| Server IP : 172.67.131.151 / Your IP : 104.23.197.57 Web Server : Apache System : Linux keen-cori.18-142-40-148.plesk.page 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 06:59:36 UTC 2025 x86_64 User : simottodesign.com_2tntp341vs7 ( 10011) PHP Version : 8.3.31 Disable Function : opcache_get_status MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/fail2ban/tests/__pycache__/ |
Upload File : |
U
��@��sw� @ s� d Z dZdZddlZddlZddlZddlmZ ddlm Z dd l
m Z dd
l m
Z
mZmZmZ ej�ej�e�d �ZG d d
� d
e
�ZdS )z Daniel Blackz Copyright (c) 2013 Daniel Black�GPL� N� )�
FailTicket)�Utils� )� DummyJail)�LogCaptureTestCase�
with_alt_time� with_tmpdir�MyTime�filesc s� e Zd Z� fdd�Z� fdd�Zi fdd�Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z e
dd� �Zdd� Zdd� Ze
edd � ��Z� ZS ) �ExecuteActionsc s$ t t| ��� t� | _| jj| _dS )z Call before every test case.N)�superr
�setUpr �_ExecuteActions__jailZactions�_ExecuteActions__actions��self�� __class__� �@/usr/lib/python3/dist-packages/fail2ban/tests/actionstestcase.pyr ) s zExecuteActions.setUpc s t t| ��� d S )N)r r
�tearDownr r r r r / s zExecuteActions.tearDownc C s� | j �d� | j d }d|�dd� |_d|�dd� |_d|�dd� |_d |�d
d� |_d |�d d� |_d
|�dd� |_|S )N�ipz
echo ip start�start� zecho ip ban <ip>�banzecho ip unban <ip>Zunbanz
echo ip check�checkz
echo ip flush�flushz echo ip stop�stop) r �add�getZ actionstart� actionban� actionunban� actioncheck� actionflushZ
actionstop)r �o�actr r r �
defaultAction2 s
z ExecuteActions.defaultActionc C s" | j �d� | �t| j jd� d S )N�test)r r � assertRaises�
ValueErrorr r r r �testActionsAddDuplicateName= s z*ExecuteActions.testActionsAddDuplicateNamec C s� | j �d� | �| j d � | �d| j � | �d| j � | j �d� | j d= | j d= | �d| j � | �t| j �d� | j �d� | �| j �� d� | � t
| j j d� d S )Nr) znonexistant actionZtest1r � z 127.0.0.1) r r �
assertTrueZassertInZ assertNotIn� assertEqual�len�
setBanTimeZ
getBanTimer* r+ �removeBannedIPr r r r �testActionsManipulationA s z&ExecuteActions.testActionsManipulationc C sl | � | j�d�d� | �d� | �� | � | j�dddg�d� | �d� | �d� | �d� | �d � d S )
N� 192.0.2.1r �
Ban 192.0.2.1z 192.0.2.2z 192.0.2.3r �192.0.2.1 already bannedz
Ban 192.0.2.2z
Ban 192.0.2.3)r/ r � addBannedIP� assertLogged�pruneLog�assertNotLoggedr r r r �testAddBannedIPP s
z ExecuteActions.testAddBannedIPc C s� | � � | j�� | jdd dd� | j�� | j�� | �dd dd � | �| j�� ddd g fg� | �| j�d
�ddg� d S ) N�
stdout: %r�ip startT��waitzip flush�ip stop)zCurrently bannedr )z Total bannedr zBanned IP list�short)r( r r r8 r �joinr/ �statusr r r r �testActionsOutputZ s
��z ExecuteActions.testActionsOutputc
s� � j �dtj�td�ddi� � �d� � j �� � �t �
� fdd�d�� � j � � � j �� � �d � � � t
� j jd
d i � � j �d tj�td�dd
d�� � � t� j jdtj�td�dd
dd�� � � t� j jdtj�td�i � d S )N�Actionzaction.d/action.py�opt1�valuezTestAction initialisedc s
� � d�S )NzTestAction action start�Z
