File: //lib/python3/dist-packages/fail2ban/tests/__pycache__/fail2banclienttestcase.cpython-38.pyc
U
]^�� � @ s� d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z m
Z
mZmZmZ ddlmZ ddlmZ dd lmZmZmZ dd
lmZ dd lm Z m Z dd l m Z m Z! dd
l"m#Z# ddl$m$Z$ ddl%m&Z& ddl'm(Z( ddl)m*Z*m+Z,m-Z-m.Z.m/Z/m0Z0m1Z2m3Z3m4Z4 ddl5m6Z6 e6e7�Z+dZ8dZ9ee �:� �Z;e j<�=e j<j>�Z>e j<�=e j<j?�Z?e>d e_>e+ e_+ e_+e_+e$j@ZAe$jBZCdd� ZDeD e_E e_E e_Ee#_Edd� ZFe$jGZGdd� ZHe?fd d �ZIG d d � d ejJ�ZJG d d!� d!ejJ�ZKeJZLeKZMg aNd"d#� ZOeOe_Pd$ e_Qe_Qe*jRZSd%d&� ZTd'd(� ZUd?d-d.�ZVd/d0� ZWd1d2� ZXd3d4� ZYd5d6� ZZi fd7d8�Z[G d9d:� d:e*�Z\G d;d<� d<e\�Z]G d=d>� d>e\�Z^dS )@z Serg BresterzICopyright (c) 2014- Serg G. Brester (sebres), 2008- Fail2Ban ContributorsZGPL� N)�join�isdir�isfile�exists�dirname��wraps)�Thread� )�fail2banclient�fail2banserver�fail2bancmdline)�Fail2banCmdLine)�exec_command_line�
VisualWait)�Fail2banServerr )�protocol)�server)�MyTime)�Utils� ) �LogCaptureTestCase�logSys� with_tmpdir�shutil�logging�STOCK�
CONFIG_DIR�TEST_NOW�tearDownMyTime)� getLoggerzfail2ban-clientzfail2ban-serverc G s t �| d � d S �Nr )r �info��args� r% �G/usr/lib/python3/dist-packages/fail2ban/tests/fail2banclienttestcase.py� _test_outputJ s r' c C s& t �d| � t�t�� | d � d S )Nz===>>> time shift + %s min�< )r �debugr ZsetTime�time)�shiftr% r% r& � _time_shiftQ s r, c C s* t jdk r&t j�t� t j�td � dS )z$Helper to wait observer becomes idleN� )� Observers�MainZ
wait_empty� MID_WAITTIMEZ wait_idler% r% r% r& �_observer_wait_idleY s
r1 c s. t jdk r*t jj� � ��fdd�}|t j_dS )zOHelper to block observer before increase bantime until some condition gets trueNc s6 � t j_t�d� t���� t�d� � | |� d S )Nz4 [Observer::banFound] *** observer blocked for testz. [Observer::banFound] +++ observer runs again)r. r/ �banFoundr r) r �wait_for�r$ �kwargs�Z
_obs_banFound�cond�timeoutr% r& � _banFoundd s
z0_observer_wait_before_incrban.<locals>._banFound)r. r/ r2 )r7 r8 r9 r% r6 r& � _observer_wait_before_incrban_ s
r: c @ s e Zd ZdZdS )�
ExitExceptionz Exception upon a normal exitN��__name__�
__module__� __qualname__�__doc__r% r% r% r& r; t s r; c @ s e Zd ZdZdS )�FailExitExceptionz Exception upon abnormal exitNr< r% r% r% r& rA y s rA c G s t t�rt�d�S dS d S )Nr �exit)�len�INTERACT�popr# r% r% r& �_test_input_command� s
rF Fc G s2 t | |�}|�d�|�|r dnd � |�� d S )N�
� )�open�writer �close)�fn�mode�lines�fr% r% r& � _write_file� s
rP c C s0 d }zt| �}|�� W �S |d k r*|� � X d S �N)rK rI �read)rL rO r% r% r& �
_read_file� s rS � /dev/null�:memory:r% �rH c C s� t | d�}|dkr t | d�}d} |r�tr�dd� }
tjt||
d� |d ksXtdt|� ��|d krdd }t�d
�} t j
t |d �d d
�D ]$} | � d�} | � | �r�d} t
| � q�t�d�} t j
t |d�d d
�D ]$} | � d�} | � | �r�d} t
| � q�|r�dnd} nTt�|� tt |d �dddd|�dd� ddt | d � d t | d � dd | d d!d�
| �r|tt || �dfd"dd#d$| df| �� |�r�tt |d%�df|�� tjjtjk �r�tt |d �� tt |d�� |�r�tt |d%�� | �r�| dk�r�tt || �� |�r.t�r.|D ]&}
t�tj�t t|
��t ||
�� �q|�rT|D ]}
t|
d&| i dd� �q8d'\}}tjjtjk �r�t tjj�}tjj d(k�r�d)d*tjj f}|d+|f }d,|d-t | d �d.t | d �d/|f| d0dd1t t j �f S )2N�config�autozf2b-db.sqlite3� jail.confc s � fdd�|D �S )z?Filters list of 'files' to contain only directories (under dir)c s g | ]}t t� |��r|�qS r% )r �pjoin)�.0rO ��dirr% r& �
<listcomp>� s z2_start_params.<locals>.ig_dirs.<locals>.<listcomp>r% )r] �filesr% r\ r& �ig_dirs� s z _start_params.<locals>.ig_dirs)�ignorez?We are about to overload use_stock_cfg from the one provided %s)�action.dzfilter.dz ^dbfile\s*=z
fail2ban.confT)ZinplacerG zdbfile = :memory:z ^backend\s*=�backend = pollingz
jail.localrH �w� [Definition]zloglevel = INFOz logtarget = �%z%%zsyslogsocket = autoz socket = �f2b.sockz
pidfile = �f2b.pidz dbfile = zdbmaxmatches = 100zdbpurgeage = 1d�
[INCLUDES]� [DEFAULT]ztmp = zfail2ban.local�tmp)r% �INFOr �-�vz
--loglevel�-c�-sz-p� --logtargetz--syslogsocketz --timeout) rZ r r Zcopytree�STOCK_CONF_DIR�AssertionError�repr�re�compile� fileinput�input�rstrip�match�print�os�mkdirrP �replace�unittest�F2B� log_levelr �DEBUG� _out_file�symlink�path�abspathrl �str� verbosityr
� MAX_WAITTIME)rk � use_stock�
use_stock_cfg� logtarget�db� f2b_local�jails�create_before_start�cfgZj_confr` �r�line�nZvvvZllevr% r% r& �
_start_params� s�
�
� ��� $ �� ��r� c C s4 z| | � d�d dkW S tk
r. Y dS X d S )Nrq r � INHERITEDF)�index�
ValueError�� startparamsr% r% r& �_inherited_log� s r� c
C sX d }z"t | �}t�d|��� }t|�W S tk
rR } zt�|� W 5 d }~X Y nX |S )Nz\S+)rS ru rz �group�int� Exceptionr r) )�pidfile�pid�er% r% r& �_get_pid_from_file� s
r� c
sj t �d| t| �f� t| �r<| }t|d�} t| �s<t|d�} tjjtj k rtt|d�}t|�rft
|� nt � dd|� t| �s�t �d|� dS t �d | � t | �� � d kr�d
S z�t �d � � � d ksΈ t
�� kr�td
� | f ��t�� �s�W dS t
�� tj� t�� fdd�d��s t
�� tj� t �d� t�� � W S tk
�rd } zt �|� W 5 d }~X Y nX dS )Nz cleanup: %rrh z fail2ban.pid�f2b.logr- z
no logfile %rzcleanup: no pidfile for %rTzcleanup pidfile: %rFzcleanup pid: %rr zpid %s of %s is invalidc s t �� � S rQ )r �
pid_existsr% �r� r% r& �<lambda>+ � z_kill_srv.<locals>.<lambda>r �cleanup: kill ready)r r) r rZ r r r� r� r r� r� �logr� r| �getpidr� r r� �kill�signal�SIGTERMr3 �SIGKILLr� Z exception)r� ZpiddirZlogfiler� r% r� r& � _kill_srv s@
r� c s t � �� fdd��}|S )z�Helper to decorate tests which receive in the last argument tmpdir to pass to kill_srv
To be used in tandem with @with_tmpdir
c s* |d }z� | f|�� W �S t |� X d S )N���)r� )�selfr$ r� �rO r% r& �wrapper: s z with_kill_srv.<locals>.wrapperr �rO r� r% r� r& �
with_kill_srv5 s r� c s � fdd�}|S )z}Helper to decorate tests uses foreground server (as thread), started directly in test-cases
To be used only in subclasses
c s t t� �� �fdd���}|S )Nc
sf d }t � � �zz�t�fddi����t d�j
��� fd�}d|_ |� � t
tff� ���fdd � }|�_t�� fd
d �t� ��� �d d �� �j�d�� d
� t�d� ��� ����f|�|�W W �ZS tk
�r } z4td| � ��� }|�r td| � ��� � W 5 d }~X Y nX W 5 |�rZt�d� ��� ��� � �dd ��rZ|�� t� X d S )Nz === within server: end. ===�endr� r� Z_TestCaseWorker)�name�targetr$ Tc s� � � dd �s2tj�t�d��s2t�� fdd�t� � � dd �s���| �d� t�� fdd�t � ��
� � dd �� �j ddd t d
� d d� �_ d S ) Nr� rh c s � � dd �d k S �Nr� ��getr% ��phaser% r& r� ^ r� zywith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>._stopAndWaitForServerEnd.<locals>.<lambda>�stopc s � � dd �d k S r� r� r% r� r% r& r� c r� �Shutdown successfulzExiting Fail2banT��all�waitc _ s d S rQ r% r4 r% r% r& r� g r� )
r� r| r� r rZ r r3 r0 �execCmdr� �
assertTrue� assertLogged�stopAndWaitForServerEnd��code�r� r� r� rk r% r& �_stopAndWaitForServerEnd[ s zgwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>._stopAndWaitForServerEndc s � � dd �d k S )N�startr� r% r� r% r& r� j r� zWwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper.<locals>.<lambda>r� )r� r� z === within server: begin ===z=== Catch an exception: %sz#=== Error of server, log: ===
%s===)�dict� DefLogSysr" �pruneLogr� r� r r r� r �_testStartForegroundZdaemonr� �SUCCESS�FAILEDr r3 r� r� �
_wait_for_srvr� r{ �getLog)r� rk r$ r5 Zthr� r� r� )rO �
startextrar� r& r� I sB �
zEwith_foreground_server_thread.<locals>._deco_wrapper.<locals>.wrapper)r r r� �r� r� r& �
_deco_wrapperH s 9z4with_foreground_server_thread.<locals>._deco_wrapperr% )r� r� r% r� r& � with_foreground_server_threadC s =r� c @ sh e Zd ZejZdd� Zdd� Zdd� Ze ddd ��Z
dd d
�Z dd� Z dd� Z
eddid�dd� �Zd S )�Fail2banClientServerBasec O s d S rQ r% )r� r$ r5 r% r% r& � _setLogLevel� s z%Fail2banClientServerBase._setLogLevelc C s( t �| � dt_tjt_t| j�t _
dS )z Call before every test case.r� N) r �setUpr �
DEF_LOGTARGETr� �level� DEF_LOGLEVEL� staticmethod�
_test_exitr �_exit�r� r% r% r& r� � s
z Fail2banClientServerBase.setUpc C s( | j t_tt_tt_t� | � t
� dS )zCall after every test case.N) �
_orig_exitr r� �SRV_DEF_LOGTARGETr r� �SRV_DEF_LOGLEVELr� r �tearDownr r� r% r% r& r� � s
z!Fail2banClientServerBase.tearDownr c C s | dkrt � �nt� �d S r! )r; rA r� r% r% r& r� � s z#Fail2banClientServerBase._test_exitTNc s� � si � zlt |d��t�� �fdd�t�}|r8� �d�rFtd|f ��|rrt��fdd�t�}|srtd� |f ��W n^ t|�r�td��� � �� � t |d �}t
|�r�t |� nt|�s�t �
d
|� � Y nX d S ) Nrg c s � � d�pt��S r� )r� r r% )r� �sockr% r& r� � r� z8Fail2banClientServerBase._wait_for_srv.<locals>.<lambda>r� z9Unexpected: Socket file does not exists.
