Your IP : 216.73.216.182
U
��a�l � @ s. d Z dZdZddlZddlmZmZ ddlZddlZddlZddl Z ddl
Z
ddl m Z m
Z
ddlmZ dd lmZmZ dd
lmZ dd lmZmZ d d
lmZ d dlmZm Z m Z m Z m Z m Z m!Z! ee"�Z#dZ$dZ%dZ&zddl'm(Z( W n e)k
�r dZ(Y nX dd� Z*G dd� d�Z+G dd� de,�Z-dS )z
Cyril Jaquierz Copyright (c) 2004 Cyril JaquierZGPL� N)�Lock�RLock� )� Observers�ObserverThread)�Jails)�
FileFilter�
JournalFilter)� Transmitter)� AsyncServer�AsyncServerException� )�version)� getLogger�_as_bool�extractOptions� str2LogLevel�getVerbosityFormat�
excepthook�prctl_set_th_name�auto�INFO�STDOUT)�
Fail2BanDbc C s t �� jjS �N)� threadingZcurrent_thread� __class__�__name__� r r �8/usr/lib/python3/dist-packages/fail2ban/server/server.py� _thread_name: s r c @ s� e Zd Zd�dd�Zdd� Zdd� Zdd � Zdd
i fd d �Zd
d� Zdd� Z d�dd�Z
dd� Z dd� Z dd� Z
dd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd�d)d*�Zd+d,� Zd-d.� Zd/d0� Zd1d2� Zd3d4� Zd5d6� Z d7d8� Z d9d:� Z d;d<� Z d=d>� Z d?d@� Z!dAdB� Z"dCdD� Z#dEdF� Z$dGdH� Z%dIdJ� Z&dKdL� Z'dMdN� Z(dOdP� Z)d�dQdR�Z*d�dTdU�Z+dVdW� Z,d�dXdY�Z-dZd[� Z.d\d]� Z/d^d_� Z0d`da� Z1dbdc� Z2ddde� Z3dfdg� Z4dhdi� Z5djdk� Z6dldm� Z7dndo� Z8dpdq� Z9drds� Z:dtdu� Z;dvdw� Z<dxdy� Z=dzd{� Z>d�d|d}�Z?d~d� Z@d�d�d��ZAd�d�� ZBd�d�� ZCd�d�� ZDd�d�d��ZEd�d�� ZFd�d�d��ZGd�d�� ZHd�d�� ZId�d�� ZJd�d�� ZKd�d�� ZLd�d�� ZMd�d�� ZNd�d�� ZOd�d�� ZPd�d�� ZQd�d�� ZRd�d�� ZSdSS )��ServerFc C sr t � | _t� | _t� | _d | _|| _t| �| _ i | _
d | _ d | _ d | _
d | _d | _dddd�| _i | _td� d S )Nz/var/run/syslogz /var/run/logz/dev/log)ZDarwinZFreeBSDZLinuxz
f2b/server)r �_Server__loggingLockr �
_Server__lockr �_Server__jails� _Server__db�_Server__daemonr
�_Server__transm�_Server__reload_state�_Server__asyncServer�_Server__logLevel�_Server__logTarget�_Server__verbose�_Server__syslogSocket� _Server__autoSyslogSocketPaths�_Server__prev_signalsr )�selfZdaemonr r r �__init__@ s$
�zServer.__init__c C s t �d|� | �� d S )NzCaught signal %d. Exiting)�logSys�debug�quit)r0 �signum�framer r r Z__sigTERMhandlerW s zServer.__sigTERMhandlerc C s t �d|� | �� d S )Nz Caught signal %d. Flushing logs)r2 r3 � flushLogs)r0 r5 �fnamer r r Z__sigUSR1handler[ s zServer.__sigUSR1handlerc C s t �|�| j|< t � ||� dS )z>Bind new signal handler while storing old one in _prev_signalsN)�signal� getsignalr/ )r0 �s�newr r r �
_rebindSignal_ s zServer._rebindSignalTc
C s� t �d� | jrXt�d� | �� }|d kr.dS |d sXd|dd � f}t�|� t|��|�dd �| _ | �
|�d| j d k r�| j nt �� | �
|�d | jd k r�| jnt�� | �|�d
| jd k r�| jnt�� t�d � t�d tj� | jr�t�d
