| Server IP : 172.67.131.151 / Your IP : 104.23.243.115 Web Server : Apache System : Linux keen-cori.18-142-40-148.plesk.page 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 06:59:36 UTC 2025 x86_64 User : simottodesign.com_2tntp341vs7 ( 10011) PHP Version : 8.3.31 Disable Function : opcache_get_status MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /lib/python3/dist-packages/fail2ban/tests/__pycache__/ |
Upload File : |
U
1p
mF�e� @ s� d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z m
Z
mZmZmZ ddlmZ ddlmZ dd lmZmZmZ dd
lmZ dd lm Z m Z m Z dd l m!Z!m Z" dd
l#m$Z$ ddl%m%Z% ddl&m'Z' ddl(m)Z) ddl*m+Z+m,Z-m.Z.m/Z/m0Z0m1Z1m2Z3m4Z4m5Z5 ddl6m7Z7 e7e8�Z,dZ9dZ:ee!�;� �Z<e j=�>e j=j?�Z?e j=�>e j=j@�Z@e?d e_?e, e_, e_,e_,e%jAZBe%jCZDdd� ZEeE e_F e_F e_Fe$_Fdd� ZGe%jHZHdd� ZIe@fd d �ZJG d d � d ejK�ZKG d d!� d!ejK�ZLeKZMeLZNg aOd"d#� ZPePe_Qd$ e_Re_Re+jSZTd%d&� ZUd'd(� ZVd?d-d.�ZWd/d0� ZXd1d2� ZYd3d4� ZZd5d6� Z[i fd7d8�Z\G d9d:� d:e+�Z]G d;d<� d<e]�Z^G d=d>� d>e]�Z_dS )@z Serg BresterzICopyright (c) 2014- Serg G. Brester (sebres), 2008- Fail2Ban ContributorsZGPL� N)�join�isdir�isfile�exists�dirname��wraps)�Thread� )�fail2banclient�fail2banserver�fail2bancmdline)�Fail2banCmdLine)�exec_command_line�CSocket�
VisualWait)�Fail2banServerr )�protocol)�server)�MyTime)�Utils� ) �LogCaptureTestCase�logSys� with_tmpdir�shutil�logging�STOCK�
CONFIG_DIR�TEST_NOW�tearDownMyTime)� getLoggerzfail2ban-clientzfail2ban-serverc G s t �| d � d S �Nr )r �info��args� r& �G/usr/lib/python3/dist-packages/fail2ban/tests/fail2banclienttestcase.py� _test_outputJ s r( c C s& t �d| � t�t�� | d � d S )Nz===>>> time shift + %s min�< )r �debugr ZsetTime�time)�shiftr& r& r' � _time_shiftQ s r- c C s* t jdk r&t j�t� t j�td � dS )z$Helper to wait observer becomes idleN� )� Observers�MainZ
wait_empty� MID_WAITTIMEZ wait_idler& r& r& r' �_observer_wait_idleY s
r2 c s. t jdk r*t jj� � ��fdd�}|t j_dS )zOHelper to block observer before increase bantime until some condition gets trueNc s6 � t j_t�d� t���� t�d� � | |� d S )Nz4 [Observer::banFound] *** observer blocked for testz. [Observer::banFound] +++ observer runs again)r/ r0 �banFoundr r* r �wait_for�r% �kwargs�Z
_obs_banFound�cond�timeoutr& r' � _banFoundd s
z0_observer_wait_before_incrban.<locals>._banFound)r/ r0 r3 )r8 r9 r: r& r7 r' � _observer_wait_before_incrban_ s
r; c @ s e Zd ZdZdS )�
ExitExceptionz Exception upon a normal exitN��__name__�
__module__� __qualname__�__doc__r& r& r& r' r< t s r< c @ s e Zd ZdZdS )�FailExitExceptionz Exception upon abnormal exitNr= r& r& r& r' rB y s rB c G s t t�rt�d�S dS d S )Nr �exit)�len�INTERACT�popr$ r& r& r' �_test_input_command� s
rG Fc G s2 t | |�}|�d�|�|r dnd � |�� d S )N�
� )�open�writer �close)�fn�mode�lines�fr& r& r' � _write_file� s
rQ c C s0 d }zt| �}|�� W �S |d k r*|� � X d S �N)rL rJ �read)rM rP r& r& r' �
_read_file� s rT � /dev/null�:memory:r& �rI c C s� t | d�}|dkr t | d�}d} |r�tr�dd� }
tjt||
d� |d krLd}t�d �} tjt |d
�d d �D ]$} | � d
�} | �
| �r�d} t | � qjt�d�} tjt |d�d d �D ]$} | � d
�} | �
| �r�d} t | � q�|r�dnd} nTt �
|� tt |d
�dddd|�dd� ddt | d� d t | d � dd | d d d�
| �rdtt || �dfd!dd"d#| df| �� |�r�tt |d$�df|�� tjjtjk �r�tt |d
�� tt |d�� |�r�tt |d$�� | �r�| dk�r�tt || �� |�rt�r|D ]&}
t �t j�t t|
��t ||
�� �q�|�r:|D ]}
t|
d%| i d� �q d&\}}tjjtjk �r~ttjj�}tjjd'k�r~d(d)tjj f}|d*|f }d+|d,t | d�d-t | d �d.|f| d/dd0tt j �f S )1N�config�autozf2b-db.sqlite3� jail.confc s � fdd�|D �S )z?Filters list of 'files' to contain only directories (under dir)c s g | ]}t t� |��r|�qS r& )r �pjoin)�.0rP ��dirr& r' �
<listcomp>� s z2_start_params.<locals>.ig_dirs.<locals>.<listcomp>r& )r^ �filesr& r] r' �ig_dirs� s z _start_params.<locals>.ig_dirs)�ignore)�action.dzfilter.dz ^dbfile\s*=z
fail2ban.confT)ZinplacerH zdbfile = :memory:z ^backend\s*=�backend = pollingz
jail.localrI �w� [Definition]zloglevel = INFOz logtarget = �%z%%zsyslogsocket = autoz socket = �f2b.sockz
pidfile = �f2b.pidz dbfile = zdbmaxmatches = 100zdbpurgeage = 1d�
[INCLUDES]� [DEFAULT]ztmp = zfail2ban.local�tmp)r& �INFOr �-�vz
--loglevel�-c�-sz-p� --logtargetz--syslogsocketz --timeout) r[ r r Zcopytree�STOCK_CONF_DIR�re�compile� fileinput�input�rstrip�match�print�os�mkdirrQ �replace�unittest�F2B� log_levelr �DEBUG� _out_file�symlink�path�abspathrm �str� verbosityr
