File: //lib/python3.9/site-packages/fail2ban/tests/__pycache__/fail2banclienttestcase.cpython-39.pyc
a
�ӷ�\���� @ s� d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z m
Z
mZmZmZ ddlmZ ddlmZ dd lmZmZmZ dd
lmZ dd lm Z m Z m Z dd l m!Z!m Z" dd
l#m$Z$ ddl%m%Z% ddl&m'Z' ddl(m)Z) ddl*m+Z+m,Z-m.Z.m/Z/m0Z0m1Z1m2Z3m4Z4m5Z5 ddl6m7Z7 e7e8�Z,dZ9dZ:ee!�;� �Z<e j=�>e j=j?�Z?e j=�>e j=j@�Z@e?d e_?e, e_, e_,e_,e%jAZBe%jCZDdd� ZEeE e_F e_F e_Fe$_Fdd� ZGe%jHZHdd� ZIe@fd d �ZJG d d � d ejK�ZKG d d!� d!ejK�ZLeKZMeLZNg aOd"d#� ZPePe_Qd$ e_Re_Re+jSZTd%d&� ZUd'd(� ZVd?d-d.�ZWd/d0� ZXd1d2� ZYd3d4� ZZd5d6� Z[i fd7d8�Z\G d9d:� d:e+�Z]G d;d<� d<e]�Z^G d=d>� d>e]�Z_dS )@z Serg BresterzICopyright (c) 2014- Serg G. Brester (sebres), 2008- Fail2Ban Contributors�GPL� N)�join�isdir�isfile�exists�dirname��wraps)�Thread� )�fail2banclient�fail2banserver�fail2bancmdline)�Fail2banCmdLine)�exec_command_line�CSocket�
VisualWait)�Fail2banServerr )�protocol)�server)�MyTime)�Utils� ) �LogCaptureTestCase�logSys� with_tmpdir�shutil�logging�STOCK�
CONFIG_DIR�TEST_NOW�tearDownMyTime)� getLoggerzfail2ban-clientzfail2ban-serverc G s t �| d � d S �Nr )r �info��args� r' �I/usr/lib/python3.9/site-packages/fail2ban/tests/fail2banclienttestcase.py� _test_outputJ s r) c C s& t �d| � t�t�� | d � d S )Nz===>>> time shift + %s min�< )r �debugr ZsetTime�time)�shiftr' r' r( � _time_shiftQ s r. c C s* t jdur&t j�t� t j�td � dS )z$Helper to wait observer becomes idleN� )� Observers�MainZ
wait_empty� MID_WAITTIMEZ wait_idler' r' r' r( �_observer_wait_idleY s
r3 c s. t jdur*t jj� � ��fdd�}|t j_dS )zOHelper to block observer before increase bantime until some condition gets trueNc s: � t j_t�d� t���� t�d� � | i |�� d S )Nz4 [Observer::banFound] *** observer blocked for testz. [Observer::banFound] +++ observer runs again)r0 r1 �banFoundr r+ r �wait_for�r& �kwargs�Z
_obs_banFound�cond�timeoutr' r( � _banFoundd s
z0_observer_wait_before_incrban.<locals>._banFound)r0 r1 r4 )r9 r: r; r' r8 r( � _observer_wait_before_incrban_ s
r< c @ s e Zd ZdZdS )�
ExitExceptionz Exception upon a normal exitN��__name__�
__module__� __qualname__�__doc__r' r' r' r( r= t s r= c @ s e Zd ZdZdS )�FailExitExceptionz Exception upon abnormal exitNr> r' r' r' r( rC y s rC c G s t t�rt�d�S dS d S )Nr �exit)�len�INTERACT�popr% r' r' r( �_test_input_command� s
rH Fc G s2 t | |�}|�d�|�|r dnd � |�� d S )N�
� )�open�writer �close)�fn�mode�lines�fr' r' r( � _write_file� s
rR c C s@ d }z$t | �}|�� W |d ur&|�� S n|d ur:|�� 0 d S �N)rK �readrM )rN rQ r' r' r( �
_read_file� s � �rU � /dev/null�:memory:r' �rJ c C s� t | d�}|dkr t | d�}d} |r�tr�dd� }
tjt||
d� |d u rLd}t�d �} tjt |d
�d d �D ]$} | � d
�} | �
| �r�d} t | � qjt�d�} tjt |d�d d �D ]$} | � d
�} | �
| �r�d} t | � q�|r�dnd} nTt �
|� tt |d
�dddd|�dd� ddt | d� d t | d � dd | d d d�
| �rftt || �dgd!dd"d#| df| �R � |�r�tt |d$�dg|�R � tjjtjk �r�tt |d
�� tt |d�� |�r�tt |d$�� | �r�| dk�r�tt || �� |�rt�r|D ]&}
t �t j�t t|
��t ||
�� �q�|�r>|D ]}
t|
d%| i d� �q$d&\}}tjjtjk �r�ttjj�}tjjd'k�r�d(d)tjj f}|d*|f }d+|d,t | d�d-t | d �d.|f| d/dd0tt j �f S )1N�config�autozf2b-db.sqlite3� jail.confc s � fdd�|D �S )z?Filters list of 'files' to contain only directories (under dir)c s g | ]}t t� |��r|�qS r' )r �pjoin)�.0rQ ��dirr' r( �
<listcomp>� � z2_start_params.<locals>.ig_dirs.<locals>.<listcomp>r' )r_ �filesr' r^ r( �ig_dirs� s z _start_params.<locals>.ig_dirs)�ignore)�action.dzfilter.dz ^dbfile\s*=z
fail2ban.confT)ZinplacerI zdbfile = :memory:z ^backend\s*=�backend = pollingz
jail.localrJ �w� [Definition]zloglevel = INFOz logtarget = �%z%%zsyslogsocket = autoz socket = �f2b.sockz
pidfile = �f2b.pidz dbfile = zdbmaxmatches = 100zdbpurgeage = 1d�
[INCLUDES]� [DEFAULT]ztmp = zfail2ban.local�tmp)r' �INFOr �-�vz
--loglevel�-c�-sz-p� --logtargetz--syslogsocketz --timeout) r\ r r �copytree�STOCK_CONF_DIR�re�compile� fileinput�input�rstrip�match�print�os�mkdirrR �replace�unittest�F2B� log_levelr �DEBUG� _out_file�symlink�path�abspathro �str� verbosityr � MAX_WAITTIME)rn � use_stock�
use_stock_cfg� logtarget�db� f2b_local�jails�create_before_start�cfgZj_confrc �r�line�nZvvvZllevr' r' r( �
_start_params� s�
�
��� $ ��
��r� c C s2 z| | � d�d dkW S ty, Y dS 0 d S )Nrt r � INHERITEDF)�index�
ValueError�� startparamsr' r' r( �_inherited_log� s r� c
C sZ d }z"t | �}t�d|��� }t|�W S tyT } zt�|� W Y d }~n
d }~0 0 |S )Nz\S+)rU rw r| �group�int� Exceptionr r+ )�pidfile�pid�er' r' r( �_get_pid_from_file� s
r� c
sl t �d| t| �f� t| �r<| }t|d�} t| �s<t|d�} tjjtj k rtt|d�}t|�rft
|� nt � dd|� t| �s�t �d|� dS t �d | � t | �� � d u r�d
S z�t �d � � � d ksΈ t
�� kr�td
� | f ��t�� �s�W dS t
�� tj� t�� fdd�d��s t
�� tj� t �d� t�� � W S t�yf } zt �|� W Y d }~n
d }~0 0 dS )Nz cleanup: %rrk z fail2ban.pid�f2b.logr/ z
no logfile %rzcleanup: no pidfile for %rTzcleanup pidfile: %rFzcleanup pid: %rr zpid %s of %s is invalidc s t �� � S rS )r �
pid_existsr' �r� r' r( �<lambda>) ra z_kill_srv.<locals>.<lambda>r �cleanup: kill ready)r r+ r r\ r r� r� r� r r� r� �logr� r~ �getpidr� r r� �kill�signal�SIGTERMr5 �SIGKILLr� � exception)r� ZpiddirZlogfiler� r' r� r( � _kill_srv s@
r� c s t � �� fdd��}|S )z�Helper to decorate tests which receive in the last argument tmpdir to pass to kill_srv
To be used in tandem with @with_tmpdir
c s2 |d }z� | g|�R � W t |� S t |� 0 d S )N���)r� )�selfr& r� �rQ r' r( �wrapper8 s �z with_kill_srv.<locals>.wrapperr �rQ r� r' r� r( �
with_kill_srv3 s r� c s � fdd�}|S )z}Helper to decorate tests uses foreground server (as thread), started directly in test-cases
To be used only in subclasses
c s t t� �� �fdd���}|S )Nc
s� d }t � � �z�� z�t�fddi����td�j��� fd�}d|_|�� ttff� ���fdd� }|�_t �
� fdd �t � �� � �
d
d �� �j�d�� d � t�d � ��� ����g|�R i |��W W |�rt�d
� ��� ��� � �
dd ��r|�� t� S t�yb } z<td| � ��� }|�rLtd| � ��� � W Y d }~n
d }~0 0 W |�r�t�d
� ��� ��� � �
dd ��r�|�� t� n>|�r�t�d
� ��� ��� � �
dd ��r�|�� t� 0 d S )Nr� r� �_TestCaseWorker��name�targetr& Tc s� t � � �dd �s8tj�t�d��s8t�� fdd�t� � �dd �s��� | �d� t�� fdd�t
� �� � �dd �� �j ddd t
d
� d d� �_
d S ) N�endrk c s � � dd �d uS �Nr� ��getr' ��phaser' r( r� ] ra zywith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>._stopAndWaitForServerEnd.<locals>.<lambda>�stopc s � � dd �d uS r� r� r' r� r' r( r� b ra �Shutdown successfulzExiting Fail2banT��all�waitc _ s d S rS r' r6 r' r' r( r� f ra )r! r� r~ r� r r\ r r5 r2 �execCmdr� �
assertTrue� assertLogged�stopAndWaitForServerEnd��code�r� r� r� rn r' r( �_stopAndWaitForServerEndY s zgwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>._stopAndWaitForServerEndc s � � dd �d uS )N�startr� r' r� r' r( r� i ra zWwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>.<lambda>r� �r� r� z === within server: begin ===z === within server: end. ===r� z=== Catch an exception: %sz#=== Error of server, log: ===
%s===)�dictr� r
�_testStartForeground�daemonr� �SUCCESS�FAILEDr� r r5 r� r� r� �
_wait_for_srv� DefLogSysr$ �pruneLogr r! r� r} �getLog)r� rn r& r7 �thr� r� r� )rQ �
startextrar� r( r� G s` �
�
�
zEwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper)r r r� �r� r� r( �
_deco_wrapperF s :z4with_foreground_server_thread.<locals>._deco_wrapperr' )r� r� r' r� r( � with_foreground_server_threadA s >r� c @ s� e Zd ZejZdd� Zdd� Zdd� Ze ddd ��Z
d d d
�Z dd� Z dd� Z
dd� Zeddid�dd� �Zeedd� ��Zd S ) �Fail2banClientServerBasec O s d S rS r' )r� r& r7 r' r' r( � _setLogLevel� s z%Fail2banClientServerBase._setLogLevelc C s( t �| � dt_tjt_t| j�t _
dS )z Call before every test case.r� N) r �setUpr �
DEF_LOGTARGETr� �level� DEF_LOGLEVEL� staticmethod�
_test_exitr �_exit�r� r' r' r( r� � s
z Fail2banClientServerBase.setUpc C s( | j t_tt_tt_t� | � t
� dS )zCall after every test case.N) �
_orig_exitr r� �SRV_DEF_LOGTARGETr r� �SRV_DEF_LOGLEVELr� r �tearDownr! r� r' r' r( r� � s
z!Fail2banClientServerBase.tearDownr c C s | dkrt � �nt� �d S r# )r= rC r� r' r' r( r� � s z#Fail2banClientServerBase._test_exitTNc s� � si � zlt |d��t�� �fdd�t�}|r8� �d�rFtd|f ��|rrt��fdd�t�}|srtd� |f ��W n^ t|�r�td��� � �� � t |d �}t
|�r�t |� nt|�s�t �
d
|� � Y n0 d S ) Nrj c s � � d�pt��S r� )r� r r' )r� �sockr' r( r� � ra z8Fail2banClientServerBase._wait_for_srv.<locals>.<lambda>r� z9Unexpected: Socket file does not exists.
