Edit File: captcha.cpython-311.pyc
� �gh� � � � d Z ddlmZmZmZ ddlmZ ddlmZ ddl m Z m Z ddl m Z ddlmZmZ dd lmZmZ G d � d e� � Zd S ) z%Captcha specific rules customization.� )� AbstractSet�Iterator�Mapping)� HostingPanel)� Webshield)� FirewallRules�is_nat_available)� webshield)� IPVersion� LocalhostIP� )� FirewallRule�WebshieldRuleBuilderc � � e Zd ZdZdd�Zdedee fd�Zde e e f de dee fd �Z dedee fd �Z d edee fd �Zd edee fd �ZdS )�CaptchaRuleBuilderzPImplement steps specific to generating captcha related iptables rules. Fc � � || _ d S )N)�2_CaptchaRuleBuilder__include_webshield_ports_rules)�self� include_webshield_ports_ruless �W/opt/imunify360/venv/lib/python3.11/site-packages/im360/internals/core/rules/captcha.py�__init__zCaptchaRuleBuilder.__init__ s � �/L��,�,�,� � ip_version�returnc # � K � | j sdS t t j t j t | j � � �� � V � dS )z;Return FirewallRule to open webshields ports for localhost.N)�chain�rule)r r r �WEBSHIELD_PORTS_INPUT_CHAIN�open_all_for_src_netr �value)r r s r �(open_webshield_ports_for_localhost_rulesz;CaptchaRuleBuilder.open_webshield_ports_for_localhost_rules sd � � � � �3� � �F�� �;� �3��J�'�-�� � � � � � � � � r � redirect_map� dest_portsc # � K � | j sdS t t j t j t j � � t j �� � V � dS )z/Return FirewallRules to log redirected traffic.N)r r �priority)r r r r �compose_action�LOG_BLOCK_PORT_CHAIN�LOWEST_PRIORITY)r r" r# s r �block_webshield_ports_rulesz.CaptchaRuleBuilder.block_webshield_ports_rules$ sg � � � � �3� � �F�� �;� �-� �2�� � #�2� � � � � � � � r c # � K � | j sdS t � � � � � }|�rt j �rt j �rt j � � r�|� � � D ]f\ }}t t j ||� � t j t |� � r t j n t j t j �� � V � �gt t j t% |� � � � � t j �� � t j t j t j �� � V � dS dS dS dS dS )z� Used to create redirect to webshield for panel ports for example 2082, 2083 for cPanel. Turned on by config option panel_protection N)r r �tabler% )�policy)r r � get_webshield_protected_portsr �PANEL_PROTECTION�ENABLEr �expects_traffic�itemsr r �protected_by_webshield�IMUNIFY_INPUT_CHAINr �NAT�MANGLE�HIGHEST_PRIORITY�block_dst_port_list�set�values�ACCEPTr �FILTER)r r �ports�dst_port� target_ports r �redirect_panel_portsz'CaptchaRuleBuilder.redirect_panel_ports3 s| � � � � �3� � �F� ���<�<�>�>�� � ��*� � � � � �)�+�+� � */��� � � � �%��+�"�&�=� �+�� � (�;�'� �3�3�.�-�+�+�&�-� *� ;� � � � � � � � �"�6��� � ���'�'�(�/�� � � $�?�#�*�&�7�� � � � � � � �# � � � � � � � r � ipset_namec # �h K � t t j |t j � � �� � V � dS )zGenerator yield drop chain�r N)r r � ipset_rule�LOG_GRAYLIST_CHAIN�r r@ s r �logdrop_chain_rulesz&CaptchaRuleBuilder.logdrop_chain_rulesY sI � � � �� �)��M� <�� � � � � � � � � r c # �R K � t t j |� � �� � V � dS )z-Generator yield firewall drop rule for tproxyrB N)r r �traffic_not_from_tproxyrE s r �drop_tproxy_rulesz$CaptchaRuleBuilder.drop_tproxy_rulesa s? � � � �� �6�z�B�B� � � � � � � � r N)F)�__name__� __module__� __qualname__�__doc__r r r r r! r �intr r) r? �strrF rI � r r r r s � � � � � �� � M� M� M� M� � � � �,� � � � � � � #�C��H� -� �;F� � �,� � � � � � $�#�$� �,� �$� $� $� $�L �c� �h�|�6L� � � � � �C� �H�\�4J� � � � � � r r N)rM �typingr r r �!im360.subsys.panels.hosting_panelr �im360.contracts.configr � im360.internals.core.firewallr r � im360.subsysr � defence360agent.utils.validater r �types_r r r rP r r �<module>rX s� �� +� +� 1� 1� 1� 1� 1� 1� 1� 1� 1� 1� :� :� :� :� :� :� ,� ,� ,� ,� ,� ,� I� I� I� I� I� I� I� I� "� "� "� "� "� "� A� A� A� A� A� A� A� A� 6� 6� 6� 6� 6� 6� 6� 6�X � X � X � X � X �-� X � X � X � X � X r