� MAX_WAITTIME)rl � use_stock�
use_stock_cfg� logtarget�db� f2b_local�jails�create_before_start�cfgZj_confra �r�line�nZvvvZllevr& r& r' �
_start_params� s�
� ��� $ �� ��r� c C s4 z| | � d�d dkW S tk
r. Y dS X d S )Nrr r � INHERITEDF)�index�
ValueError�� startparamsr& r& r' �_inherited_log� s r� c
C sX d }z"t | �}t�d|��� }t|�W S tk
rR } zt�|� W 5 d }~X Y nX |S )Nz\S+)rT rt ry �group�int� Exceptionr r* )�pidfile�pid�er& r& r' �_get_pid_from_file� s
r� c
sj t �d| t| �f� t| �r<| }t|d�} t| �s<t|d�} tjjtj k rtt|d�}t|�rft
|� nt � dd|� t| �s�t �d|� dS t �d | � t | �� � d kr�d
S z�t �d � � � d ksΈ t
�� kr�td
� | f ��t�� �s�W dS t
�� tj� t�� fdd�d��s t
�� tj� t �d� t�� � W S tk
�rd } zt �|� W 5 d }~X Y nX dS )Nz cleanup: %rri z fail2ban.pid�f2b.logr. z
no logfile %rzcleanup: no pidfile for %rTzcleanup pidfile: %rFzcleanup pid: %rr zpid %s of %s is invalidc s t �� � S rR )r �
pid_existsr& �r� r& r' �<lambda>) � z_kill_srv.<locals>.<lambda>r �cleanup: kill ready)r r* r r[ r r~ r r� r r� r� �logr� r{ �getpidr� r r� �kill�signal�SIGTERMr4 �SIGKILLr� Z exception)r� ZpiddirZlogfiler� r& r� r' � _kill_srv s@
r� c s t � �� fdd��}|S )z�Helper to decorate tests which receive in the last argument tmpdir to pass to kill_srv
To be used in tandem with @with_tmpdir
c s* |d }z� | f|�� W �S t |� X d S )N���)r� )�selfr% r� �rP r& r' �wrapper8 s z with_kill_srv.<locals>.wrapperr �rP r� r& r� r' �
with_kill_srv3 s r� c s � fdd�}|S )z}Helper to decorate tests uses foreground server (as thread), started directly in test-cases
To be used only in subclasses
c s t t� �� �fdd���}|S )Nc
sf d }t � � �zz�t�fddi����t d�j
��� fd�}d|_ |� � t
tff� ���fdd � }|�_t�� fd
d �t� ��� �d d �� �j�d�� d
� t�d� ��� ����f|�|�W W �ZS tk
�r } z4td| � ��� }|�r td| � ��� � W 5 d }~X Y nX W 5 |�rZt�d� ��� ��� � �dd ��rZ|�� t� X d S )Nz === within server: end. ===�endr� r� �_TestCaseWorker��name�targetr% Tc s� t � � �dd �s8tj�t�d��s8t�� fdd�t� � �dd �s��� | �d� t�� fdd�t
� �� � �dd �� �j ddd t
d
� d d� �_
d S ) Nr� ri c s � � dd �d k S �Nr� ��getr& ��phaser& r' r� ] r� zywith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>._stopAndWaitForServerEnd.<locals>.<lambda>�stopc s � � dd �d k S r� r� r& r� r& r' r� b r� �Shutdown successfulzExiting Fail2banT��all�waitc _ s d S rR r& r5 r& r& r' r� f r� )r r� r{ r� r r[ r r4 r1 �execCmdr� �
assertTrue� assertLogged�stopAndWaitForServerEnd��code�r� r� r� rl r& r' �_stopAndWaitForServerEndY s zgwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>._stopAndWaitForServerEndc s � � dd �d k S )N�startr� r& r� r& r' r� i r� zWwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>.<lambda>r� �r� r� z === within server: begin ===z=== Catch an exception: %sz#=== Error of server, log: ===
%s===)�dict� DefLogSysr# �pruneLogr� r� r r r� r �_testStartForeground�daemonr� �SUCCESS�FAILEDr r4 r� r� �
_wait_for_srvr� rz �getLog)r� rl r% r6 �thr� r� r� )rP �
startextrar� r' r� G sB �
zEwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper)r r r� �r� r� r' �
_deco_wrapperF s :z4with_foreground_server_thread.<locals>._deco_wrapperr& )r� r� r& r� r' � with_foreground_server_threadA s >r� c @ s� e Zd ZejZdd� Zdd� Zdd� Ze ddd ��Z
d d d
�Z dd� Z dd� Z
dd� Zeddid�dd� �Zeedd� ��Zd S ) �Fail2banClientServerBasec O s d S rR r& )r� r% r6 r& r& r' � _setLogLevel� s z%Fail2banClientServerBase._setLogLevelc C s( t �| � dt_tjt_t| j�t _
dS )z Call before every test case.r� N) r �setUpr �
DEF_LOGTARGETr� �level� DEF_LOGLEVEL� staticmethod�
_test_exitr �_exit�r� r& r& r' r� � s
z Fail2banClientServerBase.setUpc C s( | j t_tt_tt_t� | � t
� dS )zCall after every test case.N) �
_orig_exitr r� �SRV_DEF_LOGTARGETr r� �SRV_DEF_LOGLEVELr� r �tearDownr r� r& r& r' r� � s
z!Fail2banClientServerBase.tearDownr c C s | dkrt � �nt� �d S r" )r< rB r� r& r& r' r� � s z#Fail2banClientServerBase._test_exitTNc s� � si � zlt |d��t�� �fdd�t�}|r8� �d�rFtd|f ��|rrt��fdd�t�}|srtd� |f ��W n^ t|�r�td��� � �� � t |d �}t
|�r�t |� nt|�s�t �
d
|� � Y nX d S ) Nrh c s � � d�pt��S r� )r� r r& )r� �sockr& r' r� � r� z8Fail2banClientServerBase._wait_for_srv.<locals>.<lambda>r� z9Unexpected: Socket file does not exists.