Start failed: %rc s d� � � v S )N� Server ready)r� r' r� r' r( r� � ra zBUnexpected: Server ready was not found, phase %r.
Start failed: %rz,=== Error by wait for server, log: ===
%s===r� z*No log file %s to examine details of error)r\ r r5 r� r� r� r� r} r� r� r r� r r+ )r� rn �readyr� r� �retr� r' )r� r� r� r( r� � s8
����
z&Fail2banClientServerBase._wait_for_srvc G s* | � || jd | jdd � | | � d S )Nr r )Z assertRaisesr )r� ZexitTyper� r& r' r' r( r� � s �z Fail2banClientServerBase.execCmdc G s> ||� d�d }t|�}z|�|�W |�� S |�� 0 d S )Nrs r )r� r �sendrM )r� r� r& r� �sr' r' r( �
execCmdDirect� s
�z&Fail2banClientServerBase.execCmdDirectc C sd t �d� d|d< z0| �td| d� W d|d< d|d< t �d� n d|d< d|d< t �d� 0 d S )Nzstart of test workerTr� �z-fFr� zend of test worker)r r+ r� r� )r� rn r� r� r' r' r( r� � s
�z-Fail2banClientServerBase._testStartForegroundr� )z[Thread]zstacksize = 128r� c C sR | � � | �t|dd� | �d� | �t|d� | �t|d� | �t|dd� d S )Nr� �threadz{'stacksize': 128}�ping�~~unknown~cmd~failed~~�echo� TEST-ECHO)r� r� r� r� r� �r� rn r� r' r' r( �testStartForeground� s
z,Fail2banClientServerBase.testStartForegroundc s� t jst�d��t|d�}t �|�}|j�� }|�d� |�� t ||dd�}ddi}� fdd �}t
d
|||fd �}|� � z&� � t
d | d
� W d|d< |�� nd|d< |�� 0 � jdddd� d S )Nz Skip test because no databaseztmp.dbz#UPDATE fail2banDb SET version = 555r� )r� r� r� Tc s$ t �� fdd�t�s ��| d� d S )Nc s
� d S )Nr� r' r' r� r' r( r� � ra z[Fail2banClientServerBase.testStartFailsInForeground.<locals>._stopTimeout.<locals>.<lambda>r� )r r5 r� r� r� r� r� r( � _stopTimeout� s zIFail2banClientServerBase.testStartFailsInForeground.<locals>._stopTimeoutr� r� r� r� Fz/Attempt to travel to future version of database�Exit with code 255�r� )r Z
Fail2BanDbr� �SkipTestr\ Z_dbZcursorZ
executescriptrM r� r
r� r� r� r r� ) r� rn Zdbnamer� �curr� r� r� r� r' r� r( �testStartFailsInForeground� s2
�
�
�z3Fail2banClientServerBase.testStartFailsInForeground)r )TNN)r? r@ rA r r� r� r� r� r� r� r� r� r� r� r� r� r� r r� r r' r' r' r( r� � s
r� c @ st e Zd ZeefZdd� Zdd� Zedd� �Z ee
dd� ��Z ee
d d
� ��Z ee
d d � ��Z
ed
d� �Zdd� ZdS )�Fail2banClientTestc C s, | � tttt��� | � tttt��� d S rS )r� r r\ �BIN�CLIENT�SERVERr� r' r' r( �testConsistency s z"Fail2banClientTest.testConsistencyc C s� | � tdd� | �dt � | �d� | �� | � tdd� | �t�� � | �� | � tddd� | �dtj � | �� | � tdd d
� | �d � d S ) Nr' �-h�Usage: �Report bugs to z-Vz-vqz --versionz
Fail2Ban vz --str2secZ1d12h30mZ131400)r� r� r� r r� r � normVersion�versionr� r' r' r( �testClientUsage s
z"Fail2banClientTest.testClientUsagec C sP t |d�}| �t|d� | �d� | �d� | �� | �t|d� | �d� d S )NTz-vvdz
Loading filesz['set', 'logtarget',z--dp)r� r� r� r� r� r� r' r' r( �testClientDump& s
z!Fail2banClientTest.testClientDumpc C s t |d�}| �td| d� | j|d|d� | �d� | �d� zp| �t|dd� | �t|d � | �� | �td| d� | �d
� W | �� | �t|d � | �d � | �d� n,| �� | �t|d � | �d � | �d� 0 | �� | �t|d � | �d
� | �d� d S )NT�z-br� r� r� �Exit with code 0r� r� r� zServer already runningr� r� z Failed to access socket pathzIs fail2ban running?)r� r� r� r� r� r� r� r� r' r' r( � testClientStartBackgroundInside2 s.
