|
Server : Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 System : Linux server.jackjohnson.com 2.6.32-279.5.2.el6.x86_64 #1 SMP Fri Aug 24 01:07:11 UTC 2012 x86_64 User : jackjohn ( 502) PHP Version : 5.3.17 Disable Function : NONE Directory : /usr/share/system-config-firewall/ |
Upload File : |
Ñò
¼|Nc @ s¯ d d k Z d d k Z d d k Z d d k Td d k Z d d k Z d d k l Z l Z l
Z
l Z l Z d d k
Td d k Td d k Z d d k Td d d „ ƒ YZ d S( iÿÿÿÿN( t *( t getPortIDt getServiceNamet getPortRanget checkIPt checkInterfacet uic B s% e Z d „ Z d „ Z d „ Z d „ Z d „ Z d e d ƒ d f f d „ Z d e d ƒ d f f d „ Z
d e d ƒ d f f d „ Z d
„ Z d „ Z
d d d „ Z d d d d d d
„ Z d d d d „ Z d „ Z d „ Z d „ Z d „ Z d „ Z d d „ Z d „ Z d „ Z RS( c C s¶ t ƒ | _ | i i d d t ƒ d | _ t | i t d ƒ d d ƒ | _ t d t d ƒ ƒ } | i i
| d d d d< d d ƒt d d ƒ } | i t
t d
ƒ ƒ d d d d= ƒt t d ƒ ƒ | _ | i | i d d d d> ƒ| i i
| d d d d? ƒt | i t d ƒ d
f t d ƒ d f t d ƒ d f f ƒ | i _ | i i
| i i d d d d ƒg | _ t | i t d ƒ d d ƒ } d | _ d | _ t d t d ƒ ƒ } | i
| d d d d@ d d ƒt d d d ƒ| _ g } t i D] } | | i qû~ } | i ƒ x9 | D]1 } t i | ƒ } | i i | i | d t ƒq%W| i
| i d d d dA d d d d ƒ| i i | ƒ t | i t d ƒ d d ƒ } d | _ d | _ t d t d ƒ ƒ } | i
| d d d dB d d ƒt d d d ƒ| _ g | _ t | i t d ƒ d f t d ƒ d f t d ƒ d! f f d" d ƒ| _ t d d ƒ } | i | i d d d dC d d ƒ| i | i d d d dD d d ƒ| i
| d d d dE d d ƒ| i i | ƒ t | i t d# ƒ d d ƒ } d | _ d | _ t d t d$ ƒ ƒ } | i
| d d d dF d d ƒt d d d ƒ| _ | i
| i d d d dG d d ƒ| i i | ƒ t | i t d% ƒ d d ƒ } d | _ d | _ t d t d& ƒ ƒ } | i
| d d d dH d d d' d d d ƒt d d d ƒ| _! | i
| i! d d d dI d d ƒ| i i | ƒ t | i t d( ƒ d d ƒ } d | _ d | _ t d t d) ƒ ƒ } | i
| d d d dJ d d d' d d d ƒt d d d ƒ| _" g | _# t | i t d ƒ d* f t d ƒ d+ f t d ƒ d, f f d" d ƒ| _ t d d ƒ } | i | i" d d d dK d d ƒ| i | i d d d dL d d ƒ| i
| d d d dM d d ƒ| i i | ƒ t | i t d- ƒ d d ƒ } d | _ d | _ t d t d. ƒ ƒ } | i
| d d d dN d d d' d d d ƒt d d d ƒ| _$ x* t% i& D] } | i$ i | i d t ƒq'W| i
| i$ d d d dO d d ƒ| i i | ƒ t | i t d/ ƒ d d ƒ } d | _ d | _ t d t d0 ƒ ƒ } | i
| d d d dP d d d' d d d ƒt d d d ƒ| _' g | _( t | i t d ƒ d1 f t d ƒ d2 f t d ƒ d3 f f d" d ƒ| _ t d d ƒ } | i | i' d d d dQ d d ƒ| i | i d d d dR d d ƒ| i
| d d d dS d d ƒ| i i | ƒ xÛ t) t* | i ƒ ƒ D]Ä } | i | } g }
| t* | i ƒ d j o |
i t d4 ƒ d5 f ƒ n | d j o |
i t d6 ƒ d7 f ƒ n |
i t d8 ƒ d9 f ƒ t | i |
ƒ | _ | i