� t� dk�r2tjtjfD ]}| �|| j� �q | �tj| j� t t _ z4t� d|� t |d�} | � dt �!� � | �"� W n4 t#t$fk
�r� }
zt�d|
� W 5 d }
~
X Y nX |�r�t%j&d k�r�t'� t%_&t%j&�(� t� d� z,t)| j*�| _+|�d�| j+_,| j+�(||� W n0 t-k
�r, }
zt�d|
� W 5 d }
~
X Y nX | �.� zt� d|� t �/|� W n4 t#t$fk
�r� }
zt�d|
� W 5 d }
~
X Y nX d S )N�? zStarting in daemon modeFr zCould not create daemon %sr �verbose� syslogsocketZloglevelZ logtargetz2--------------------------------------------------zStarting Fail2ban v%szDaemon started� _MainThreadzCreating PID file %s�wz%s
z Unable to create PID file: %szStarting communication�onstartzCould not start server: %szRemove PID file %sz Unable to remove PID file: %s)0�os�umaskr& r2 �info�_Server__createDaemon�error�ServerInitializationError�getr, �setSyslogSocketr- �DEF_SYSLOGSOCKET� setLogLevelr* � DEF_LOGLEVEL� setLogTargetr+ �
DEF_LOGTARGETr r r9 �SIGTERM�SIGINTr= �_Server__sigTERMhandler�SIGUSR1�_Server__sigUSR1handlerr �sysr3 �open�write�getpid�close�OSError�IOErrorr �Mainr �startr r' r) rC r r4 �remove) r0 ZsockZpidfileZforce�observer�conf�ret�errr; ZpidFile�er r r r^ d sj
�
�
�
z Server.startc C s� dd� | _ t�d� | jd k r(| j�� t� dkrR| j�� D ]\}}t�||� q<t j
d k rft j
� � | � � | j
r�| j
�� d | _
t j
d k r�t j
� � d t _
| jd k r�| j� � d | _t�d� d S )Nc S s dS )NFr r r r r �<lambda>� � z Server.quit.<locals>.<lambda>zShutdown in progress...rA zExiting Fail2ban)r4 r2 rF r) Zstop_communicationr r/ �itemsr9 r r] �stop� stopAllJailr% rZ )r0 r; Zshr r r r4 � s(
z Server.quitc C s� d}| j �|�rt| j�|�rt| j| }|j|krLd}t�d|� d | j |< n(t�d||j|� | j|dd� | j |= |r�| j�||| j � | j d k r�| j �
| j| � d S )NTFzReload jail %rz"Restart jail %r (reason: %r != %r)�rh ) r( rJ r$ �exists�backendr2 rF �delJail�addr% �addJail)r0 �namerl Zaddflg�jailr r r ro � s
zServer.addJailc C sJ | j | }|s|�� r$|j||d� |rF| jd k r>| j�|� | j |= d S )N�rh �join)r$ �isAliverh r% rm )r0 rp rh rs rq r r r rm � s
zServer.delJailc C s\ | j �L | j| }|�� s$|�� n || jkrBt�d|� | j|= |jrNd|_W 5 Q R X d S )NzJail %r reloadedF)r# r$ rt r^ r( r2 rF �idle)r0 rp rq r r r � startJail� s
zServer.startJailc C s$ | j � | j|dd� W 5 Q R X d S )NTrj )r# rm �r0 rp r r r �stopJail s zServer.stopJailc C sh t �d� | j�N t| j�� �D ]}| j|ddd� q t| j�� �D ]}| j|ddd� qDW 5 Q R X d S )NzStopping all jailsTFrr )r2 rF r# �listr$ �keysrm rw r r r ri s
zServer.stopAllJailc C s� |�r | j r(|dks | j �|�r(td��t�d|dkr>d| nd � | j�� |dkr�d }d|ksn| j�|�rx| j| }|r�d|kr�| �|� d|kr�| � |� n d|kr�| �� d|kr�| �
� | j� � D ]D\}}|dks�||kr�d |_ || j |< |j
jd d
� |jjd d
