CasperSecurity
o
;s*b 9 � @ s� d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl m
Z
ddl m Z dd l m
Z
dd
lmZ dd lmZmZmZmZmZmZ dd lmZ d
Zdd� Zdd� ZG dd� dee
�Z G dd� d�Z G dd� d�Z dd� Z dd� Z dS ) zFail2Ban Developersz^Copyright (c) 2004-2008 Cyril Jaquier, 2012-2014 Yaroslav Halchenko, 2014-2016 Serg G. Brester�GPL� N)�Thread� )�version� )�CSocket)�
Beautifier)�Fail2banCmdLine�ServerExecutionException�
ExitException�logSys�exit�output)�Utilsz
fail2ban> c C s t �� jjS �N)� threading�current_thread� __class__�__name__� r r �@/usr/lib/python3/dist-packages/fail2ban/client/fail2banclient.py� _thread_name, s r c C s t t�S r )�input�PROMPTr r r r �
input_command/ s r c @ s� e Zd Zdd� Zdd� Zdd� Zd#dd �Zed
d � �Zd$dd�Z d%dd�Z
dd� Z d&dd�Z d'dd�Z
dd � Zd d � Zd'd d �Zd!d"� ZdS )(�Fail2banClientc C s* t �| � t�| � d| _d | _d | _d S )NT)r �__init__r �_alive�_server� _beautifier��selfr r r r 8 s
zFail2banClient.__init__c C s$ t dt d � t d� t d� d S )Nz
Fail2Ban vz5 reads log file that contains password failure reportz=and bans the corresponding IP addresses using firewall rules.� )r r r r r r �dispInteractive? s z Fail2banClient.dispInteractivec C s" t d� t�d| � td� d S )Nr" zCaught signal %d. Exiting� )r r �warningr
)r! �signum�framer r r �__sigTERMhandlerD s z Fail2banClient.__sigTERMhandler皙�����?c C s& | j dg|dkr |gng gd|d�S )N�ping���F��timeout)�_Fail2banClient__processCmd)r! r- r r r �__pingJ s �zFail2banClient.__pingc C s | j r| j S t� | _ | j S r )r r r r r r �
beautifierN s zFail2banClient.beautifierTr+ c
C s� d }�z�| j }d}|D �]J}|�|� za|s t| jd |d�}n |dkr)|�|� | jd dkr7t�dd|� |�|�}|d d kr]t�dd
|d � |sS|d d v r\t|� |d �� nt�
d
|d j � |rqt|� |d �� d}W q t
j
y� } ze|s�| jd d kr�|s�|d dkr�| �| |d dk� nt�dd|| � W Y d } ~ W |r�z|�� W n ty� } z|s�| jd d kr�t�| � W Y d } ~ nd } ~ ww |s�|d d v r�tj�� dS dS d } ~ w t�yV } zd|s�| jd d k�r | jd d k�rt�| � nt�
| � W Y d } ~ W |�r?z|�� W n# t�y> } z|�s/| jd d k�r4t�| � W Y d } ~ nd } ~ ww |�sI|d d v �rPtj�� dS dS d } ~ ww W |�r�z|�� W n# t�y� } z|�su| jd d k�rzt�| � W Y d } ~ nd } ~ ww |�s�|d d v �r�tj�� |S |�r�z|�� W n# t�y� } z|�s�| jd d k�r�t�| � W Y d } ~ nd } ~ ww |�s�|d d v �r�tj�� w w )NT�socketr, r+ �verboser � zCMD: %rr zOK : %rr )�echo�
server-statuszNOK: %rFr* z -- %s failed -- %r)r0 � setInputCmdr �_conf�
settimeoutr �log�sendr �beautify�error�args�
beautifyErrorr1 � _Fail2banClient__logSocketError�close� Exception�debug�sys�stdout�flush� exception)
r! �cmd�showRetr- �clientr0 � streamRet�c�ret�er r r � __processCmdU s�
��
�����
������#
��
�
�� �zFail2banClient.__processCmdr" Fc
C s� zEt �| jd t j�r:t �| jd t j�r.|r t�|� W d S t�d|r(d| nd� W d S t�d| jd � W d S t�d| jd � W d S tyf } zt�d| jd � t�|� W Y d }~d S d }~ww )Nr1 z*%sUnable to contact server. Is it running?z[%s] r" z3Permission denied to socket: %s, (you must be root)z6Failed to access socket path: %s. Is fail2ban running?z*Exception while checking socket access: %s)�os�accessr7 �F_OK�W_OKr r< rA )r! � prevError� errorOnlyrM r r r �__logSocketError� s*