Start failed: %rc s d� � � kS )N� Server ready)r� r& r� r& r' r� � r� zBUnexpected: Server ready was not found, phase %r.
Start failed: %rz,=== Error by wait for server, log: ===
%s===r� z*No log file %s to examine details of error)r[ r r4 r� r� r� r� rz r� r� r r� r r* )r� rl �readyr� r� �retr� r& )r� r� r� r' r� � s:
����
z&Fail2banClientServerBase._wait_for_srvc G s* | � || jd | jdd � | | � d S )Nr r )Z assertRaisesr )r� ZexitTyper� r% r& r& r' r� � s �z Fail2banClientServerBase.execCmdc G s8 ||� d�d }t|�}z|�|�W �S |�� X d S )Nrq r )r� r rL �send)r� r� r% r� �sr& r& r' �
execCmdDirect� s
z&Fail2banClientServerBase.execCmdDirectc C sJ t �d� d|d< z| �td| d� W 5 d|d< d|d< t �d� X d S )Nzstart of test workerTr� Fr� zend of test worker�z-f)r r* r� r� )r� rl r� r� r& r& r' r� � s
z-Fail2banClientServerBase._testStartForegroundr� )z[Thread]zstacksize = 128r� c C sR | � � | �t|dd� | �d� | �t|d� | �t|d� | �t|dd� d S )Nr� �threadz{'stacksize': 128}�ping�~~unknown~cmd~failed~~�echo� TEST-ECHO)r� r� r� r� r� �r� rl r� r& r& r' �testStartForeground� s
z,Fail2banClientServerBase.testStartForegroundc s� t jst�d��t|d�}t �|�}|j�� }|�d� |�� t ||dd�}ddi}� fdd �}t
d
|||fd �}|� � z� �
td
| d� W 5 d |d< |� � X � jdddd� d S )Nz Skip test because no databaseztmp.dbz#UPDATE fail2banDb SET version = 555r� )r� r� r� Tc s$ t �� fdd�t�s ��| d� d S )Nc s
� d S )Nr� r& r& r� r& r' r� � r� z[Fail2banClientServerBase.testStartFailsInForeground.<locals>._stopTimeout.<locals>.<lambda>r� )r r4 r� r� r� r� r� r' � _stopTimeout� s zIFail2banClientServerBase.testStartFailsInForeground.<locals>._stopTimeoutr� r� Fr� r� z/Attempt to travel to future version of database�Exit with code 255�r� )r Z
Fail2BanDbr~ �SkipTestr[ Z_dbZcursorZ
executescriptrL r� r r� r r� r� r� ) r� rl Zdbnamer� Zcurr� r� r� r� r& r� r' �testStartFailsInForeground� s0
�
�z3Fail2banClientServerBase.testStartFailsInForeground)r )TNN)r> r? r@ r r� r� r� r� r� r� r� r� r� r� r� r� r� r r� r� r& r& r& r' r� � s
r� c @ st e Zd ZeefZdd� Zdd� Zedd� �Z ee
dd� ��Z ee
d d
� ��Z ee
d d � ��Z
ed
d� �Zdd� ZdS )�Fail2banClientTestc C s, | � tttt��� | � tttt��� d S rR )r� r r[ �BIN�CLIENT�SERVERr� r& r& r' �testConsistency s z"Fail2banClientTest.testConsistencyc C s� | � tdd� | �dt � | �d� | �� | � tdd� | �t�� � | �� | � tddd� | �dtj � | �� | � tdd d
� | �d � d S ) Nr& �-h�Usage: �Report bugs to z-Vz-vqz --versionz
Fail2Ban vz --str2secZ1d12h30mZ131400)r� r� r� r r� r
Z normVersion�versionr� r& r& r' �testClientUsage s
z"Fail2banClientTest.testClientUsagec C sP t |d�}| �t|d� | �d� | �d� | �� | �t|d� | �d� d S )NTz-vvdz
Loading filesz['set', 'logtarget',z--dp)r� r� r� r� r� r� r& r& r' �testClientDump& s
z!Fail2banClientTest.testClientDumpc C s� t |d�}| �td| d� | j|d|d� | �d� | �d� zF| �t|d d
� | �t|d � | �� | �td| d� | �d � W 5 | �� | �t|d� | �d� | �d� X | �� | �t|d� | �d
� | �d� d S )NT�z-br� r� r� �Exit with code 0r� r� r� r� r� zServer already runningz Failed to access socket pathzIs fail2ban running?)r� r� r� r� r� r� r� r� r& r& r' � testClientStartBackgroundInside2 s&
z2Fail2banClientTest.testClientStartBackgroundInsidec C s� t |t|d�d�}tjjr,| �t|d � n`tjtt t
�f}t � d|� || d }t
j|tddd�}| �t|�ox|d � | j|d|d
� | �d � | �� �z�| �t|dd� | �d� | �d� | �� | �t|dd� | �d� | �� tt|d��}z.t�|tj� t� t
j � | �t |dd� W 5 t�|tj� X | �d� | �� z d d l }W n2 t k
�r� } zt�!d| ��W 5 d }~X Y nX t"dddg7 a"| �t|d� | �d � | �d d � | �d� | �� t"d d dg7 a"| �t|d� | �d!� | �d
� | �d � | �d� | �� t"d"dg7 a"| �t|d� | �d#� | �� | �t |d d$� | �d#� | �d%� | �� W 5 | �� | �t|d � | �d
� | �d� X d S )&Nr� �r� )r� � Start %s ...)�--asyncr� FT�r9 �shell�outputr r� r� r� r� r
r� r� r� z0.1zServer replied: pongri z1e-10z timed outz%Skip test because of import error: %szecho INTERACT-ECHO�statusrC z-iz
INTERACT-ECHOZStatuszNumber of jail:�reload�restartzReading config files:z reload ~~unknown~jail~fail~~z@Failed during configuration: No section: '~~unknown~jail~fail~~'z~~unknown~jail~fail~~r� )#r� r[ r~ r �fastr� r� �sys�
executabler� r r r* r �
executeCmdr� r� rD r� r� r� r� r{ r� r� �SIGCONT�SIGSTOPr+ �sleepZDEFAULT_SHORT_INTERVALr� �readline� ImportErrorr� rE )r� rl r� �cmdr� r� r r� r& r& r' � testClientStartBackgroundCallQ s�
�
�
�
z0Fail2banClientTest.testClientStartBackgroundCallc C s� t |dd�}| �tdddt|d�d� | �dt|d� d � | �� | �tddt|d
�d t|d �d
� | �d� | �� tt|d �d��� | �tdddt|d
�d t|d �d� | �d� | �� t� t|d �� | �tdd � | �d� | �� d S )Nr� r r& r rp �missr� � Base configuration directory � does not existrX rq rh r �Could not find server�a�LFail2ban seems to be in unexpected state (not running but the socket exists)r �
r� r� r� r[ r� r� rJ rL r{ �remover� r& r& r' �testClientFailStart� sB � �
�
z&Fail2banClientTest.testClientFailStartc C sX t |dd�}| �t|dd� | �d� | �� | �t|dddd� | �d� | �� d S ) Nr� r r Zjailr# r z--xxxz"Unexpected argument(s) for reload:)r� r� r� r� r� r� r& r& r' �testClientFailCommands� s �
�
z)Fail2banClientTest.testClientFailCommandsc
C sX d}dD ]J}d}t |d��2}|rH|�� |r>tjjs>t�|� |d8 }q W 5 Q R X qd S )Ng�Q� ��?)r
r � r. r )r Z heartbeatr~ r r r+ r )r� Z sleeptime�verboseZcntrZvisr& r& r' �testVisualWait� s
z!Fail2banClientTest.testVisualWaitN)r> r? r@ � _exec_clientr r r r r r r� r r r( r) r, r& r& r& r' r� s"
Y
r� c @ s� e Zd ZeefZdd� Zeedd� ��Z eedd� ��Z
eedd� ��Z ed d
� �Z e
d d id
�dd� �Zejjdd�e
dddd�d
�dd� ��Zejjdd�e
ddd d d �d
�d d � ��Ze
� d!d"� �Zd#S )$�Fail2banServerTestc C s* | � tdd� | �dt � | �d� d S )Nr& r r r )r� r� r� r r� r& r& r' �testServerUsage� s z"Fail2banServerTest.testServerUsagec C s� t |t|d�d�}tjttt�f}t�d|� || d }tj |t
ddd�}| � t |�o^|d � | j
|d|d � | �d
� | �� z"| �t|dd� | �t|d� W 5 | �� | �t|d � | �d � | �d
� X d S )Nr� r r
r FTr r r� r� r� r� r
r� r� r� )r� r[ r r r� r r r* r r r� r� rD r� r� r� r� r� r� �r� rl r� r r� r& r& r' �testServerStartBackground� s
z,Fail2banServerTest.testServerStartBackgroundc
C s� t |dd�}| �tddt|d�� | �dt|d� d � | �� tt|d�d ��� | �tddt|d
�d t|d�� | �d � | �� t� t|d�� d S )
Nr� r r& rp r r! r" rh r$ rX rq r% r& r� r& r& r' �testServerFailStart s" � �
z&Fail2banServerTest.testServerFailStartc C s� t |dd�}t|d�}| �d� | �t|d� | �d� tt|d�dd d
d d d � | �d
� | �t|d� | jddddd� | �d� | �t|dd� | jddddd� d S )Nr� r rX z[test-phase 0]z--testz$OK: configuration test is successfulrZ r$ rI �
[broken-jail]�filter = broken-jail-filter�enabled = truez[test-phase 0a]�.Unable to read the filter 'broken-jail-filter'z Errors in jail 'broken-jail'.z ERROR: test configuration failedTr� z[test-phase 0b]z-tr� )r� r[ r� r� r� r� rQ r� )r� rl r� r� r& r& r' �testServerTestFailStart s0
�
�
�z*Fail2banServerTest.testServerTestFailStartc
s� z�t� t� d�d�}tjttt�f}t� d|� || d }t
j |t ddd�}| � t
|�o`|d � | j� d|d � | �d
� | �� t� d � � W 5 | � t� �� X t
�� fd d
�t � | �tt� d��� | �d� | �� | � t� �� | �d� d S )NzGf2b.log[format="SRV: %(relativeCreated)3d | %(message)s", datetime=off]r r
r FTr r r� r� zKill server ... %sc s t t� d�� S )Nri )r r[ r& �rl r& r' r� Q r� z7Fail2banServerTest.testKillAfterStart.<locals>.<lambda>ri r� zcleanup: no pidfile for)r� r� r� r[ r r r� r r r* r r r� rD r� r� r� r4 � assertFalser r0 r& r8 r' �testKillAfterStart= s( �
z%Fail2banServerTest.testKillAfterStartr� rY r� c s�
t |d�� t |d��t |d��t |d��t�t � d�� dŇ fd d
� }dƇ ���fdd� }|dd� |dd� |dgdddgd� tt � d�dddddd� t�dfttt�� ��d fd �� t�d� t�d� | �d � t j
j t j
k � r�t�� | �t|d � | jd d dtd!� | �d"� � | �d#� | jd$d%dd&� | jd'd(dtd!� | jd)d*d+dd&� | �d,� |ddgd-� t j
j t j
k �r�t�� | �t|d � | jd td.� | jd/d#dd&� | jd"� d"� dd&� | jd0d1dd&� | jd2d3dd&� | jd4d5dd&� | �d6� | �d7� |dgd-� |dd8d d9d d:d d;� | �t|d � | jd td.� | jd/d#dd&� | �d<� | jd0d=dd&� | �d>� | �d?� | �d@� |ddAdB� |ddgd-� | �dC� t�dDfttt�� ��dE fd ttt�� ��dF fd ttt�� ��dG fd ttt�� ��dH fd �� t j
j t j