Start failed: %rc s d� � � kS )N� Server ready)r� r% r� r% r& r� � r� zBUnexpected: Server ready was not found, phase %r.
Start failed: %rz,=== Error by wait fot server, log: ===
%s===r� z*No log file %s to examine details of error)rZ r r3 r� r� r� r� r{ r� r� r r� r r) )r� rk Zreadyr� r� �retr� r% )r� r� r� r& r� � s:
����
z&Fail2banClientServerBase._wait_for_srvc G s* | � || jd | jdd � | | � d S )Nr r )Z assertRaisesr )r� ZexitTyper� r$ r% r% r& r� � s �z Fail2banClientServerBase.execCmdc C sJ t �d� d|d< z| �td| d� W 5 d|d< d|d< t �d� X d S )Nzstart of test workerTr� Fr� zend of test worker)z-f)r r) r� r� )r� rk r� r� r% r% r& r� � s
z-Fail2banClientServerBase._testStartForegroundr� )z[Thread]zstacksize = 32r� c C sR | � � | �t|dd� | �d� | �t|d� | �t|d� | �t|dd� d S )Nr� �threadz{'stacksize': 32}�ping�~~unknown~cmd~failed~~�echo� TEST-ECHO)r� r� r� r� r� �r� rk r� r% r% r& �testStartForeground� s
z,Fail2banClientServerBase.testStartForeground)r )TNN)r= r> r? r r� r� r� r� r� r� r� r� r� r� r� r� r% r% r% r& r� � s
r� c @ st e Zd ZeefZdd� Zdd� Zedd� �Z ee
dd� ��Z ee
d d
� ��Z ee
d d � ��Z
ed
d� �Zdd� ZdS )�Fail2banClientTestc C s, | � tttt��� | � tttt��� d S rQ )r� r rZ �BIN�CLIENT�SERVERr� r% r% r& �testConsistency� s z"Fail2banClientTest.testConsistencyc C s� | � tdd� | �dt � | �d� | �� | � tdd� | �t�� � | �� | � tddd� | �dtj � | �� | � tdd d
� | �d � d S ) Nr% �-h�Usage: �Report bugs to z-Vz-vqz --versionz
Fail2Ban vz --str2secZ1d12h30mZ131400)r� r� r� r� r� r
Z normVersion�versionr� r% r% r& �testClientUsage� s
z"Fail2banClientTest.testClientUsagec C sP t |d�}| �t|d� | �d� | �d� | �� | �t|d� | �d� d S )NTz-vvdz
Loading filesz['set', 'logtarget',z--dp)r� r� r� r� r� r� r% r% r& �testClientDump� s
z!Fail2banClientTest.testClientDumpc C s� t |d�}| �td| d� | j|d|d� | �d� | �d� zF| �t|d d
� | �t|d � | �� | �td| d� | �d � W 5 | �� | �t|d� | �d� | �d� X | �� | �t|d� | �d
� | �d� d S )NT�z-br� r� r� �Exit with code 0r� r� r� r� r� zServer already runningz Failed to access socket pathzIs fail2ban running?)r� r� r� r� r� r� r� r� r% r% r& � testClientStartBackgroundInside
s&
z2Fail2banClientTest.testClientStartBackgroundInsidec C sl t |t|d�d�}tjjr,| �t|d � n`tjtt t
�f}t � d|� || d }t
j|tddd�}| �t|�ox|d � | j|d|d
� | �d � | �� �z�| �t|dd� | �d� | �d� | �� | �t|dd� | �d� | �� tt|d��}z.t�|tj� t� t
j � | �t |dd� W 5 t�|tj� X | �d� | �� t dddg7 a | �t|d� | �d� | �d d � | �d� | �� t d d dg7 a | �t|d� | �d � | �d
� | �d � | �d� | �� t d!dg7 a | �t|d� | �d"� | �� | �t |d d#� | �d"� | �d$� | �� W 5 | �� | �t|d � | �d
� | �d� X d S )%Nr� �r� )r� � Start %s ...)�--asyncr� FT�r8 �shell�outputr r� r� r� r� r� r� r� r� z0.1zServer replied: pongrh z1e-10z timed outzecho INTERACT-ECHOZstatusrB z-iz
INTERACT-ECHOZStatuszNumber of jail:�reload�restartzReading config files:z reload ~~unknown~jail~fail~~z@Failed during configuration: No section: '~~unknown~jail~fail~~'z~~unknown~jail~fail~~zExit with code 255) r� rZ r r� �fastr� r� �sys�
executabler� r� r r) r �
executeCmdr� r� rC r� r� r� r� r| r� r� �SIGCONT�SIGSTOPr* �sleepZDEFAULT_SHORT_INTERVALr� rD )r� rk r� �cmdr� r� r% r% r& � testClientStartBackgroundCall) s~
�
�
�
z0Fail2banClientTest.testClientStartBackgroundCallc C s< t |dd�}| �tdddt|d�d� | �dt|d� d � | �� | �tdddt|d
�d t|d �d� | �d
t|d� d � | �� | �tddt|d
�d t|d�d� | �d� | �� tt|d�d��� | �tdddt|d
�d t|d�d� | �d� | �� t� t|d�� | �tdd � | �d� | �� d S )Nr� r� r% r ro �missr� � Base configuration directory � does not existrW rp �
miss/f2b.sock�There is no directory � to contain the socket filerg r �Could not find server�a�LFail2ban seems to be in unexpected state (not running but the socket exists)r� �
r� r� r� rZ r� r� rI rK r| �remover� r% r% r& �testClientFailStart sV � � �
�
z&Fail2banClientTest.testClientFailStartc C sX t |dd�}| �t|dd� | �d� | �� | �t|dddd� | �d� | �� d S ) Nr� r� r Zjailr r z--xxxz"Unexpected argument(s) for reload:)r� r� r� r� r� r� r% r% r& �testClientFailCommands� s �
�
z)Fail2banClientTest.testClientFailCommandsc
C sX d}dD ]J}d}t |d��2}|rH|�� |r>tjjs>t�|� |d8 }q W 5 Q R X qd S )Ng�Q� ��?)r
r � r- r )r Z heartbeatr r� r r* r )r� Z sleeptime�verboseZcntrZvisr% r% r& �testVisualWait� s
z!Fail2banClientTest.testVisualWaitN)r= r> r? � _exec_clientr� r r� r� r r� r� r� r r r r r% r% r% r& r� � s"
T #
r� c @ s� e Zd ZeefZdd� Zeedd� ��Z eedd� ��Z
eedd� ��Z ed d
� �Z e
d d id
�dd� �Zejjdd�e
dddd�d
�dd� ��Zejjdd�e
ddd d d �d
�d d � ��Ze
� d!d"� �Zd#S )$�Fail2banServerTestc C s* | � tdd� | �dt � | �d� d S )Nr% r� r� r� )r� r� r� r� r� r% r% r& �testServerUsage� s z"Fail2banServerTest.testServerUsagec C s� t |t|d�d�}tjttt�f}t�d|� || d }tj |t
ddd�}| � t |�o^|d � | j
|d|d � | �d
� | �� z"| �t|dd� | �t|d� W 5 | �� | �t|d � | �d � | �d
� X d S )Nr� r� r� r� FTr r r� r� r� r� r� r� r� r� )r� rZ r r r� r� r r) r r r� r� rC r� r� r� r� r� r� �r� rk r� r
r� r% r% r& �testServerStartBackground� s
z,Fail2banServerTest.testServerStartBackgroundc C s� t |dd�}| �tddt|d�� | �dt|d� d � | �� | �tddt|d�d d
t|d �� | �d t|d� d
� | �� tt|d�d��� | �tddt|d�d
t|d�� | �d� | �� t� t|d�� d S )Nr� r� r% ro r r r rW z-xrp r r r rg r r r r� r% r% r& �testServerFailStart� s4 � � �
z&Fail2banServerTest.testServerFailStartc C s� t |dd�}t|d�}| �d� | �t|d� | �d� tt|d�dd d
d d d � | �d
� | �t|d� | jddddd� | �d� | �t|dd� | jddddd� d S )Nr� r� rW z[test-phase 0]z--testz$OK: configuration test is successfulrY r rH �
[broken-jail]�filter = broken-jail-filter�enabled = truez[test-phase 0a]�.Unable to read the filter 'broken-jail-filter'z Errors in jail 'broken-jail'.z ERROR: test configuration failedT�r� z[test-phase 0b]z-tr� )r� rZ r� r� r� r� rP r� )r� rk r� r� r% r% r& �testServerTestFailStart� s0
�
�
�z*Fail2banServerTest.testServerTestFailStartc
s� z�t� t� d�d�}tjttt�f}t� d|� || d }t
j |t ddd�}| � t
|�o`|d � | j� d|d � | �d
� | �� t� d � � W 5 | � t� �� X t
�� fd d
�t � | �tt� d��� | �d� | �� | � t� �� | �d� d S )NzGf2b.log[format="SRV: %(relativeCreated)3d | %(message)s", datetime=off]r� r� r� FTr r r� r� zKill server ... %sc s t t� d�� S )Nrh )r rZ r% �rk r% r& r� 0 r� z7Fail2banServerTest.testKillAfterStart.<locals>.<lambda>rh r� zcleanup: no pidfile for)r� r� r� rZ r r r� r� r r) r r r� rC r� r� r� r3 � assertFalser r" r% r+ r& �testKillAfterStart s( �
z%Fail2banServerTest.testKillAfterStartr� rX r� c
s� t |d�� t |d��t |d��t |d��t�t � d�� d�� fd d
� }d�� ���fdd� }|dd� |dd� |dgdddgd� tt � d�dddddd� t�dfttt�� ��d fd �� t�d� t�d� | �d � t j
j t j
k � r�t�� | �t|d � | jd d dtd!� | �d"� � | �d#� | jd$d%dd&� | jd'd(dtd!� | jd)d*d+dd&� | �d,� |ddgd-� t�d.� t j
j t j
k �r�t�� | �t|d � | jd td/� | jd0d#dd&� | jd"� d"� dd&� | jd1d2dd&� | jd3d4dd&� | jd5d6dd&� | �d7� | �d8� |dgd-� |dd9d d:d d;d d<� | �t|d � | jd td/� | jd0d#dd&� | �d=� | jd1d>dd&� | �d?� | �d@� | �dA� |ddBdC� |ddgd-� | �dD� t�d.fttt�� ��dE fd ttt�� ��dF fd ttt�� ��dG fd ttt�� ��dH fd �� t j
j t j
