| Server IP : 202.155.9.38 / Your IP : 216.73.216.124 Web Server : LiteSpeed System : Linux srv733443859 5.15.0-179-generic #189-Ubuntu SMP Tue May 5 18:20:56 UTC 2026 x86_64 User : rabbi4843 ( 1044) PHP Version : 8.1.34 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /proc/self/root/lib/python3/dist-packages/nftables/__pycache__/ |
Upload File : |
o
z�bY8 � @ sD d dl Z d dlT d dlZd dlZdZG dd� d�ZG dd� d�ZdS )� N)�*z0.1c @ s e Zd ZdZdd� Zdd� ZdS )�SchemaValidatorz+Libnftables JSON validator using jsonschemac C s^ t j�t j�t�d�}t|d��}t�|�| _W d � n1 s!w Y dd l }|| _ d S )Nz schema.json�rr )
�os�path�join�dirname�__file__�open�json�load�schema�
jsonschema)�self� schema_path� schema_filer � r �3/usr/lib/python3/dist-packages/nftables/nftables.py�__init__ s �
zSchemaValidator.__init__c C s | j j|| jd� d S )N)�instancer
)r �validater
)r r r r r r " s zSchemaValidator.validateN)�__name__�
__module__� __qualname__�__doc__r r r r r r r s r c
@ sP e Zd ZdZdddddddd �Zdddddddd
d d d
dd� ZdZdTdd�Zdd� Zdd� Z dd� Z
dd� Z d d � Z d d � Z
d d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd.d/� Zd0d1� Zd2d3� Zd4d5� Zd6d7� Zd8d9� Zd:d;� Zd<d=� Z d>d?� Z d@dA� Z dBdC� Z dDdE� Z dFdG� Z!dHdI� Z"dJdK� Z#dLdM� Z$dNdO� Z%dPdQ� Z&dRdS� Z'dS )U�Nftablesz*A class representing libnftables interface� � � � � � �@ )�scanner�parser�eval�netlink�mnlz proto-ctx�segtree� � i i i ) �
reversedns�service� stateless�handler �echo�guid�
numeric_proto� numeric_prio�numeric_symbol� numeric_time�terseN�libnftables.so.1c C s> t �|�}|j| _t| j_tg| j_|j| _t| j_tg| j_|j | _ ttg| j _|j
| _
t| j
_tg| j
_|j | _ ttg| j _|j | _ t| j _tg| j _|j
| _
t| j
_tg| j
_|j| _t| j_tg| j_|j| _t| j_tg| j_|j| _t| j_ttg| j_|j| _tg|j_| �d�| _| � | j� | �| j� dS )al Instantiate a new Nftables class object.
Accepts a shared object file to open, by default standard search path
is searched for a file named 'libnftables.so'.
After loading the library using ctypes module, a new nftables context
is requested from the library and buffering of output and error streams
is turned on.
r N)�cdll� LoadLibrary� nft_ctx_new�c_void_p�restype�c_int�argtypes�nft_ctx_output_get_flags�c_uint�nft_ctx_output_set_flags�nft_ctx_output_get_debug�nft_ctx_output_set_debug�nft_ctx_buffer_output�nft_ctx_get_output_buffer�c_char_p�nft_ctx_buffer_error�nft_ctx_get_error_buffer�nft_run_cmd_from_buffer� nft_ctx_free�_Nftables__ctx)r �sofile�libr r r r C sD
zNftables.__init__c C s | � | j� d S �N)rI rJ �r r r r �__del__ s zNftables.__del__c C s | j | }| �| j�|@ S rM )� output_flagsr> rJ )r �name�flagr r r �__get_output_flag� s
zNftables.__get_output_flagc C sD | j | }| �| j�}|r||B }n|| @ }| �| j|� ||@ S rM )rP r> rJ r@ )r rQ �valrR �flags� new_flagsr r r �__set_output_flag� s
zNftables.__set_output_flagc C �
| � d�S )z�Get the current state of reverse DNS output.