� q�W 5 Q R X n�| j�j g }| j� � D ]>\}}|| j k�rT|�|� n |j
jd d
� |jjd d
� �q4|D ]}| �|� �qxW 5 Q R X i | _ t�d � d S )
Nz--allzReload already in progresszReload zjail %sz all jailsz --if-existsz--unbanz --restartT)�beginFzReload finished.)r( rJ �
ValueErrorr2 rF r# r$ rk �
setUnbanIPrx ri rg ru �filter�reload�actions�appendrm )r0 rp Zoptsr{ rq ZjnZdeljailsr r r � reloadJails sH
zServer.reloadJailsc C s || j | _dS )NT�r$ ru �r0 rp �valuer r r � setIdleJailF s zServer.setIdleJailc C s | j | jS r r� rw r r r � getIdleJailJ s zServer.getIdleJailc C s t |�| j| j_d S r )r r$ r~ �
ignoreSelfr� r r r �
setIgnoreSelfN s zServer.setIgnoreSelfc C s | j | jjS r )r$ r~ r� rw r r r �
getIgnoreSelfQ s zServer.getIgnoreSelfc C s | j | j�|� d S r )r$ r~ � addIgnoreIP�r0 rp Zipr r r r� T s zServer.addIgnoreIPc C s | j | j�|� d S r )r$ r~ � delIgnoreIPr� r r r r� W s zServer.delIgnoreIPc C s | j | j�� S r )r$ r~ � getIgnoreIPrw r r r r� Z s zServer.getIgnoreIPc C s& | j | j}t|t�r"|�||� d S r )r$ r~ �
isinstancer �
addLogPath)r0 rp �fileName�tail�filter_r r r r� ] s
zServer.addLogPathc C s$ | j | j}t|t�r |�|� d S r )r$ r~ r� r �
delLogPath)r0 rp r� r� r r r r� b s
zServer.delLogPathc C s4 | j | j}t|t�r |�� S t�d| � g S d S )Nz$Jail %s is not a FileFilter instance)r$ r~ r� r Z getLogPathsr2 rF �r0 rp r� r r r �
getLogPathg s
zServer.getLogPathc C s$ | j | j}t|t�r |�|� d S r )r$ r~ r� r �addJournalMatch�r0 rp �matchr� r r r r� o s
zServer.addJournalMatchc C s$ | j | j}t|t�r |�|� d S r )r$ r~ r� r �delJournalMatchr� r r r r� t s
zServer.delJournalMatchc C s4 | j | j}t|t�r |�� S t�d| � g S d S )Nz'Jail %s is not a JournalFilter instance)r$ r~ r� r �getJournalMatchr2 rF r� r r r r� y s
zServer.getJournalMatchc C s | j | j}|�|� d S r )r$ r~ �setLogEncoding)r0 rp �encodingr� r r r r� � s zServer.setLogEncodingc C s | j | j}|�� S r )r$ r~ �getLogEncodingr� r r r r� � s zServer.getLogEncodingc C s | j | j�|� d S r )r$ r~ � setFindTimer� r r r r� � s zServer.setFindTimec C s | j | j�� S r )r$ r~ � getFindTimerw r r r r� � s zServer.getFindTimec C s | j | j�|� d S r )r$ r~ �setDatePattern)r0 rp �patternr r r r� � s zServer.setDatePatternc C s | j | j�� S r )r$ r~ �getDatePatternrw r r r r� � s zServer.getDatePatternc C s | j | j�|� d S r )r$ r~ �setLogTimeZone)r0 rp Ztzr r r r� � s zServer.setLogTimeZonec C s | j | j�� S r )r$ r~ �getLogTimeZonerw r r r r� � s zServer.getLogTimeZonec C s || j | j_d S r �r$ r~ Z
