|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/fail2ban/server/__pycache__/ |
Upload File : |
o
� �_�E � @ s� d Z dZdZddlZddlmZ ddlmZ ddlZddl Z ddl
Z
ddl Z ddl Z ddl
Z
ddlZddlZdd lmZ dd
lmZ dd lmZ ee�ZG d d
� d
e�ZG dd� d�Ze� ZdS )zSerg G. Brester (sebres)z"Copyright (c) 2014 Serg G. Brester�GPL� N� )�
JailThread)�FailManagerEmpty� )� getLogger)�MyTime)�Utilsc sN e Zd ZdZejd Z� fdd�Zdd� Zdd� Zd d
� Z d d � Z
d
d� Z dd� Z dd� Z
dd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� ZdGd$d%�Z� fd&d'�ZdHd*d+�Zed,d-� �ZdGd.d/�ZdGd0d1�Z ed2d3� �Z e j d4d3� �Z ed5d6� �Z d7d8� Z d9d:� Z!d;d<� Z"G d=d>� d>�Z#d?d@� Z$dAdB� Z%dCdD� Z&dEdF� Z'� Z(S )I�ObserverThreada8 Handles observing a database, managing bad ips and ban increment.
Parameters
----------
Attributes
----------
daemon
ident
name
status
active : bool
Control the state of the thread.
idle : bool
Control the idle state of the thread.
sleeptime : int
The time the thread sleeps for in the loop.
�
c sZ t t| �jdd� d| _t�� | _g | _t�� | _ d| _
i | _ d| _ d | _
d| _d| _d S )Nz f2b/observer)�nameT�< Fi )�superr
�__init__�idle� threading�RLock� _queue_lock�_queue�Event�_notify� sleeptime�_timers�_paused�_ObserverThread__db�"_ObserverThread__db_purge_interval�daemon��self�� __class__� �:/usr/lib/python3/dist-packages/fail2ban/server/observer.pyr ? s
zObserverThread.__init__c C s( z| j | W S ty td| ��w )NzInvalid event index : %s�r �KeyError�r �ir! r! r" � __getitem__T s
�zObserverThread.__getitem__c C s* z| j |= W d S ty td| ��w )NzInvalid event index: %sr# r% r! r! r" � __delitem__Z s
�zObserverThread.__delitem__c C �
t | j�S �N)�iterr r r! r! r" �__iter__` �
zObserverThread.__iter__c C r) r* )�lenr r r! r! r" �__len__c r- zObserverThread.__len__c C � dS )NFr! )r �otherr! r! r" �__eq__f s zObserverThread.__eq__c C s t | �S r* )�idr r! r! r" �__hash__i s zObserverThread.__hash__c G sD | j �|d�}|dur|�� t�|| j|�}|| j |< |�� dS )z�Add a named timer event to queue will start (and wake) in 'starttime' seconds
Previous timer event with same name will be canceled and trigger self into
queue after new 'starttime' value
N)r �get�cancelr �Timer�add�start)r r � starttime�event�tr! r! r" �add_named_timerl s
z ObserverThread.add_named_timerc G s^ t jdur!|r!t�tj| jt �� | t�� | |f�}|�� dS t�|| j |�}|�� dS )zJAdd a timer event to queue will start (and wake) in 'starttime' seconds
N)
r �myTimer r7 r �DEFAULT_SLEEP_INTERVAL�
_delayedEvent�timer9 r8 )r r: r; r< r! r! r" � add_timery s � zObserverThread.add_timerc C sR t �� |ks t�� |kr| jdg|�R � d S t�tj| j|||f�}|�� d S )Nr ) r rA rB r r7 r r? r@ r9 )r � endMyTime�endTimer; r< r! r! r" r@ � s � z ObserverThread._delayedEventc C s$ | j s| j}|r|�� dS dS dS )z1Notify wakeup (sets /and resets/ notify event)
N)r r �set)r �nr! r! r" � pulse_notify� s �zObserverThread.pulse_notifyc G s> | j � | j�|� W d � n1 sw Y | �� dS )z5Add a event to queue and notify thread to wake up.
N)r r �appendrG �r r; r! r! r" r8 � s � zObserverThread.addc G s8 | j � | j�|� W d � dS 1 sw Y dS )z=Add a event to queue withouth notifying thread to wake up.