�
z2Fail2banClientTest.testClientStartBackgroundInsidec C s� t |t|d�d�}tjjr,| �t|d � n`tjtt t
�f}t � d|� || d }t
j|tddd�}| �t|�ox|d � | j|d|d
� | �d � | �� �z| �t|d d
� | �d
� | �d� | �� | �t|dd� | �d� | �� tt|d��}z<t�|tj� t�t
j � | �t |dd� W t�|tj � nt�|tj � 0 | �d� | �� z d d l }W n4 t �y� } zt�!d| ��W Y d }~n
d }~0 0 t"g d�7 a"| �t|d� | �d� | �dd� | �d� | �� t"g d�7 a"| �t|d� | �d � | �d � | �d � | �d� | �� t"d d g7 a"| �t|d� | �d � | �� | �t |d!d"� | �d � | �d#� | �� W | �� | �t|d$� | �d � | �d� n,| �� | �t|d$� | �d � | �d� 0 d S )%Nr� �r� )r� � Start %s ...)�--asyncr� FT�r: �shell�outputr r� r� r� r� r r� z0.1zServer replied: pongrk z1e-10z timed outz%Skip test because of import error: %s)zecho INTERACT-ECHO�statusrD z-iz
INTERACT-ECHOZStatuszNumber of jail:)�reload�restartrD zReading config files:r� z reload ~~unknown~jail~fail~~rD z@Failed during configuration: No section: '~~unknown~jail~fail~~'r z~~unknown~jail~fail~~r� r� )#r� r\ r� r� �fastr� r� �sys�
executabler r r r+ r �
executeCmdr� r� rE r� r� r� r� r~ r� r� �SIGSTOPr, �sleepZDEFAULT_SHORT_INTERVALr� �SIGCONT�readline� ImportErrorr� rF )r� rn r� �cmdr� r� r! r� r' r' r( � testClientStartBackgroundCallQ s~
$
�
�
z0Fail2banClientTest.testClientStartBackgroundCallc C s� t |dd�}| �tdddt|d�d� | �dt|d� d � | �� | �tddt|d
�d t|d �d
� | �d� | �� tt|d �d��� | �tdddt|d
�d t|d �d� | �d� | �� t� t|d �� | �tdd � | �d� | �� d S )Nr� r r' r rr �missr� � Base configuration directory � does not existrY rs rj r �Could not find server�a�LFail2ban seems to be in unexpected state (not running but the socket exists)r �
r� r� r� r\ r� r� rK rM r~ �remover� r' r' r( �testClientFailStart� s* ��
�
z&Fail2banClientTest.testClientFailStartc C sX t |dd�}| �t|dd� | �d� | �� | �t|dddd� | �d� | �� d S ) Nr� r r Zjailr( r z--xxxz"Unexpected argument(s) for reload:)r� r� r� r� r� r� r' r' r( �testClientFailCommands� s �
�
z)Fail2banClientTest.testClientFailCommandsc C sl d}dD ]^}d}t |d��<}|rH|�� |r>tjjs>t�|� |d8 }q W d � q1 s\0 Y qd S )Ng�Q� ��?)r r � r/ r )r Z heartbeatr� r� r r, r )r� Z sleeptime�verboseZcntrZvisr' r' r( �testVisualWait� s
z!Fail2banClientTest.testVisualWaitN)r? r@ rA � _exec_clientr r r r r r
r� r r$ r- r. r1 r' r' r' r( r s"
Y
r c @ s� e Zd ZeefZdd� Zeedd� ��Z eedd� ��Z
eedd� ��Z ed d
� �Z e
d d id
�dd� �Zejjdd�e
dddd�d
�dd� ��Zejjdd�e
ddd d d �d
�d d � ��Ze
� d!d"� �Zd#S )$�Fail2banServerTestc C s* | � tdd� | �dt � | �d� d S )Nr' r r r )r� r� r� r r� r' r' r( �testServerUsage� s z"Fail2banServerTest.testServerUsagec C s t |t|d�d�}tjttt�f}t�d|� || d }tj |t
ddd�}| � t |�o^|d � | j
|d|d � | �d
� | �� zL| �t|d d � | �t|d
� W | �� | �t|d� | �d� | �d� n,| �� | �t|d� | �d� | �d� 0 d S )Nr� r r r FTr r r� r� r� r� r� r� r� r )r� r\ r r r r r r+ r r r� r� rE r� r� r� r� r� r� �r� rn r� r# r� r' r' r( �testServerStartBackground� s(
�
z,Fail2banServerTest.testServerStartBackgroundc
C s� t |dd�}| �tddt|d�� | �dt|d� d � | �� tt|d�d ��� | �tddt|d
�d t|d�� | �d � | �� t� t|d�� d S )
Nr� r r' rr r% r& r' rj r) rY rs r* r+ r� r' r' r( �testServerFailStart s
��
z&Fail2banServerTest.testServerFailStartc C s� t |dd�}t|d�}| �d� | �t|d� | �d� tt|d�dd d
d d d � | �d
� | �t|d� | jddddd� | �d� | �t|dd� | jddddd� d S )Nr� r rY z[test-phase 0]z--testz$OK: configuration test is successfulr[ r) rJ �
[broken-jail]�filter = broken-jail-filter�enabled = truez[test-phase 0a]�.Unable to read the filter 'broken-jail-filter'z Errors in jail 'broken-jail'.z ERROR: test configuration failedTr� z[test-phase 0b]z-tr� )r� r\ r� r� r� r� rR r� )r� rn r� r� r' r' r( �testServerTestFailStart s(
�
�
�z*Fail2banServerTest.testServerTestFailStartc
s
z�t � t� d�d�}tjttt�f}t�d|� || d }tj |t
ddd�}| � t |�o`|d � | j
� d|d � | �d
� | �� t�d � � W | � t� �� n| � t� �� 0 t�� fd d
�t
� | �tt� d��� | �d� | �� | � t� �� | �d� d S )NzGf2b.log[format="SRV: %(relativeCreated)3d | %(message)s", datetime=off]r r r FTr r r� r� zKill server ... %sc s t t� d�� S )Nrk )r r\ r' �rn r' r( r� Q ra z7Fail2banServerTest.testKillAfterStart.<locals>.<lambda>rk r� zcleanup: no pidfile for)r� r\ r r r r r r+ r r r� r� rE r� r� r� r� r5 � assertFalser r5 r' r= r( �testKillAfterStart= s( �
z%Fail2banServerTest.testKillAfterStartr� rZ r� c s�
t |d�� t |d��t |d��t |d��t�t � d�� dȇ fd d
