File: //lib/python3.9/site-packages/fail2ban/server/__pycache__/ipdns.cpython-39.opt-2.pyc
a
OZR�=��~� @ s� d Z dZdZddlZddlZddlZddlmZ ddlm Z e e
�Z d d
� Z dd d
�Z
G dd� d�ZG dd� de�Zedd�e_G dd� de�Zddd�Zee�e_dS )zJFail2Ban Developers, Alexander Koeppe, Serg G. Brester, Yaroslav Halchenkoz+Copyright (c) 2004-2016 Fail2ban DevelopersZGPL� N� )�Utils� )� getLoggerc C s t | t�r| S t| �S )z8A little helper to guarantee ip being an IPAddr instance��
isinstance�IPAddr��ip� r �9/usr/lib/python3.9/site-packages/fail2ban/server/ipdns.py�asip' s
r
� c C s� zn| p t �� } dd� t �| ddt jdt j�D �}|rl| d }d}|D ] }|�|�r\| W S |sD|}qD|W S W n t jy� Y n0 t �| �S )z�Get fully-qualified hostname of given host, thereby resolve of an external
IPs and name will be preferred before the local domain (or a loopback), see gh-2438
c s s | ]}|d r|d V qdS )� Nr )�.0�air r r � <genexpr>3 s �zgetfqdn.<locals>.<genexpr>Nr �.)�socket� gethostname� getaddrinfoZ
SOCK_DGRAMZ AI_CANONNAME�
startswith�error�getfqdn)�name�namesZpref�firstr r r r r - s$ ��
r c @ s� e Zd Zejddd�Zejddd�Zedd� �Zedd� �Z edd � �Z
ed d d ��Z d
Z edd� �Z
dZedd� �ZdZedd� �ZdZedd� �Zedd� �ZdZed d � �ZdS ) �DNSUtilsi� �, �ZmaxCountZmaxTimec C s� t j�| �}|dur|S t� }d}t �� r6tjtjfntjfD ]�}zdt�| d|dtj �D ]J}t
|�dk sXt
|d �svqXt t |d d �t �
|��}|jrX|�|� qXW q> ty� } z|}W Y d}~q>d}~0 0 q>|s�|r�t�d| |� t j�| |� |S )z_ Convert a DNS into an IP address using the Python socket module.
Thanks to Kevin Drapel.
Nr � z4Unable to find a corresponding IP address for %s: %s)r �CACHE_nameToIp�get�set�
IPv6IsAllowedr �AF_INET�AF_INET6r Z IPPROTO_TCP�lenr �str�_AF2FAM�isValid�add� Exception�logSys�warning)�dns�ipsZsaveerr�fam�resultr
�er r r �dnsToIpS s$ zDNSUtils.dnsToIpc
C sx t j�| d�}|dkr|S zt�| �d }W n8 tjyd } z t�d| |� d }W Y d }~n
d }~0 0 t j�| |� |S )Nr r z'Unable to find a name for the IP %s: %s) r �CACHE_ipToNamer" r Z
gethostbyaddrr r- �debugr# )r
�vr3 r r r �ipToNameq s zDNSUtils.ipToNamec C sn t � }t�| �}|dur0t|�}|jr0|�|� |dv rj|sjt�| �}|�|� |rj|dkrjt� d| |� |S )z/ Return the IP of DNS found in a given text.
