�
G�kc^- � � � d Z dZdZddlZd� Z G d� de� � Z edd d
d �� � Zg g d ��d
dg�ddg�ddg�ddg�ddg�ddg�ddg�dd g�d d g�d d g�d!d"g�d#d$g�d%d&g�d'd(g�d)d*g�g d+��d,d-g�d.d/g�d0d1g�d2d3g�d4d5g�d6d7g�d8d9g�g d:��d;d<g�d=d>g�d?d@g�dAdBg�dCdDg�dEdFg�g dG��dHdIg�dJdKg�dLdMg�dNdOg�g dP��dQdRg�dSdTg�dUdVg�dWdXg�dYdZg�d[d\g�d]d^g�d_d`g�dadbg�dcddg�dedfg�dgdhg�didjg�dkdlg�dmdng�dodpg�dqdrg�dsdtg�dudvg�dwdxg�dydzg�d{d|g�d}d~g�dd�g�d�d�g�d�d�g�d�d�g�g d���d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�g d���d�d�g�d�d�g�g d���d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�g d���d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�d�d�g�g d͢�d�d�g�d�d�g�d�d�g�ZdԄ Z dՄ Z
dք Z dS )�z
Cyril Jaquierz Copyright (c) 2004 Cyril Jaquier�GPL� Nc �$ � t | � � dS )zZDefault output handler for printing protocol.
Used to ease mocking in the test cases.
N)�print)�ss �3/usr/lib/python3/dist-packages/fail2ban/protocol.py�outputr s � � �q������ c � � e Zd Zd� ZdS )�dotdictc � � | | S )N� )�self�names r � __getattr__zdotdict.__getattr__' s � �
�d��r N)�__name__�
__module__� __qualname__r r
r r r r & s# � � � � � �� � � � r r r s <F2B_END_COMMAND>s <F2B_CLOSE_COMMAND>)�EMPTY�END�CLOSE)� �BASICr �startz starts the server and the jails�restartzrestarts the serverz&restart [--unban] [--if-exists] <JAIL>zBrestarts the jail <JAIL> (alias for 'reload --restart ... <JAIL>')z$reload [--restart] [--unban] [--all]z�reloads the configuration without restarting of the server, the option '--restart' activates completely restarting of affected jails, thereby can unban IP addresses (if option '--unban' specified)z1reload [--restart] [--unban] [--if-exists] <JAIL>zIreloads the jail <JAIL>, or restarts it (if option '--restart' specified)�stopz(stops all jails and terminate the serverz unban --allz3unbans all IP addresses (in all jails and database)zunban <IP> ... <IP>z'unbans <IP> (in all jails and database)�bannedz*return jails with banned IPs as dictionaryzbanned <IP> ... <IP>]z4return list(s) of jails where given IP(s) are banned�statusz%gets the current status of the server�pingz tests if the server is alive�echoz;for internal usage, returns back and outputs a given string�helpzreturn this output�versionzreturn the server version)r �LOGGINGr zset loglevel <LEVEL>z�sets logging level to <LEVEL>. Levels: CRITICAL, ERROR, WARNING, NOTICE, INFO, DEBUG, TRACEDEBUG, HEAVYDEBUG or corresponding numeric value (50-5)z get loglevelzgets the logging levelzset logtarget <TARGET>zYsets logging target to <TARGET>. Can be STDOUT, STDERR, SYSLOG, SYSTEMD-JOURNAL or a filez
get logtargetzgets logging targetz set syslogsocket auto|<SOCKET>zQsets the syslog socket path to auto or <SOCKET>. Only used if logtarget is SYSLOGzget syslogsocketzgets syslog socket path� flushlogszAflushes the logtarget if a file and reopens it. For log rotation.)r �DATABASEr zset dbfile <FILE>zKset the location of fail2ban persistent datastore. Set to "None" to disablez
