mirror of
https://github.com/fail2ban/fail2ban.git
synced 2026-07-11 01:53:05 +00:00
following commits were squashed from feature branch use_dns commit068c105eb5Author: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 22:19:04 2012 -0500 Prevent warning when IP is read from log commit635ed36a8cAuthor: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 22:17:08 2012 -0500 Removed logDebug commit24656d2812Merge:7957fbec429f5cAuthor: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 21:13:11 2012 -0500 Merge branch 'enh/use_dns' of github:leeclemens/fail2ban into enh/use_dns Conflicts: testcases/filtertestcase.py commit7957fbe821Author: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 21:09:58 2012 -0500 filtertestcase fixes from yarikoptic commit6ce9d04640Author: Yaroslav Halchenko <debian@onerussian.com> Date: Tue Jan 10 19:26:05 2012 -0500 RF: for consistency use_dns -> usedns I guess it was might fault of inconsistency suggesting that name. Other options/commands do not have _ in the names, so let it be consistent with the rest for now commitcfb2c75b49Author: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 19:18:41 2012 -0500 Updated DNSUtilsTests to test use_dns and added positive test to testTextToIp commitf6186eff14Author: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 19:02:04 2012 -0500 Changed wording of 'DNS Reverse lookup used' message commit82c62d29dcAuthor: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 18:53:17 2012 -0500 Removed extraneous "n" commitdc0ae21932Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 23:07:59 2012 -0500 ENH: use_dns - removed debugging statements commit594e25818cAuthor: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 22:53:39 2012 -0500 Added use_dns protocol to set and get per jail during runtime commit48ff80ffacAuthor: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 22:41:18 2012 -0500 Completed use_dns for initial startup - with debugging statements commit0bdab4c2d7Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 20:05:35 2012 -0500 ENH: Added use_dns option commit6d6b734ea5Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 20:01:34 2012 -0500 ENH: Added use_dns option commit11ad2b6125Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 19:17:30 2012 -0500 Added useDns flag to testcase commitb48fa9b6afAuthor: Lee Clemens <java@leeclemens.net> Date: Sun Jan 8 15:13:27 2012 -0500 Added use_dns option in jail.conf commitc429f5c91aMerge:4b18afb0021906Author: leeclemens <java@leeclemens.net> Date: Tue Jan 10 16:32:22 2012 -0800 Merge pull request #3 from yarikoptic/enh/use_dns let's be consistent ;-) commit0021906358Author: Yaroslav Halchenko <debian@onerussian.com> Date: Tue Jan 10 19:26:05 2012 -0500 RF: for consistency use_dns -> usedns I guess it was might fault of inconsistency suggesting that name. Other options/commands do not have _ in the names, so let it be consistent with the rest for now commit4b18afb28aAuthor: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 19:18:41 2012 -0500 Updated DNSUtilsTests to test use_dns and added positive test to testTextToIp commit4fae37e46fAuthor: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 19:02:04 2012 -0500 Changed wording of 'DNS Reverse lookup used' message commite94806ce48Author: Lee Clemens <java@leeclemens.net> Date: Tue Jan 10 18:53:17 2012 -0500 Removed extraneous "n" commit4d30c52907Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 23:07:59 2012 -0500 ENH: use_dns - removed debugging statements commit76696d452aAuthor: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 22:53:39 2012 -0500 Added use_dns protocol to set and get per jail during runtime commit0631618087Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 22:41:18 2012 -0500 Completed use_dns for initial startup - with debugging statements commitd23d495547Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 20:05:35 2012 -0500 ENH: Added use_dns option commit9538553bc5Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 20:01:34 2012 -0500 ENH: Added use_dns option commitae1e857e53Author: Lee Clemens <java@leeclemens.net> Date: Mon Jan 9 19:17:30 2012 -0500 Added useDns flag to testcase commitace43eb941Author: Lee Clemens <java@leeclemens.net> Date: Sun Jan 8 15:13:27 2012 -0500 Added use_dns option in jail.conf
273 lines
8.1 KiB
Python
273 lines
8.1 KiB
Python
# emacs: -*- mode: python; py-indent-offset: 4; indent-tabs-mode: t -*-
|
|
# vi: set ft=python sts=4 ts=4 sw=4 noet :
|
|
|
|
# This file is part of Fail2Ban.
|
|
#
|
|
# Fail2Ban is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# Fail2Ban is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with Fail2Ban; if not, write to the Free Software
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
# Author: Cyril Jaquier
|
|
#
|
|
# $Revision$
|
|
|
|
__author__ = "Cyril Jaquier"
|
|
__version__ = "$Revision$"
|
|
__date__ = "$Date$"
|
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier"
