🔐 Sid Gifari File Manager Pro
v8.0.5 | 2026-08-07 19:17:11 | PHP 8.2.32
📂
/ (Root)
/
usr
/
lib
/
python3.6
/
site-packages
/
sos
/
report
/
plugins
/
__pycache__
📍 /usr/lib/python3.6/site-packages/sos/report/plugins/__pycache__
🔄 Refresh
✏️
Editing: firewall_tables.cpython-36.pyc
Read Only
3 ܓ�iC � @ s* d dl mZmZmZ G dd� dee�ZdS )� )�Plugin�IndependentPlugin� SoSPredicatec @ sD e Zd ZdZdZdZdZdZdZd d � Z dd� Z dd� Z dd� Z dS )�FirewallTablesa Collects information about local firewall tables, such as iptables, and nf_tables (via nft). Note that this plugin does _not_ collect firewalld information, which is handled by a separate plugin. Collections from this plugin are largely gated byt the presence of relevant kernel modules - for example, the plugin will not collect the nf_tables ruleset if both the `nf_tables` and `nfnetlink` kernel modules are not currently loaded (unless using the --allow-system-changes option). zfirewall tablesZfirewall_tables�network�system� /etc/nftables� ip_tables� ip6_tables� nf_tables� nfnetlink�ebtablesc C s2 d| }d| d }| j |t| |dgd�d� dS )z� Collecting iptables rules for a table loads either kernel module of the table name (for kernel <= 3), or nf_tables (for kernel >= 4). If neither module is present, the rules must be empty.Ziptable_z iptables -t z -nvLr )�kmods)�predN)�add_cmd_outputr )�self� tablename�modname�cmd� r �%/usr/lib/python3.6/firewall_tables.py�collect_iptable s z FirewallTables.collect_iptablec C s2 d| }d| d }| j |t| |dgd�d� dS )z& Same as function above, but for ipv6 Z ip6table_z ip6tables -t z -nvLr )r )r N)r r )r r r r r r r �collect_ip6table* s z FirewallTables.collect_ip6tablec C s& t | ddgddid�}| jd|dd�S ) zS Collects nftables rulesets with 'nft' commands if the modules are present r r r �all)r Zrequiredznft -a list rulesetT)r Zchanges)r Zcollect_cmd_output)r Znft_predr r r �collect_nftables3 s z FirewallTables.collect_nftablesc C s | j � }g g d�}|d dkr&|d nd}xZ|j� D ]N}|j� dd� }t|�dkr4|d dkr4|d |kr4||d j|d � q4W d }y*d }t|d d d��}|j� } W d Q R X W n tk r� |} Y nX x2| j� D ]&} |d dkr�| |d kr�| j| � q�W y*d} t| d d d��} | j� } W d Q R X W n tk �rF |} Y nX x8| j� D ],} |d dk�rR| |d k�rR| j | � �qRW |d dk�s�d|d k�r�| j dt | ddgd�d� |d dk�s�d|d k�r�| j dt | ddgd�d� | j ddd g� d S ) N)�ip�ip6Zstatusr �output� � �table� � zmangle filter nat z/proc/net/ip_tables_names�rzUTF-8)�encodingr z/proc/net/ip6_tables_namesr �filterziptables -vnxLZiptable_filterr )r )r zip6tables -vnxLZip6table_filterz /etc/nftablesz /etc/sysconfig/nftables.confz/etc/nftables.conf) r � splitlines�split�len�append�open�read�IOErrorr r r r Z add_copy_spec) r Znft_listZ nft_ip_tablesZ nft_lines�lineZwordsZdefault_ip_tablesZproc_net_ip_tablesZifileZip_tables_namesr Zproc_net_ip6_tablesZipfiler r r �setup> sN zFirewallTables.setupN)r r )r )r r r r r ) �__name__� __module__� __qualname__�__doc__Z short_descZ plugin_nameZprofiles�filesZ kernel_modsr r r r. r r r r r s r N)Zsos.report.pluginsr r r r r r r r �<module> s
💾 Save Changes
❌ Cancel