N)�yes�warnr: z'Determined IP using DNS Lookup: %s = %s)
r# r �searchIPr* r+ r r4 �updater- r. )�textZuseDnsZipListZplainIPr
r r r �textToIp� s
�zDNSUtils.textToIpTc C s� dd| f}t j�|�}|dur"|S d}| r4ttjfntjtfD ]F}z|� }W q�W q> ty� } zt�d|� W Y d}~q>d}~0 0 q>t j� ||� |S )z;Get short hostname or fully-qualified hostname of host self�self�hostnameNr z#Retrieving own hostnames failed: %s)
r r5 r" r r r r, r- r. r# )Zfqdn�keyr r@ r3 r r r � getHostname� s
�
$zDNSUtils.getHostname)r? r/ c C sR t j�t j�} | dur| S tdt �d�t �d�g�tdg� } t j�t j| � | S )zGet own host names of selfNZ localhostFTr )r r5 r" �_getSelfNames_keyr# rB )r r r r � getSelfNames� s ��zDNSUtils.getSelfNames)Znetintrfr0 c C s\ t j�t j�} | dur| S ztdd� t �� D ��} W n t� } Y n0 t j�t j| � | S )� Get own IP addresses of selfNc S s g | ] \}}|�qS r r )r Zni�ar r r �
<listcomp>� � z+DNSUtils.getNetIntrfIPs.<locals>.<listcomp>)r r! r" �_getNetIntrfIPs_key� IPAddrSet�_NetworkInterfacesAddrsr# )r0 r r r �getNetIntrfIPs� s zDNSUtils.getNetIntrfIPs)r? r0 c C s� t j�t j�} | dur| S tt �� �} t �� D ]N}z| tt �|��O } W q. tyz } zt �
d||� W Y d}~q.d}~0 0 q.t j� t j| � | S )rE Nz#Retrieving own IPs of %s failed: %s) r r! r" �_getSelfIPs_keyrJ rL rD r4 r, r- r. r# )r0 r@ r3 r r r �
getSelfIPs� s &zDNSUtils.getSelfIPsNc
C sV t js
dS z>tdd�� } t| �� � W d � W S 1 s<0 Y W n Y n0 d }z�z.t � t jt j�}|�d� W W |r�|�� dS t �y. } z�t
|d��rdd l }|j dk s�|j |j |j
fv r�W Y d }~W |r�|�� dS |j |j|jfv �rW Y d }~W |�r|�� dS W Y d }~n
d }~0 0 W |�rR|�� n|�rP|�� 0 d S )NFz(/proc/sys/net/ipv6/conf/all/disable_ipv6�rb)r r T�errnor )r Zhas_ipv6�open�int�readr& Z SOCK_STREAMZbind�closer, �hasattrrP Z
EADDRNOTAVAILZ EAFNOSUPPORTZ
EADDRINUSEZEACCES)�f�sr3 rP r r r �_IPv6IsSupportedBySystem� s6 2
� � � z!DNSUtils._IPv6IsSupportedBySystemc C s* | t _t�d| d ur | r dq"dnd� | S )Nz
IPv6 is %s�on�off�auto)r �_IPv6IsAllowedr- r6 )�valuer r r �setIPv6IsAllowed
s zDNSUtils.setIPv6IsAllowed)r? z ipv6-allowedc C s� t jd urt jS t j�t j�} | d ur*| S t �� } | d u rzt �� }|shdt _zt �� }W d t _nd t _0 tdd� |D ��} t j� t j| � | S )NTc s s | ]}d |j v V qdS )�:N)�ntoa)r r
r r r r $ rH z)DNSUtils.IPv6IsAllowed.<locals>.<genexpr>)
r r\ r! r" �_IPv6IsAllowed_keyrX rL rN �anyr# )r7 r0 r r r r$ s
zDNSUtils.IPv6IsAllowed)T)�__name__�
__module__� __qualname__r �Cacher! r5 � staticmethodr4 r8 r> rB rC rD rI rL rM rN r\ rX r^ ra r$ r r r r r M s6
r c s� e Zd ZdZdZdZe�deef �Ze�deeeef �Z dZ
dZ e j
dd d
�Zd Zd Zeej Zeej Zed
d� �Zef� fdd� Zedd� �Zefdd�Zdd� Zdd� Z dd� Z e dd � �Z e d d � �Z ejd ejd iZ!e d!d"� �Z"e d#d$� �Z#e d%d&� �Z$e d'd(� �Z%e d)d*� �Z&d+d,� Z'd-d.� Z(d/d0� Z)d1d2� Z*d3d4� Z+d5d6� Z,e d7d8� �Z-e d9d:� �Z.dQd;d<�Z/d=d>� Z0e d?d@� �Z1e dAdB� �Z2dCdD� Z3dEdF� Z4dGdH� Z5dIdJ� Z6e6� Z7e dKdL� �Z8edMdN� �Z9edOdP� �Z:� Z;S )Rr z7Encapsulate functionality for IPv4 and IPv6 addresses
z(?:\d{1,3}\.){3}\d{1,3}z:(?:[0-9a-fA-F]{1,4}::?|:){1,7}(?:[0-9a-fA-F]{1,4}|(?<=:):)z%^(?:(?P<IPv4>%s)|\[?(?P<IPv6>%s)\]?)$z^(%s|%s)/(?:(\d+)|(%s|%s))$N)�_family�_addr�_plen� _maskplen�_rawi' r r ������c C s
t j| S �N)r �CIDR_RAW)r7 r r r r) E s zIPAddr._AF2FAMc s� |t jkr t|ttf�r t j}|t jkrHtt | ��| �}|�||� |S ||f}t j �
|�}|d urh|S |t jkr�t � |�\}}||f}|t jkr�t j �
|�}|d ur�|S tt | ��| �}|�||� |j t jkr�t j �
||� |S ro )r � CIDR_UNSPECr �tuple�listrp �super�__new__�
_IPAddr__init� CACHE_OBJr" �_IPAddr__wrap_ipstrrh r# )�cls�ipstr�cidrr
�args�� __class__r r ru I s,
zIPAddr.__new__c C s� t | �dkr0| d dkr0| d dkr0| dd� } d| vrB| tjfS tj�| �}|d u r`| tjfS t|�� �}|d r�t�|d �|d< |d= zt|d �|d< W n t y� | tjf Y S 0 |S )Nr r �[rn �]r �/)
r' r rq �
IP_W_CIDR_CRE�matchrs �groups�
masktoplenrR �
ValueError)rz rW r r r Z __wrap_ipstrd s $
zIPAddr.__wrap_ipstrc C s� t j| _d| _d| _d| _|| _|tjk�rx|durL|tjk rLtj| g}n t j t j
g}|D ]:}z t � ||�}|| _W q�W q\ t j y� Y q\Y q\0 q\| jt j kr�t
�d|�\| _d| _|dur�|dkr�d|? }| j|M _|| _n�| jt j
k�r�t
�d|�\}}|d> |B | _d| _|du�rP|dk�rPd |? }| j|M _|| _n&| �tj��r�|d@ | _t j | _d| _ntj| _dS )
zP initialize IP object by converting IP address string
to binary to integer
r N�!L� � �� �!QQ�@ � � ��������� )r � AF_UNSPECrh ri rj rk rl r rp r% r& Z inet_ptonr �structZunpack�isInNet� IP6_4COMPAT)r? rz r{ �family�binary�mask�hi�lor r r Z__initz sH
z
IPAddr.__initc C s
t | j�S ro )�reprr` �r? r r r �__repr__� s zIPAddr.__repr__c C s t | jt�r| jS t| j�S ro )r r` r( r� r r r �__str__� s zIPAddr.__str__c C s t | jffS )z�IPAddr pickle-handler, that simply wraps IPAddr to the str
Returns a string as instance to be pickled, because fail2ban-client can't
unserialize IPAddr objects
)r( r` r� r r r �
__reduce__� s zIPAddr.__reduce__c C s | j S ro )ri r� r r r �addr� s z IPAddr.addrc C s | j S ro )rh r� r r r r� � s z
IPAddr.familyZinet4Zinet6c C s t j�| j�S ro )r �FAM2STRr" rh r� r r r � familyStr� s zIPAddr.familyStrc C s | j S ro )rj r� r r r �plen� s z IPAddr.plenc C s | j S )zlThe raw address
Should only be set to a non-empty string if prior address
conversion wasn't possible
)rl r� r r r �raw� s z
IPAddr.rawc C s | j tjkS )z6Either the object corresponds to a valid IP address
)rh r r� r� r r r r* � s zIPAddr.isValidc C s | j tjdtjdi�| jd�kS )zIReturns whether the object is a single IP address (not DNS and subnet)
r� r� i���)rj r r% r& r" rh r� r r r �isSingle� s zIPAddr.isSinglec C s~ | j tjkr t|t�s | j|kS t|t�s>|d u r6dS t|�}| j |j krNdS | j tjkrf| j|jkS | j|jko|| j|jkS �NF) rh r rp r rl r r� ri rj �r? �otherr r r �__eq__� s
�z
IPAddr.__eq__c C s
| |k S ro r r� r r r �__ne__� s z
IPAddr.__ne__c C sV | j tjkr t|t�s | j|k S t|t�s>|d u r6dS t|�}| j |j k pT| j|jk S r� )rh r rp r rl ri r� r r r �__lt__� s
z
IPAddr.__lt__c C s t |t�st|�}d| |f S �Nz%s%sr r� r r r �__add__� s
zIPAddr.__add__c C s t |t�st|�}d|| f S r� r r� r r r �__radd__ s
zIPAddr.__radd__c C s
t | j�S ro )�hashr` r� r r r �__hash__ s zIPAddr.__hash__c C s4 | j tjkrd| j S | j tjkr,d| j S dS dS )z<Hex representation of the IP address (for debug purposes)
z%08xz%032xr N)rh r r% ri r& r� r r r �hexdump
s
zIPAddr.hexdumpc C s� d}| j r4t�d| j�}| jr~| jdk r~d| j }nJ| jrx| jd? }| jd@ }t�d||�}| jr~| jdk r~d| j }n| jS t�| j |�| S ) zi represent IP object as text like the deprecated
C pendant inet.ntoa but address family independent
r r� r� z/%dr� l ���� r� r� )
�isIPv4r� Zpackri rj �isIPv6rl r � inet_ntoprh )r? r+ r� r� r� r r r r` s
z IPAddr.ntoac C sT | j r | j�d�}|du r>d}n | jr:| j}|du r>d}ndS dd�t|��|f S )a return the DNS PTR string of the provided IP address object
If "suffix" is provided it will be appended as the second and top
level reverse domain.
