Edit File: whitelist_rbl.cpython-311.pyc
� �ghl � �t � d Z ddlZddlZddlZddlZddlmZ ddlmZ ddl m Z ddl m Z m Z mZmZ ddlmZ ddlmZ dd lmZ dd lmZ dd lmZ dd lmZ dd l m Z m Z ej e � � Z!dZ"d� Z#e ee$e e d�� � d� � � � � Z% ee"� � d� � � Z&d� Z'dee fd�Z(d� Z)dS )z^ This module provides functions for exporting whitelist for Real-time Blackhole List (RBL). � N)�Path)�Optional)�PanelException)�COPY_TO_MODSEC_MAXTRIES� log_failed_to_copy_to_modsec�recurring_check�retry_on)�safe_update_config)�svcctl)�use_modsec_lock)� HostingPanel)�GlobalWhitelist)�CustomWhitelist)�IPSetWhiteFullAccess� IPSetWhite�< c � �, K � t j � � � d {V ��} d� t � � � � � D � � }t � � � � � }t j � � � d {V ��}t j | |||� � S )Nc 3 �& K � | ] }|d V � � dS )�ipN� )�.0�items �O/opt/imunify360/venv/lib/python3.11/site-packages/im360/subsys/whitelist_rbl.py� <genexpr>z'_get_whitelists_data.<locals>.<genexpr>& s7 � � � � � ���T� � � � � � � � ) r �loadr � query_allr �get_non_captcha_passed_ipsr � itertools�chain)�global_white_list�full_access_white_list�manual_white_list�custom_white_lists r �_get_whitelists_datar% $ s� � � � � -� 2� 4� 4�4�4�4�4�4�4�� � � 3� 5� 5� ?� ?� A� A� � � �� #� � �?�?�A�A�� -� 2� 4� 4�4�4�4�4�4�4�� �?�� ��� � � r T)� max_tries�on_error�silentc � �6 K � t � � � d {V ��} | sd S t � � � d {V ��}t |� � }t |� � }t | � � }t |� � t |� � k �rt � d| � � d� t |� � � � }t | |� � � d {V ��r�t � d� � t � � j j dk rwt � d� � t j � � } |� � � � d {V �� d S # t" $ r t � d� � Y d S w xY wd S d S t � d� � d S )NzCreate RBL whitelist: %s� z&RBL whitelist was successfully updated� cPanelCorazaz:Reloading 'imunify360-wafd' as coraza ruleset is in actionz"Failed to reload 'imunify360-wafd'z0No changes in RBL whitelist, no restart required)�_get_rbl_whitelist_pathr% �_convert_ip_addresses�list�_read_whitelist_from_file�set�logger�info�join�sortedr r � __class__�__name__r �imunify360_wafd_service�reload� Exception�warning)�rbl_whitelist_path�whitelist_chain� new_whitelist�current_whitelist�text�unitctls r �create_rbl_whitelistrA 4 s� � � � � 7� 8� 8�8�8�8�8�8�8�� � ��� 0� 2� 2�2�2�2�2�2�2�O�+�O�<�<�O�� �)�)�M�1�2D�E�E�� �=���S�!2� 3� 3�3�3�� � �.�0B�C�C�C��y�y�� �.�.�/�/��#�$6��=�=� =� =� =� =� =� =� I� �K�K�@� A� A� A� �~�~�'�0�N�B�B�� � � �� � � !�8�:�:��I�!�.�.�*�*�*�*�*�*�*�*�*�*�*�� � I� I� I��N�N�#G�H�H�H�H�H�H�I���� I� I� C�B� � � �F�G�G�G�G�Gs �4E �$E8�7E8c � �� K � t � � � d{V ��} | sdS t j � t | � � � � }|rt � � � d{V �� dS dS # t $ r Y dS w xY w)z%Make sure rbl_whitelist is not empty.N)r, �os�path�getsize�strrA �FileNotFoundError)r; �emptys r �ensure_rbl_whitelistrI Y s� � � � � 7� 8� 8�8�8�8�8�8�8�� � ���)��G�O�O�C�(:�$;�$;�<�<�<�� � )�&�(�(� (� (� (� (� (� (� (� (� (� )� )�� � � � �������s �-A# �# A1�0A1c # � K � | D ]K}t j |� � }|j dk rt j |j � � }t |� � V � �Ld S )N� )� ipaddress� ip_network� num_addresses� ip_address�network_addressrF )�iterabler s r r- r- i sc � � � �� � �� � !�"� %� %�� � �q� � ��%�b�&8�9�9�B��"�g�g� � � � �� r �returnc � �� K � t � � � � � � d{V ��} n-# t $ r }t j d|� � Y d}~dS d}~ww xY w| st � d� � | S )z�RBL whitelist stored in ModSec ruleset directory, returns Path for RBL whitelist file, or None if panel errors, or modsec rulest dir doesn't exists. Nz Can't create rbl whitelist: %sz1RBL whitelist path is undefined. Creation skipped)r �get_rbl_whitelist_pathr �loggingr: r1 r2 )r; �es r r, r, t s� � � � � �#/�>�>�#H�#H�#J�#J� J� J� J� J� J� J���� � � � ���8�!�<�<�<��t�t�t�t�t��������� � I�� � �G�H�H�H� � s �&+ � A�A�Ac # �F K � t � d| � � t t | � � d� � 5 }t t j |� � E d {V �� d d d � � d S # 1 swxY w Y d S # t $ r t � d| � � Y d S w xY w)NzRead RBL whitelist: %s�rz!RBL whitelist doest not exist: %s)r1 r2 �openrF �map�striprG )r; �fs r r/ r/ � s � � � � �K�K�(�*<�=�=�=�M� �#�(�)�)�3� /� /� )�1��3�9�a�(�(� (� (� (� (� (� (� (� )� )� )� )� )� )� )� )� )� )� )� )���� )� )� )� )� )� )�� � M� M� M�� � �7�9K�L�L�L�L�L�L�M���s4 � A7 �!A*� A7 �*A.�.A7 �1A.�2A7 �7%B � B )*�__doc__r rL rU rC �pathlibr �typingr �"defence360agent.subsys.panels.baser �defence360agent.utilsr r r r �!defence360agent.subsys.web_serverr �defence360agent.subsysr �im360.subsys.panels.baser �!im360.subsys.panels.hosting_panelr � im360.model.global_whitelistr �im360.model.custom_listsr � im360.internals.core.ipset.ipr r � getLoggerr6 r1 �POLLING_PERIODr% rG rA rI r- r, r/ r r r �<module>rk s ��� � � � � � � � � � ���� � � � � � � � � � � � � � � � � =� =� =� =� =� =�� � � � � � � � � � � � A� @� @� @� @� @� )� )� )� )� )� )� 4� 4� 4� 4� 4� 4� :� :� :� :� :� :� 8� 8� 8� 8� 8� 8� 4� 4� 4� 4� 4� 4� J� J� J� J� J� J� J� J� �� �8� $� $�� �� � � � � ���%� )� � � � � H� H� � � � �H�< � � � � � )� )� !� � )� � � � �x��~� � � � �" M� M� M� M� Mr