ignoreCommandr� r r r �setIgnoreCommand� s zServer.setIgnoreCommandc C s | j | jjS r r� rw r r r �getIgnoreCommand� s zServer.getIgnoreCommandc C s& t d| d �\}}|| j| j_d S )Nzcache[�])r r$ r~ � ignoreCache)r0 rp r� Zoptionsr r r �setIgnoreCache� s zServer.setIgnoreCachec C s | j | jjS r )r$ r~ r� rw r r r �getIgnoreCache� s zServer.getIgnoreCachec C s" | j | j}t�d|� ||_d S )Nz prefregex: %r)r$ r~ r2 r3 � prefRegex)r0 rp r� �fltr r r � setPrefRegex� s zServer.setPrefRegexc C s | j | jjS r )r$ r~ r� rw r r r � getPrefRegex� s zServer.getPrefRegexc C s: | j | j}|s|f}|D ]}t�d|� |�|� qd S )Nz failregex: %r)r$ r~ r2 r3 � addFailRegex�r0 rp r� Zmultipler� r r r r� � s zServer.addFailRegexNc C s | j | j�|� d S r )r$ r~ � delFailRegex�r0 rp �indexr r r r� � s zServer.delFailRegexc C s | j | j�� S r )r$ r~ � getFailRegexrw r r r r� � s zServer.getFailRegexc C s: | j | j}|s|f}|D ]}t�d|� |�|� qd S )Nz ignoreregex: %r)r$ r~ r2 r3 �addIgnoreRegexr� r r r r� � s zServer.addIgnoreRegexc C s | j | j�|� d S r )r$ r~ �delIgnoreRegexr� r r r r� � s zServer.delIgnoreRegexc C s | j | j�� S r )r$ r~ �getIgnoreRegexrw r r r r� � s zServer.getIgnoreRegexc C s | j | j�|� d S r )r$ r~ � setUseDnsr� r r r r� � s zServer.setUseDnsc C s | j | j�� S r )r$ r~ � getUseDnsrw r r r r� � s zServer.getUseDnsc C s || j | jj_d S r �r$ r~ Z failManagerZ
maxMatchesr� r r r �
setMaxMatches� s zServer.setMaxMatchesc C s | j | jjjS r r� rw r r r �
getMaxMatches� s zServer.getMaxMatchesc C s | j | j�|� d S r )r$ r~ � setMaxRetryr� r r r r� � s zServer.setMaxRetryc C s | j | j�� S r )r$ r~ � getMaxRetryrw r r r r� � s zServer.getMaxRetryc C s | j | j�|� d S r )r$ r~ � setMaxLinesr� r r r r� � s zServer.setMaxLinesc C s | j | j�� S r )r$ r~ � getMaxLinesrw r r r r� � s zServer.getMaxLinesc G s( | j | jj|f|�d|| jki� d S )Nr )r$ r� rn r( )r0 rp r� �argsr r r � addAction� s �zServer.addActionc C s | j | jS r �r$ r� rw r r r �
getActions� s zServer.getActionsc C s | j | j|= d S r r� r� r r r � delAction� s zServer.delActionc C s | j | j| S r r� r� r r r � getAction� s zServer.getActionc C s | j | j�|� d S r )r$ r� �
setBanTimer� r r r r� � s zServer.setBanTimec G s | j | jj|� S r )r$ r~ Z
addAttempt)r0 rp r� r r r � addAttemptIP� s zServer.addAttemptIPc C s | j | j�|�S r )r$ r� Z addBannedIPr� r r r �setBanIP� s zServer.setBanIPc C sV |d k r| j | g}nt| j �� �}d}||d kO }|D ]}||jj||d�7 }q8|S )Nr )�ifexists)r$ ry �valuesr� ZremoveBannedIP)r0 rp r� r� �jailsZcntrq r r r r} � s zServer.setUnbanIPc C s | j | j�� S r )r$ r� �
getBanTimerw r r r r� s zServer.getBanTimec C s | j | j�|�S )z�Returns the list of banned IP addresses for a jail.