get dbfilez1get the location of fail2ban persistent datastorezset dbmaxmatches <INT>z<sets the max number of matches stored in database per ticketzget dbmaxmatchesz<gets the max number of matches stored in database per ticketzset dbpurgeage <SECONDS>z?sets the max age in <SECONDS> that history of bans will be keptzget dbpurgeagez=gets the max age in seconds that history of bans will be kept)r z JAIL CONTROLr zadd <JAIL> <BACKEND>z creates <JAIL> using <BACKEND>z start <JAIL>zstarts the jail <JAIL>z stop <JAIL>z*stops the jail <JAIL>. The jail is removedzstatus <JAIL> [FLAVOR]zHgets the current status of <JAIL>, with optional flavor or extended info)r zJAIL CONFIGURATIONr zset <JAIL> idle on|offz sets the idle state of <JAIL>z set <JAIL> ignoreself true|falsez'allows the ignoring of own IP addresseszset <JAIL> addignoreip <IP>z&adds <IP> to the ignore list of <JAIL>zset <JAIL> delignoreip <IP>z+removes <IP> from the ignore list of <JAIL>z set <JAIL> ignorecommand <VALUE>z sets ignorecommand of <JAIL>z set <JAIL> ignorecache <VALUE>zsets ignorecache of <JAIL>z%set <JAIL> addlogpath <FILE> ['tail']zmadds <FILE> to the monitoring list of <JAIL>, optionally starting at the 'tail' of the file (default 'head').z set <JAIL> dellogpath <FILE>z1removes <FILE> from the monitoring list of <JAIL>z!set <JAIL> logencoding <ENCODING>z/sets the <ENCODING> of the log files for <JAIL>z"set <JAIL> addjournalmatch <MATCH>z,adds <MATCH> to the journal filter of <JAIL>z"set <JAIL> deljournalmatch <MATCH>z1removes <MATCH> from the journal filter of <JAIL>z set <JAIL> addfailregex <REGEX>zHadds the regular expression <REGEX> which must match failures for <JAIL>z set <JAIL> delfailregex <INDEX>z7removes the regular expression at <INDEX> for failregexz!set <JAIL> addignoreregex <REGEX>zTadds the regular expression <REGEX> which should match pattern to exclude for <JAIL>z!set <JAIL> delignoreregex <INDEX>z9removes the regular expression at <INDEX> for ignoreregexzset <JAIL> findtime <TIME>zPsets the number of seconds <TIME> for which the filter will look back for <JAIL>zset <JAIL> bantime <TIME>zBsets the number of seconds <TIME> a host will be banned for <JAIL>z set <JAIL> datepattern <PATTERN>z6sets the <PATTERN> used to match date/times for <JAIL>zset <JAIL> usedns <VALUE>z sets the usedns mode for <JAIL>z3set <JAIL> attempt <IP> [<failure1> ... <failureN>]z"manually notify about <IP> failurez set <JAIL> banip <IP> ... <IP>z manually Ban <IP> for <JAIL>z2set <JAIL> unbanip [--report-absent] <IP> ... <IP>z manually Unban <IP> in <JAIL>zset <JAIL> maxretry <RETRY>zFsets the number of failures <RETRY> before banning the host for <JAIL>zset <JAIL> maxmatches <INT>zDsets the max number of matches stored in memory per ticket in <JAIL>zset <JAIL> maxlines <LINES>z@sets the number of <LINES> to buffer for regex search for <JAIL>z6set <JAIL> addaction <ACT>[ <PYTHONFILE> <JSONKWARGS>]z�adds a new action named <ACT> for <JAIL>. Optionally for a Python based action, a <PYTHONFILE> and <JSONKWARGS> can be specified, else will be a Command Actionzset <JAIL> delaction <ACT>z$removes the action <ACT> from <JAIL>)r z COMMAND ACTION