2R^ t dialogR: t ret( ( s+ /usr/share/system-config-firewall/fw_tui.pyRŠ F s !
!
c C s | i t d ƒ | | | ƒ S( Nt Error( RŠ R0 ( RT Rˆ R‰ R^ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt errorS s c C s | i t d ƒ | | | ƒ S( Nt Warning( RŠ R0 ( RT Rˆ R‰ R^ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt warningV s c C s$ | i t d ƒ | t d ƒ ƒ d S( Ns% Port or port range '%s' is not valid.sZ Valid values: <port>[-<port>], where port is either a number [0..65535] or a service name.( R R0 ( RT Re ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt
port_errorY s c C s$ | i t d ƒ | t d ƒ ƒ d S( Ns Protocol '%s' is not valid.s Valid values: tcp, udp( R R0 ( RT R€ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt protocol_error_ s c C s… | o | i | ƒ n d } | o | n d } xMt | i d t d ƒ t d ƒ | f t d ƒ | f f d t d ƒ d f t d ƒ d
f f ƒ\ } } | i i ƒ | d j o¸ t } | d i ƒ } t | ƒ } t | t i
ƒ p t | t i ƒ p | i | ƒ t
} d } n | d i ƒ } | d j o | i | ƒ t
} n | } | o q4 n | | f S| d
j o d Sq4 d S( NRb s Port and Protocols/ Please enter a port or port range and protocol.s Port / Port Range:s Protocol:R^ R
R R R i i t tcpt udp( R’ R“ ( t _ui__simplePortStrt EntryWindowR* R0 R† RE t stripR t
isinstancet typest ListTypet TupleTypeR Rn R- R‘ ( RT Re R€ t _portt _protocolt rest valuesR ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt port_selectionc s: -
c
C sd | o | n d } | o | n d } | o | i | ƒ n d } | o | n d } | o | i | ƒ n d }
xçt | i t d ƒ d d ƒ } t d t d ƒ ƒ } | i | d d d d d d ƒ| i t d t d
ƒ ƒ d d d d d d d d ƒt d d
ƒ }
|
i t t d ƒ ƒ d d d d! d d ƒt d d | ƒ| _
|
i | i
d d d d" d d ƒ|
i t t d ƒ ƒ d d d d# d d ƒt d d | ƒ| _ |
i | i d d d d$ d d ƒ|
i t t d ƒ ƒ d d d d% d d ƒt d d | ƒ| _ |
i | i d d d d& d d ƒ| i |
d d d d' ƒ| i t d t d ƒ ƒ d d
d d( d d d d ƒd }
t d d ƒ }
|
i t t d ƒ ƒ d d d d) d d ƒt d d | ƒ| _ |
i | i d d d d* d d ƒ|
i t t d ƒ ƒ d d d d+ d d ƒt d d |
ƒ| _ |
i | i d d d d, d d ƒ| i |
d d d d- ƒt | i t d ƒ d f t d ƒ d f f ƒ | _ | i | i d d d d ƒ| i i | i ƒ ƒ } | i i ƒ | i
i ƒ | i i ƒ | i i ƒ | i i ƒ | i i ƒ f } | d j ot } | d i ƒ } t | ƒ d j p! | i t d ƒ | ƒ t } n | } | d i ƒ } | d. j o | i | ƒ t } n | } | d i ƒ } t | ƒ } t | t i ƒ p t | t i ƒ p | i! | ƒ t } d } n | d
i ƒ } t | ƒ d j o5 t" | ƒ o' | i t d ƒ | ƒ t } d } n | } | d i ƒ }
t |
ƒ d j oS t |
ƒ } t | t i ƒ p t | t i ƒ p | i! |
ƒ t } d } qón | o qy n | p | p | o qy n | o | o qy n | | | | | f S| d j o d Sqy d S(/ NRb s Port Forwardingi i i( sI Please select the source and destination options according to your needs.i R R s Source (all needed)R i i s
Interface:i Rˆ s Protocol:s Port / Port Range:s! Destination (at least one needed)s IP address:i R
R R R i s Interface '%s' is not valid.R’ R“ s Address '%s' is not valid.( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( s tcps udp(# R” R/ R* R0 R2 R3 R4 R5 R6 t EntryR R€ Re R- R R‚ R9 R: R„ R… R† t valueRE R– RS R Rn R‘ R R— R˜ R™ Rš R R ( RT R R€ Re R R‚ t
_interfaceRœ R› t _to_addresst _to_portRŠ RU RV R Rž R ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt forward_port_selection‡ s¼ !