N)r r rH rI r! r! r" �add_wn� s "�zObserverThread.add_wnc G s ||� d S r* r! )r �l�argsr! r! r" � call_lambda� s zObserverThread.call_lambdac
C s� t �d� | �d| jd� | j| j| j| j| j| j | j
dd� dd� d� }z�| � d� | j r�d | _
| js�zDd
}| j� t| j�rE| j�d �}W d
� n1 sOw Y |d
u rZW n;|d }t|d �sn|�|�pmt| |�}||d d
� � W n ty� } zt jd
|dd� W Y d
}~nd
}~ww | jr3| j}|r�d| _
|�| j� |�� | jr�q*n
t � t j � | j s�n| j s-t �dt| j�� d
| _W n ty� } zt jd|dd� W Y d
}~nd
}~ww | j� g | _W d
� n1 s�w Y d| _
dS )z�Main loop for Threading.
This function is the main loop of the thread.
Returns
-------
bool
True when the thread exits nicely.
zObserver start...�DB_PURGE�db_purgec S r0 �Nr! r! r! r! r! r" �<lambda>� � z$ObserverThread.run.<locals>.<lambda>c S r0 rP r! r! r! r! r" rQ � rR ) �call�db_setrO �is_alive� is_activer9 �stop�nop�shutdownrU FNr r �%sT��exc_infoz&Observer stopped, %s events remaining.z Observer stopped after error: %s)!�logSys�infor= r rM rT rO �isAlive�isActiver9 rW r8 �activer r r r. r �pop�callabler5 �getattr� Exception�errorr �waitr �clearrA �sleepr
r? �is_full)r �_ObserverThread__meth�ev�meth�erF r! r! r" �run� sr
�
� � ��� � �$
�� �zObserverThread.runc C r0 )NTr! r r! r! r" r_ � s zObserverThread.isAliveNc C � | j S r* )ra )r �fromStrr! r! r" r` s zObserverThread.isActivec sP | j � | jstt| ��� W d � d S W d � d S 1 s!w Y d S r* )r ra r r
r9 r r r! r" r9 s �"�zObserverThread.start� Tc C s� | j rS| jrSt�d|� | j� | �d� | j}| j�� d | _W d � n1 s*w Y | �|�s6|rD|�� d| _ d| _ d | _
n|| _| � t |d��oR| j
S dS )Nz-Observer stop ... try to end queue %s secondsrY FTg �?)ra r r] r^ r rJ rE �
wait_emptyrh r r � wait_idle�minrj )r �wtime� forceQuitrF r! r! r" rW s
�zObserverThread.stopc C s< | j � t| j�r dndW d � S 1 sw Y d S )NTF)r r. r r r! r! r" rj # s $�zObserverThread.is_fullc C s� t �tj� |durt� � | }| jdur$| �d� | jr$| jr$| � � | jr;|dur2t� � |kr2n t �tj� | js'| �
d� | j S )zWWait observer is running and returns if observer has no more events (queue is empty)
NrX g����MbP?) rA ri r
r? r r rJ rj r rG rt �r r rn r! r! r" rs ( s
�
zObserverThread.wait_emptyc C sd t �tj� | jr dS |durt� � | }| js/|dur&t� � |kr& | jS t �tj� | jr| jS )zJWait observer is running and returns if observer idle (observer sleeps)
TN)rA ri r
r? r r rx r! r! r" rt < s ��zObserverThread.wait_idlec C rp r* )r r r! r! r" �pausedJ s zObserverThread.pausedc C s | j |krd S || _ | �� d S r* )r rG )r �pauser! r! r" ry N s
c C r0 )z/Status of observer to be implemented. [TODO]
)� r{ r! r r! r! r" �statusW s zObserverThread.statusc C s
|| _ d S r* )r )r �dbr! r! r" rT a r- zObserverThread.db_setc C s2 t �d� | jd ur| j�� | �d| jd� d S )Nz Purge database event occurredrN rO )r] �debugr �purger= r r r! r! r" rO d s
zObserverThread.db_purgec
C s� |� � r |�d�s dS |�� }|�� }t�d|j|� d}d}d}z�|�� } |j}
|
durh|
� ||�D ]\}}} t
||� � �}d|dk rF|nd> d d } t || �}|durh||krht�d|j|||� W dS |dkroW dS t�
d |j|t�|�|||| kr�d
nd � |�||d d �}|�|� || kr�z |�|�}|�|� q� ty� |�t�� � Y W dS w W dS ty� } ztjd
| t�� tjkd� W Y d} ~ dS d} ~ ww )z} Notify observer a failure for ip was found
Observer will check ip was known (bad) and possibly increase an retry count