Returns a boolean indicating whether reverse DNS lookups are performed
for IP addresses in output.
r+ ��_Nftables__get_output_flagrN r r r �get_reversedns_output� �
z Nftables.get_reversedns_outputc C � | � d|�S )z�Enable or disable reverse DNS output.
Accepts a boolean turning reverse DNS lookups in output on or off.
Returns the previous value.
r+ ��_Nftables__set_output_flag�r rT r r r �set_reversedns_output� � z Nftables.set_reversedns_outputc C rX )z�Get the current state of service name output.
Returns a boolean indicating whether service names are used for port
numbers in output or not.
r, rY rN r r r �get_service_output� r\ zNftables.get_service_outputc C r] )z�Enable or disable service name output.
Accepts a boolean turning service names for port numbers in output on
or off.
Returns the previous value.
r, r^ r` r r r �set_service_output� � zNftables.set_service_outputc C rX )z�Get the current state of stateless output.
Returns a boolean indicating whether stateless output is active or not.
r- rY rN r r r �get_stateless_output� �
z Nftables.get_stateless_outputc C r] )z�Enable or disable stateless output.
Accepts a boolean turning stateless output either on or off.
Returns the previous value.
r- r^ r` r r r �set_stateless_output� rb z Nftables.set_stateless_outputc C rX )z~Get the current state of handle output.
Returns a boolean indicating whether handle output is active or not.
r. rY rN r r r �get_handle_output� rg zNftables.get_handle_outputc C r] )z�Enable or disable handle output.
Accepts a boolean turning handle output on or off.
Returns the previous value.
r. r^ r` r r r �set_handle_output� rb zNftables.set_handle_outputc C rX )zzGet the current state of JSON output.
Returns a boolean indicating whether JSON output is active or not.
r rY rN r r r �get_json_output� rg zNftables.get_json_outputc C r] )z�Enable or disable JSON output.
Accepts a boolean turning JSON output either on or off.
Returns the previous value.
r r^ r` r r r �set_json_output� rb zNftables.set_json_outputc C rX )zzGet the current state of echo output.
Returns a boolean indicating whether echo output is active or not.
r/ rY rN r r r �get_echo_output� rg zNftables.get_echo_outputc C r] )z�Enable or disable echo output.
Accepts a boolean turning echo output on or off.
Returns the previous value.
r/ r^ r` r r r �set_echo_output� rb zNftables.set_echo_outputc C rX )z�Get the current state of GID/UID output.
Returns a boolean indicating whether names for group/user IDs are used
in output or not.
r0 rY rN r r r �get_guid_output� r\ zNftables.get_guid_outputc C r] )z�Enable or disable GID/UID output.
Accepts a boolean turning names for group/user IDs on or off.
Returns the previous value.
r0 r^ r` r r r �set_guid_output� rb zNftables.set_guid_outputc C rX )ztGet current status of numeric protocol output flag.
Returns a boolean value indicating the status.
r1 rY rN r r r �get_numeric_proto_output rg z!Nftables.get_numeric_proto_outputc C r] )z�Set numeric protocol output flag.
Accepts a boolean turning numeric protocol output either on or off.
Returns the previous value.
r1 r^ r` r r r �set_numeric_proto_output rb z!Nftables.set_numeric_proto_outputc C rX )zzGet current status of numeric chain priority output flag.
Returns a boolean value indicating the status.
r2 rY rN r r r �get_numeric_prio_output rg z Nftables.get_numeric_prio_outputc C r] )z�Set numeric chain priority output flag.
Accepts a boolean turning numeric chain priority output either on or
off.
Returns the previous value.
r2 r^ r` r r r �set_numeric_prio_output re z Nftables.set_numeric_prio_outputc C rX )zsGet current status of numeric symbols output flag.