k �rXt�� | jdIdJdtd!� | �t|dKdLdMdN� | jdOtd.� | jdPdQdRdSdTdUdVdd&� | jdWdXdYdZdd&� t� | �| �|d[�d\d]d^d_d`dadbgidLd^dNd`gigf� | �| �|d[d_d^dc�d\d]gd]dLgg gf� | �| �|ddd]d[�d d^d_d`dadbg� | �| �|dddLd[�d d^dNd`g� | �| �|ddd]d[da�d d� | �| �|ddd]d[dN�d d\� | �| �|ddd]d[dadN�d dd\g� | �de� | �t|dfdL� | jd dgdOdtd!� | jdhdidjdkd3dldmdndd&� | jdodpdtd!� | jdqdrdd&� | �ds� | �t|dKdLdMdt� | �t|dKdLdMdu� | jdvdwdtd!� t� | �dx� | �t|dddLdMdy� | jd^d`dtdudtd!� | �dz� | �t|ddd]dM� | jd_dbdad^d`dtd!� | �d{� | �t|dfd|dL� | jd d3dtd!� | jdkd3dhdidjdd&� | jd}d~dd&� | �d� | jd�d�dd&� | jdTdUdd&� |ddAdB� |g d-� | �d�� | �t|d d]� | jd td.� | jd�d�dd&� | jd�d�d�dd&� | �d�� |dgd�� | �t|d � | jd td.� | �d�� | jd�dkdd&� | jd�� d�� dd&� | �d�� t�dDfttt�� ��d� fd ttt�� ��d� fd ttt�� ��d� fd �� t j
j t j
k �r�t�� | jd�d�dtd!� | jd�d�d�d�dd&� | �d�� | �d�� | �t|d�d�d�d�� | jd�d�dtd!� | �d�� | �t|d�d�d�� | jd�d�dtd!� | �t|d�d�d�d�� | jd�d�dtd!� | �d�� | �t|d�dKd]dMd�d�� | jd�d�dtd!� | �t|d�dKd]d�d�� | jd�d�dtd!� | �d�� | �t|d d|� | jd td.� | jd�d/d�dd&� | jd�d�d#dRdd&� | �d�� | �t|d�d�d�� | jd�d�dd&� | �d�� |dgd�d�� | �t|d � | jd td.� | jd�d�dd&� | �d�� |dgd�� | �t|d � | jd td.� | �d�� | �t|d�d dL� | jd td.� | �d�� | �� | �t|d�d d�dL� | jd td.� | jd2d3dd&� | �d�� | �t|d�d d�d�� | jd td.� | jd�d�dtd!� | �d�� | �t|d�dKd]d�d�dá | �t|d�ddd]dġ | jd�d�dd&� d S )�NrX � test1.logz test2.logz test3.logrc � test-action1TrI c sj t � dd| �}|s"t�|� d S t|ddddddd d
d d |d
|d|d|d|� tjjtjkrft |� d S )Nrc �%s.confre rk z_exec_once = 0rI rf znorestored = %(_exec_once)sz
restore = zinfo = z<_use_flush_ = echo '[%(name)s] %(actname)s: -- flushing IPs'z6actionstart = echo '[%(name)s] %(actname)s: ** start'z7actionreload = echo '[%(name)s] %(actname)s: .. reload'zMactionban = echo '[%(name)s] %(actname)s: ++ ban <ip> %(restore)s%(info)s'z;actionunban = echo '[%(name)s] %(actname)s: -- unban <ip>'z5actionstop = echo '[%(name)s] %(actname)s: __ stop')
r[ r{ r' rQ r~ r r� r r� r� )�actname�allowr� r Zban�unbanr� rM �r� r& r' �_write_action_cfgi s4
�zBFail2banServerTest.testServerReloadTest.<locals>._write_action_cfg�r r
r& �pollingc % s t t� d�ddddddddd d
d dd d
| ddd|kr:dndd|krHdndd|krVdndd� d| krnd� ndd| kr�d� ndd d| kr�dndd| kr�dndddd
| ddd|kr�dndd|kr�dndd� d| kr�dnd�# tjjtjkr�tt� d�� d S )NrZ re rj rI rk � usedns = no� maxretry = 3zfindtime = 10mzBfailregex = ^\s*failure <F-ERRCODE>401|403</F-ERRCODE> from <HOST>� datepattern = {^LN-BEG}EPOCHzignoreip = 127.0.0.1/8 ::1� [test-jail1]�
backend = �filter =z action = r z* test-action1[name='%(__name__)s']r
zj test-action2[name='%(__name__)s', restore='restored: <restored>', info=', err-code: <F-ERRCODE>']� z� test-action2[name='%(__name__)s', actname=test-action3, _exec_once=1, restore='restored: <restored>', actionflush=<_use_flush_>]�
logpath = z
z@ ^\s*error <F-ERRCODE>401|403</F-ERRCODE> from <HOST>r5 z [test-jail2]�rQ r[ r~ r r� r r� r� )�enabled�actions�backend�r� �test1logZtest2logZtest3logr& r' �_write_jail_cfg� sb ���� ���%[email protected].<locals>._write_jail_cfg)r> � test-action2r r
rK )rN rO rZ r$ r3 r4 r5 re z# failure 401 from 192.0.2.1: test 1z[test-phase 1a]r �Reload finished.z1 ticket(s) in 'test-jail1r� zAdded logfile: %rz[test-jail1] Ban 192.0.2.1z-stdout: '[test-jail1] test-action1: ** start'z-stdout: '[test-jail1] test-action2: ** start'r� zPstdout: '[test-jail1] test-action2: ++ ban 192.0.2.1 restored: 0, err-code: 401'zAstdout: '[test-jail1] test-action3: ++ ban 192.0.2.1 restored: 0'r6 z)Errors in jail 'broken-jail'. Skipping...z:Jail 'broken-jail' skipped, because of wrong configurationz[test-phase 1b])rO �r� z [test-jail1] Unban 192.0.2.1z.stdout: '[test-jail1] test-action1: .. reload'z.stdout: '[test-jail1] test-action2: .. reload'z Creating new jail 'test-jail2'zJail 'test-jail2' startedz4stdout: '[test-jail1] test-action3: -- flushing IPs'z,stdout: '[test-jail1] test-action3: __ stop'z7stdout: '[test-jail1] test-action3: -- unban 192.0.2.1'z[test-phase 2a]z+ echo '[<name>] %s: started.'z, echo '[<name>] %s: reloaded.'z+ echo '[<name>] %s: stopped.')r> r� r r� zAdded logfile:z.stdout: '[test-jail1] test-action1: reloaded.'z7stdout: '[test-jail1] test-action2: -- unban 192.0.2.1'z,stdout: '[test-jail1] test-action2: __ stop'z7stdout: '[test-jail1] test-action1: -- unban 192.0.2.1'F)r> r? z[test-phase 2b]�a+z# error 403 from 192.0.2.2: test 2z# error 403 from 192.0.2.3: test 2z# failure 401 from 192.0.2.4: test 2z# failure 401 from 192.0.2.8: test 2z2 ticket(s) in 'test-jail2z5 ticket(s) in 'test-jail1�setz