If omitted it is implicitly set to the second and top level reverse
domain of the according IP address family
r Nz
in-addr.arpa.z ip6.arpa.r z%s.%s)r� r` �splitr� r� �join�reversed)r? �suffixZ exploded_ipr r r �getPTR0 s z
IPAddr.getPTRc C s t �| j�S )z?Return the host name (DNS) of the provided IP address object
)r r8 r` r� r r r �getHostE s zIPAddr.getHostc C s | j tjkS )z4Either the IP object is of address family AF_INET
)r� r r% r� r r r r� J s z
IPAddr.isIPv4c C s | j tjkS )z5Either the IP object is of address family AF_INET6
)r� r r& r� r r r r� P s z
IPAddr.isIPv6c C sl |j s |jdkr | t�|j�v S | j|jkr0dS | jrDd|j? }n| jrXd|j? }ndS | j|@ |jkS )z9Return either the IP object is in the provided network
r Fr� r� ) r* r� r r4 r� r� r� r� r� )r? Znetr� r r r r� V s zIPAddr.isInNetc C s t |t�o|| kp|�| �S )z;Return whether the object (as network) contains given IP
)r r r� �r? r
r r r �containsi s zIPAddr.containsc C s
| � |�S ro �r� r� r r r � __contains__n s zIPAddr.__contains__c C sl dd> d } d}| d|dddi}d}t dd�D ]8}|d|> O }|dk rVd| |||A < d| ||| A < q.|S )Nr r� r� r� r � � )�range)Zm6Zm4Zmmap�m�ir r r Z __getMaskMapr s zIPAddr.__getMaskMapc C sF d}| j d ur| j S tj�| j�}|d u r<tdt| �f ��|| _ |S )Nr z'invalid mask %r, no plen representation)rk r �MAP_ADDR2MASKPLENr" ri r� r( )r? Zmplenr r r �maskplen� s
zIPAddr.maskplenc C s
t | �jS )zIConvert mask string to prefix length
To be used only for IPv4 masks
)r r� )r� r r r r� � s zIPAddr.masktoplenc C s< t j�| �}|sdS |�d�}|dur2|dkr2|S |�d�S )zBSearch if text is an IP address, and return it if so, else None
NZIPv4r ZIPv6)r �
IP_4_6_CREr� �group)r= r� rz r r r r; � s
zIPAddr.searchIP)N)<rc rd re �__doc__ZIP_4_REZIP_6_RE�re�compiler� r� r� � __slots__r rf rw rp rq r r% ZFAM_IPv4r& ZFAM_IPv6rg r) ru rx rv r� r� r� �propertyr� r� r� r� r� r� r* r� r� r� r� r� r� r� r� r` r� r� r� r� r� r� r� Z_IPAddr__getMaskMapr� r� r� r; �
__classcell__r r r} r r . s�
��
7
r z
::ffff:0:0�` c @ s, e Zd ZdZg fdd�Zdd� Zdd� ZdS ) rJ Fc C sN t � }|D ]2}t|t�s t|�}|�|� | j|j O _q
t �| |� d S ro )r# r r r+ � hasSubNetr� �__init__)r? r0 Zips2r
r r r r� � s
zIPAddrSet.__init__c C s4 t |t�st|�}| j|j O _t�| |� d S ro )r r r� r� r# r+ r� r r r r+ � s z
IPAddrSet.addc s: t � t�st� �� t�| � �p8| jo8t� fdd�| D ��S )Nc 3 s | ]}|� � �V qd S ro r� )r �nr r r r � rH z)IPAddrSet.__contains__.<locals>.<genexpr>)r r r# r� r� rb r� r r r r� � s zIPAddrSet.__contains__N)rc rd re r� r� r+ r� r r r r rJ � s rJ Fc
