/usr/lib/python3/dist-packages/fail2ban/tests/__pycache__
Edit: /usr/lib/python3/dist-packages/fail2ban/tests/__pycache__/fail2banclienttestcase.cpython-310.pyc (43294B)
o
;s*b @ s d Z dZdZddlZddlZddlZddlZddlZddlZddl Z ddl
m Z m
Z
mZmZmZ ddlmZ ddlmZ dd lmZmZmZ dd
lmZ dd lm Z m Z m Z dd l m!Z!m Z" dd
l#m$Z$ ddl%m%Z% ddl&m'Z' ddl(m)Z) ddl*m+Z+m,Z-m.Z.m/Z/m0Z0m1Z1m2Z3m4Z4m5Z5 ddl6m7Z7 e7e8Z,dZ9dZ:ee!; Z
e j=j?Z?e j=>e j=j@Z@e?d e_?e, e_, e_,e_,e%jAZBe%jCZDdd ZEeE e_F e_F e_Fe$_Fdd ZGe%jHZHdd ZIe@fd d ZJG d d d ejKZKG d d! d!ejKZLeKZMeLZNg aOd"d# ZPePe_Qd$ e_Re_Re+jSZTd%d& ZUd'd( ZV , d?d-d.ZWd/d0 ZXd1d2 ZYd3d4 ZZd5d6 Z[i fd7d8Z\G d9d: d:e+Z]G d;d< d d>e]Z_dS )@z Serg BresterzICopyright (c) 2014- Serg G. Brester (sebres), 2008- Fail2Ban ContributorsGPL N)joinisdirisfileexistsdirnamewraps)Thread )fail2banclientfail2banserverfail2bancmdline)Fail2banCmdLine)exec_command_lineCSocket
VisualWait)Fail2banServerr )protocol)server)MyTime)Utils ) LogCaptureTestCaselogSys with_tmpdirshutilloggingSTOCK
CONFIG_DIRTEST_NOWtearDownMyTime) getLoggerzfail2ban-clientzfail2ban-serverc G s t | d d S Nr )r infoargs r' G/usr/lib/python3/dist-packages/fail2ban/tests/fail2banclienttestcase.py _test_outputJ s r) c C s& t d| tt | d d S )Nz===>>> time shift + %s min< )r debugr setTimetime)shiftr' r' r( _time_shiftQ s r/ c C s. t jdurt jt t jtd dS dS )z$Helper to wait observer becomes idleN ) ObserversMain
wait_empty MID_WAITTIME wait_idler' r' r' r( _observer_wait_idleY s
r6 c s2 t jdurt jj fdd}|t j_dS dS )zOHelper to block observer before increase bantime until some condition gets trueNc s: t j_td t td | i | d S )Nz4 [Observer::banFound] *** observer blocked for testz. [Observer::banFound] +++ observer runs again)r1 r2 banFoundr r+ r wait_forr& kwargs
_obs_banFoundcondtimeoutr' r( _banFoundd s
z0_observer_wait_before_incrban.._banFound)r1 r2 r7 )r= r> r? r' r; r( _observer_wait_before_incrban_ s
r@ c @ e Zd ZdZdS )
ExitExceptionz Exception upon a normal exitN__name__
__module__ __qualname____doc__r' r' r' r( rB t rB c @ rA )FailExitExceptionz Exception upon abnormal exitNrC r' r' r' r( rI y rH rI c G s t tr tdS dS )Nr exit)lenINTERACTpopr% r' r' r( _test_input_command s
rN Fc G s2 t | |}|d||rdnd | d S )N
)openwriter close)fnmodelinesfr' r' r( _write_file s
rX c C s> d }zt | }| W |d ur| S S |d ur | w w N)rQ readrS )rT rW r' r' r(
_read_file s
r[ /dev/null:memory:r' rP c C s t | d}|dkrt | d}d} |r}tr}dd }
tjt||
d |d u s,J dt| |d u r2d }td
} tj t |d d d
D ]} |
d} | | rOd} t | qAtd} tj t |dd d
D ]} |
d} | | rqd} t | qc|rzdnd} n*t
| tt |d dddd|dd ddt | d d t | d dd | d d!d
| rtt || dgd"dd#d$| df| R |rtt |d%dg|R tjjtjk rtt |d tt |d |rtt |d% | r| dkrtt || |rtr|D ]}
t
t
jt t|
t ||
q|r%|D ]
}
t|
d&| i dd qd'\}}tjjtjk rGttjj}tjj d(krGd)d*tjj f}|d+|f }d,|d-t | d d.t | d d/|f| d0dd1tt j f S )2Nconfigautozf2b-db.sqlite3 jail.confc s fdd|D S )z?Filters list of 'files' to contain only directories (under dir)c s g | ] }t t |r|qS r' )r pjoin).0rW dirr' r(
s z2_start_params..ig_dirs..r' )re filesr' rd r( ig_dirs s z _start_params..ig_dirs)ignorez?We are about to overload use_stock_cfg from the one provided %s)action.dzfilter.dz ^dbfile\s*=z
fail2ban.confT)inplacerO zdbfile = :memory:z ^backend\s*=backend = pollingz
jail.localrP w [Definition]zloglevel = INFOz logtarget = %z%%zsyslogsocket = autoz socket = f2b.sockz
pidfile = f2b.pidz dbfile = zdbmaxmatches = 100zdbpurgeage = 1d
[INCLUDES] [DEFAULT]ztmp = zfail2ban.localtmp)r' INFOr -vz
--loglevel-c-sz-p --logtargetz--syslogsocketz --timeout) rb r r copytreeSTOCK_CONF_DIRreprrecompile fileinputinputrstripmatchprintosmkdirrX replaceunittestF2B log_levelr DEBUG _out_filesymlinkpathabspathru str verbosityr MAX_WAITTIME)rt use_stock