� }dɇ ���fdd� }|dd� |dd� |dgg d�d� tt � d�dddddd� t�dgttt�� ��d fd �R � t�d� t�d� | �d � t j
j t j
k � r�t�� | �t|d � | jd d dtd!� | �d"� � | �d#� | jd$d%dd&� | jd'd(dtd!� | jd)d*d+dd&� | �d,� |dd-gd.� t j
j t j
k �r�t�� | �t|d � | jd td/� | jd0d#dd&� | jd"� d"� dd&� | jd1d2dd&� | jd3d4dd&� | jd5d6dd&� | �d7� | �d8� |dgd.� |dd9d d:d d;d d<� | �t|d � | jd td/� | jd0d#dd&� | �d=� | jd1d>dd&� | �d?� | �d@� | �dA� |ddBdC� |d-d gd.� | �dD� t�dEgttt�� ��dF fd ttt�� ��dG fd ttt�� ��dH fd ttt�� ��dI fd �R � t j
j t j
k �rZt�� | jdJdKdtd!� | �t|dLdMdNdO� | jdPtd/� | jdQdRdSdTdUdVdWdd&� | jdXdYdZd[dd&� t� | �| �|d\�d]d^g d_�idMg d`�igf� | �| �|d\dadbdc�d]d^gd^dMgg gf� | �| �|ddd^d\�d g d_�� | �| �|dddMd\�d g d`�� | �| �|ddd^d\de�d d� | �| �|ddd^d\dO�d d]� | �| �|ddd^d\dedO�d dd]g� | �df� | �t|dgdM� | jd dhdPdtd!� | jdidjdkdld4dmdndodd&� | jdpdqdtd!� | jdrdsdd&� | �dt� | �t|dLdMdNdu� | �t|dLdMdNdv� | jdwdxdtd!� t� | �dy� | �t|dddMdNdz� | jdbd{dudvdtd!� | �d|� | �t|ddd^dN� | jdad}dedbd{dtd!� | �d~� | �t|dgddM� | jd d4dtd!� | jdld4didjdkdd&� | jd�d�dd&� | �d�� | jd�d�dd&� | jdUdVdd&� |ddBdC� |g d.� | �d�� | �t|d d^� | jd td/� | jd�d�dd&� | jd�d�d�dd&� | �d�� |dgd�� | �t|d � | jd td/� | �d�� | jd�dldd&� | jd�� d�� dd&� | �d�� t�dEgttt�� ��d� fd ttt�� ��d� fd ttt�� ��d� fd �R � t j
j t j
k �r�t�� | jd�d�dtd!� | jd�d�d�d�dd&� | �d�� | �d�� | �t|d�d�d�d�� | jd�d�dtd!� | �d�� | �t|d�d�d�� | jd�d�dtd!� | �t|d�d�d�d�� | jd�d�dtd!� | �d�� | �t|d�dLd^dNd�d�� | jd�d�dtd!� | �t|d�dLd^d�d�� | jd�d�dtd!� | �d�� | �t|d d� | jd td/� | jd�d0d�dd&� | jd�d�d#dSdd&� | �d�� | �t|d�d�d�� | jd�d�dd&� | �d�� |dgd�d�� | �t|d � | jd td/� | jd�d�dd&� | �d�� |dgd�� | �t|d � | jd td/� | �d�� | �t|d�d dM� | jd td/� | �d�� | �� | �t|d�d d�dM� | jd td/� | jd3d4dd&� | �d�� | �t|d�d d�d�� | jd td/� | jd�d�dtd!� | �dá | �t|d�dLd^d�d�dơ | �t|d�ddd^dǡ | jd�d�dd&� d S )�NrY � test1.logz test2.logz test3.logre � test-action1TrJ c sj t � dd| �}|s"t�|� d S t|ddddddd d
d d |d
|d|d|d|� tjjtjkrft |� d S )Nre �%s.confrg rm z_exec_once = 0rJ rh znorestored = %(_exec_once)sz
restore = zinfo = z<_use_flush_ = echo '[%(name)s] %(actname)s: -- flushing IPs'z6actionstart = echo '[%(name)s] %(actname)s: ** start'z7actionreload = echo '[%(name)s] %(actname)s: .. reload'zMactionban = echo '[%(name)s] %(actname)s: ++ ban <ip> %(restore)s%(info)s'z;actionunban = echo '[%(name)s] %(actname)s: -- unban <ip>'z5actionstop = echo '[%(name)s] %(actname)s: __ stop')
r\ r~ r, rR r� r� r� r r� r� )�actname�allowr� r Zban�unbanr� rN �r� r' r( �_write_action_cfgi s*
�zBFail2banServerTest.testServerReloadTest.<locals>._write_action_cfg�r r r' �pollingc % s t t� d�ddddddddd d
d dd d
| ddd|v r:dndd|v rHdndd|v rVdndd� d| v rnd� ndd| v r�d� ndd d| v r�dndd| v r�dndddd
| ddd|v r�dndd|v r�dndd� d| v r�dnd�# tjjtjkr�tt� d�� d S )Nr[ rg rl rJ rm � usedns = no� maxretry = 3zfindtime = 10mzBfailregex = ^\s*failure <F-ERRCODE>401|403</F-ERRCODE> from <HOST>� datepattern = {^LN-BEG}EPOCHzignoreip = 127.0.0.1/8 ::1� [test-jail1]�
backend = �filter =z action = r z* test-action1[name='%(__name__)s']r zj test-action2[name='%(__name__)s', restore='restored: <restored>', info=', err-code: <F-ERRCODE>']� z� test-action2[name='%(__name__)s', actname=test-action3, _exec_once=1, restore='restored: <restored>', actionflush=<_use_flush_>]�
logpath = z
z@ ^\s*error <F-ERRCODE>401|403</F-ERRCODE> from <HOST>r: z [test-jail2]�rR r\ r� r� r� r r� r� )�enabled�actions�backend�r� �test1logZtest2logZtest3logr' r( �_write_jail_cfg� sV
����
���%z@Fail2banServerTest.testServerReloadTest.<locals>._write_jail_cfg)rC � test-action2r )r r rP )rS rT r[ r) r8 r9 r: rg z# failure 401 from 192.0.2.1: test 1rP z[test-phase 1a]r �Reload finished.z1 ticket(s) in 'test-jail1r� zAdded logfile: %rz[test-jail1] Ban 192.0.2.1z-stdout: '[test-jail1] test-action1: ** start'z-stdout: '[test-jail1] test-action2: ** start'r� zPstdout: '[test-jail1] test-action2: ++ ban 192.0.2.1 restored: 0, err-code: 401'zAstdout: '[test-jail1] test-action3: ++ ban 192.0.2.1 restored: 0'r; z)Errors in jail 'broken-jail'. Skipping...z:Jail 'broken-jail' skipped, because of wrong configurationz[test-phase 1b]r )rT �r� z [test-jail1] Unban 192.0.2.1z.stdout: '[test-jail1] test-action1: .. reload'z.stdout: '[test-jail1] test-action2: .. reload'z Creating new jail 'test-jail2'zJail 'test-jail2' startedz4stdout: '[test-jail1] test-action3: -- flushing IPs'z,stdout: '[test-jail1] test-action3: __ stop'z7stdout: '[test-jail1] test-action3: -- unban 192.0.2.1'z[test-phase 2a]z+ echo '[<name>] %s: started.'z, echo '[<name>] %s: reloaded.'z+ echo '[<name>] %s: stopped.')rC r� r r� zAdded logfile:z.stdout: '[test-jail1] test-action1: reloaded.'z7stdout: '[test-jail1] test-action2: -- unban 192.0.2.1'z,stdout: '[test-jail1] test-action2: __ stop'z7stdout: '[test-jail1] test-action1: -- unban 192.0.2.1'F)rC rD z[test-phase 2b]�a+z# error 403 from 192.0.2.2: test 2z# error 403 from 192.0.2.3: test 2z# failure 401 from 192.0.2.4: test 2z# failure 401 from 192.0.2.8: test 2z2 ticket(s) in 'test-jail2z5 ticket(s) in 'test-jail1�setz
test-jail2�banip� 192.0.2.9z3 ticket(s) in 'test-jail2z[test-jail1] Ban 192.0.2.2z[test-jail1] Ban 192.0.2.3z[test-jail1] Ban 192.0.2.4z[test-jail1] Ban 192.0.2.8z[test-jail2] Ban 192.0.2.4z[test-jail2] Ban 192.0.2.8z[test-jail2] Ban 192.0.2.9z [test-jail2] Found 192.0.2.2z[test-jail2] Ban 192.0.2.2z [test-jail2] Found 192.0.2.3z[test-jail2] Ban 192.0.2.3Zbannedr �
test-jail1)� 192.0.2.4� 192.0.2.1� 192.0.2.8� 192.0.2.3� 192.0.2.2)ra r_ rc rb ra z 192.0.2.222r� rd z[test-phase 2c]r z Restore Banz [test-jail2] Unban 192.0.2.4z [test-jail2] Unban 192.0.2.8z [test-jail2] Unban 192.0.2.9zJail 'test-jail2' stoppedz"[test-jail2] Restore Ban 192.0.2.4z"[test-jail2] Restore Ban 192.0.2.8z"[test-jail2] Restore Ban 192.0.2.9zPstdout: '[test-jail2] test-action2: ++ ban 192.0.2.4 restored: 1, err-code: 401'zPstdout: '[test-jail2] test-action2: ++ ban 192.0.2.8 restored: 1, err-code: 401'zAstdout: '[test-jail2] test-action3: ++ ban 192.0.2.4 restored: 1'zAstdout: '[test-jail2] test-action3: ++ ban 192.0.2.8 restored: 1'z[test-phase 2d]z
192.0.2.21z
192.0.2.22z5stdout: '[test-jail2] test-action3: ++ ban 192.0.2.22z6stdout: '[test-jail2] test-action3: ++ ban 192.0.2.22 z[test-phase 2d.1]rI rc z[test-phase 2d.2]re z[test-phase 2e]z--unbanz7stdout: '[test-jail2] test-action2: -- unban 192.0.2.21z8stdout: '[test-jail2] test-action2: -- unban 192.0.2.22'z4stdout: '[test-jail2] test-action3: -- flushing IPs'z8stdout: '[test-jail2] test-action3: -- unban 192.0.2.21'z8stdout: '[test-jail2] test-action3: -- unban 192.0.2.22'z[test-phase 3]zReload jail 'test-jail1'zJail 'test-jail1' reloadedzReload jail 'test-jail2'zJail 'test-jail2' reloadedzJail 'test-jail1' startedz[test-phase 4])rS zStopping jail 'test-jail2'zRemoved logfile: %rz[test-phase 5]z# failure 401 from 192.0.2.1: test 5z# error 403 from 192.0.2.5: test 5z# failure 401 from 192.0.2.6: test 5z6 ticket(s) in 'test-jail1z%[test-jail1] 192.0.2.1 already bannedz [test-jail1] Found 192.0.2.1z [test-jail1] Found 192.0.2.6z[test-jail1] Ban 192.0.2.6z [test-jail1] Found 192.0.2.5z[test-phase 6a]r rE z 192.0.2.5z 192.0.2.6z192.0.2.5 is not bannedz [test-jail1] Unban 192.0.2.6z[test-phase 6b]z 192.0.2.2/31z [test-jail1] Unban 192.0.2.2z [test-jail1] Unban 192.0.2.3z 192.0.2.8/31z192.0.2.100/31z [test-jail1] Unban 192.0.2.8z 192.0.2.100/31 is not bannedz[test-phase 6c]z
192.0.2.96/28z192.0.2.112/28z [test-jail1] Ban 192.0.2.96/28z [test-jail1] Ban 192.0.2.112/28Zunbanipz
192.0.2.64/26z [test-jail1] Unban 192.0.2.96/28z![test-jail1] Unban 192.0.2.112/28z[test-phase 7]z [test-jail1] Unban 192.0.2.4zJail 'test-jail1' stoppedz[test-phase 7b]�--allzFlush ban listz'Unbanned 0, 0 ticket(s) in 'test-jail1'z[test-phase 8a]zxxx-unknown-backend-zzz)rS rU z0Restart jail 'test-jail1' (reason: 'polling' != zUnknown backend z[test-phase 8b]z[test-phase end-1]z$the jail 'test-jail2' does not existz --if-existsz[test-phase end-2]� --restartz[test-phase end-3]Z addignoreipz 192.0.2.1/32z2001:DB8::1/96Zignoreip)rA TrJ rJ rJ rJ rJ )rH r' rI )r\ r~ r rR r� r� r r, r� r� r� r� r r� r� r� r� r� r2 �assertNotLoggedr3 ZassertSortedEqualr� � assertEqualr� )r� rn r� rG rX r' rV r( �testServerReloadTestY sT
�*
�(
�
���
������
��
����
�������� �
�
��
� ��
���
���
���
���
���
��� ��
���
�
�
�������
��
���
�����
��
����
��
��
���
��
�
�
��
��
��z'Fail2banServerTest.testServerReloadTestznginx-block-map)�action)�%(tmp)s/blck-failures.log)re ) z[nginx-blck-lst]rf rJ z#logpath = %(tmp)s/blck-failures.logzoaction = nginx-block-map[srv_cmd="echo nginx", srv_pid="%(tmp)s/f2b.pid", blck_lst_file="%(tmp)s/blck-lst.map"]z� blocklist_de[actionban='curl() { echo "*** curl" "$*";}; <Definition/actionban>', email="Fail2Ban <fail2ban@localhost>", apikey="TEST-API-KEY", agent="fail2ban-test-agent", service=<name>]rO �datepattern = ^Epochz3failregex = ^ failure "<F-ID>[^"]+</F-ID>" - <ADDR>z maxretry = 1r: )r� r� r� c C s� t |d�}dd|i }dd|i }t|dttt�� ��d ttt�� ��d ttt�� ��d ttt�� ��d ttt�� ��d
� | jd d d
ddddtd� t|� t |�}| �
d|� | �
d|� | �
d|� | �
d|� | �
d|� | jdddd� | jdd dtd� | � t |d d d d � t|� t |�}| �
d|� | �
d|� | �
d|� | �
d|� | �
d|� | �t � | �d!� t|� t |�}| �|d"� d S )#NrY rl rn z%(tmp)s/blck-lst.map�w+z" failure "125-000-001" - 192.0.2.1z" failure "125-000-002" - 192.0.2.1u1 failure "125-000-003" - 192.0.2.1 (òðåòèé)u1 failure "125-000-004" - 192.0.2.1 (òðåòèé)z" failure "125-000-005" - 192.0.2.1z [nginx-blck-lst] Ban 125-000-001z [nginx-blck-lst] Ban 125-000-002z [nginx-blck-lst] Ban 125-000-003z [nginx-blck-lst] Ban 125-000-004z [nginx-blck-lst] Ban 125-000-005z 5 ticket(s)Tr� z\125-000-001 1;
z\125-000-002 1;
z\125-000-003 1;
z\125-000-004 1;
z\125-000-005 1;
zstdout: 'nginx -qt'zstdout: 'nginx -s reload'r� z�stdout: '*** curl --fail --data-urlencode server=Fail2Ban <fail2ban@localhost> --data apikey=TEST-API-KEY --data service=nginx-blck-lst z=stdout: ' --data format=text --user-agent fail2ban-test-agentrE z 125-000-001z 125-000-002z 125-000-005z5[nginx-blck-lst] Flush ticket(s) with nginx-block-maprJ )r\ rR r� r� r r, r� r2 r� rU �assertInr� r� � assertNotInr� ri )r� rn r� r� �lgfnZmpfn�mpr' r' r( � testServerActions_NginxBlockMapE sZ
�� �
z2Fail2banServerTest.testServerActions_NginxBlockMapz
sendmail-auth)�filter)�%(tmp)s/test.logT)rm zdbmaxmatches = 1)a� test_action = dummy[actionstart_on_demand=1, init="start: %(__name__)s", target="%(tmp)s/test.txt",
actionban='<known/actionban>; echo "found: <jail.found> / <jail.found_total>, banned: <jail.banned> / <jail.banned_total>"
echo "<matches>"; printf "=====\n%%b\n=====\n\n" "<matches>" >> <target>',
actionstop='<known/actionstop>; echo "stats <name> - found: <jail.found_total>, banned: <jail.banned_total>"']z[sendmail-auth]rf rJ �logpath = %(tmp)s/test.log�action = %(test_action)sz%filter = sendmail-auth[logtype=short]rm rK zmaxmatches = 2r: z[sendmail-reject]rf rJ rv rw z'filter = sendmail-reject[logtype=short]rm rK r: )r� r� r� r� c
C sl t |d�}dd|i }dd|i }ttt�� ��d ttt�� ��d ttt�� ��d f}ttt�� ��d ttt�� ��d ttt�� ��d
f}| �d � t|d g|�R � | jd
dddtd� t |� t
|�}|d } | � | |� |dd � D ]} | � | |� q�| �d� t|dg|�R � | jddddtd� t |� t
|�}|D ]} | � | |� �qL| �d� | �
t|ddd� | jd d d d ddtd� t
|�}|d } | �| � | � | |� |dd � D ] } | �| � | � | |� �q�| jd!ddtd� t
|�}|d } | �| � | � | |� |dd � D ] } | �| � | � | |� �q(| �d"� | �t� | �t|�� d S )#NrY ru rn z%(tmp)s/test.txtz] smtp1 sm-mta[5133]: s1000000000001: [192.0.2.1]: possible SMTP attack: command=AUTH, count=1z] smtp1 sm-mta[5133]: s1000000000002: [192.0.2.1]: possible SMTP attack: command=AUTH, count=2z] smtp1 sm-mta[5133]: s1000000000003: [192.0.2.1]: possible SMTP attack: command=AUTH, count=3z� smtp1 sm-mta[21134]: s2000000000001: ruleset=check_rcpt, arg1=<123@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <123@example.com>... Relaying denied. Proper authentication required.z� smtp1 sm-mta[21134]: s2000000000002: ruleset=check_rcpt, arg1=<345@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <345@example.com>... Relaying denied. Proper authentication required.z� smtp1 sm-mta[21134]: s3000000000003: ruleset=check_rcpt, arg1=<567@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <567@example.com>... Relaying denied. Proper authentication required.z[test-phase sendmail-auth]rn z [sendmail-auth] Ban 192.0.2.1z%stdout: 'found: 0 / 3, banned: 1 / 1'z 1 ticket(s) in 'sendmail-auth'Tr� r r z [test-phase sendmail-reject]r\ z [sendmail-reject] Ban 192.0.2.2z 1 ticket(s) in 'sendmail-reject'z [test-phase restart sendmail-*]r rg rf rZ z3stdout: 'stats sendmail-auth - found: 3, banned: 1'z5stdout: 'stats sendmail-reject - found: 3, banned: 1'z%[sendmail-auth] Restore Ban 192.0.2.1r� z'[sendmail-reject] Restore Ban 192.0.2.2z[test-phase stop server])r\ r� r� r r, r� rR r� r2 r� rU rp ro r� r� rh r� r> r )