test-jail2�banipz 192.0.2.9z3 ticket(s) in 'test-jail2z[test-jail1] Ban 192.0.2.2z[test-jail1] Ban 192.0.2.3z[test-jail1] Ban 192.0.2.4z[test-jail1] Ban 192.0.2.8z[test-jail2] Ban 192.0.2.4z[test-jail2] Ban 192.0.2.8z[test-jail2] Ban 192.0.2.9z [test-jail2] Found 192.0.2.2z[test-jail2] Ban 192.0.2.2z [test-jail2] Found 192.0.2.3z[test-jail2] Ban 192.0.2.3Zbannedr �
test-jail1z 192.0.2.4z 192.0.2.1z 192.0.2.8z 192.0.2.3z 192.0.2.2z 192.0.2.222r� z[test-phase 2c]r z Restore Banz [test-jail2] Unban 192.0.2.4z [test-jail2] Unban 192.0.2.8z [test-jail2] Unban 192.0.2.9zJail 'test-jail2' stoppedz"[test-jail2] Restore Ban 192.0.2.4z"[test-jail2] Restore Ban 192.0.2.8z"[test-jail2] Restore Ban 192.0.2.9zPstdout: '[test-jail2] test-action2: ++ ban 192.0.2.4 restored: 1, err-code: 401'zPstdout: '[test-jail2] test-action2: ++ ban 192.0.2.8 restored: 1, err-code: 401'zAstdout: '[test-jail2] test-action3: ++ ban 192.0.2.4 restored: 1'zAstdout: '[test-jail2] test-action3: ++ ban 192.0.2.8 restored: 1'z[test-phase 2d]z
192.0.2.21z
192.0.2.22z5stdout: '[test-jail2] test-action3: ++ ban 192.0.2.22z6stdout: '[test-jail2] test-action3: ++ ban 192.0.2.22 z[test-phase 2d.1]rH z[test-phase 2d.2]z[test-phase 2e]z--unbanz7stdout: '[test-jail2] test-action2: -- unban 192.0.2.21z8stdout: '[test-jail2] test-action2: -- unban 192.0.2.22'z4stdout: '[test-jail2] test-action3: -- flushing IPs'z8stdout: '[test-jail2] test-action3: -- unban 192.0.2.21'z8stdout: '[test-jail2] test-action3: -- unban 192.0.2.22'z[test-phase 3]zReload jail 'test-jail1'zJail 'test-jail1' reloadedzReload jail 'test-jail2'zJail 'test-jail2' reloadedzJail 'test-jail1' startedz[test-phase 4])rN zStopping jail 'test-jail2'zRemoved logfile: %rz[test-phase 5]z# failure 401 from 192.0.2.1: test 5z# error 403 from 192.0.2.5: test 5z# failure 401 from 192.0.2.6: test 5z6 ticket(s) in 'test-jail1z%[test-jail1] 192.0.2.1 already bannedz [test-jail1] Found 192.0.2.1z [test-jail1] Found 192.0.2.6z[test-jail1] Ban 192.0.2.6z [test-jail1] Found 192.0.2.5z[test-phase 6a]r r@ z 192.0.2.5z 192.0.2.6z192.0.2.5 is not bannedz [test-jail1] Unban 192.0.2.6z[test-phase 6b]z 192.0.2.2/31z [test-jail1] Unban 192.0.2.2z [test-jail1] Unban 192.0.2.3z 192.0.2.8/31z192.0.2.100/31z [test-jail1] Unban 192.0.2.8z 192.0.2.100/31 is not bannedz[test-phase 6c]z
192.0.2.96/28z192.0.2.112/28z [test-jail1] Ban 192.0.2.96/28z [test-jail1] Ban 192.0.2.112/28Zunbanipz
192.0.2.64/26z [test-jail1] Unban 192.0.2.96/28z![test-jail1] Unban 192.0.2.112/28z[test-phase 7]z [test-jail1] Unban 192.0.2.4zJail 'test-jail1' stoppedz[test-phase 7b]�--allzFlush ban listz'Unbanned 0, 0 ticket(s) in 'test-jail1'z[test-phase 8a]zxxx-unknown-backend-zzz)rN rP z0Restart jail 'test-jail1' (reason: 'polling' != zUnknown backend z[test-phase 8b]z[test-phase end-1]z$the jail 'test-jail2' does not existz --if-existsz[test-phase end-2]� --restartz[test-phase end-3]Z addignoreipz 192.0.2.1/32z2001:DB8::1/96Zignoreip)r< TrI rI rI rI rI )rC r& rD )r[ r{ r| rQ r� r� r r+ r� r~ r r� r r� r� r� r� r� r1 �assertNotLoggedr2 ZassertSortedEqualr� � assertEqualr� )r� rl r� rB rS r& rQ r' �testServerReloadTestY st
�*
�&
�
� � �
� � � � ��
� �
����
���� � � � � �
� ��
� ��
�� ��
�� ��
���
���
���
� � � ��
� � �
�
�
� � � �� � �
� �
� � �
��� � �
� �
� � � �
� � � �
� � �
� �
�
�
� �
� �
� �z'Fail2banServerTest.testServerReloadTestznginx-block-map)�action)�%(tmp)s/blck-failures.log)rc ) z[nginx-blck-lst]rd rE z#logpath = %(tmp)s/blck-failures.logzoaction = nginx-block-map[srv_cmd="echo nginx", srv_pid="%(tmp)s/f2b.pid", blck_lst_file="%(tmp)s/blck-lst.map"]z� blocklist_de[actionban='curl() { echo "*** curl" "$*";}; <Definition/actionban>', email="Fail2Ban <fail2ban@localhost>", apikey="TEST-API-KEY", agent="fail2ban-test-agent", service=<name>]rJ �datepattern = ^Epochz3failregex = ^ failure "<F-ID>[^"]+</F-ID>" - <ADDR>z maxretry = 1r5 )r� r� r� c C s� t |d�}dd|i }dd|i }t|dttt�� ��d ttt�� ��d ttt�� ��d ttt�� ��d ttt�� ��d
