509318396 ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 3 ^.@sbddlZddlmZmZddlmZddlmZddlm Z m Z ddl m Z Gdd d eeZ dS) N) IPPROTO_TCP IPPROTO_UDP) MatchContext) PolicyQuery) PortconRangePortconProtocol) match_rangecsteZdZdZdZdZdZdZdZdZ e ddZ e j ddZ e ddZ e j d dZ fd d Zd d ZZS) PortconQuerya_ Port context query. Parameter: policy The policy to query. Keyword Parameters/Class attributes: protocol The protocol to match (socket.IPPROTO_TCP for TCP or socket.IPPROTO_UDP for UDP) ports A 2-tuple of the port range to match. (Set both to the same value for a single port) ports_subset If true, the criteria will match if it is a subset of the portcon's range. ports_overlap If true, the criteria will match if it overlaps any of the portcon's range. ports_superset If true, the criteria will match if it is a superset of the portcon's range. ports_proper If true, use proper superset/subset operations. No effect if not using set operations. user The criteria to match the context's user. user_regex If true, regular expression matching will be used on the user. role The criteria to match the context's role. role_regex If true, regular expression matching will be used on the role. type_ The criteria to match the context's type. type_regex If true, regular expression matching will be used on the type. range_ The criteria to match the context's range. range_subset If true, the criteria will match if it is a subset of the context's range. range_overlap If true, the criteria will match if it overlaps any of the context's range. range_superset If true, the criteria will match if it is a superset of the context's range. range_proper If true, use proper superset/subset operations. No effect if not using set operations. NFcCs|jS)N)_ports)selfr $/usr/lib64/python3.6/portconquery.pyportsQszPortconQuery.portscCs^t|}t|rT|jdks$|jdkr2tdj||j|jkrLtdj|||_nd|_dS)Nrz/Port numbers must be positive: {0.low}-{0.high}zAThe low port must be smaller than the high port: {0.low}-{0.high})rallZlowZhigh ValueErrorformatr )r valueZ pending_portsr r rrUs cCs|jS)N) _protocol)r r r rprotocolgszPortconQuery.protocolcCs|rtj||_nd|_dS)N)rlookupr)r rr r rrksc s$tt|j|f|tjt|_dS)N)superr __init__loggingZ getLogger__name__log)r policykwargs) __class__r rrrszPortconQuery.__init__ccs|jjdj||jjdj||jjdj||j|jxb|jjD]T}|jrzt|j|j|j |j |j |j  rzqN|j r|j |j krqN|j|jsqN|VqNWdS)z-Generator which yields all matching portcons.z*Generating portcon results from {0.policy}z~Ports: {0.ports}, overlap: {0.ports_overlap}, subset: {0.ports_subset}, superset: {0.ports_superset}, proper: {0.ports_proper}zProtocol: {0.protocol!r}N)rinfordebugZ_match_context_debugrZportconsrr ports_subset ports_overlapports_superset ports_properrZ_match_contextcontext)r Zportconr r rresultsvs&    zPortconQuery.results)r __module__ __qualname____doc__rr r!r"r#r$propertyrsetterrrr& __classcell__r r )rrr s,   r )rZsocketrrZmixinsrZqueryrZ policyreprrutilr r r r r rs