�
�
����z Fail2banClient.__logSocketErrorc C sb | � � r t�d� d S | �� \}}|sd S | jd s*tj�| jd �r*t�d� d S d|gdggS )NzServer already running�forcer1 zLFail2ban seems to be in unexpected state (not running but the socket exists)z
server-streamr5 )�_Fail2banClient__pingr r< �
readConfigr7 rO �path�exists)r! rL �streamr r r �__prepareStartServer� s
z#Fail2banClient.__prepareStartServerc
C s ddl m} | �� }d| _|sdS z5|r&|�| j� | �|d�s#W dS W dS ttj| |dfd�}d|_ |�
� | � d� |� | jd�| _
W dS tyP Y dS ty� } z(td� t�d|rbdnd � | jd
dkrst�|� nt�|� W Y d }~dS d }~ww ) Nr )�Fail2banServerTF��targetr= r" z Exception while starting server �
background�
foregroundr2 )�fail2banserverr] �#_Fail2banClient__prepareStartServerr �startServerAsyncr7 �,_Fail2banClient__processStartStreamAfterWaitr r �daemon�start� setDaemon�startServerDirectr r rA r r r< rF )r! r` r] r[ �thrM r r r �
__startServer� s< ��
�
�
��z Fail2banClient.__startServerNc s� |rt tj| d� fd�}d|_|�� S � d ur"d� d< t�dd� � | �� }� d ur=|r.dnd � d< � d< t�dd� � |sAdS � d ur_t� � fdd �d
d � |rTdnd� d < t�dd� � | �
|d�}� d urm|� d
< |S )NFr^ Trg r3 z client phase %s�readyc s � � dd �d uS )Nz start-ready)�getr ��phaser r �<lambda>� s z0Fail2banClient.configureServer.<locals>.<lambda>� �?g����MbP?� configure�done) r r �configureServerrf rg r r9 rc r �wait_forre )r! �nonsyncro rj r[ rL r rn r rt � s* z Fail2banClient.configureServerc C sh t |t�s t|�}t|�dkr#|d dkr#| �| jd �}|s!dS |S t|�dkr�|d dkr�t|�dkrBddg|dd�< | �|�S | j�d d�rMtd
� | �d g� | �d�s_t �
d � dS | j�d d�rztd
� | � � | � | j
�}|d urz|S | j�d d�r�td� | �dg�S t|�dk�r|d dk�rg }t|�dkr�|d dv r�|�|d � |d= nt|�dkr�t �
d|dd � � dS nt|�dks�| jdd��r
t|�dks�|d dkr�d}| �� \}}n |d }| �|�\}}|s�dS | j�d d��rtd� | �d|||ggd�S t �
d� dS t|�dk�r.|d dk�r.| j|gt|d �d�S | �|g�S )Nr r rg r` F�restart�reload� --restart� interactivez ## stop ... �stopzCould not stop serverz ## load configuration ... z ## start ... r )ry z--unbanz --if-existsz%Unexpected argument(s) for reload: %rr+ r, z--allz ## reload ... TzCould not find serverr* )�
isinstance�list�len� _Fail2banClient__startServerr7 � _Fail2banClient__processCommandrm r � _Fail2banClient__waitOnServerr r< � resetConf� initCmdLine�_argv�appendrW rX r. �float)r! rG rL �opts�jailr[ r r r �__processCommand� sj
�
z Fail2banClient.__processCommandc
G s� z| � � s
t�d� W dS | j|� W dS tyG } z'| jd dkr(t�|� t�d| jd d � | jr<| j�� W Y d }~dS d }~ww ) Nz%Could not find server, waiting failedFr2 r zQCould not start server. Maybe an old socket file is still present. Try to remove r1 zR. If you used fail2ban-client to start the server, adding the -x option will do itT) r� r r< r. r
r7 rF r �quit)r! r= rM r r r � __processStartStreamAfterWaitC s&
�
��
��z,Fail2banClient.__processStartStreamAfterWaitc s |d u r � j d }t�� }t�dd||f� d�� �fdd�}t� j d ��V}� jrt|� }||kr: W d � dS t�� | }t�dd |� |d
krO|�� ||krWtd ��t�d |d