*
!
c
C sm | o | n d } | o | n d } | o | n d } x*t | i d t d ƒ t d ƒ | f t d ƒ | f t d ƒ | f f d t d ƒ d f t d
ƒ d f f ƒ\ } } | i i ƒ | d j o†t } | d i ƒ } | t j o= | i t d
ƒ | t d ƒ d i t ƒ ƒ t } d } n | } | d i ƒ } | t j o= | i t d ƒ | t d ƒ d i t ƒ ƒ t } d } n | } | d i ƒ } | p( t i
i | ƒ p t i
i | ƒ o' | i t d ƒ | ƒ t } d } n | } | d j o* | d j o | i t d ƒ ƒ t } n | o q? n | | | f S| d j o d Sq? d S( NRb s Custom Rules FilesV Please select the protocol type, the firewall table and the file containing the rules.s
Protocol Types Firewall Tablet FileR^ R
R R R i s$ The protocol type '%s' is not valid.s Valid values: %st ,i s% The firewall table '%s' is not valid.i s The file '%s' does not exist.t ipv6t nats IPv6 has no nat support.( R• R* R0 R† RE R– t FIREWALL_TYPESR Rt Rn R- t FIREWALL_TABLESt ost patht existst isfile(
RT R‡ t tablet filenamet _typet _tablet _filenameR Rž R ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt custom_rules_selection sZ -
c C s | i i ƒ d S( N( R* t finish( RT ( ( s+ /usr/share/system-config-firewall/fw_tui.pyR¶ 9 s c C s™ d d d g } | i i ƒ o | i d ƒ n | i d ƒ x( | i i ƒ D] } | i d | ƒ qM Wx( | i i ƒ D] } | i d | ƒ qx W| i i ƒ } x± t i D]¦ } | | j o= | i d | i ƒ x| | i
D] } | i d | ƒ qÝ Wq¬ | i oL | i i o? | i | i i j o) x& | i
D] } | i d
| ƒ q3Wq¬ q¬ Wx4 | i D]) \ } } | i d | i
| | ƒ ƒ q`Wx‘ | i D]† } d | d
| i | d ƒ | d f } | d o | d | i | d ƒ 7} n | d o | d | d 7} n | i | ƒ q—Wx: | i i ƒ D]) }
t i |
ƒ } | i d | i ƒ q1Wx4 | i D]) \ } }
} | i d | |
| f ƒ qhW| S( Ns /usr/sbin/lokkits -fs -vs --enableds
--disableds
--trust=%ss --masq=%ss --service=%ss --addmodule=%ss --removemodule=%ss --port=%ss% --forward-port=if=%s:port=%s:proto=%si i i i s
:toport=%si s
:toaddr=%ss --block-icmp=%ss --custom-rules=%s:%s:%s( R8 R RD RI t getSelectionRJ R> R? R@ R[ t modulesR. RH Rr RL R” RM RN RC RQ ( RT t argsRv R RY t moduleRe Rd Rx R| RA R\ R‡ R° R± ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt genArgs< sV
!
%
c C s | i ƒ } | i t d ƒ t d ƒ d t d ƒ d f t d ƒ d f f ƒ} | d j o d St i ƒ \ } } t i ƒ } | d j o» z¦ t i | ƒ t i d t i ƒ } | d j o! t i
| d ƒ t i | ƒ n | d
j o! t i
| d
ƒ t i | ƒ n t i
d
d ƒ t i | d | ƒ Wd t i d ƒ Xn t i | ƒ d
} t i
| d ƒ } x( | o | | 7} t i
| d ƒ } qnWt i | ƒ t i | d ƒ \ } }
|
d j oP | i i ƒ Ht d ƒ GHd i | ƒ GH| GHt d ƒ GHt ƒ | i i ƒ d
Sd S( Nss Clicking the 'Yes' button will override any existing firewall configuration. Are you sure that you want to do this?sL Please remember to check if the services iptables and ip6tables are enabled.R^ t Yest yest Not noi s /dev/nulli i iÿ Rb i s Configuration failedR` s Hit enter to continue.( R» R R0 R- R¬ t pipet forkR' t opent O_RDONLYt dup2t execvt _exitt readt waitpidR* t suspendRt t raw_inputt resume( RT R¹ R t rfdt wfdt pidt fdt crett coutt cpidt status( ( s+ /usr/share/system-config-firewall/fw_tui.pyt applyt sR '
c C si t | _ t ƒ } | p t d g d d ƒ} n | i | ƒ | i oò t i i t
ƒ o6 t i i t
ƒ o# t i i t ƒ o t i i t ƒ o¥ g } t i i t
