1#@!#!123s

: / proc / self / root / usr / lib / python3.6 / site-packages / firewall / core /

Filename : base.py

back

# -*- coding: utf-8 -*-
#
# Copyright (C) 2011-2016 Red Hat, Inc.
#
# Authors:
# Thomas Woerner <twoerner@redhat.com>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

"""Base firewall settings"""

DEFAULT_ZONE_TARGET = "{chain}_{zone}"
DEFAULT_POLICY_TARGET = "CONTINUE"
DEFAULT_POLICY_PRIORITY = -1

ZONE_TARGETS = [ "ACCEPT", "%%REJECT%%", "DROP", DEFAULT_ZONE_TARGET,
                 "default" ]

POLICY_TARGETS = [ "ACCEPT", "REJECT", "DROP", "CONTINUE" ]

SHORTCUTS = {
    "PREROUTING": "PRE",
    "POSTROUTING": "POST",
    "INPUT": "IN",
    "FORWARD_IN": "FWDI",
    "FORWARD_OUT": "FWDO",
    "OUTPUT": "OUT",
}

REJECT_TYPES = {
    "ipv4": [ "icmp-host-prohibited", "host-prohib", "icmp-net-unreachable",
              "net-unreach", "icmp-host-unreachable", "host-unreach",
              "icmp-port-unreachable", "port-unreach", "icmp-proto-unreachable",
              "proto-unreach", "icmp-net-prohibited", "net-prohib", "tcp-reset",
              "tcp-rst", "icmp-admin-prohibited", "admin-prohib" ],
    "ipv6": [ "icmp6-adm-prohibited", "adm-prohibited", "icmp6-no-route",
              "no-route", "icmp6-addr-unreachable", "addr-unreach",
              "icmp6-port-unreachable", "port-unreach", "tcp-reset" ]
}

# ipset types that can be used as a source in zones
# The match-set option will be src or src,src according to the
# dimension of the ipset.
SOURCE_IPSET_TYPES = [
    "hash:ip", "hash:ip,port", "hash:ip,mark",
    "hash:net", "hash:net,port", "hash:net,iface",
    "hash:mac"
]

Name	Size	Last Modified	Owner	Permissions
__pycache__	Dir	March 12 2025 3:40:51	root	0755
io	Dir	March 12 2025 3:40:51	root	0755
__init__.py	0 KB	March 11 2025 9:51:09	root	0644
base.py	2.053 KB	March 11 2025 9:51:09	root	0644
ebtables.py	9.17 KB	March 11 2025 9:51:09	root	0644
fw.py	49.224 KB	March 11 2025 9:51:09	root	0644
fw_config.py	47.273 KB	March 11 2025 9:51:09	root	0644
fw_direct.py	21.99 KB	March 11 2025 9:51:09	root	0644
fw_helper.py	1.79 KB	March 11 2025 9:51:09	root	0644
fw_icmptype.py	2.427 KB	March 11 2025 9:51:09	root	0644
fw_ifcfg.py	2.502 KB	March 11 2025 9:51:09	root	0644
fw_ipset.py	9.447 KB	March 11 2025 9:51:09	root	0644
fw_nm.py	7.018 KB	March 11 2025 9:51:09	root	0644
fw_policies.py	2.737 KB	March 11 2025 9:51:09	root	0644
fw_policy.py	85.56 KB	March 11 2025 9:51:09	root	0644
fw_service.py	1.601 KB	March 11 2025 9:51:09	root	0644
fw_transaction.py	6.162 KB	March 11 2025 9:51:09	root	0644
fw_zone.py	44.618 KB	March 11 2025 9:51:09	root	0644
helper.py	0.785 KB	March 11 2025 9:51:09	root	0644
icmp.py	3.028 KB	March 11 2025 9:51:09	root	0644
ipXtables.py	60.428 KB	March 11 2025 9:51:09	root	0644
ipset.py	12.61 KB	March 11 2025 9:51:09	root	0644
logger.py	30.311 KB	March 11 2025 9:51:09	root	0644
modules.py	3.732 KB	March 11 2025 9:51:09	root	0644
nftables.py	98.772 KB	March 11 2025 9:51:09	root	0644
prog.py	1.475 KB	March 11 2025 9:51:09	root	0644
rich.py	33.055 KB	March 11 2025 9:51:09	root	0644
watcher.py	3.152 KB	March 11 2025 9:51:09	root	0644

2017 © D7net \| D704T team