| i d d: d; d ƒqêWd S(T Ni s Firewall Configurationi i i2 s¶ A firewall protects against unauthorized network intrusions. Enabling a firewall blocks all incoming connections. Disabling a firewall allows all connections and is not recommended. t paddingt growxi s Firewall:t Enabledt OKt okt Customizet customizet Cancelt canceli s Trusted Servicesi< sl Here you can define which services are trusted. Trusted services are accessible from all hosts and networks.t scrollt selectedt anchorTops Other Portss[ Add additional ports or port ranges, which need to be accessible for all hosts or networks.i t Addt ports_addt Editt
ports_editt Removet ports_removet compacts Trusted InterfacessK Mark all interfaces as trusted which should have full access to the system.t Masqueradings& Mark the interfaces to be masqueraded.t
anchorLefts Port Forwardingsç Add entries to forward ports either from one port to another on the local system or from the local system to another system. Forwarding to another system is only useful if the interface is masqueraded. Port forwarding is IPv4 only.t forward_port_addt forward_port_editt forward_port_removes ICMP Filters Mark the ICMP types in the list, which should be rejected. All other ICMP types are allowed to pass the firewall. The default is no limitation.s Custom Ruless¡ Use custom rules files to add additional rules to the firewall. The custom rules are added after the default rules. The files must have the iptables-save format.t custom_rules_addt custom_rules_editt custom_rules_removet Forwardt forwardt Backt backt Closet closei t anchorRight( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i (+ t SnackScreent screent drawRootTextt APP_NAMEt Nonet configt GridFormt _t toplevelt TextboxReflowedt addt Gridt setFieldt Labelt Checkboxt enabledt ButtonBart bbt tabst bb_workt CheckboxTreet servicest fw_servicest service_listt namet sortt getByNamet appendt Falset Listboxt other_ports_boxt other_portst trustt masqt forward_port_boxt forward_portt
block_icmpt fw_icmpt icmp_listt custom_rules_boxt custom_rulest xranget len( t selft trt gridt tabt _[1]t svct keyst keyt icmpt it buttons( ( s+ /usr/share/system-config-firewall/fw_tui.pyt init& s !"% " '
( " " +" + " +
" + "
c C sÀ | | _ | i i o | i i d ƒ n | i i d ƒ g } x t D] } | i | d ƒ qG W| i o6 x3 | i D]$ } | | j o | i | ƒ qv qv Wn | i o6 x3 | i D]$ } | | j o | i | ƒ q¶ q¶ Wn | i ƒ x: | D]2 } | i i | d t ƒ| i i | d t ƒqó WxJ t i
D]? } t } | i | i j o
t
} n | i i | d | ƒq3W| i i ƒ g | _ | i oi xf | i D]W } | i | d | d ƒ } | | i j o' | i i | ƒ | i i | | ƒ q q Wn xN | D]F } t } | i o | | i j o
t
} n | i i | d | ƒqWxN | D]F } t } | i o | | i j o
t
} n | i i | d | ƒqWW| i i ƒ g | _ | i o*x'| i D]} | d | d | d | i d
ƒ o | d
n d | i d ƒ o | d n d f } | | i j o« d
| d | i | d | d ƒ f }
| i d
