2006-06-26 20:05:00 +00:00
|
|
|
# This file is part of Fail2Ban.
|
|
|
|
#
|
|
|
|
# Fail2Ban is free software; you can redistribute it and/or modify
|
|
|
|
# it under the terms of the GNU General Public License as published by
|
|
|
|
# the Free Software Foundation; either version 2 of the License, or
|
|
|
|
# (at your option) any later version.
|
|
|
|
#
|
|
|
|
# Fail2Ban is distributed in the hope that it will be useful,
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
# GNU General Public License for more details.
|
|
|
|
#
|
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
|
# along with Fail2Ban; if not, write to the Free Software
|
|
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
|
|
|
|
# Author: Cyril Jaquier
|
|
|
|
#
|
2007-10-16 21:01:20 +00:00
|
|
|
# $Revision: 454 $
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
__author__ = "Cyril Jaquier"
|
2007-10-16 21:01:20 +00:00
|
|
|
__version__ = "$Revision: 454 $"
|
|
|
|
__date__ = "$Date: 2006-11-12 11:54:19 +0100 (Sun, 12 Nov 2006) $"
|
2006-06-26 20:05:00 +00:00
|
|
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier"
|
|
|
|
__license__ = "GPL"
|
|
|
|
|
|
|
|
from banticket import BanTicket
|
|
|
|
from threading import Lock
|
2006-10-18 22:30:57 +00:00
|
|
|
from mytime import MyTime
|
2006-10-24 19:40:51 +00:00
|
|
|
import logging
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
# Gets the instance of the logger.
|
|
|
|
logSys = logging.getLogger("fail2ban.action")
|
|
|
|
|
|
|
|
##
|
|
|
|
# Banning Manager.
|
|
|
|
#
|
|
|
|
# Manage the banned IP addresses. Convert FailTicket to BanTicket.
|
|
|
|
# This class is mainly used by the Action class.
|
|
|
|
|
|
|
|
class BanManager:
|
|
|
|
|
|
|
|
##
|
|
|
|
# Constructor.
|
|
|
|
#
|
|
|
|
# Initialize members with default values.
|
|
|
|
|
|
|
|
def __init__(self):
|
|
|
|
## Mutex used to protect the ban list.
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock = Lock()
|
2006-06-26 20:05:00 +00:00
|
|
|
## The ban list.
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__banList = list()
|
2006-06-26 20:05:00 +00:00
|
|
|
## The amount of time an IP address gets banned.
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__banTime = 600
|
2006-06-26 20:05:00 +00:00
|
|
|
## Total number of banned IP address
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__banTotal = 0
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Set the ban time.
|
|
|
|
#
|
|
|
|
# Set the amount of time an IP address get banned.
|
|
|
|
# @param value the time
|
|
|
|
|
|
|
|
def setBanTime(self, value):
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.acquire()
|
|
|
|
self.__banTime = int(value)
|
|
|
|
self.__lock.release()
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Get the ban time.
|
|
|
|
#
|
|
|
|
# Get the amount of time an IP address get banned.
|
|
|
|
# @return the time
|
|
|
|
|
|
|
|
def getBanTime(self):
|
2006-09-17 22:02:22 +00:00
|
|
|
try:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.acquire()
|
|
|
|
return self.__banTime
|
2006-09-17 22:02:22 +00:00
|
|
|
finally:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.release()
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Set the total number of banned address.
|
|
|
|
#
|
|
|
|
# @param value total number
|
|
|
|
|
|
|
|
def setBanTotal(self, value):
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.acquire()
|
|
|
|
self.__banTotal = value
|
|
|
|
self.__lock.release()
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Get the total number of banned address.
|
|
|
|
#
|
|
|
|
# @return the total number
|
|
|
|
|
|
|
|
def getBanTotal(self):
|
2006-09-17 22:02:22 +00:00
|
|
|
try:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.acquire()
|
|
|
|
return self.__banTotal
|
2006-09-17 22:02:22 +00:00
|
|
|
finally:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.release()
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Create a ban ticket.