k �rbt�� | jdIdJdtd!� | jdKdLdMdNdOdPdd&� | jdQdRdSdTdd&� t� t�d.� t�d.� | �dU� | �t|dVdW� | jd dXdIdtd!� | jdYd4dZd[d\d]dd&� | jd^d_dtd!� | jd`dadd&� | �db� | �t|dcdWddde� | �t|dcdWdddf� | jdgdhdtd!� t� | �di� | �t|djdWdddk� | jdldmdedfdtd!� | �dn� | �t|djdodd� | jdpdqdrdldmdtd!� | �ds� | �t|dVdtdW� | jd d4dtd!� | jdYd4dZd[dd&� | jdudvdd&� | �dw� | jdxdydd&� | jdOdPdd&� |ddBdC� |g d-� | �dz� | �t|d do� | jd td/� | jd{d|dd&� | jd}d~ddd&� | �d�� |dgd�� | �t|d � | jd td/� | �d{� | jd�dYdd&� | jd�� d�� dd&� | �d�� t�d.fttt�� ��d� fd ttt�� ��d� fd ttt�� ��d� fd �� t j
j t j
k �r�t�� | jd�d�dtd!� | jd�d�d�d�dd&� | �d�� | �d�� | �t|d�d�d�d�� | jd�d�dtd!� | �d�� | �t|d dt� | jd td/� | jd|d0d�d�d�dd&� | jd�dd#dKdLdMdd&� | �d�� | �t|d�d�d�� | jd�d�dd&� | �d�� |dgd�d�� | �t|d � | jd td/� | jd�d�dd&� | �d�� |dgd�� | �t|d � | jd td/� | �d�� | �t|d�d dW� | jd td/� | �d�� | �� | �t|d�d d�dW� | jd td/� | jd3d4dd&� | �d�� | �t|d�d d�d�� | jd td/� | jd�ddtd!� | �d�� | �t|d�dcdod�d�d�� | �t|d�djdod�� | jd�d�dd&� d S )�NrW � test1.logz test2.logz test3.logrb � test-action1TrH c sj t � dd| �}|s"t�|� d S t|ddddddd d
d d |d
|d|d|d|� tjjtjkrft |� d S )Nrb �%s.confrd rj z_exec_once = 0rH re znorestored = %(_exec_once)sz
restore = zinfo = z<_use_flush_ = echo '[%(name)s] %(actname)s: -- flushing IPs'z6actionstart = echo '[%(name)s] %(actname)s: ** start'z7actionreload = echo '[%(name)s] %(actname)s: .. reload'zMactionban = echo '[%(name)s] %(actname)s: ++ ban <ip> %(restore)s%(info)s'z;actionunban = echo '[%(name)s] %(actname)s: -- unban <ip>'z5actionstop = echo '[%(name)s] %(actname)s: __ stop')
rZ r| r rP r r� r� r r� r� )�actname�allowr� r Zban�unbanr� rL �r� r% r& �_write_action_cfgH s4
�zBFail2banServerTest.testServerReloadTest.<locals>._write_action_cfg�r r
r% �pollingc % s t t� d�ddddddddd d
d dd d
| ddd|kr:dndd|krHdndd|krVdndd� d| krnd� ndd| kr�d� ndd d| kr�dndd| kr�dndddd
| ddd|kr�dndd|kr�dndd� d| kr�dnd�# tjjtjkr�tt� d�� d S ) NrY rd ri rH rj � usedns = no� maxretry = 3zfindtime = 10mzBfailregex = ^\s*failure <F-ERRCODE>401|403</F-ERRCODE> from <HOST>� datepattern = {^LN-BEG}EPOCHzignoreip = 127.0.0.1/8 ::1� [test-jail1]�
backend = �filter =z action = r z* test-action1[name='%(__name__)s']r
zj test-action2[name='%(__name__)s', restore='restored: <restored>', info=', err-code: <F-ERRCODE>']� z� test-action2[name='%(__name__)s', actname=test-action3, _exec_once=1, restore='restored: <restored>', actionflush=<_use_flush_>]�
logpath = z
z@ ^\s*error <F-ERRCODE>401|403</F-ERRCODE> from <HOST>r' z [test-jail2]z� test-action2[name='%(__name__)s', actname=test-action3, _exec_once=1, restore='restored: <restored>'] actionflush=<_use_flush_>]�rP rZ r r� r� r r� r� )�enabled�actions�backend�r� �test1logZtest2logZtest3logr% r& �_write_jail_cfg` sb ���� ���%z@Fail2banServerTest.testServerReloadTest.<locals>._write_jail_cfg)r1 � test-action2r r
r> )rA rB rY r r% r& r' rd z# failure 401 from 192.0.2.1: test 1z[test-phase 1a]r �Reload finished.z1 ticket(s) in 'test-jail1r� zAdded logfile: %rz[test-jail1] Ban 192.0.2.1z-stdout: '[test-jail1] test-action1: ** start'z-stdout: '[test-jail1] test-action2: ** start'r) zPstdout: '[test-jail1] test-action2: ++ ban 192.0.2.1 restored: 0, err-code: 401'zAstdout: '[test-jail1] test-action3: ++ ban 192.0.2.1 restored: 0'r( z)Errors in jail 'broken-jail'. Skipping...z:Jail 'broken-jail' skipped, because of wrong configurationz[test-phase 1b])rB �w+)r� z [test-jail1] Unban 192.0.2.1z.stdout: '[test-jail1] test-action1: .. reload'z.stdout: '[test-jail1] test-action2: .. reload'z Creating new jail 'test-jail2'zJail 'test-jail2' startedz4stdout: '[test-jail1] test-action3: -- flushing IPs'z,stdout: '[test-jail1] test-action3: __ stop'z7stdout: '[test-jail1] test-action3: -- unban 192.0.2.1'z[test-phase 2a]z+ echo '[<name>] %s: started.'z, echo '[<name>] %s: reloaded.'z+ echo '[<name>] %s: stopped.')r1 r� r r� zAdded logfile:z.stdout: '[test-jail1] test-action1: reloaded.'z7stdout: '[test-jail1] test-action2: -- unban 192.0.2.1'z,stdout: '[test-jail1] test-action2: __ stop'z7stdout: '[test-jail1] test-action1: -- unban 192.0.2.1'F)r1 r2 z[test-phase 2b]z# error 403 from 192.0.2.2: test 2z# error 403 from 192.0.2.3: test 2z# failure 401 from 192.0.2.4: test 2z# failure 401 from 192.0.2.8: test 2z2 ticket(s) in 'test-jail2z5 ticket(s) in 'test-jail1z[test-jail1] Ban 192.0.2.2z[test-jail1] Ban 192.0.2.3z[test-jail1] Ban 192.0.2.4z[test-jail1] Ban 192.0.2.8z[test-jail2] Ban 192.0.2.4z[test-jail2] Ban 192.0.2.8z [test-jail2] Found 192.0.2.2z[test-jail2] Ban 192.0.2.2z [test-jail2] Found 192.0.2.3z[test-jail2] Ban 192.0.2.3z[test-phase 2c]r z
test-jail2z Restore BanzJail 'test-jail2' stoppedz [test-jail2] Unban 192.0.2.4z [test-jail2] Unban 192.0.2.8z"[test-jail2] Restore Ban 192.0.2.4z"[test-jail2] Restore Ban 192.0.2.8zPstdout: '[test-jail2] test-action2: ++ ban 192.0.2.4 restored: 1, err-code: 401'zPstdout: '[test-jail2] test-action2: ++ ban 192.0.2.8 restored: 1, err-code: 401'zAstdout: '[test-jail2] test-action3: ++ ban 192.0.2.4 restored: 1'zAstdout: '[test-jail2] test-action3: ++ ban 192.0.2.8 restored: 1'z[test-phase 2d]�set�banipz
192.0.2.21z
192.0.2.22z5stdout: '[test-jail2] test-action3: ++ ban 192.0.2.22z6stdout: '[test-jail2] test-action3: ++ ban 192.0.2.22 z[test-phase 2d.1]r� rG z 192.0.2.4z 192.0.2.8z[test-phase 2d.2]�
test-jail1z 192.0.2.1z 192.0.2.2z 192.0.2.3z[test-phase 2e]z--unbanz7stdout: '[test-jail2] test-action2: -- unban 192.0.2.21z8stdout: '[test-jail2] test-action2: -- unban 192.0.2.22'z4stdout: '[test-jail2] test-action3: -- flushing IPs'z8stdout: '[test-jail2] test-action3: -- unban 192.0.2.21'z8stdout: '[test-jail2] test-action3: -- unban 192.0.2.22'z[test-phase 3]zReload jail 'test-jail1'zJail 'test-jail1' reloadedzReload jail 'test-jail2'zJail 'test-jail2' reloadedzJail 'test-jail1' startedz[test-phase 4])rA zStopping jail 'test-jail2'zRemoved logfile: %rz[test-phase 5]z# failure 401 from 192.0.2.1: test 5z# error 403 from 192.0.2.5: test 5z# failure 401 from 192.0.2.6: test 5z6 ticket(s) in 'test-jail1z%[test-jail1] 192.0.2.1 already bannedz [test-jail1] Found 192.0.2.1z [test-jail1] Found 192.0.2.6z[test-jail1] Ban 192.0.2.6z [test-jail1] Found 192.0.2.5z[test-phase 6]r r3 z 192.0.2.5z 192.0.2.6z192.0.2.5 is not bannedz [test-jail1] Unban 192.0.2.6z[test-phase 7]z [test-jail1] Unban 192.0.2.2z [test-jail1] Unban 192.0.2.3z [test-jail1] Unban 192.0.2.4zJail 'test-jail1' stoppedz[test-phase 7b]�--allzFlush ban listz'Unbanned 0, 0 ticket(s) in 'test-jail1'z[test-phase 8a]zxxx-unknown-backend-zzz)rA rC z0Restart jail 'test-jail1' (reason: 'polling' != zUnknown backend z[test-phase 8b]z[test-phase end-1]z$the jail 'test-jail2' does not existz --if-existsz[test-phase end-2]� --restartz[test-phase end-3]Z addignoreipz 192.0.2.1/32z2001:DB8::1/96Zignoreip)r/ TrH rH rH rH rH )r6 r% r7 )rZ r| r} rP r� r� r r* r� r r� r� r r� r� r� r� r� r0 �assertNotLoggedr1 r� �r� rk r� r5 rF r% rD r& �testServerReloadTest8 sd
�*
�&
�
� � �
� � � � ��
� �
����
���� � ��
� � � ��
� � �
�
�
� � � �� � �
� �
� � �
��� � �
� �
� � �
� �
�
�
� �
� �
� �z'Fail2banServerTest.testServerReloadTestznginx-block-map)�action)�%(tmp)s/blck-failures.log)rb ) z[nginx-blck-lst]rc r8 z#logpath = %(tmp)s/blck-failures.logzRaction = nginx-block-map[blck_lst_reload="", blck_lst_file="%(tmp)s/blck-lst.map"]z� blocklist_de[actionban='curl() { echo "*** curl" "$*";}; <Definition/actionban>', email="Fail2Ban <fail2ban@localhost>", apikey="TEST-API-KEY", agent="fail2ban-test-agent", service=<name>]r= �datepattern = ^Epochz3failregex = ^ failure "<F-ID>[^"]+</F-ID>" - <ADDR>z maxretry = 1r' )r� r� r� c C s� t |d�}dd|i }dd|i }t|dttt�� ��d ttt�� ��d ttt�� ��d ttt�� ��d ttt�� ��d
� | jd d d
ddddtd� t|� t |�}| �
d|� | �
d|� | �
d|� | �
d|� | �
d|� | jdddtd� | � t |ddd d � t|� t |�}| �
d|� | �
d|� | �
d|� | �
d|� | �
d|� | �t � | �d � t|� t |�}| �|d � d S ) NrW rS rk z%(tmp)s/blck-lst.maprI z" failure "125-000-001" - 192.0.2.1z" failure "125-000-002" - 192.0.2.1u1 failure "125-000-003" - 192.0.2.1 (òðåòèé)u1 failure "125-000-004" - 192.0.2.1 (òðåòèé)z" failure "125-000-005" - 192.0.2.1z [nginx-blck-lst] Ban 125-000-001z [nginx-blck-lst] Ban 125-000-002z [nginx-blck-lst] Ban 125-000-003z [nginx-blck-lst] Ban 125-000-004z [nginx-blck-lst] Ban 125-000-005z 5 ticket(s)Tr� z\125-000-001 1;
z\125-000-002 1;
z\125-000-003 1;
z\125-000-004 1;
z\125-000-005 1;
z�stdout: '*** curl --fail --data-urlencode server=Fail2Ban <fail2ban@localhost> --data apikey=TEST-API-KEY --data service=nginx-blck-lst z=stdout: ' --data format=text --user-agent fail2ban-test-agentr3 z 125-000-001z 125-000-002z 125-000-005z5[nginx-blck-lst] Flush ticket(s) with nginx-block-maprH )rZ rP r� r� r r* r� r0 r� rS �assertInr� r� � assertNotInr� Z assertEqual)r� rk r� r� �lgfnZmpfnZmpr% r% r& � testServerActions_NginxBlockMap� s\
� � �
z2Fail2banServerTest.testServerActions_NginxBlockMapz
sendmail-auth)�filter)�%(tmp)s/test.logT)rj zdbmaxmatches = 1)z�test_action = dummy[actionstart_on_demand=1, init="start: %(__name__)s", target="%(tmp)s/test.txt",
actionban='<known/actionban>;
echo "<matches>"; printf "=====\n%%b\n=====\n\n" "<matches>" >> <target>']z[sendmail-auth]rc r8 �logpath = %(tmp)s/test.log�action = %(test_action)sz%filter = sendmail-auth[logtype=short]rT r9 zmaxmatches = 2r' z[sendmail-reject]rc r8 r[ r\ z'filter = sendmail-reject[logtype=short]rT r9 r' )r� r� r� r� c
C s` t |d�}dd|i }dd|i }ttt�� ��d ttt�� ��d ttt�� ��d f}ttt�� ��d ttt�� ��d ttt�� ��d
f}| �d � t|d f|�� | jd
ddtd� t |� t
|�}|d } | � | |� |dd � D ]} | � | |� q�| �d� t|d f|�� | jdddtd� t |� t
|�}|D ]} | � | |� �qD| �d� | �
t|ddd� | jddddtd� t
|�}|d } | �| � | � | |� |dd � D ] } | �| � | � | |� �q�| jd ddtd� t
|�}|d } | �| � | � | |� |dd � D ] } | �| � | � | |� �q | �d � | �t� | �t|�� d S ) NrW rZ rk z%(tmp)s/test.txtz] smtp1 sm-mta[5133]: s1000000000001: [192.0.2.1]: possible SMTP attack: command=AUTH, count=1z] smtp1 sm-mta[5133]: s1000000000002: [192.0.2.1]: possible SMTP attack: command=AUTH, count=2z] smtp1 sm-mta[5133]: s1000000000003: [192.0.2.1]: possible SMTP attack: command=AUTH, count=3z� smtp1 sm-mta[21134]: s2000000000001: ruleset=check_rcpt, arg1=<123@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <123@example.com>... Relaying denied. Proper authentication required.z� smtp1 sm-mta[21134]: s2000000000002: ruleset=check_rcpt, arg1=<345@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <345@example.com>... Relaying denied. Proper authentication required.z� smtp1 sm-mta[21134]: s3000000000003: ruleset=check_rcpt, arg1=<567@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <567@example.com>... Relaying denied. Proper authentication required.z[test-phase sendmail-auth]rI z [sendmail-auth] Ban 192.0.2.1z 1 ticket(s) in 'sendmail-auth'Tr� r r z [test-phase sendmail-reject]z [sendmail-reject] Ban 192.0.2.2z 1 ticket(s) in 'sendmail-reject'z [test-phase restart sendmail-*]r rN rM rH z%[sendmail-auth] Restore Ban 192.0.2.1r� z'[sendmail-reject] Restore Ban 192.0.2.2z[test-phase stop server])rZ r� r� r r* r� rP r� r0 r� rS rV rU r� r� rO r� r, r )
