← Back
Editing: nftables.cpython-312.opt-1.pyc
� �=j�� � �| � d dl mZ d dlZd dlZd dlZd dlmZ d dlmZm Z m Z mZmZ d dl mZmZmZmZmZmZmZ d dlmZmZmZmZmZmZmZmZmZ d dlm Z d dl!m"Z"m#Z# d d l$m%Z% d Z&e&dz dz Z'e&dz d z Z(dZ)dZ*i ddde*z fidde*z fdde*z fdde*z fd�dd e*z fdd e*z fdd e*z fdd e*z fd�d�Z+ G d� d� Z,y)� )�GLibN)�log)� check_mac�getPortRange�normalizeIP6�check_single_address� check_address)� FirewallError� UNKNOWN_ERROR�INVALID_RULE�INVALID_ICMPTYPE�INVALID_TYPE� INVALID_ENTRY�INVALID_PORT) �Rich_Accept�Rich_Reject� Rich_Drop� Rich_Mark�Rich_Masquerade�Rich_ForwardPort�Rich_IcmpBlock�Rich_Tcp_Mss_Clamp� Rich_NFLog)�DEFAULT_ZONE_TARGET)� ICMP_TYPES�ICMPV6_TYPES)�Nftables� firewalld�_�policy_drop�probe�policy_� � PREROUTING� preroutingij���i�����postrouting�d �output)r$ �POSTROUTING�OUTPUT�input�forward)r$ �INPUT�FORWARDr* )�raw�mangle�nat�filterc �� � e Zd Zd ZdZd� Zd� Zd� Zd� Zd� Z d� Z d� Zd � ZdHd�Z d� Zd � Zd� Zd� Zd� ZdHd�Zd� Zd� ZdId�Zd� Z dJd�Z dKd�Zd� Zd� Zd� Zd� Zd� Zd� Zd� Z d� Z!d � Z"d!� Z#d"� Z$d#� Z%dKd$�Z&d%� Z'd&� Z(d'� Z)d(� Z* dLd)�Z+ dLd*�Z, dLd+�Z- dLd,�Z.d-� Z/ dLd.�Z0dHd/�Z1 dHd0�Z2dHd1�Z3d2� Z4d d3d4gfd5�Z5d6� Z6dKd7�Z7d8� Z8d9� Z9d:� Z:d;� Z;dHd<�Z<dHd=�Z=d>� Z>dKd?�Z?d@� Z@dA� ZAdB� ZBdC� ZCdD� ZDdE� ZEdF� ZF dLdG�ZGy )M�nftablesTc � � || _ d| _ d| _ g | _ i | _ i | _ i | _ i | _ t � | _ | j j d� | j j d� y )NTF)�_fw�restore_command_exists�supports_table_owner�available_tables�rule_to_handle�rule_ref_count�rich_rule_priority_counts�policy_dispatch_index_cacher r4 �set_echo_output�set_handle_output)�self�fws �;/usr/lib/python3.12/site-packages/firewall/core/nftables.py�__init__znftables.__init__b sn � ����&*��#�$)��!� "��� ��� ���)+��&�+-��(� � �� �� � �%�%�d�+�� � �'�'��-� c � � ddddiidddt dd gd �iigi}| j j |� \ }}}|rt d� �ddddiidddt d �iigi}| j j d� | j j |� \ }}}| j j d� |d d d d }d|vsd |vrt d� �t j d� d| _ | j dddt d �ii| j j � � y # t j d� d| _ Y �WxY w# Y y xY w)Nr4 �metainfo�json_schema_version� �add�table�inet�owner�persist)�family�name�flagsz!nftables probe table owner failed�list�rN rO FTrP z3nftables: probe_support(): owner flag is supported.z7nftables: probe_support(): owner flag is NOT supported.�delete)�TABLE_NAME_PROBEr4 �json_cmd� ValueErrorr>