kradnd��t� �� � js*W d � dS W d � dS 1 sw Y dS )Nr- r3 z__waitOnServer: %rg������y?c s t j�� jd �o� j�d�S )Nr1 r, )rO rY rZ r7 rW r �r! �sltimer r rp _ s z/Fail2banClient.__waitOnServer.<locals>.<lambda>r2 Tz wait-time: %sr zFailed to start serverr g�������?rq r) F)
r7 �timer r9 �
VisualWaitr � heartbeatr
�min�sleep)r! �alive�maxtime� starttime�test�vis�runf�waittimer r� r �__waitOnServerX s8
�
�
��
��z Fail2banClient.__waitOnServerc
C s( i }t � dkr tjtjfD ]}t�|�||< t�|| j� q
�z`�z
| jd u rL| �|�}|d urL|rHW W d| _|� � D ]
\}}t�||� q;dS t
d��| j }| j �
dd�r�zdd l}W n tyg t
d��w zzd}t|�dkrv| �|�}|r�|�d� | �� t� }|d ks�|d
kr�W W W d| _|� � D ]
\}}t�||� q�dS |d kr�| �� n3|d ks�z
| �t�|�� W n$ ty� } z| j d
dkr�t�| � nt�| � W Y d } ~ nd } ~ ww q�W nJ t t fy� t d � � w t|�dk �r| �� W W d| _|� � D ] \}}t�||� �qdS | �|�W W d| _|� � D ] \}}t�||� �q S W n; t�yi } z.| j d
dk�rEt�| � nt�| � W Y d } ~ W d| _|� � D ] \}}t�||� �qWdS d } ~ ww W d| _|� � D ] \}}t�||� �qrd S d| _|� � D ] \}}t�||� �q�w )N� _MainThreadFTzInit of command line failedrz r zReadline not availablez
tab: completer
r� �helpr" r2 r ) r �signal�SIGTERM�SIGINT� getsignal� _Fail2banClient__sigTERMhandlerr� r� r �itemsr
�_argsr7 rm �readline� ImportErrorr~ r� �parse_and_bindr# r � dispUsage�shlex�splitrA r rF r< �EOFError�KeyboardInterruptr )
r! �argv�
_prev_signals�srL �shr= r� rG rM r r r rg r s�
2�� �
��
����� � ���
����"���zFail2banClient.start)r) )Tr+ )r" F)T)TN)r �
__module__� __qualname__r r# r� rW �propertyr0 r. r? rc r rt r� re r� rg r r r r r 6 s
2
&!I
r c @ s: e Zd ZdZdZdZddd�Zdd� Zd d
� Zd d � Z d
S )� _VisualWaitzJSmall progress indication (as "wonderful visual") during waiting process
r r �
c C s
|| _ d S r )�maxpos)r! r� r r r r � s
z_VisualWait.__init__c C � | S r r r r r r � __enter__� � z_VisualWait.__enter__c G s6 | j rtj�ddd| j d � tj�� d S d S )N�
� �# )�posrC rD �writer� rE �r! r= r r r �__exit__� s �z_VisualWait.__exit__c C s� | j stj�dd| j d � | j | j7 _ | jdkr'| j dkr$dnd}nd}tj�|� tj�� | j | jkr?d | _d S | j d
k rId| _d S d S ) z&Show or step for progress indicator
z
INFO [#r� z ] Waiting on the server...
[8Cr r z #[1Dz# [2Dz
[1D# [2Dr+ r N)r� rC rD r� r� �deltarE )r! r� r r r r� � s
�z_VisualWait.heartbeatN)r� )
r r� r� �__doc__r� r� r r� r� r� r r r r r� � s
r� c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �_NotVisualWaitz8Mockup for invisible progress indication (not verbose)
c C r� r r r r r r r� � r� z_NotVisualWait.__enter__c G � d S r r r� r r r r� � r� z_NotVisualWait.__exit__c C r� r r r r r r r� � r� z_NotVisualWait.heartbeatN)r r� r� r� r� r� r� r r r r r� � s
r� c O s | dkr t |i |��S t� S )z3Wonderful visual progress indication (if verbose)
r )r� r� )r2 r= �kwargsr r r r� � s r� c C s( t � }|�| �rtd� d S td� d S )Nr r$ )r rg r
)r� rI r r r �exec_command_line� s
r� )!�
__author__�
__copyright__� __license__rO r� r� r1 rC r� r r r �csocketr r0 r �fail2bancmdliner r
r r r
r � server.utilsr r r r r r� r� r� r� r r r r �<module> s6