ƒ p t i i t
ƒ o | i
t
ƒ n t i i t ƒ p t i i t ƒ o | i
t ƒ n | i t d ƒ t d ƒ d i | ƒ ƒ n | i o | i t d ƒ t d ƒ ƒ n | S( Ns
--disabledt sources- The firewall configuration is not consistent.sp The following files are missing or unusable:
%s
Apply your firewall configuration now to correct this problem.s
s Old firewall configuration.si Your firewall configuration was converted from an old version. Please verify the configuration and apply.( RE t
ignore_allt read_sysconfig_configt parseSysconfigArgsR- R} R8 R¬ R R® t IP4TABLES_RULESR¯ t IP6TABLES_RULESRD R R0 Rt t converted( RT R. t files( ( s+ /usr/share/system-config-firewall/fw_tui.pyt readFile« s0
c C s | i o d S| i t d ƒ | d t d ƒ d f t d ƒ d f t d ƒ d f f ƒ} | d j o
t | _ n) | d j o | i ƒ t i d ƒ n d S(
Ns Parse error in config fileR^ t Ignoret ignores
Ignore AllRÖ t Quitt quiti ( RÖ RŠ R0 Rn R¶ t syst exit( RT t msgt result( ( s+ /usr/share/system-config-firewall/fw_tui.pyt parse_errorÐ s
i c C s t i | ƒ d S( N( Râ Rã ( RT RÓ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt
parse_exitÝ s c
C s™ x’| i i ƒ } | i i i | ƒ } | i i ƒ | d j o | i ƒ d j o t Sq | d j o t S| d j o| i i
ƒ p | i t d ƒ ƒ q n d | _
xà| i | i
i ƒ } | i i ƒ | i | i
i i | ƒ } | o4 | i | i
i o | i | i
i i | ƒ } n | d j o Pq² | d j o4 | i i ƒ | i
d j o | i
d 8_
q‹q² | d j o= | i i ƒ | i
t | i ƒ j o | i
d 7_
q‹q² | d
j oh | i ƒ } | oQ | | i j oA | i | d | d ƒ } | i i | ƒ | i i | | ƒ q‹q² | d j o· y | i i ƒ } Wn q‹X| \ } } | i | | ƒ } | oq | | i j oa | i i | ƒ | i i | ƒ | i | d | d ƒ } | i i | ƒ | i i | | ƒ q‹q² | d j oA y | i i ƒ } Wn q‹X| i i | ƒ | i i | ƒ q² | d
j o} | i ƒ } | of | | i j oV | i | d | d | d | d | d ƒ } | i i | ƒ | i i | | ƒ q‹q² | d j oÞ y | i i ƒ } Wn q‹X| \ } } } }
} | i | | | |
| ƒ } | o† | | i j ov | i i | ƒ | i i | ƒ | i | d | d | d | d | d ƒ } | i i | ƒ | i i | | ƒ q‹q² | d j oA y | i i ƒ } Wn q‹X| i i | ƒ | i i | ƒ q² | d j o] | i ƒ } | oF | | i j o6 d i | ƒ } | i i | ƒ | i! i | | ƒ q‹q² | d j o² y | i! i ƒ } Wn q‹X| \ } }
} | i | |
| ƒ } | of | | i j oV | i i | ƒ | i! i | ƒ d i | ƒ } | i i | ƒ | i! i | | ƒ q‹q² | d j oA y | i! i ƒ } Wn q‹X| i i | ƒ | i! i | ƒ q² q² q q d S( NR i R R
s The firewall is disabled.R' R% i R# R R R R i i i R R R Rh R R! (" R1 R… R: R„ R* R† RÔ Rn RE R8 R R R0 t tab_posR; R< t refreshRS RŸ RH Rr RD RG t currentt removet deleteR¥ RL Rƒ RK Rµ RQ Rt RP ( RT R Ry t res2t res3t itemRq Rd R Re R R‚ R‡ R° R± ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt mainà sä
c C s. | i ƒ | i ƒ | i ƒ } | i ƒ | S( N( R_ RÝ Rð R¶ ( RT R ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt runa s
N( t __name__t
__module__R_ R} Rr R” Rƒ R- R0 RŠ R R R R‘ RŸ R¥ Rµ R¶ R» RÔ RÝ Ræ Rç Rð Rñ ( ( ( s+ /usr/share/system-config-firewall/fw_tui.pyR $ s, £ j
$ x9 8 7 %
( ( Râ R˜ t os.pathR¬ R RD t
netconfpkgR t fw_configR? RN t fw_functionsR R R R t fw_parsert fw_sysconfigt fw_iptablest snackR ( ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt <module> s $
"