ƒ o |
d | d
7}
n | i d ƒ o& |
d | i | d | d ƒ 7}
n | i i | ƒ | i i |
| ƒ qËqËWn xP t i D]E } t } | i | i i j o
t
} n | i i | i d | ƒqõW| i i ƒ g | _ | i o^ x[ | i D]L } | | i j o6 d i | ƒ }
| i i | ƒ | i i |
| ƒ qhqhWn d S( NR t t +R i i t ift protot portt toaddrt t toports %s %s ->s %st :( R. R8 t setValuet STD_DEVICESRD RI RJ RB RE R? R@ R[ R> t Truet
setEntryValueRG t clearRH t portst _portStrRK RL t has_keyRN RO RM RA RP RQ t join( RT R. t devicest devRY R8 t entryt strt fwdt arrayt lineR\ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt
loadConfigÉ s¦
$
c C sC t | ƒ d j o d | d | f Sd | d | d | f Sd S( Ni s %s:%si s %s-%s:%s( RS ( RT Rd Rc ( ( s+ /usr/share/system-config-firewall/fw_tui.pyRo 4 s c C s: t | ƒ d j o
d | d Sd | d | d f Sd S( Ni s %si s %s-%s( RS ( RT Rd ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt __simplePortStr: s
c C s^ d | | i | | ƒ f } | o | d | 7} n | o | d | i | | ƒ 7} n | S( Ns %s %s ->s %s( Ro ( RT t interfacet protocolRd t
to_addresst to_portRx ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt _forwardStr@ s R
R c
C sÐ t | i | d d ƒ } | i t d | ƒ d d d d d d d d ƒ| o2 | i t d | ƒ d d d d
d d d d ƒn t | i | ƒ } | i | d d d d ƒ| i | i ƒ ƒ } | i i ƒ | S( Ni i i( i R R R i ( i i i i ( i i i i ( R/ R* R3 R2 R9 t
buttonPressedt runPopupt popWindow( RT t typet textt text2R^ t dialogR: t ret( ( s+ /usr/share/system-config-firewall/fw_tui.pyR† H s !
!
c C s | i t d ƒ | | | ƒ S( Nt Error( R† R0 ( RT R„ R… R^ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt errorU s c C s | i t d ƒ | | | ƒ S( Nt Warning( R† R0 ( RT R„ R… R^ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt warningX s c C s$ | i t d ƒ | t d ƒ ƒ d S( Ns% Port or port range '%s' is not valid.sZ Valid values: <port>[-<port>], where port is either a number [0..65535] or a service name.( R‰ R0 ( RT Rd ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt
port_error[ s c C s$ | i t d ƒ | t d ƒ ƒ d S( Ns Protocol '%s' is not valid.s Valid values: tcp, udp( R‰ R0 ( RT R| ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt protocol_errora s c C s… | o | i | ƒ n d } | o | n d } xMt | i d t d ƒ t d ƒ | f t d ƒ | f f d t d ƒ d f t d ƒ d
f f ƒ\ } } | i i ƒ | d j o¸ t } | d i ƒ } t | ƒ } t | t i
ƒ p t | t i ƒ p | i | ƒ t
} d } n | d i ƒ } | d j o | i | ƒ t
} n | } | o q4 n | | f S| d
j o d Sq4 d S( NRf s Port and Protocols/ Please enter a port or port range and protocol.s Port / Port Range:s Protocol:R^ R
R R R i i t tcpt udp( RŽ R ( t _ui__simplePortStrt EntryWindowR* R0 R‚ RE t stripR t