Parameters
----------
name : str
The name of a jail.
Returns
-------
list
The list of banned IP addresses.
)r$ r� �
getBanList)r0 rp ZwithTimer r r r� s
zServer.getBanListc C s | j | �||� d S r )r$ �setBanTimeExtra)r0 rp �optr� r r r r� s zServer.setBanTimeExtrac C s | j | �|�S r )r$ �getBanTimeExtra)r0 rp r� r r r r� s zServer.getBanTimeExtrac C s | j d k o| j �� S r )r) ZisActive�r0 r r r � isStarted s zServer.isStartedc C s@ |d k rt | j�|krdS t| j�� �D ]}|�� s( dS q(dS )Nr r )�lenr$ ry r� rt )r0 Zjailnumrq r r r rt # s zServer.isAlivec C sV zD| j �� t| j�}|�� d�|�}dt| j�fd|fg}|W �S | j �� X d S )Nz, zNumber of jailz Jail list)r# �release�acquirery r$ �sortrs r� )r0 r� ZjailListrb r r r �status, s
�z
Server.status�basicc C s | j | j|d�S )N)�flavor)r$ r� )r0 rp r� r r r �
statusJail8 s zServer.statusJailc C sh |� � }| j�P | j|kr(W 5 Q R � d S t|�}td��tdksJ|tjk rN|nt � || _W 5 Q R X d S )N�fail2ban� INHERITED)
�upperr" r* r r ZsetLevelrP �logging�DEBUGrN )r0 r� Zllr r r rM H s
�zServer.setLogLevelc
C s$ | j � | jW 5 Q R � S Q R X d S r )r" r* r� r r r � getLogLevelY s zServer.getLogLevelc
C s� t |�\}}|�� }| j��| | j|kr6W 5 Q R � dS |dkrR|| _W 5 Q R � dS |�d�}|dk�rT|�dd��� }|d kr�d}zttjjd| �}W n0 t k
r� t
� d |�d�� tjjj }Y nX | j
d
kr�d d l}| j�|�� �| _
| j
d k �r4tj�| j
��r4t�t�| j
�j��r4tjj| j
|d �}n t
� d
| j
� W 5 Q R � dS n�|dk�rlt�tj�}nt|dk�r�t�tj�}n\z t|d�� � tj� |�}W n< t k
�r� t
� d|� t
� d| j� Y W 5 Q R � dS X t d�}|jd d d� D ]j} |�!| � z| �"� | � � W nD t#t$fk
�r^ dtj% k�rJdk �sXn dtj%k�rZ� Y nX �q�|�&� tj'k�r�| j(d k�r�tj'|�&� d | _(|�d�}
|
d k �r�t)|
�}
n|dk}
|d k �r�t)|�}nd}|�d d �d k�r�|�d �} n4d } | j(d k �r| j(d k�r| j(d } t*| |
|d �} |�+t�,| �� |�-|� | jd k �r�t
� d t.j.� t
� d!|dk�rl|n d"|| j
f t.j.f � || _W 5 Q R � dS Q R X d S )#NTr� �padding�SYSLOG�facilityZDAEMON�0ZLOG_z)Unable to set facility %r, using 'DAEMON'r r )r� z9Syslog socket file: %s does not exists or is not a socketF)r �SYSOUT�STDERR�azUnable to log to %rz Logging to previous target %rr� ���)r
� � )r� )r� r
r Zdatetime)r� r� �format� r
)�addtimer� zStart Fail2ban v%sz-Changed logging target to %s for Fail2ban v%sz%s (%s))/r r� r" r+ rJ �getattrr� �handlersZ
SysLogHandler�AttributeErrorr2 rH Z
LOG_DAEMONr- �platformr. �systemrD �pathrk �stat�S_ISSOCK�st_modeZ
StreamHandlerrV �stdout�stderrrW rZ ZRotatingFileHandlerr\ rF r Z
removeHandler�flushr| �KeyError� version_infoZgetEffectiveLevelr� r, r r Z setFormatterZ FormatterZ
addHandlerr )
r0 �targetZ
logOptionsZ systargetr� r� r� ZhdlrZlogger�handlerr� Zfmtr? r r r rO c s�
� ��� ���
�
�����zServer.setLogTargetc C sF | j �$ | j|kr W 5 Q R � dS || _W 5 Q R X | jdkpD| �| j�S )NTr� )r" r- r+ rO )r0 r@ r r r rK � s
�zServer.setSyslogSocketc
C s$ | j � | jW 5 Q R � S Q R X d S r )r" r+ r� r r r � getLogTarget� s zServer.getLogTargetc
C s$ | j � | jW 5 Q R � S Q R X d S r )r" r- r� r r r �getSyslogSocket� s zServer.getSyslogSocketc C s� | j dkrhtd�jD ]N}z |�� t�d| j � W q tk
r` |�� t�d| j � Y qX qdS td�jD ] }|�� t�d| j � qrdS d S )N)r� r r� r� zrollover performed on %szflush performed on %sz rolled overZflushed)r+ r r� Z
doRolloverr2 rF r� r� )r0 r r r r r7 � s
zServer.flushLogsc C s> |� � D ]0\}}|dkr,t�t|�d � qtd| ��qd S )N� stacksize� zunknown option %r)rg r �
stack_size�intr� )r0 r� �o�vr r r �setThreadOptions� s zServer.setThreadOptionsc C s dt �� d iS )Nr r )r r r� r r r �getThreadOptions� s zServer.getThreadOptionsc C s� | j r| j j|krd S | j s,|�� dkr,d S t| j�dkrBtd��|�� dkrVd | _ n(td k rtt|�| _ | j �� n
t� d� t
j d k r�t
j � | j � d S )NZnoner z3Cannot change database when there are jails presentzEUnable to import fail2ban database module as sqlite is not available.)
r% �filename�lowerr� r$ � RuntimeErrorr Z delAllJailsr2 rH r r] Zdb_set)r0 r r r r � setDatabase� s$ �
�
zServer.setDatabasec C s | j S r )r% r� r r r � getDatabase s zServer.getDatabasec
C s� | � tjtj� z t�� }W n6 tk
rR } zd|j|jff W Y �S d}~X Y nX |dkr�t� � z t�� }W n6 tk
r� } zd|j|jff W Y �S d}~X Y nX |dkr�t�
d� q�t� d� ndS zt� d�}W n t
tfk
r� d}Y nX tjdd� dk�rnt�d tj�}td|�D ]<}z tj�||��sDt�|� W n tk
�r\ Y nX �q$t�|� n t�d|� t�d
tj� t�d
tj� t�d
tj� d S ) z� Detach a process from the controlling terminal and run it in the
background as a daemon.
http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/278731
FNr �/� SC_OPEN_MAX� r� )r� � r z /dev/urandomz /dev/null)T)r= r9 �SIGHUP�SIG_IGNrD �forkr[ �errno�strerror�setsid�chdir�_exit�sysconfr� r| rV r� rW �O_RDONLY�ranger� � sameopenfilerZ �
closerange�O_RDWR)r0 �pidrd ZmaxfdZ
urandom_fd�fdr r r Z__createDaemon sB
& &
zServer.__createDaemon)F)TT)F)F)N)F)NNT)F)N)r� )Tr �
__module__� __qualname__r1 rS rU r= r^ r4 ro rm rv rx ri r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r} r� r� r� r� r� rt r� r� rM r� rO rK r r r7 r r
r r rG r r r r r! > s�
K,
5
q r! c @ s e Zd ZdS )rI N)r r$ r% r r r r rI n s rI ).�
__author__Z
__copyright__Z __license__r r r r� rD r9 r� rV r` r r r� r r~ r r Z transmitterr
Z asyncserverr r r� r Zhelpersr r r r r r r r r2 rL rN rP Zdatabaser � ImportErrorr r! � ExceptionrI r r r r �<module> sB $
6