CONFIGURATIONr z)set <JAIL> action <ACT> actionstart <CMD>z;sets the start command <CMD> of the action <ACT> for <JAIL>z(set <JAIL> action <ACT> actionstop <CMD>z:sets the stop command <CMD> of the action <ACT> for <JAIL>z)set <JAIL> action <ACT> actioncheck <CMD>z;sets the check command <CMD> of the action <ACT> for <JAIL>z'set <JAIL> action <ACT> actionban <CMD>z9sets the ban command <CMD> of the action <ACT> for <JAIL>z)set <JAIL> action <ACT> actionunban <CMD>z;sets the unban command <CMD> of the action <ACT> for <JAIL>z)set <JAIL> action <ACT> timeout <TIMEOUT>zPsets <TIMEOUT> as the command timeout in seconds for the action <ACT> for <JAIL>)r z GENERAL ACTION CONFIGURATIONr z*set <JAIL> action <ACT> <PROPERTY> <VALUE>z>sets the <VALUE> of <PROPERTY> for the action <ACT> for <JAIL>z/set <JAIL> action <ACT> <METHOD>[ <JSONKWARGS>]zDcalls the <METHOD> with <JSONKWARGS> for the action <ACT> for <JAIL>)r zJAIL INFORMATIONr zget <JAIL> bannedzreturn banned IPs of <JAIL>z get <JAIL> banned <IP> ... <IP>]zQreturn 1 if IP is banned in <JAIL> otherwise 0, or a list of 1/0 for multiple IPszget <JAIL> logpathz/gets the list of the monitored files for <JAIL>zget <JAIL> logencodingz-gets the encoding of the log files for <JAIL>zget <JAIL> journalmatchz(gets the journal filter match for <JAIL>zget <JAIL> ignoreselfz;gets the current value of the ignoring the own IP addresseszget <JAIL> ignoreipz0gets the list of ignored IP addresses for <JAIL>zget <JAIL> ignorecommandz gets ignorecommand of <JAIL>zget <JAIL> failregexzJgets the list of regular expressions which matches the failures for <JAIL>zget <JAIL> ignoreregexzPgets the list of regular expressions which matches patterns to ignore for <JAIL>zget <JAIL> findtimezIgets the time for which the filter will look back for failures for <JAIL>zget <JAIL> bantimez)gets the time a host is banned for <JAIL>zget <JAIL> datepatternz4gets the pattern used to match date/times for <JAIL>zget <JAIL> usednsz"gets the usedns setting for <JAIL>z$get <JAIL> banip [<SEP>|--with-time]z�gets the list of of banned IP addresses for <JAIL>. Optionally the separator character ('<SEP>', default is space) or the option '--with-time' (printing the times of ban) may be specified. The IPs are ordered by end of ban.zget <JAIL> maxretryz.gets the number of failures allowed for <JAIL>zget <JAIL> maxmatcheszDgets the max number of matches stored in memory per ticket in <JAIL>zget <JAIL> maxlinesz-gets the number of lines to buffer for <JAIL>zget <JAIL> actionsz!gets a list of actions for <JAIL>)r zCOMMAND ACTION INFORMATIONr z#get <JAIL> action <ACT> actionstartz6gets the start command for the action <ACT> for <JAIL>z"get <JAIL> action <ACT> actionstopz5gets the stop command for the action <ACT> for <JAIL>z#get <JAIL> action <ACT> actioncheckz6gets the check command for the action <ACT> for <JAIL>z!get <JAIL> action <ACT> actionbanz4gets the ban command for the action <ACT> for <JAIL>z#get <JAIL> action <ACT> actionunbanz6gets the unban command for the action <ACT> for <JAIL>z get <JAIL> action <ACT> timeoutzCgets the command timeout in seconds for the action <ACT> for <JAIL>)r zGENERAL ACTION INFORMATIONr z!get <JAIL> actionproperties <ACT>z9gets a list of properties for the action <ACT> for <JAIL>z get <JAIL> actionmethods <ACT>z6gets a list of methods for the action <ACT> for <JAIL>z"get <JAIL> action <ACT> <PROPERTY>z<gets the value of <PROPERTY> for the action <ACT> for <JAIL>c �� � d} d}d}d}t D ]�}|d dk r|rt d� � d}d}t |d � � |k rd|z |d z |d < t j |d |d�
� � D ]r}|rBd| z |d z d|t |d � � z
z z |� � � z }d}n d| |z z |� � � z }t |� � �s��d S ) N� �) �" Fr r T� � )�drop_whitespace)�protocolr �len�textwrap�wrap�strip)�INDENT�MARGIN�WIDTH� firstHeading�m�first�n�lines r �printFormattedr9 � s � � ��
�� ��� �
�
�
�Q��q�T�R�Z�Z�L�Z� �"�:�:�:��,�
�%���1��Y�Y�&���
��+��!��
�1�Q�4� �=��1��u�e� <� <� <� � �a� � /� ��<�!�A�$� ����Q�q�T���(:�!;� ;�a�g�g�i�i� G�D� �E�E� �&�6�/� "�Q�W�W�Y�Y� .�D� �$�<�<�<�<�
�
�
r c � � d} t D ]q}|d dk r0| rt d� � t |d |d � � d} �>t d� � t d |d z d
z |d z � � �rt d� � d S ) NFr r z|}r* � Tz|-z(| <span style="white-space:nowrap;"><tt>z</tt></span> || || )r, r �__printWikiHeader)r4 r5 s r � printWikir= � s� � �� �
� ^� ^�Q��q�T�R�Z�Z�� �
�4�L�L�L��Q�q�T�1�Q�4� � � ��<�<� �$�<�<�<� �
6��1��
=�@U�
U�XY�Z[�X\�
\�]�]�]�]��� � � � � r c �� � t d� � t d| z dz � � t d� � t |� � t d� � t d� � t d� � d S )Nr z=== z ===z{|z'| '''Command''' || || '''Description''')r )�section�descs r r< r< � sf � ����������6�!�"�"�"�������� � � �������� � � ��1�2�2�2�2�2r ) �
__author__�
__copyright__� __license__r. r �dictr �CSPROTOr, r9 r= r< r
r r �<module>rF ss ��. �
�2�
�� � ����
�
�
�� � � � �d� � � � �'� � � !�� � � �� k � � � �k ��
+� ,�k � � !� "�k � *�+o� p� k �
(� *p� q� k � 5� 7B� C�
k � � 3� 4�k � �E� F�k � �A� B�k �
� 7� 8�k � �P� Q�k �
� 2� 3�k � � '� (�k � � F� G� k � � � � k � � '� (�!k �" � � �#k �$ � G� H�%k �( �)� *�)k �* �v� w�+k �, �'� (�-k �. "�#v� w�/k �0 �.� /�1k �2
�Q� R�3k �4 � � �5k �6 �e� f�7k �8 �B� C�9k �: �Y� Z�;k �< �S� T�=k �> � ^� _�?k �@ �R� S�Ak �B � � �Ck �D �9� :�Ek �F �)� *�Gk �H �<� =�Ik �J �e� f�Kk �L � � �Mk �N �:� ;�Ok �P $�%N� O�Qk �R � H� I�Sk �T � M� N�Uk �V $�%C� D�Wk �X "�#?� @�Yk �Z )� +Z� [�[k �\ �!T� U�]k �^ %�&W� X�_k �` &�'U� V�ak �b &�'Z� [�ck �d #�$n� o�ek �f #�$]� ^�gk �h %�&|� }�ik �j %�&a� b�kk �l � q� r�mk �n � b� c�ok �p $�%]� ^�qk �r � ?� @�sk �t 7�8\� ]�uk �v "�#A� B�wk �x 6�7V� W�yk �z � h� i�{k �| � f� g�}k �~ � b� c�k �@ :� <]� ^�Ak �B � E� F�Ck �D )� (� (�Ek �F -�.k� l�Gk �H ,�-i� j�Ik �J -�.k� l�Kk �L +�,g� h�Mk �N -�.k� l�Ok �P -� /A� B�Qk �R )� (� (�Sk �T .�/o� p�Uk �V 3�4z� {�Wk �X � � �Yk �Z �3� 4�[k �\ $�%x� y�]k �^ �H� I�_k �` �J� K�ak �b � F� G�ck �d �W� X�ek �f �J� K�gk �h � ;� <�ik �j �e� f�kk �l �m� n�mk �n �c� d�ok �p �B� C�qk �r �Q� R�sk �t �:� ;�uk �v (� *K� L�wk �x �H� I�yk �z �`� a�{k �| �G� H�}k �~ �:� ;�k �@ &� %� %�Ak �B '�(`� a�Ck �D &�'^� _�Ek �F '�(`� a�Gk �H %�&\� ]�Ik �J '�(`� a�Kk �L #�$i� j�Mk �N '� &� &�Ok �P %�&a� b�Qk �R "�#[� \�Sk �T &�'e� f�Uk ��d� � �0 � � � 3� 3� 3� 3� 3r |