isinstancet typest ListTypet TupleTypeRŒ Rk R- R ( RT Rd R| t _portt _protocolt rest valuesR‰ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt port_selectione s: -
c
C ss | o | n d } | o | n d } | o | i | ƒ n d } | o | n d } | o | i | ƒ n d }
xöt | i t d ƒ d d ƒ } t d t d ƒ ƒ } | i | d d d d d d ƒ| i t d t d
ƒ ƒ d d d d d d d d ƒt d d
ƒ }
|
i t t d ƒ ƒ d d d d! d d ƒt d d | ƒ| _
|
i | i
d d d d" d d ƒ|
i t t d ƒ ƒ d d d d# d d ƒt d d | ƒ| _ |
i | i d d d d$ d d ƒ|
i t t d ƒ ƒ d d d d% d d ƒt d d | ƒ| _ |
i | i d d d d& d d ƒ| i |
d d d d' ƒ| i t d t d ƒ ƒ d d
d d( d d d d ƒd }
t d d ƒ }
|
i t t d ƒ ƒ d d d d) d d ƒt d d | ƒ| _ |
i | i d d d d* d d ƒ|
i t t d ƒ ƒ d d d d+ d d ƒt d d |
ƒ| _ |
i | i d d d d, d d ƒ| i |
d d d d- ƒt | i t d ƒ d f t d ƒ d f f ƒ | _ | i | i d d d d ƒ| i i | i ƒ ƒ } | i i ƒ | i
i ƒ | i i ƒ | i i ƒ | i i ƒ | i i ƒ f } | d j o$t } | d i ƒ } t | ƒ d j p t | ƒ o! | i t d ƒ | ƒ t } n | } | d i ƒ } | d. j o | i | ƒ t } n | } | d i ƒ } t | ƒ } t | t i ƒ p t | t i! ƒ p | i" | ƒ t } d } n | d
i ƒ } t | ƒ d j o5 t# | ƒ o' | i t d ƒ | ƒ t } d } n | } | d i ƒ }
t |
ƒ d j oS t |
ƒ } t | t i ƒ p t | t i! ƒ p | i" |
ƒ t } d } qn | o qy n | p | p | o qy n | o | o qy n | | | | | f S| d j o d Sqy d S(/ NRf s Port Forwardingi i i( sI Please select the source and destination options according to your needs.i R R s Source (all needed)R i i s
Interface:i R„ s Protocol:s Port / Port Range:s! Destination (at least one needed)s IP address:i R
R R R i s Interface '%s' is not valid.RŽ R s Address '%s' is not valid.( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( i i i i ( s tcps udp($ R R/ R* R0 R2 R3 R4 R5 R6 t EntryR{ R| Rd R- R} R~ R9 R: R€ R R‚ t valueRE R’ RS R R‰ Rk R R R“ R” R• R– RŒ R ( RT R{ R| Rd R} R~ t
_interfaceR˜ R— t _to_addresst _to_portR† RU RV R™ Rš R‰ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt forward_port_selection‰ s¼ !
*
"
!
c
C sm | o | n d } | o | n d } | o | n d } x*t | i d t d ƒ t d ƒ | f t d ƒ | f t d ƒ | f f d t d ƒ d f t d
ƒ d f f ƒ\ } } | i i ƒ | d j o†t } | d i ƒ } | t j o= | i t d
ƒ | t d ƒ d i t ƒ ƒ t } d } n | } | d i ƒ } | t j o= | i t d ƒ | t d ƒ d i t ƒ ƒ t } d } n | } | d i ƒ } | p( t i
i | ƒ p t i
i | ƒ o' | i t d ƒ | ƒ t } d } n | } | d j o* | d j o | i t d ƒ ƒ t } n | o q? n | | | f S| d j o d Sq? d S( NRf s Custom Rules FilesV Please select the protocol type, the firewall table and the file containing the rules.s
Protocol Types Firewall Tablet FileR^ R
R R R i s$ The protocol type '%s' is not valid.s Valid values: %st ,i s% The firewall table '%s' is not valid.i s The file '%s' does not exist.t ipv6t nats IPv6 has no nat support.( R‘ R* R0 R‚ RE R’ t FIREWALL_TYPESR‰ Rq Rk R- t FIREWALL_TABLESt ost patht existst isfile(