r� rk r� r� rW ZtofnZ smaut_msgZ smrej_msgZtd�mr% r% r& �testServerJails_SendmailA s� (
��
�
�
� �
�
z+Fail2banServerTest.testServerJails_Sendmailc s� t |d�� t |d��t�t � d�� d/� fdd� }d0� �fd d
� }|dd d � |d
dd � |� t�d� | �d� | �t|d� t�dfttt �
� ��d fd �� t � | j dddt
d� t � | �d� td� t � | j ddddt
d� t � | �d � d �t�fd d �� t�dfttt �
� ��d fd �� | j d!d"dt
d� | �d#� | �t|d$d%d&d'� | j d(d)dt
d� d�t � | �d*� td+� t � | j d,dt
d� t � | �d-� | �t|d$d%d&d'� | j d(d.dt
d� d S )1NrW r. rb r/ Tc sH t � dd| �}t|ddddd|r&dndd � tjjtjkrDt|� d S )
Nrb r0 rd rj rH re zeactionban = printf %%s "[%(name)s] %(actname)s: ++ ban <ip> -c <bancount> -t <bantime> : <F-MSG>"ziactionprolong = printf %%s "[%(name)s] %(actname)s: ++ prolong <ip> -c <bancount> -t <bantime> : <F-MSG>"zBactionunban = printf %%b '[%(name)s] %(actname)s: -- unban <ip>')rZ rP r r� r� r r� r� )r1 �prolongrL r4 r% r& r5 � s �� z@Fail2banServerTest.testServerObserver.<locals>._write_action_cfgr7 c s` t t� d�ddddddddd d
d dd d
| dddd� ddd� tjjtjkr\tt� d�� d S )NrY rd ri rH rj r8 r9 z
findtime = 1mz bantime = 5mzbantime.increment = truer: r; r< r= z*action = test-action1[name='%(__name__)s']z* test-action2[name='%(__name__)s']r? zXfailregex = ^\s*failure <F-ERRCODE>401|403</F-ERRCODE> from <HOST>:\s*<F-MSG>.*</F-MSG>$r' r@ )rC )r� rE r% r& rF � s0 �z>Fail2banServerTest.testServerObserver.<locals>._write_jail_cfgF)r1 r_ rG rd z[test-phase 0) time-0]r rI z> failure 401 from 192.0.2.11: I'm bad "hacker" `` $(echo test)r> zDstdout: '[test-jail1] test-action1: ++ ban 192.0.2.11 -c 1 -t 300 : zDstdout: '[test-jail1] test-action2: ++ ban 192.0.2.11 -c 1 -t 300 : r� z[test-phase 1) time+10m]�
z7stdout: '[test-jail1] test-action1: -- unban 192.0.2.11z7stdout: '[test-jail1] test-action2: -- unban 192.0.2.11z0 ticket(s) in 'test-jail1'z[test-phase 2) time+10m]c s � S rQ r% r% )�wakeObsr% r& r� r� z7Fail2banServerTest.testServerObserver.<locals>.<lambda>zC failure 401 from 192.0.2.11: I'm very bad "hacker" `` $(echo test)r
zDstdout: '[test-jail1] test-action1: ++ ban 192.0.2.11 -c 2 -t 300 : zDstdout: '[test-jail1] test-action2: ++ ban 192.0.2.11 -c 2 -t 300 : z"[test-phase 2) time+10m - get-ips]r� rL rK z --with-timez
192.0.2.11z+ 300 =z[test-phase 2) time+11m]r zHstdout: '[test-jail1] test-action2: ++ prolong 192.0.2.11 -c 2 -t 600 : z"[test-phase 2) time+11m - get-ips]z+ 600 =)r/ T)r7 )rZ r| r} rP r� r� r� r� r� r r* r1 r� r0 r, r: rP r% )r� rE ra r& �testServerObserver� s�
� �
�
� �
�
�
�z%Fail2banServerTest.testServerObserverN)r= r> r? � _exec_serverr� r r! r r� r# r$ r* r- r� rQ r r� Zskip_if_cfg_missingrX r^ rb Z_testServerStartStopZtestServerStartStopr% r% r% r& r � sH
; � : �& L
yr )FNrT rU r% rV N)_�
__author__Z
__copyright__Z __license__rw r| ru r r* r� r �os.pathr rZ r r r r � functoolsr Z threadingr Zclientr r r
Zclient.fail2bancmdliner Zclient.fail2banclientr r r Zclient.fail2banserverr rc rH r r Z
server.mytimer Z server.utilsr Zutilsr r r� r r r r r rr r r Zhelpersr r= r� r� Z
getServerPathr� r� Z maxWaitTimer� r0 r� r� r� r� r' r r, r. r1 r: r; rA r� r� rD rF Z
input_commandZ
PRODUCTIONZdumpFiler� rP rS r� r� r� r� r� r� r� r� r r% r% r% r& �<module> s� ,
��� �
�
W
, E` [