Returns a boolean value indicating the status.
r3 rY rN r r r �get_numeric_symbol_output% rg z"Nftables.get_numeric_symbol_outputc C r] )z�Set numeric symbols output flag.
Accepts a boolean turning numeric representation of symbolic constants
in output either on or off.
Returns the previous value.
r3 r^ r` r r r �set_numeric_symbol_output, re z"Nftables.set_numeric_symbol_outputc C rX )zqGet current status of numeric times output flag.
Returns a boolean value indicating the status.
r4 rY rN r r r �get_numeric_time_output6 rg z Nftables.get_numeric_time_outputc C r] )z�Set numeric times output flag.
Accepts a boolean turning numeric representation of time values
in output either on or off.
Returns the previous value.
r4 r^ r` r r r �set_numeric_time_output= re z Nftables.set_numeric_time_outputc C rX )z|Get the current state of terse output.
Returns a boolean indicating whether terse output is active or not.
r5 rY rN r r r �get_terse_outputG rg zNftables.get_terse_outputc C r] )z�Enable or disable terse output.
Accepts a boolean turning terse output either on or off.
Returns the previous value.
r5 r^ r` r r r �set_terse_outputN rb zNftables.set_terse_outputc C sR | � | j�}g }| j�� D ]\}}||@ r |�|� || M }q
|r'|�|� |S )zmGet currently active debug flags.
Returns a set of flag names. See set_debug() for details.
)rA rJ � debug_flags�items�append)r rT �names�n�vr r r � get_debugW s
�
zNftables.get_debugc C s\ | � � }t|�ttfv r|g}d}|D ]}t|�tu r | j| }||O }q| �| j|� |S )a Set debug output flags.
Accepts either a single flag or a set of flags. Each flag might be
given either as string or integer value as shown in the following
table:
Name | Value (hex)
-----------------------
scanner | 0x1
parser | 0x2
eval | 0x4
netlink | 0x8
mnl | 0x10
proto-ctx | 0x20
segtree | 0x40
Returns a set of previously active debug flags, as returned by
get_debug() method.
r )r� �type�str�intr{ rB rJ )r �values�oldrT r� r r r � set_debugh s
zNftables.set_debugc C sd d}t |t�sd}|�d�}| �| j|�}| �| j�}| �| j�}|r-|�d�}|�d�}|||fS )a� Run a simple nftables command via libnftables.
Accepts a string containing an nftables command just like what one
would enter into an interactive nftables (nft -i) session.
Returns a tuple (rc, output, error):
rc -- return code as returned by nft_run_cmd_from_buffer() fuction
output -- a string containing output written to stdout
error -- a string containing output written to stderr
FTzutf-8)�
isinstance�bytes�encoderH rJ rD rG �decode)r �cmdline�cmdline_is_unicode�rc�output�errorr r r �cmd� s
z Nftables.cmdc C sJ | � d�}| �t�|��\}}}|s| � |� t|�r t�|�}|||fS )ai Run an nftables command in JSON syntax via libnftables.
Accepts a hash object as input.
Returns a tuple (rc, output, error):
rc -- return code as returned by nft_run_cmd_from_buffer() function
output -- a hash object containing library standard output
error -- a string containing output written to stderr
T)rl r� r �dumps�len�loads)r � json_root� json_out_oldr� r� r� r r r �json_cmd� s
zNftables.json_cmdc C s | j st� | _ | j �|� dS )z�Validate JSON object against libnftables schema.
Accepts a hash object as input.
Returns True if JSON is valid, raises an exception otherwise.
T)� validatorr r )r r� r r r �
json_validate� s zNftables.json_validate)r6 )(r r r r r{ rP r� r rO rZ r_ r[ ra rc rd rf rh ri rj rk rl rm rn ro rp rq rr rs rt ru rv rw rx ry rz r� r� r� r� r� r r r r r % sr � �
<
# r )r �ctypes�sysr �NFTABLES_VERSIONr r r r r r �<module> s