� incrementNz [%s] Observer: failure found %sr r � r z8[%s] Ignore failure %s before last ban %s < %s, restoredz%[%s] Found %s, bad - %s, %s # -> %s%sz, Banr{ TrZ r[ ) r_ �getBanTimeExtra�getIP�getTimer] r~ r � getMaxRetry�database�getBan�max� getBanCountru r^ r �time2str�
addFailure� setBanCount�toBan�
putFailTicketr �cleanuprA re rf �getEffectiveLevel�logging�DEBUG)
r � failManager�jail�ticket�ip�unixTime�banCount�
retryCount� timeOfBan�maxRetryr} � lastBanTimern r! r! r" � failureFoundo sX
� �
� ��
(��zObserverThread.failureFoundc @ � e Zd Zdd� ZdS )zObserverThread.BanTimeIncrc C s || _ || _d S r* )�Time�Count)r �banTimer� r! r! r" r � s
z#ObserverThread.BanTimeIncr.__init__N��__name__�
__module__� __qualname__r r! r! r! r" � BanTimeIncr� � r� c C s |� � }|d | �||��S )N� evformula)r� r� )r r� r� r� �ber! r! r" � calcBanTime� s zObserverThread.calcBanTimec C sX |� � r|js |S |�� }|�� }|}zx|dkr�|�dd�r�|jj|||�dd�d�D ]]\}}} ||�� kr=|�|d � t� d|||� |dkrS|d | �
||��}|� |� |� � |kr|t�
d |j||t�|�tjt|�d
�tjt|�d
�f � nd |_ W |S W |S W |S W |S ty� }
ztjd |
t�� tjkd
� W Y d}
~
|S d}
~
ww )ztCheck for IP address to increment ban time (if was already banned).
Returns
-------
float
new ban time.
r r� F� overalljails)r� r z"IP %s was already banned: %s #, %sr� z/[%s] IP %s is bad: %s # last %s - incr %s to %s��secondsTrZ r[ N)r_ r� r� r� r5 r� r� r� r] r~ r� �
setBanTimer� r^ r r r� �datetime� timedelta�int�restoredre rf r� r� r� ) r r� r� r� r� r� �
orgBanTimer� r� r� rn r! r! r" � incrBanTime� sD �
�����$��zObserverThread.incrBanTimec
C s� |j rdS z�|}|�� }t�d|j||� |dkr3|�� du r3| �|||�}|dks.||kr3|�|� |dkr\|�� | }t j
t |�d�t �
|�f}|t �� k r[t�d|d � W dS nd}||kr�tjd |j||�� g|�R � t�d
d |j|||f� | �td td
|| d
��| j||� |jdur�|j s�|j�||� W dS W dS W dS ty� } ztjd|t�� tj kd� W Y d}~dS d}~ww )�� Notify observer a ban occured for ip
Observer will check ip was known (bad) and possibly increase/prolong a ban time
Secondary we will actualize the bans and bips (bad ip) in database
Nz [%s] Observer: ban found %s, %s���r� zIgnore old bantime %sr F)� permanent�infinitez$[%s] Increase Ban %s (%d # %s -> %s)rr z [%s] Observer: prolong %s in %sr r rZ r[ ) r� r� r] r~ r �
getBanTimer� r� r� r� r� r� r r� rA �noticer� �logrB ru r� �
prolongBanr� �addBanre rf r� r� r� ) r r� r� �btime�oldbtimer� �bendtime�logtimern r! r! r" �banFound� sF
� �
��& �(��zObserverThread.banFoundc
C sv z|� � }|�� }t�d|j||� |j�|� W dS ty: } ztjd|t� � t
j kd� W Y d}~dS d}~ww )r� z [%s] Observer: prolong %s, %srZ r[ N) r� r� r] r~ r �actions� _prolongBanre rf r� r� r� )r r� r� r� r� rn r! r! r" r� s (��zObserverThread.prolongBanr* )rr T))r� r� r� �__doc__r r? r r' r( r, r/ r2 r4 r= rB r@ rG r8 rJ rM ro r_ r` r9 rW �propertyrj rs rt ry �setterr| rT rO r� r� r� r� r� r� �
__classcell__r! r! r r" r
( sP
P
8)+r
c @ r� )�
_Observersc C s
d | _ d S r* )�Mainr r! r! r" r r- z_Observers.__init__Nr� r! r! r! r" r� r� r� )�
__author__�
__copyright__� __license__r �
jailthreadr � failmanagerr �osr� rA r� �math�json�random�sys�helpersr �mytimer �utilsr r� r] r
r� � Observersr! r! r! r" �<module> s$ 8 o