� | jd d d
ddddtd� t|� t |�}| �
d|� | �
d|� | �
d|� | �
d|� | �
d|� | jdddd� | jdd dtd� | � t |d d d d � t|� t |�}| �
d|� | �
d|� | �
d|� | �
d|� | �
d|� | �t � | �d!� t|� t |�}| �|d"� d S )#NrX ra rl z%(tmp)s/blck-lst.map�w+z" failure "125-000-001" - 192.0.2.1z" failure "125-000-002" - 192.0.2.1u1 failure "125-000-003" - 192.0.2.1 (òðåòèé)u1 failure "125-000-004" - 192.0.2.1 (òðåòèé)z" failure "125-000-005" - 192.0.2.1z [nginx-blck-lst] Ban 125-000-001z [nginx-blck-lst] Ban 125-000-002z [nginx-blck-lst] Ban 125-000-003z [nginx-blck-lst] Ban 125-000-004z [nginx-blck-lst] Ban 125-000-005z 5 ticket(s)Tr� z\125-000-001 1;
z\125-000-002 1;
z\125-000-003 1;
z\125-000-004 1;
z\125-000-005 1;
zstdout: 'nginx -qt'zstdout: 'nginx -s reload'r� z�stdout: '*** curl --fail --data-urlencode server=Fail2Ban <fail2ban@localhost> --data apikey=TEST-API-KEY --data service=nginx-blck-lst z=stdout: ' --data format=text --user-agent fail2ban-test-agentr@ z 125-000-001z 125-000-002z 125-000-005z5[nginx-blck-lst] Flush ticket(s) with nginx-block-maprI )r[ rQ r� r� r r+ r� r1 r� rT �assertInr� r� � assertNotInr� r^ )r� rl r� r� �lgfnZmpfnZmpr& r& r' � testServerActions_NginxBlockMapE s^
� � �
z2Fail2banServerTest.testServerActions_NginxBlockMapz
sendmail-auth)�filter)�%(tmp)s/test.logT)rk zdbmaxmatches = 1)a� test_action = dummy[actionstart_on_demand=1, init="start: %(__name__)s", target="%(tmp)s/test.txt",
actionban='<known/actionban>; echo "found: <jail.found> / <jail.found_total>, banned: <jail.banned> / <jail.banned_total>"
echo "<matches>"; printf "=====\n%%b\n=====\n\n" "<matches>" >> <target>',
actionstop='<known/actionstop>; echo "stats <name> - found: <jail.found_total>, banned: <jail.banned_total>"']z[sendmail-auth]rd rE �logpath = %(tmp)s/test.log�action = %(test_action)sz%filter = sendmail-auth[logtype=short]rb rF zmaxmatches = 2r5 z[sendmail-reject]rd rE rj rk z'filter = sendmail-reject[logtype=short]rb rF r5 )r� r� r� r� c
C sh t |d�}dd|i }dd|i }ttt�� ��d ttt�� ��d ttt�� ��d f}ttt�� ��d ttt�� ��d ttt�� ��d
f}| �d � t|d f|�� | jd
dddtd� t |� t
|�}|d } | � | |� |dd � D ]} | � | |� q�| �d� t|df|�� | jddddtd� t |� t
|�}|D ]} | � | |� �qH| �d� | �
t|ddd� | jd d d d ddtd� t
|�}|d } | �| � | � | |� |dd � D ] } | �| � | � | |� �q�| jd!ddtd� t
|�}|d } | �| � | � | |� |dd � D ] } | �| � | � | |� �q$| �d"� | �t� | �t|�� d S )#NrX ri rl z%(tmp)s/test.txtz] smtp1 sm-mta[5133]: s1000000000001: [192.0.2.1]: possible SMTP attack: command=AUTH, count=1z] smtp1 sm-mta[5133]: s1000000000002: [192.0.2.1]: possible SMTP attack: command=AUTH, count=2z] smtp1 sm-mta[5133]: s1000000000003: [192.0.2.1]: possible SMTP attack: command=AUTH, count=3z� smtp1 sm-mta[21134]: s2000000000001: ruleset=check_rcpt, arg1=<[email protected]>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <[email protected]>... Relaying denied. Proper authentication required.z� smtp1 sm-mta[21134]: s2000000000002: ruleset=check_rcpt, arg1=<[email protected]>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <[email protected]>... Relaying denied. Proper authentication required.z� smtp1 sm-mta[21134]: s3000000000003: ruleset=check_rcpt, arg1=<[email protected]>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <[email protected]>... Relaying denied. Proper authentication required.z[test-phase sendmail-auth]rc z [sendmail-auth] Ban 192.0.2.1z%stdout: 'found: 0 / 3, banned: 1 / 1'z 1 ticket(s) in 'sendmail-auth'Tr� r r z [test-phase sendmail-reject]rW z [sendmail-reject] Ban 192.0.2.2z 1 ticket(s) in 'sendmail-reject'z [test-phase restart sendmail-*]r r\ r[ rU z3stdout: 'stats sendmail-auth - found: 3, banned: 1'z5stdout: 'stats sendmail-reject - found: 3, banned: 1'z%[sendmail-auth] Restore Ban 192.0.2.1r� z'[sendmail-reject] Restore Ban 192.0.2.2z[test-phase stop server])r[ r� r� r r+ r� rQ r� r1 r� rT re rd r� r� r] r� r9 r )
r� rl r� r� rf ZtofnZ smaut_msgZ smrej_msgZtd�mr& r& r' �testServerJails_Sendmail� s� )