RT Rƒ t tablet filenamet _typet _tablet _filenameR™ Rš R‰ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt custom_rules_selection sZ -
c C s | i i ƒ d S( N( R* t finish( RT ( ( s+ /usr/share/system-config-firewall/fw_tui.pyR² ; s c C s™ d d d g } | i i ƒ o | i d ƒ n | i d ƒ x( | i i ƒ D] } | i d | ƒ qM Wx( | i i ƒ D] } | i d | ƒ qx W| i i ƒ } x± t i D]¦ } | | j o= | i d | i ƒ x| | i
D] } | i d | ƒ qÝ Wq¬ | i oL | i i o? | i | i i j o) x& | i
D] } | i d
| ƒ q3Wq¬ q¬ Wx4 | i D]) \ } } | i d | i
| | ƒ ƒ q`Wx‘ | i D]† } d | d
| i | d ƒ | d f } | d o | d | i | d ƒ 7} n | d o | d | d 7} n | i | ƒ q—Wx: | i i ƒ D]) }
t i |
ƒ } | i d | i ƒ q1Wx4 | i D]) \ } }
} | i d | |
| f ƒ qhW| S( Ns /usr/sbin/lokkits -fs -vs --enableds
--disableds
--trust=%ss --masq=%ss --service=%ss --addmodule=%ss --removemodule=%ss --port=%ss% --forward-port=if=%s:port=%s:proto=%si i i i s
:toport=%si s
:toaddr=%ss --block-icmp=%ss --custom-rules=%s:%s:%s( R8 R RD RI t getSelectionRJ R> R? R@ R[ t modulesR. RH Ro RL R RM RN RC RQ ( RT t argsRs R RY t moduleRd Rc Rt Rx RA R\ Rƒ R¬ R ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt genArgs> sV
!
%
c C s | i ƒ } | i t d ƒ t d ƒ d t d ƒ d f t d ƒ d f f ƒ} | d j o d St i ƒ \ } } t i ƒ } | d j o» z¦ t i | ƒ t i d t i ƒ } | d j o! t i
| d ƒ t i | ƒ n | d
j o! t i
| d
ƒ t i | ƒ n t i
d
d ƒ t i | d | ƒ Wd t i d ƒ Xn t i | ƒ d
} t i
| d ƒ } x( | o | | 7} t i
| d ƒ } qnWt i | ƒ t i | d ƒ \ } }
|
d j oP | i i ƒ Ht d ƒ GHd i | ƒ GH| GHt d ƒ GHt ƒ | i i ƒ d
Sd S( Nss Clicking the 'Yes' button will override any existing firewall configuration. Are you sure that you want to do this?sL Please remember to check if the services iptables and ip6tables are enabled.R^ t Yest yest Not noi s /dev/nulli i iÿ Rf i s Configuration failedR` s Hit enter to continue.( R· R‹ R0 R- R¨ t pipet forkR' t opent O_RDONLYt dup2t execvt _exitt readt waitpidR* t suspendRq t raw_inputt resume( RT Rµ R™ t rfdt wfdt pidt fdt crett coutt cpidt status( ( s+ /usr/share/system-config-firewall/fw_tui.pyt applyv sR '
c C si t | _ t ƒ } | p t d g d d ƒ} n | i | ƒ | i oò t i i t
ƒ o6 t i i t
ƒ o# t i i t ƒ o t i i t ƒ o¥ g } t i i t
ƒ p t i i t
ƒ o | i
t
ƒ n t i i t ƒ p t i i t ƒ o | i
t ƒ n | i t d ƒ t d ƒ d i | ƒ ƒ n | i o | i t d ƒ t d ƒ ƒ n | S( Ns
--disabledt sources- The firewall configuration is not consistent.sp The following files are missing or unusable:
%s
Apply your firewall configuration now to correct this problem.s
