mirror of https://github.com/fail2ban/fail2ban
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
106 lines
2.6 KiB
106 lines
2.6 KiB
19 years ago
|
# This file is part of Fail2Ban.
|
||
|
|
#
|
||
|
|
# Fail2Ban is free software; you can redistribute it and/or modify
|
||
|
|
# it under the terms of the GNU General Public License as published by
|
||
|
|
# the Free Software Foundation; either version 2 of the License, or
|
||
|
|
# (at your option) any later version.
|
||
|
|
#
|
||
|
|
# Fail2Ban is distributed in the hope that it will be useful,
|
||
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
# GNU General Public License for more details.
|
||
|
|
#
|
||
|
|
# You should have received a copy of the GNU General Public License
|
||
|
|
# along with Fail2Ban; if not, write to the Free Software
|
||
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
||
|
|
|
||
|
|
# Author: Cyril Jaquier
|
||
|
|
#
|
||
|
|
# $Revision: 1.1 $
|
||
|
|
|
||
|
|
__author__ = "Cyril Jaquier"
|
||
|
|
__version__ = "$Revision: 1.1 $"
|
||
|
|
__date__ = "$Date: 2004/10/10 13:33:40 $"
|
||
|
|
__copyright__ = "Copyright (c) 2004 Cyril Jaquier"
|
||
|
|
__license__ = "GPL"
|
||
|
|
|
||
|
|
from faildata import FailData
|
||
|
|
from failticket import FailTicket
|
||
|
|
from threading import Lock
|
||
|
|
import time, logging
|
||
|
|
|
||
|
|
# Gets the instance of the logger.
|
||
|
|
logSys = logging.getLogger("fail2ban.filter")
|
||
|
|
|
||
|
|
class FailManager:
|
||
|
|
|
||
|
|
def __init__(self):
|
||
|
|
self.lock = Lock()
|
||
|
|
self.failList = dict()
|
||
|
|
self.maxRetry = 3
|
||
|
|
self.maxTime = 600
|
||
|
|
self.failTotal = 0
|
||
|
|
|
||
|
|
def setFailTotal(self, value):
|
||
|
|
self.failTotal = value
|
||
|
|
|
||
|
|
def getFailTotal(self):
|
||
|
|
return self.failTotal
|
||
|
|
|
||
|
|
def setMaxRetry(self, value):
|
||
|
|
self.maxRetry = value
|
||
|
|
|
||
|
|
def getMaxRetry(self):
|
||
|
|
return self.maxRetry
|
||
|
|
|
||
|
|
def setMaxTime(self, value):
|
||
|
|
self.maxTime = value
|
||
|
|
|
||
|
|
def getMaxTime(self):
|
||
|
|
return self.maxTime
|
||
|
|
|
||
|
|
def addFailure(self, ticket):
|
||
|
|
self.lock.acquire()
|
||
|
|
ip = ticket.getIP()
|
||
|
|
unixTime = ticket.getTime()
|
||
|
|
if self.failList.has_key(ip):
|
||
|
|
fData = self.failList[ip]
|
||
|
|
fData.inc()
|
||
|
|
fData.setLastTime(unixTime)
|
||
|
|
else:
|
||
|
|
fData = FailData()
|
||
|
|
fData.inc()
|
||
|
|
fData.setLastTime(unixTime)
|
||
|
|
self.failList[ip] = fData
|
||
|
|
self.failTotal += 1
|
||
|
|
self.lock.release()
|
||
|
|
|
||
|
|
def size(self):
|
||
|
|
return len(self.failList)
|
||
|
|
|
||
|
|
def cleanup(self, time):
|
||
|
|
self.lock.acquire()
|
||
|
|
tmp = self.failList.copy()
|
||
|
|
for item in tmp:
|
||
|
|
if tmp[item].getLastTime() < time - self.maxTime:
|
||
|
|
self.delFailure(item)
|
||
|
|
self.lock.release()
|
||
|
|
|
||
|
|
def delFailure(self, ip):
|
||
|
|
if self.failList.has_key(ip):
|
||
|
|
del self.failList[ip]
|
||
|
|
|
||
|
|
def toBan(self):
|
||
|
|
self.lock.acquire()
|
||
|
|
for ip in self.failList:
|
||
|
|
data = self.failList[ip]
|
||
|
|
if data.getRetry() >= self.maxRetry:
|
||
|
|
self.delFailure(ip)
|
||
|
|
self.lock.release()
|
||
|
|
return FailTicket(ip, data.getLastTime())
|
||
|
|
self.lock.release()
|
||
|
|
raise FailManagerEmpty
|
||
|
|
|
||
|
|
class FailManagerEmpty(Exception):
|
||
|
|
pass
|
||
|
|
|