��
�
�
� �
�
z+Fail2banServerTest.testServerJails_Sendmailc s� t |d��t |d��t�t �d�� d>�fdd� }d?��fd d
� }|dd d � |d
dd � |� t�d� | �d� | �t|d� t�dfttt �
� ��d fd �� t � | j dddt
d� t � | �d� td� t � | j ddddt
d� t � | �d � d �t�fd d �� t�d fttt �
� ��d fd! �� | j d"d#dt
d� | �d$� | �t|d%d&d'd(� | j d)d*dt
d� d�t � | �d+� td,� t � | j d-dt
d� t � | �d.� | �t|d%d&d'd(� | j d)d/dt
d� | �d0� t� d1d2i� tj�� �fd3d4�}��d5|� ��d5d6d � � t�� fd7d �t� �j�tjj�rVd8nd9df�fd:d;� }|�_| �t� | � d<� | � �j � | � �j d � d!� d1< | j d<dd=� ��!� d S )@NrX r; rc r< Tc sH t � dd| �}t|ddddd|r&dndd � tjjtjkrDt|� d S )
Nrc r= re rk rI rf zeactionban = printf %%s "[%(name)s] %(actname)s: ++ ban <ip> -c <bancount> -t <bantime> : <F-MSG>"ziactionprolong = printf %%s "[%(name)s] %(actname)s: ++ prolong <ip> -c <bancount> -t <bantime> : <F-MSG>"zBactionunban = printf %%b '[%(name)s] %(actname)s: -- unban <ip>')r[ rQ r~ r r� r r� r� )r> �prolongrM rA r& r' rB s �� [email protected].<locals>._write_action_cfgrD c s` t t� d�ddddddddd d
d dd d
| dddd� ddd� tjjtjkr\tt� d�� d S )NrZ re rj rI rk rE rF z
findtime = 1mz bantime = 5mzbantime.increment = truerG rH rI rJ z*action = test-action1[name='%(__name__)s']z* test-action2[name='%(__name__)s']rL zXfailregex = ^\s*failure <F-ERRCODE>401|403</F-ERRCODE> from <HOST>:\s*<F-MSG>.*</F-MSG>$r5 rM )rP )r� rR r& r' rS # s0 �z>Fail2banServerTest.testServerObserver.<locals>._write_jail_cfgF)r> rn rT re z[test-phase 0) time-0]r rc z> failure 401 from 192.0.2.11: I'm bad "hacker" `` $(echo test)rK zDstdout: '[test-jail1] test-action1: ++ ban 192.0.2.11 -c 1 -t 300 : zDstdout: '[test-jail1] test-action2: ++ ban 192.0.2.11 -c 1 -t 300 : r� z[test-phase 1) time+10m]�
z7stdout: '[test-jail1] test-action1: -- unban 192.0.2.11z7stdout: '[test-jail1] test-action2: -- unban 192.0.2.11z0 ticket(s) in 'test-jail1'z[test-phase 2) time+10m]c s � S rR r& r& )�wakeObsr& r' r� ^ r� z7Fail2banServerTest.testServerObserver.<locals>.<lambda>rW zC failure 401 from 192.0.2.11: I'm very bad "hacker" `` $(echo test)r
zDstdout: '[test-jail1] test-action1: ++ ban 192.0.2.11 -c 2 -t 300 : zDstdout: '[test-jail1] test-action2: ++ ban 192.0.2.11 -c 2 -t 300 : z"[test-phase 2) time+10m - get-ips]r� rZ rY z --with-timez
192.0.2.11z+ 300 =z[test-phase 2) time+11m]r zHstdout: '[test-jail1] test-action2: ++ prolong 192.0.2.11 -c 2 -t 600 : z"[test-phase 2) time+11m - get-ips]z+ 600 =z'[test-phase end) stop on busy observer]�stater c s< t �d� d� d< t�� fdd�t� ��� t �d� d S )Nz!++ observer enters busy state ...r rq c s � d dkS )Nrq r
r& r& �r$ r& r' r� � r� zMFail2banServerTest.testServerObserver.<locals>._long_action.<locals>.<lambda>z -- observer leaves busy state.)r r# r r4 r� Zdb_purger& )r$ �obsMainr& r' � _long_action� s
z;Fail2banServerTest.testServerObserver.<locals>._long_action�callc S s d S rR r& r& r& r& r' r� � r� c s � d dkS )Nrq r r& r& rr r& r' r� � r� g{�G�z�?g�������?c s
� | |�S rR r& )ZwtimeZ forceQuit)� obsMain_stopr& r' �_stop� s z4Fail2banServerTest.testServerObserver.<locals>._stopzobserver leaves busy staterV )r< T)rD )"r[ r{ r| rQ r� r� r� r� r� r r+ r2 r� r1 r- r; r r/ r0 �addr r4 r� r� r~ r r r� r] r9 Zidler^ Z_ObserverThread__dbr )r� rl r� rB rS rt rw r& )r$ r� rs rv rR rp r' �testServerObserver s�
� �
�
� �
�
�
�
z%Fail2banServerTest.testServerObserverN)r> r? r@ � _exec_serverr r r/ r r� r1 r2 r7 r: r� r_ r~ r Zskip_if_cfg_missingrg rm ry Z_testServerStartStopZtestServerStartStopr& r& r& r' r. � sJ
n � < �' P
r. )FNrU rV r& rW N)`�
__author__Z
__copyright__Z __license__rv r{ rt r r+ r� r~ Zos.pathr r[ r r r r � functoolsr � threadingr Zclientr r r
Zclient.fail2bancmdliner Zclient.fail2banclientr r- r r Zclient.fail2banserverr rz rI r r Z
server.mytimer Z server.utilsr Zutilsr r r� r r r r r rs r r Zhelpersr! r> r r Z
getServerPathr� r Z maxWaitTimer� r1 r� r� r� r� r( r r- r/ r2 r; r< rB r� r� rE rG Z
input_commandZ
PRODUCTIONZdumpFiler� rQ rT r� r� r� r� r� r� r� r� r. r& r& r& r' �<module> s� ,
��� �
�
U
, F
Z