r� rn r� r� rq ZtofnZ smaut_msgZ smrej_msg�td�mr' r' r( �testServerJails_Sendmail� s~ )
��
�
�
��
�
z+Fail2banServerTest.testServerJails_Sendmailc s� t |d��t |d��t�t �d�� d>�fdd� }d?��fd d
� }|dd d � |d
dd � |� t�d� | �d� | �t|d� t�dgttt �
� ��d fd �R � t � | j dddt
d� t � | �d� td� t � | j ddddt
d� t � | �d � d �t�fd d �� t�d gttt �
� ��d fd! �R � | j d"d#dt
d� | �d$� | �t|d%d&d'd(� | j d)d*dt
d� d�t � | �d+� td,� t � | j d-dt
d� t � | �d.� | �t|d%d&d'd(� | j d)d/dt
d� | �d0� t� d1d2i� tj�� �fd3d4�}��d5|� ��d5d6d � � t�� fd7d �t� �j�tjj�rZd8nd9df�fd:d;� }|�_| �t� | � d<� | � �j � | � �j d � d!� d1< | j d<dd=� ��!� d S )@NrY r@ re rA Tc sH t � dd| �}t|ddddd|r&dndd � tjjtjkrDt|� d S )
Nre rB rg rm rJ rh zeactionban = printf %%s "[%(name)s] %(actname)s: ++ ban <ip> -c <bancount> -t <bantime> : <F-MSG>"ziactionprolong = printf %%s "[%(name)s] %(actname)s: ++ prolong <ip> -c <bancount> -t <bantime> : <F-MSG>"zBactionunban = printf %%b '[%(name)s] %(actname)s: -- unban <ip>')r\ rR r� r� r� r r� r� )rC �prolongrN rF r' r( rG s �� z@Fail2banServerTest.testServerObserver.<locals>._write_action_cfgrI c s` t t� d�ddddddddd d
d dd d
| dddd� ddd� tjjtjkr\tt� d�� d S )Nr[ rg rl rJ rm rJ rK z
findtime = 1mz bantime = 5mzbantime.increment = truerL rM rN rO z*action = test-action1[name='%(__name__)s']z* test-action2[name='%(__name__)s']rQ zXfailregex = ^\s*failure <F-ERRCODE>401|403</F-ERRCODE> from <HOST>:\s*<F-MSG>.*</F-MSG>$r: rR )rU )r� rW r' r( rX # s(
�z>Fail2banServerTest.testServerObserver.<locals>._write_jail_cfgF)rC r{ rY rg z[test-phase 0) time-0]r rn z> failure 401 from 192.0.2.11: I'm bad "hacker" `` $(echo test)rP zDstdout: '[test-jail1] test-action1: ++ ban 192.0.2.11 -c 1 -t 300 : zDstdout: '[test-jail1] test-action2: ++ ban 192.0.2.11 -c 1 -t 300 : r� z[test-phase 1) time+10m]�
z7stdout: '[test-jail1] test-action1: -- unban 192.0.2.11z7stdout: '[test-jail1] test-action2: -- unban 192.0.2.11z0 ticket(s) in 'test-jail1'z[test-phase 2) time+10m]c s � S rS r' r' )�wakeObsr' r( r� ^ ra z7Fail2banServerTest.testServerObserver.<locals>.<lambda>r\ zC failure 401 from 192.0.2.11: I'm very bad "hacker" `` $(echo test)r zDstdout: '[test-jail1] test-action1: ++ ban 192.0.2.11 -c 2 -t 300 : zDstdout: '[test-jail1] test-action2: ++ ban 192.0.2.11 -c 2 -t 300 : z"[test-phase 2) time+10m - get-ips]r� r` r^ z --with-timez
192.0.2.11z+ 300 =z[test-phase 2) time+11m]r zHstdout: '[test-jail1] test-action2: ++ prolong 192.0.2.11 -c 2 -t 600 : z"[test-phase 2) time+11m - get-ips]z+ 600 =z'[test-phase end) stop on busy observer]�stater c s< t �d� d� d< t�� fdd�t� ��� t �d� d S )Nz!++ observer enters busy state ...r r~ c s � d dkS )Nr~ r r' r' �r) r' r( r� � ra zMFail2banServerTest.testServerObserver.<locals>._long_action.<locals>.<lambda>z -- observer leaves busy state.)r r$ r r5 r� Zdb_purger' )r) �obsMainr' r( � _long_action� s
z;Fail2banServerTest.testServerObserver.<locals>._long_action�callc S s d S rS r' r' r' r' r( r� � ra c s � d dkS )Nr~ r r' r' r r' r( r� � ra g{�G�z�?g�������?c s
� | |�S rS r' )ZwtimeZ forceQuit)� obsMain_stopr' r( �_stop� s z4Fail2banServerTest.testServerObserver.<locals>._stopzobserver leaves busy stater[ )rA T)rI )"r\ r~ r rR r� r� r� r� r� r r, r3 r� r2 r. r< r! r0 r1 �addr r5 r� r� r� r� r r� rh r> Zidleri Z_ObserverThread__dbr )r� rn r� rG rX r� r� r' )r) r� r� r� rW r} r( �testServerObserver s�
��
�
��
�
�
�
z%Fail2banServerTest.testServerObserverN)r? r@ rA � _exec_serverr r r4 r r� r6 r7 r< r? r� rj r� r� Zskip_if_cfg_missingrs rz r� Z_testServerStartStopZtestServerStartStopr' r' r' r( r3 � sJ
n � < �' P
r3 )FNrV rW r' rX N)`�
__author__�
__copyright__� __license__ry r~ rw r r, r� r� �os.pathr r\ r r r r � functoolsr � threadingr
�clientr r
r Zclient.fail2bancmdliner Zclient.fail2banclientr r2 r r Zclient.fail2banserverr r� rJ r r Z
server.mytimer Z server.utilsr �utilsr r r� r r r r r rv r r! Zhelpersr" r? r r Z
getServerPathr r� Z maxWaitTimer� r2 r� r� r� r� r) r r. r0 r3 r< r= rC r� r� rF rH Z
input_commandZ
PRODUCTIONZdumpFiler� rR rU r� r� r� r� r� r� r� r r3 r' r' r' r( �<module> s� ,
��� �
�
U
, F
Z