s Old firewall configuration.si Your firewall configuration was converted from an old version. Please verify the configuration and apply.( RE t
ignore_allt read_sysconfig_configt parseSysconfigArgsR- Ry R8 R¨ R© Rª t IP4TABLES_RULESR« t IP6TABLES_RULESRD R‹ R0 Rq t converted( RT R. t files( ( s+ /usr/share/system-config-firewall/fw_tui.pyt readFile s0
c C s | i o d S| i t d ƒ | d t d ƒ d f t d ƒ d f t d ƒ d f f ƒ} | d j o
t | _ n) | d j o | i ƒ t i d ƒ n d S(
Ns Parse error in config fileR^ t Ignoret ignores
Ignore AllRÒ t Quitt quiti ( RÒ R† R0 Rk R² t syst exit( RT t msgt result( ( s+ /usr/share/system-config-firewall/fw_tui.pyt parse_errorÒ s
i c C s t i | ƒ d S( N( RÞ Rß ( RT RÏ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt
parse_exitß s c
C s™ x’| i i ƒ } | i i i | ƒ } | i i ƒ | d j o | i ƒ d j o t Sq | d j o t S| d j o| i i
ƒ p | i t d ƒ ƒ q n d | _
xà| i | i
i ƒ } | i i ƒ | i | i
i i | ƒ } | o4 | i | i
i o | i | i
i i | ƒ } n | d j o Pq² | d j o4 | i i ƒ | i
d j o | i
d 8_
q‹q² | d j o= | i i ƒ | i
t | i ƒ j o | i
d 7_
q‹q² | d
j oh | i ƒ } | oQ | | i j oA | i | d | d ƒ } | i i | ƒ | i i | | ƒ q‹q² | d j o· y | i i ƒ } Wn q‹X| \ } } | i | | ƒ } | oq | | i j oa | i i | ƒ | i i | ƒ | i | d | d ƒ } | i i | ƒ | i i | | ƒ q‹q² | d j oA y | i i ƒ } Wn q‹X| i i | ƒ | i i | ƒ q² | d
j o} | i ƒ } | of | | i j oV | i | d | d | d | d | d ƒ } | i i | ƒ | i i | | ƒ q‹q² | d j oÞ y | i i ƒ } Wn q‹X| \ } } } }
} | i | | | |
| ƒ } | o† | | i j ov | i i | ƒ | i i | ƒ | i | d | d | d | d | d ƒ } | i i | ƒ | i i | | ƒ q‹q² | d j oA y | i i ƒ } Wn q‹X| i i | ƒ | i i | ƒ q² | d j o] | i ƒ } | oF | | i j o6 d i | ƒ } | i i | ƒ | i! i | | ƒ q‹q² | d j o² y | i! i ƒ } Wn q‹X| \ } }
} | i | |
| ƒ } | of | | i j oV | i i | ƒ | i! i | ƒ d i | ƒ } | i i | ƒ | i! i | | ƒ q‹q² | d j oA y | i! i ƒ } Wn q‹X| i i | ƒ | i! i | ƒ q² q² q q d S( NR i R R
s The firewall is disabled.R' R% i R# R R R R i i i R R R Rh R R! (" R1 R R: R€ R* R‚ RÐ Rk RE R8 R R‰ R0 t tab_posR; R< t refreshRS R› RH Ro RD RG t currentt removet deleteR¡ RL R RK R± RQ Rq RP ( RT R™ Ru t res2t res3t itemRn Rc R{ Rd R} R~ Rƒ R¬ R ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt mainâ sä
c C s. | i ƒ | i ƒ | i ƒ } | i ƒ | S( N( R_ RÙ Rì R² ( RT R™ ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt runc s
N( t __name__t
__module__R_ Ry Ro R R R- R0 R† R‰ R‹ RŒ R R› R¡ R± R² R· RÐ RÙ Râ Rã Rì Rí ( ( ( s+ /usr/share/system-config-firewall/fw_tui.pyR % s, £ k
$ x9 8 7 %
( ( RÞ R” t os.pathR¨ t fw_configR? RN t fw_functionsR R R R R t fw_parsert fw_sysconfigt fw_iptablest snackR ( ( ( s+ /usr/share/system-config-firewall/fw_tui.pyt <module> s $
(