|
|
__license__ = "GPL"
|
|
|
|
import logging, time
|
|
|
|
# Gets the instance of the logger.
|
|
logSys = logging.getLogger("fail2ban.comm")
|
|
|
|
class Transmitter:
|
|
|
|
##
|
|
# Constructor.
|
|
#
|
|
# @param The server reference
|
|
|
|
def __init__(self, server):
|
|
self.__server = server
|
|
|
|
##
|
|
# Proceeds a command.
|
|
#
|
|
# Proceeds an incoming command.
|
|
# @param command The incoming command
|
|
|
|
def proceed(self, command):
|
|
# Deserialize object
|
|
logSys.debug("Command: " + `command`)
|
|
try:
|
|
ret = self.__commandHandler(command)
|
|
ack = 0, ret
|
|
except Exception, e:
|
|
logSys.warn("Invalid command: " + `command`)
|
|
ack = 1, e
|
|
return ack
|
|
|
|
##
|
|
# Handle an command.
|
|
#
|
|
#
|
|
|
|
def __commandHandler(self, command):
|
|
if command[0] == "ping":
|
|
return "pong"
|
|
elif command[0] == "add":
|
|
name = command[1]
|
|
if name == "all":
|
|
raise Exception("Reserved name")
|
|
try:
|
|
backend = command[2]
|
|
except IndexError:
|
|
backend = "auto"
|
|
self.__server.addJail(name, backend)
|
|
return name
|
|
elif command[0] == "start":
|
|
name = command[1]
|
|
self.__server.startJail(name)
|
|
return None
|
|
elif command[0] == "stop":
|
|
if len(command) == 1:
|
|
self.__server.quit()
|
|
elif command[1] == "all":
|
|
self.__server.stopAllJail()
|
|
else:
|
|
name = command[1]
|
|
self.__server.stopJail(name)
|
|
return None
|
|
elif command[0] == "sleep":
|
|
value = command[1]
|
|
time.sleep(int(value))
|
|
return None
|
|
elif command[0] == "set":
|
|
return self.__commandSet(command[1:])
|
|
elif command[0] == "get":
|
|
return self.__commandGet(command[1:])
|
|
elif command[0] == "status":
|
|
return self.status(command[1:])
|
|
raise Exception("Invalid command")
|
|
|
|
def __commandSet(self, command):
|
|
name = command[0]
|
|
# Logging
|
|
if name == "loglevel":
|
|
value = int(command[1])
|
|
self.__server.setLogLevel(value)
|
|
return self.__server.getLogLevel()
|
|
elif name == "logtarget":
|
|
value = command[1]
|
|
self.__server.setLogTarget(value)
|
|
return self.__server.getLogTarget()
|
|
# Jail
|
|
elif command[1] == "idle":
|
|
if command[2] == "on":
|
|
self.__server.setIdleJail(name, True)
|
|
elif command[2] == "off":
|
|
self.__server.setIdleJail(name, False)
|
|
return self.__server.getIdleJail(name)
|
|
# Filter
|
|
elif command[1] == "addignoreip":
|
|
value = command[2]
|
|
self.__server.addIgnoreIP(name, value)
|
|
return self.__server.getIgnoreIP(name)
|
|
elif command[1] == "delignoreip":
|
|
value = command[2]
|
|
self.__server.delIgnoreIP(name, value)
|
|
return self.__server.getIgnoreIP(name)
|
|
elif command[1] == "addlogpath":
|
|
value = command[2:]
|
|
for path in value:
|
|
self.__server.addLogPath(name, path)
|
|
return self.__server.getLogPath(name)
|
|
elif command[1] == "dellogpath":
|
|
value = command[2]
|
|
self.__server.delLogPath(name, value)
|
|
return self.__server.getLogPath(name)
|
|
elif command[1] == "addfailregex":
|
|
value = command[2]
|
|
self.__server.addFailRegex(name, value)
|
|
return self.__server.getFailRegex(name)
|
|
elif command[1] == "delfailregex":
|
|
value = int(command[2])
|
|
self.__server.delFailRegex(name, value)
|
|
return self.__server.getFailRegex(name)
|
|
elif command[1] == "addignoreregex":
|
|
value = command[2]
|
|
self.__server.addIgnoreRegex(name, value)
|
|
return self.__server.getIgnoreRegex(name)
|
|
elif command[1] == "delignoreregex":
|
|
value = int(command[2])
|
|
self.__server.delIgnoreRegex(name, value)
|
|
return self.__server.getIgnoreRegex(name)
|
|
elif command[1] == "usedns":
|
|
value = command[2]
|
|
self.__server.setUseDns(name, value)
|
|
return self.__server.getUseDns(name)
|
|
elif command[1] == "findtime":
|
|
value = command[2]
|
|
self.__server.setFindTime(name, int(value))
|
|
