← Back
Editing: zone.cpython-312.opt-1.pyc
� �=j�I � � � d dl mZ d dlZd dlZd dlZd dlZd dlmZ d dlm Z m Z mZmZm Z mZ d dlmZmZmZ d dlmZmZmZ d dlmZmZmZmZ d dlmZ d dlmZ d d lm Z d d l!m"Z" G d� de� Z# G d � de� Z$dd�Z%dd�Z&y)� N)�config)�checkIPnMask� checkIP6nMask�checkInterface�uniqify�max_zone_name_len� check_mac)�DEFAULT_ZONE_TARGET�ZONE_TARGETS�DEFAULT_ZONE_PRIORITY)� IO_Object�IO_Object_ContentHandler�IO_Object_XMLGenerator)�common_startElement�common_endElement�common_check_config� common_writer)�rich)�log)�errors)� FirewallErrorc �� � � e Zd ZdZdZdZeZi dd�dd�dd�dd �d d�ddg�dd g�ddg�dd �ddg�ddg�ddg�ddg�ddg�dd g�dd �dd�ddd��Zg d�Z i dd�dd�dd�dd g�d!d!d"g�d#d g�d$d g�dd�d%d!d"g�d&d g�d'd�d(d�d)d�d"d*g�d+d!d"g�d,d�d-d�ddddd.gd*gdd/��Z g d0�d1gd2d3gd4d5gg d6�g d7�d8d9gg d:�d;gd<gd*gd=�Zed>� � Z � fd?�Zd@� Z� fdA�Z� fdB�Z� fdC�ZdD� Z� fdE�ZdF� Z� xZS )G�Zonez Zone classi ���i� �version� �short�description�UNUSEDF�target�services�ports)r r �icmp_blocks� masquerade� forward_ports)r r r r � interfaces�sources� rules_str� protocols�source_ports�icmp_block_inversion�forwardTr ��ingress_priority�egress_priority)�_�-�/N�zone�service�name�port�protocolz icmp-blockz icmp-type�forward-port� interface�rule�source�destination�valuezsource-portr �nflog�set)�audit�accept�reject�drop�mark�limit�icmp-block-inversion)r4 � immutabler r �ingress-priority�egress-priority�enabledzto-portzto-addr�family�priority)�address�mac�invertrJ �ipset)rL rN rO �prefix�level)�grouprP z queue-size�type�burst)r2 r# r7 r9 r: r; r r= rA rD z tcp-mss-clampc � � t t j � D ] \ }}|| k( s�|c S t t j d� �)Nz index_of())� enumerater �IMPORT_EXPORT_STRUCTUREr r � UNKNOWN_ERROR)�element�i�els �:/usr/lib/python3.12/site-packages/firewall/core/io/zone.py�index_ofz Zone.index_ofu s<