|
|
|
|
#
|
|
|
|
# Create a BanTicket from a FailTicket. The timestamp of the BanTicket
|
|
|
|
# is the current time. This is a static method.
|
|
|
|
# @param ticket the FailTicket
|
|
|
|
# @return a BanTicket
|
|
|
|
|
|
|
|
@staticmethod
|
|
|
|
def createBanTicket(ticket):
|
2006-09-17 22:53:59 +00:00
|
|
|
ip = ticket.getIP()
|
|
|
|
#lastTime = ticket.getTime()
|
2006-10-18 22:30:57 +00:00
|
|
|
lastTime = MyTime.time()
|
2006-09-17 22:53:59 +00:00
|
|
|
banTicket = BanTicket(ip, lastTime)
|
|
|
|
banTicket.setAttempt(ticket.getAttempt())
|
|
|
|
return banTicket
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Add a ban ticket.
|
|
|
|
#
|
|
|
|
# Add a BanTicket instance into the ban list.
|
|
|
|
# @param ticket the ticket
|
|
|
|
# @return True if the IP address is not in the ban list
|
|
|
|
|
|
|
|
def addBanTicket(self, ticket):
|
2006-09-17 22:02:22 +00:00
|
|
|
try:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.acquire()
|
2006-09-17 22:31:55 +00:00
|
|
|
if not self.__inBanList(ticket):
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__banList.append(ticket)
|
|
|
|
self.__banTotal += 1
|
2006-09-17 22:02:22 +00:00
|
|
|
return True
|
|
|
|
return False
|
|
|
|
finally:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.release()
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
|
|
|
|
##
|
|
|
|
# Get the size of the ban list.
|
|
|
|
#
|
|
|
|
# @return the size
|
|
|
|
|
|
|
|
def size(self):
|
2006-09-17 22:02:22 +00:00
|
|
|
try:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.acquire()
|
|
|
|
return len(self.__banList)
|
2006-09-17 22:02:22 +00:00
|
|
|
finally:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.release()
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Check if a ticket is in the list.
|
|
|
|
#
|
|
|
|
# Check if a BanTicket with a given IP address is already in the
|
|
|
|
# ban list.
|
|
|
|
# @param ticket the ticket
|
|
|
|
# @return True if a ticket already exists
|
|
|
|
|
2006-09-17 22:31:55 +00:00
|
|
|
def __inBanList(self, ticket):
|
2006-09-19 20:38:32 +00:00
|
|
|
for i in self.__banList:
|
2006-09-17 22:31:55 +00:00
|
|
|
if ticket.getIP() == i.getIP():
|
|
|
|
return True
|
|
|
|
return False
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Get the list of IP address to unban.
|
|
|
|
#
|
|
|
|
# Return a list of BanTicket which need to be unbanned.
|
|
|
|
# @param time the time
|
|
|
|
# @return the list of ticket to unban
|
|
|
|
|
|
|
|
def unBanList(self, time):
|
2006-09-17 22:02:22 +00:00
|
|
|
try:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.acquire()
|
2006-09-25 20:46:21 +00:00
|
|
|
# Permanent banning
|
|
|
|
if self.__banTime < 0:
|
2006-11-12 10:54:19 +00:00
|
|
|
return list()
|
|
|
|
|
|
|
|
# Gets the list of ticket to remove.
|
|
|
|
unBanList = [ticket for ticket in self.__banList
|
|
|
|
if ticket.getTime() < time - self.__banTime]
|
|
|
|
|
|
|
|
# Removes tickets.
|
|
|
|
self.__banList = [ticket for ticket in self.__banList
|
|
|
|
if ticket not in unBanList]
|
|
|
|
|
|
|
|
return unBanList
|
2006-09-17 22:02:22 +00:00
|
|
|
finally:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.release()
|
2006-06-26 20:05:00 +00:00
|
|
|
|
|
|
|
##
|
|
|
|
# Flush the ban list.
|
|
|
|
#
|
|
|
|
# Get the ban list and initialize it with an empty one.
|
|
|
|
# @return the complete ban list
|
|
|
|
|
|
|
|
def flushBanList(self):
|
2006-09-17 22:02:22 +00:00
|
|
|
try:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.acquire()
|
|
|
|
uBList = self.__banList
|
|
|
|
self.__banList = list()
|
2006-09-17 22:02:22 +00:00
|
|
|
return uBList
|
|
|
|
finally:
|
2006-09-19 20:38:32 +00:00
|
|
|
self.__lock.release()
|