return self.__server.getFindTime(name)
|
|
elif command[1] == "maxretry":
|
|
value = command[2]
|
|
self.__server.setMaxRetry(name, int(value))
|
|
return self.__server.getMaxRetry(name)
|
|
# command
|
|
elif command[1] == "bantime":
|
|
value = command[2]
|
|
self.__server.setBanTime(name, int(value))
|
|
return self.__server.getBanTime(name)
|
|
elif command[1] == "banip":
|
|
value = command[2]
|
|
return self.__server.setBanIP(name,value)
|
|
elif command[1] == "addaction":
|
|
value = command[2]
|
|
self.__server.addAction(name, value)
|
|
return self.__server.getLastAction(name).getName()
|
|
elif command[1] == "delaction":
|
|
self.__server.delAction(name, value)
|
|
return None
|
|
elif command[1] == "setcinfo":
|
|
act = command[2]
|
|
key = command[3]
|
|
value = command[4]
|
|
self.__server.setCInfo(name, act, key, value)
|
|
return self.__server.getCInfo(name, act, key)
|
|
elif command[1] == "delcinfo":
|
|
act = command[2]
|
|
key = command[3]
|
|
self.__server.delCInfo(name, act, key)
|
|
return None
|
|
elif command[1] == "actionstart":
|
|
act = command[2]
|
|
value = command[3]
|
|
self.__server.setActionStart(name, act, value)
|
|
return self.__server.getActionStart(name, act)
|
|
elif command[1] == "actionstop":
|
|
act = command[2]
|
|
value = command[3]
|
|
self.__server.setActionStop(name, act, value)
|
|
return self.__server.getActionStop(name, act)
|
|
elif command[1] == "actioncheck":
|
|
act = command[2]
|
|
value = command[3]
|
|
self.__server.setActionCheck(name, act, value)
|
|
return self.__server.getActionCheck(name, act)
|
|
elif command[1] == "actionban":
|
|
act = command[2]
|
|
value = command[3]
|
|
self.__server.setActionBan(name, act, value)
|
|
return self.__server.getActionBan(name, act)
|
|
elif command[1] == "actionunban":
|
|
act = command[2]
|
|
value = command[3]
|
|
self.__server.setActionUnban(name, act, value)
|
|
return self.__server.getActionUnban(name, act)
|
|
raise Exception("Invalid command (no set action or not yet implemented)")
|
|
|
|
def __commandGet(self, command):
|
|
name = command[0]
|
|
# Logging
|
|
if name == "loglevel":
|
|
return self.__server.getLogLevel()
|
|
elif name == "logtarget":
|
|
return self.__server.getLogTarget()
|
|
# Filter
|
|
elif command[1] == "logpath":
|
|
return self.__server.getLogPath(name)
|
|
elif command[1] == "ignoreip":
|
|
return self.__server.getIgnoreIP(name)
|
|
elif command[1] == "failregex":
|
|
return self.__server.getFailRegex(name)
|
|
elif command[1] == "ignoreregex":
|
|
return self.__server.getIgnoreRegex(name)
|
|
elif command[1] == "usedns":
|
|
return self.__server.getUseDns(name)
|
|
elif command[1] == "findtime":
|
|
return self.__server.getFindTime(name)
|
|
elif command[1] == "maxretry":
|
|
return self.__server.getMaxRetry(name)
|
|
# Action
|
|
elif command[1] == "bantime":
|
|
return self.__server.getBanTime(name)
|
|
elif command[1] == "addaction":
|
|
return self.__server.getLastAction(name).getName()
|
|
elif command[1] == "actionstart":
|
|
act = command[2]
|
|
return self.__server.getActionStart(name, act)
|
|
elif command[1] == "actionstop":
|
|
act = command[2]
|
|
return self.__server.getActionStop(name, act)
|
|
elif command[1] == "actioncheck":
|
|
act = command[2]
|
|
return self.__server.getActionCheck(name, act)
|
|
elif command[1] == "actionban":
|
|
act = command[2]
|
|
return self.__server.getActionBan(name, act)
|
|
elif command[1] == "actionunban":
|
|
act = command[2]
|
|
return self.__server.getActionUnban(name, act)
|
|
raise Exception("Invalid command (no get action or not yet implemented)")
|
|
|
|
def status(self, command):
|
|
if len(command) == 0:
|
|
return self.__server.status()
|
|
else:
|
|
name = command[0]
|
|
return self.__server.statusJail(name)
|
|
raise Exception("Invalid command (no status)")
|
|
|