s� �z^ddl m}m}m� m� m�m�m�m�m }m
}m }m }m
�m� dd l}dd l }G ��fdd�d|��
G ���fdd�d|��G ����fdd�d|��G � �
fd d
�d
|�}G d d � d |�� d
� � �fd|fd|fd� �
�fd� �
�fd|fd|fg� _|�|j�d��pd��
�
j�s&td��dd� � d � �� ��fdd� �d � ��� �
� � fd d � } W n: t�y� }
z t|
���fd d �} W Y d }
~
n
d }
~
0 0 t| �t_| | �S )!Nr )� Structure�Union�POINTER�pointer� get_errno�cast�c_ushort�c_byte�c_void_p�c_char_p�c_uint�c_int�c_uint16�c_uint32c s e Zd Zd�fd� d fgZdS )z0_NetworkInterfacesAddrs.<locals>.struct_sockaddr� sa_familyZsa_data� N�rc rd re �_fields_r )r� r� r r �struct_sockaddr� s
�r� c s& e Zd Zd�fd�fd� d fgZdS )z3_NetworkInterfacesAddrs.<locals>.struct_sockaddr_inZ
sin_familyZsin_port�sin_addrr Nr� r )r� r� r� r r �struct_sockaddr_in� s
�r� c s2 e Zd Zd�fd�fd�fd� d fd�fgZdS )z4_NetworkInterfacesAddrs.<locals>.struct_sockaddr_in6Z sin6_familyZ sin6_portZ
sin6_flowinfo� sin6_addr� Z
sin6_scope_idNr� r )r� r� r� r� r r �struct_sockaddr_in6� s
�r� c s$ e Zd Zd� ��fd� ��fgZdS )z._NetworkInterfacesAddrs.<locals>.union_ifa_ifuZ
ifu_broadaddrZ ifu_dstaddrNr� r )r� r� r r �
union_ifa_ifu� s
�r� c @ s e Zd ZdS )z/_NetworkInterfacesAddrs.<locals>.struct_ifaddrsN)rc rd re r r r r �struct_ifaddrs� s r� �ifa_next�ifa_nameZ ifa_flags�ifa_addr� ifa_netmaskZifa_ifuZifa_data�cr z libc.getifaddrs is not availablec s s" | j }|V |jsq |jj }qd S ro )�contentsr� )�ifap�ifar r r � ifap_iter� s
z*_NetworkInterfacesAddrs.<locals>.ifap_iterFc s | j j}|j}|tjkr���|�� ���j}t�||j�}|r�| jj}|d ur�|jtjkr���|�� ���j}|dt�||j� 7 }t|�S |tj k�r��|�� ���j}t�||j
�}|�r
| jj}|d u�r
|jtj k�r
��|�� ���j}|dt�||j
� 7 }t|�S d S )Nr� ) r� r� r� r r% r� r� r� r r& r� )r� �withMaskZsar1 r� Znm)r� r� r� r� r� r r �
getfamaddr� s*
z+_NetworkInterfacesAddrs.<locals>.getfamaddrc 3 s~ � ��� }�� �|��}|dkr*t�� ��~z@�|�D ](}|j�d�}�|| �}|r6||fV q6W ��|� n ��|� 0 d S )Nr zUTF-8)�
getifaddrs�OSErrorr� �decodeZ freeifaddrs)r� r� r2 r� r r� )r� r� r� r� �libcr� r� r r rK s
z8_NetworkInterfacesAddrs.<locals>._NetworkInterfacesAddrsc s � �d S ro r r )� _init_errorr r rK s )F)F)�ctypesr� r� r� r� r� r� r� r� r� r� r� r� r� r� Z ctypes.utilr� ZCDLL�utilZ find_libraryr� �NotImplementedErrorr, rg r rK ) r� r� r� r� r� r� r� r� r� rK r3 r )r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r rK � s8 @
� "
rK )r )F)�
__author__Z
__copyright__Z __license__r r� r� Zutilsr Zhelpersr rc r- r
r r �objectr r� r# rJ rK rg r r r r �<module> s&
b u
j