File: //opt/imunify360/venv/share/imunify360/config_schema/__pycache__/firewall.cpython-38.pyc
U
��-d> � @ s| d dl Z d dlZd dlmZ dZdZdZdZdZdZ dZ
d d
� Z d d � Z d
d� Z
dd� Zdd� Zdd� Zdd� Zdd� ZdS )� N)� HostingPanel�FULL�MINIMAL� � �DENY�ALLOWc C s t �t| �S �N)� functools�partial�max)Zminimum� r
�?/opt/imunify360/venv/share/imunify360/config_schema/firewall.py�
not_less_than s r c C s" t ttdd� | D ���dd� d�S )Nc S s g | ]}|� d d��qS )�:�-)�replace)�.0�vr
r
r �
<listcomp> s z%coerce_sort_ports.<locals>.<listcomp>c S s t | �d�d �S )Nr r )�int�rsplit)r r
r
r �<lambda> � z#coerce_sort_ports.<locals>.<lambda>)�key)�sorted�list�set��valuer
r
r �coerce_sort_ports s �r c C s t � j| | S r )r Z
OPEN_PORTS)�protocol� directionr
r
r �get_default_ports s r# c C sp dd� }t �d|�}|s&|| d� dS ||�d��sB|| d� dS |�d�dk rl||�d��sl|| d� dS dS ) z
{'type': 'boolean'}
c S s dt | � kodkS S )Nr � )r )�portr
r
r �in_range$ s z,_validate_is_port_or_range.<locals>.in_rangez^(\d+)([:|-](\d+))?$z,Port should be integer or range (2-4 or 2:4)Nr z#Port should be within range 0-65535� )�re�match�group)�fieldr �errorr& �portsr
r
r �_validate_is_port_or_range s
r. c s ddt d�� �fdd�td�S )Nr �string)�type�
check_withc s
t �� �S r )r# r �r" �protor
r r : r z list_of_ports.<locals>.<lambda>)r0 �schema�default_setter�coerce)r. r )r3 r" r
r2 r �
list_of_ports3 s � �r7 c C s$ d| kr | d r d| d< d| d< | S )N� php_immunity�KILL�modeT�blamerr
)Zproactive_defenser
r
r �proactive_defense_rules? s ��r< c C s� ddt dddd�dt dddd�d�i d�dd d d
d �d d d
d �d g d
�d�i d�di d tttgd�tdd�tdd�tdd�tdd�ddd
�d�d�ddt tt�fttd�dt tt�fddd�ddt ddd �dt tt�ftd �i d �dd
d
�d �i d�ddd
d
�d tt tgd�dddd �d dd!d"�d#�i d�ddd
d
�dt dd$d�dt dd%d�dt dd&d$d�dt dd$d�d'�i d�ddt d(�ddt dd$d�dt dd%d�d)�d*�d%d+d,�d%d+d,�d-�d �ddt dd.d�dt dd/d�dt dd0d�dt d1d+d�d2�i d�dd d3dig d�d d3dig d�d4�i d�dd5dd6d
�ii d�ddd
d
�dd7d
�dd.d
�dd8d
�d9�i d�dd:d d;d;d<gd�ii d�dd=ddd
�ii d�dt
t fd dd>d?d>d@gdA�ddd
d �dddd �dB�i dC�ddd
d
�ddd
d �d d!d
�d d!d
�dd
d
�ddd
�dD�i d�ddEdddd �ii d�ddFdddd �ii d�dddd
d �ddd
d �dddd �dddd �dG�i d�ddHdddd �ii d�dddd
�d dt d(�dIdJdKgd�d d3d ig d�d d3d idLgd�ddd
�ddd
�dM�i d�dN�S )ON�dict�integerr ip i� )r0 r6 �minr �default)�timeoutZafter_unblock_timeout�r0 r4 r@ r/ T)r0 r@ �nullabler )r0 r@ )Z
eth_deviceZ eth6_deviceZeth_device_skip)r0 r@ �allowed�tcp�in�out�udp�booleanF)Zport_blocking_modeZ TCP_IN_IPv4Z TCP_OUT_IPv4Z UDP_IN_IPv4Z UDP_OUT_IPv4Zinternal_use_remote_iplist)r0 r@ r4 )r0 r6 r? r@ r � r$ )r0 r6 r? r )r0 r6 r? )r0 � keyschema� valueschemar@ )Z
default_limit�intervalZ port_limits�enabled�r0 rC r@ � )r0 �requiredr@ )Zapp_specific_rulesetZrulesetZ!cms_account_compromise_preventionZ
prev_settings� �x � )�enable�
max_incidents� check_periodZseverity_limitZdenied_num_limit)r0 r6 )rV rW )r0 r4 �
)rW rV )i4� i;� �d i�� � � )Znum_days�limitZ
min_log_levelZui_autorefresh_timeoutr0 )Z
http_portsZ https_portsZcert_refresh_timeouti i`T i /
)rN Z
time_frame� max_countrA Z default_moderD ZdeniedZmodsec_directives�LOG�DISABLEDr9 )r0 rC r@ rD )r: r; r8 )r0 r6 r4 r@ )rU Zknown_proxies_supportZcaptcha_site_keyZcaptcha_secret_keyZ
splash_screenZinvisible_captchaZactive_responseZcatch_lfd_events)rU Zexim_dovecot_protectionZexim_dovecot_nativeZftp_protection�edf� iK i� Zmail)rU r- Z allow_usersZ allow_groupsZ allow_localZredirect)ZAUTO_WHITELISTZNETWORK_INTERFACEZFIREWALLZDOSZMOD_SECZMOD_SEC_BLOCK_BY_SEVERITYZ MOD_SEC_BLOCK_BY_CUSTOM_RULEZINCIDENT_LOGGINGZ WEB_SERVICESZCAPTCHAZ CAPTCHA_DOSZ
BLOCKED_PORTSZ
STOP_MANAGING�PROACTIVE_DEFENCEZ WEBSHIELDZOSSECZCSF_INTEGRATIONZPAM�
KERNELCAREZ
SMTP_BLOCKING) r �PORT_BLOCKING_MODE_ALLOW�PORT_BLOCKING_MODE_DENYr7 r �_DOS_DETECTOR_MIN_LIMIT�_DOS_DETECTOR_DEFAULT_LIMIT�_DOS_DETECTOR_MIN_INTERVAL�MODSEC_RULESET_FULL�MODSEC_RULESET_MINIMALr= r< r
r
r
r �get_root_configI s� �������
������
�
�������$�)������������ �$������� ������ ��� � ����� ���� ��� ������������ ��� ��� ��������� ��� �� �����$�� � � �rk c C s. dddddddgd d�d dd d
�d �i d �iS )
Nrb r= r/ Tr_ r^ r9 )r0 rC rD r@ rI rO )r: r; rB r
r
r
r
r �get_non_root_config� s ���
��rl )r
r( Z+defence360agent.subsys.panels.hosting_panelr ri rj rg rf rh re rd r r r# r. r7 r< rk rl r
r
r
r �<module> s(
4