_is_loggedr r r r �<lambda>n � z4ExecuteActions.testAddActionPython.<locals>.<lambda>� zTestAction action stopZAction3z/does/not/exist.pyZAction4Zvalue2)rF �opt2ZAction5Zvalue3)rF rL Zopt3)r r �os�pathrB �TEST_FILES_DIRr8 r r. r �wait_forr r* �IOError� TypeErrorr r r r �testAddActionPythonf sH �
� �
� �z"ExecuteActions.testAddActionPythonc s� � � t� jjdtj�td�i � � � t� jjdtj�td�i � � j�dtj�td�i � � j�� � � t
� � fdd�d�� � j� � � j�� � �
d� d S ) NrE zaction.d/action_noAction.pyzaction.d/action_nomethod.pyzaction.d/action_errors.pyc s
� � d�S )NzFailed to startrH r r r r rI � rJ z7ExecuteActions.testAddPythonActionNOK.<locals>.<lambda>rK zFailed to stop)r* � RuntimeErrorr r rM rN rB rO r r. r rP r r8 r r r r �testAddPythonActionNOK� s4 �� �� ��
z%ExecuteActions.testAddPythonActionNOKc C s� | j �dtj�td�i � | j �dtj�td�i � | j�td�� | j � � | �
d� | � d� | � d� | j � � | �
d� | � d � | � d
� d S ) NZaction1z action.d/action_modifyainfo.pyZaction2z1.2.3.4�Failed to execute banz action1 ban deleted aInfo IPz action2 ban deleted aInfo IPzFailed to execute unbanz action1 unban deleted aInfo IPz action2 unban deleted aInfo IP)
r r rM rN rB rO r �
putFailTicketr Z_Actions__checkBanr: r8 �_Actions__flushBanr r r r �testBanActionsAInfo� s& � �
z"ExecuteActions.testBanActionsAInfoc C s� d| j _d| j _| j �d� | j �� t�d� d}|dk r`d| }| j�t |d�� |d7 }q4| j
dd d
� t�d � |d k r�d| }| j�t |d �� |d7 }qx| j
d
d d
� | j � � | j � � | �
d� | �
d� d S )NrK � �d r � z
192.0.2.%dr z / 20,Tr> �� �2 z / 50,zUnbanned 30, 0 ticket(s)zUnbanned 50, 0 ticket(s))r Z
banPrecedenceZ
unbanMaxCountr1 r r �setTimer rW r r8 r rB r: )r �ir r r r �testUnbanOnBusyBanBombing� s*
z(ExecuteActions.testUnbanOnBusyBanBombingc C s | � ddd��}|jd |d< d|_d|j |_d|j |_| j�� | �dd � | �| j� d �d
� | �| j� d �d
� | j
d d
dd dd dd ddd� | � d� |j d |d< | j�
d � | j
ddd� | � d� | j�� | j
dd dd ddddd dddd� | � d � |j |d< | �| j� d �d
� | j
d
dd dd ddd� | jdd dd � | � d � | j�� | j
dddd dd ddd� | jdd dd dd d!dd � | � d"� |j|d< | j�� | j�� | j
dd dd d#ddd� | jd$dd d%dd � d S )&N� <family>)r r �; exit 1�actionflush?family=inet6T�<actioncheck> ; r< r= r4 r � 2001:db8::1r5 �Ban 2001:db8::1�ip ban 192.0.2.1�ip ban 2001:db8::1��allr? �>[test-phase 1a] simulate inconsistent irreparable env by unban�actioncheck?family=inet6z,Invariant check failed. Unban is impossible.r> z>[test-phase 1b] simulate inconsistent irreparable env by flush�ip flush inet4�ip flush inet6�Failed to flush bans�'No flush occurred, do consistency check�<Invariant check failed. Trying to restore a sane environmentr@ � [test-phase 2] consistent env�ip check inet4�rk �-[test-phase 3] failed flush in consistent env�ip check inet6� Unable to restore environment�![test-phase end] flush successful�action ip terminated�ERROR� Unban tickets each individualy)r( r% �actionstart_on_demandr" r# r r r: r/ r7 r8 r9 r$ r2 rX r rB �r r' r r r �testActionsConsistencyCheck� s�
�
�
�
�
�
��
��z*ExecuteActions.testActionsConsistencyCheckc C s | � ddddd��}|jd |d< d|_d|_d|j |_d|j |_| j�� | �dd � | � | j�
d �d
� | � | j�
d �d
� | j d d
dd dd dd dd ddd� |j d |d< | �
d� | j�d � | j ddd ddd� | jdd dd dd dd� | �
d� | � | j�
d �d
� | j ddd dd dd dd ddd� | jdd dd dd� |j |d< | � | j�
d �d
� |j d |d< | �
d � | j�� | j dd dd d!d"ddd d#ddd� | jdd dd� | �
d$� |j |d< | � | j�
d �d
� | j d
dd dd ddd� | jdd% dd dd� | �
d&� |j |d< | j�� | j d!d"dd dd ddd� | jdd dd dd dd dd dd� | �
d'� |j|d< | j�� | j�� | j dd dd dd d(ddd� | jd)dd d*dd� d S )+Nrb )r r r r rc rd Tre r< r= r4 r rf r5 rg �ip start inet4rh �ip start inet6ri rj rm rl rr z
ip stop inet6z
ip stop inet4ru z<[test-phase 1b] simulate inconsistent irreparable env by banrw rx rV � 2001:db8::2z>[test-phase 1c] simulate inconsistent irreparable env by flushrn ro rp rq z Failed to flush bans in jailrs rt rv ry rz r{ r| )r( r% r} Zactionrepair_on_unbanr" r# r r r: r/ r7 r8 r$ r9 r2 rX r rB r~ r r r �"testActionsConsistencyCheckDiffFam% s�
�
��
��
�
�
��
��
��z1ExecuteActions.testActionsConsistencyCheckDiffFamc C s� | � dddddd��}|d |d< d |_d
|_d |_| �d � | �| j�d
dg�d� | jdddd dd dd dd d d� | �d� | � |d � | �d� | �
d� | �� | � |d � | �d� | �
d� t � t �
� d � | �d � | �| j�d
dd g�d � | jd!d"d#dd$ dd% d d� | � |d � | � |d � | j
d&d'dd dd( dd dd) d*d+d d� t � t �
� d � t�|d � t�|d � | �d,� | �| j�d
dg�d� | jd-dd. dd/ d0d1dd( dd) d d� | �d2� | �| j�d �d � | jd3dd4 d d� | j
d-dd. dd/ d0d1dd( dd) d d� | �d5� | � |d � | �d6� | �
d7� | �� | � |d � | jd7d8d d� | �
d6� d9|_d:|_| �| j�td
d;��d;� | jd<d=d d� d S )>Nz <family>; touch "<FN>"z <family>; test -f "<FN>"z <family>; echo -n "" > "<FN>"z <family>; rm -f "<FN>"z) <family>; echo "<ip> <family>" >> "<FN>")r r r r r z /<family>ZFNTz%echo ip repair <family>; touch "<FN>"zGecho ip reban <ip> <family>; echo "<ip> <family> -- rebanned" >> "<FN>"z[test-phase 0] initial banr4 rf r r5 rg r< r� zip ban 192.0.2.1 inet4r� zip ban 2001:db8::1 inet6ru z[test-phase 1] check banz/inet4z192.0.2.1 inet4z2001:db8::1 inet6z/inet6� z#[test-phase 2] check already bannedr� r r6 z2001:db8::1 already bannedzBan 2001:db8::2rt rw zReban 192.0.2.1zReban 2001:db8::1zip reban 192.0.2.1 inet4zip reban 2001:db8::1 inet6z192.0.2.1 inet4 -- repairedz 2001:db8::1 inet6 -- repairedz3[test-phase 3a] check reban after sane env repairedrr zip repair inet4zip repair inet6z Reban 192.0.2.1, action 'ip'z Reban 2001:db8::1, action 'ip'z>[test-phase 3a] check reban by epoch mismatch (without repair)z Reban 2001:db8::2, action 'ip'zip reban 2001:db8::2 inet6z[test-phase 4] check rebanz192.0.2.1 inet4 -- rebannedz 2001:db8::1 inet6 -- rebannedz 2001:db8::2 inet6 -- rebannedr zexit 1r zFailed to execute rebanzError banning 192.0.2.1)r( r} Z actionrepairZ actionrebanr9 r/ r r7 r8 ZdumpFiler: r r_ �timerM �remover" Z_Actions__reBanr )r �tmpr' r r r �!testActionsRebanBrokenAfterRepair� s� �
�
��
�
� �
�
�z0ExecuteActions.testActionsRebanBrokenAfterRepair)�__name__�
__module__� __qualname__r r r( r, r3 r; rD rS rU rY r ra r r� r
r� �
__classcell__r r r r r
' s"
%Nrr
)�
__author__�
__copyright__� __license__r� rM �tempfileZ
server.ticketr Z server.utilsr Z dummyjailr �utilsr r r
r rN rB �dirname�__file__rO r
r r r r �<module> s