use_stock_cfg logtargetdb f2b_localjailscreate_before_startcfgj_confrh rlinenvvvllevr' r' r(
_start_params s
"
r c C s. z | | dd dkW S ty Y dS w )Nrz r INHERITEDF)index
ValueError startparamsr' r' r( _inherited_log s
r c
C sX d }zt | }td| }t|W S ty+ } z t| W Y d }~|S d }~ww )Nz\S+)r[ r~ r groupint Exceptionr r+ )pidfilepider' r' r( _get_pid_from_file s
r c
sf t d| t| f t| r | }t|d} t| s t|d} tjjtj k r:t|d}t|r3t
| nt dd| t| sFt d| dS t d | t | d u rVd
S zDt d d ksg t
krotd
| f t swW dS t
tj t fdddst
tj t d t W S ty } z t | W Y d }~dS d }~ww )Nz cleanup: %rrq z fail2ban.pidf2b.logr0 z
no logfile %rzcleanup: no pidfile for %rTzcleanup pidfile: %rFzcleanup pid: %rr zpid %s of %s is invalidc s t S rY )r
pid_existsr' r r' r( + z_kill_srv..r cleanup: kill ready)r r+ r rb r r r r r r r logr r getpidr r r killsignalSIGTERMr8 SIGKILLr exception)r piddirlogfiler r' r r( _kill_srv sD
r c s t fdd}|S )zHelper to decorate tests which receive in the last argument tmpdir to pass to kill_srv
To be used in tandem with @with_tmpdir
c s. |d }z
| g|R W t | S t | w )N)r )selfr& r rW r' r( wrapper: s z with_kill_srv..wrapperr rW r r' r r(
with_kill_srv5 s r c s fdd}|S )z}Helper to decorate tests uses foreground server (as thread), started directly in test-cases
To be used only in subclasses
c s t t fdd}|S )Nc
s d }t zz|tfdditdj fd}d|_| ttff fdd }|_t
fdd t
d
d jd d td g|R i |W W |rtd
dd r| t S ty } ztd| }|rtd| d }~ww |rtd
dd r| t w )Nr r _TestCaseWorker)nametargetr& Tc s t dd s tjtds t fddt dd sE | d t fddt
dd j ddd t
d
d d _
d S ) Nendrq c dd d uS Nr getr' phaser' r( r _ zywith_foreground_server_thread.._deco_wrapper..wrapper.._stopAndWaitForServerEnd..stopc r r r r' r r' r( r d r Shutdown successfulzExiting Fail2banTallwaitc _ d S rY r' r9 r' r' r( r h )r! r r r r rb r r8 r4 execCmdr
assertTrue assertLoggedstopAndWaitForServerEndcoder r r rt r' r( _stopAndWaitForServerEnd[ s zgwith_foreground_server_thread.._deco_wrapper..wrapper.._stopAndWaitForServerEndc r )Nstartr r' r r' r( r k r zWwith_foreground_server_thread.._deco_wrapper..wrapper..r )r r z === within server: begin ===z === within server: end. ===r z=== Catch an exception: %sz#=== Error of server, log: ===
%s===)dictr r
_testStartForegrounddaemonr SUCCESSFAILEDr r r8 r r r
_wait_for_srv DefLogSysr$ pruneLogr r! r r getLog)r rt r& r: thr r r )rW
startextrar r( r I sT
zEwith_foreground_server_thread.._deco_wrapper..wrapper)r r r r r r(
_deco_wrapperH s :z4with_foreground_server_thread.._deco_wrapperr' )r r r' r r( with_foreground_server_threadC s >r c @ sp e Zd ZejZdd Zdd Zdd Ze ddd Z
dd d
Z dd Z dd Z
dd Zeddiddd Zd S )Fail2banClientServerBasec O r rY r' )r r& r: r' r' r( _setLogLevel s z%Fail2banClientServerBase._setLogLevelc C s( t | dt_tjt_t| jt _
dS )z Call before every test case.r N) r setUpr
DEF_LOGTARGETr level DEF_LOGLEVEL staticmethod
_test_exitr _exitr r' r' r( r s
z Fail2banClientServerBase.setUpc C s( | j t_tt_tt_t | t
dS )zCall after every test case.N)
_orig_exitr r SRV_DEF_LOGTARGETr r SRV_DEF_LOGLEVELr r tearDownr! r r' r' r( r s
z!Fail2banClientServerBase.tearDownr c C s | dkrt t r# )rB rI r r' r' r( r s z#Fail2banClientServerBase._test_exitTNc s si z:t |dt fddt}|r dr#td|f |r9tfddt}|s.r z9Unexpected: Socket file does not exists.
Start failed: %rc s d v S )N Server ready)r r' r r' r( r r zBUnexpected: Server ready was not found, phase %r.
Start failed: %rz,=== Error by wait fot server, log: ===
%s===r z*No log file %s to examine details of error)rb r r8 r r r r r r r r r r r+ )r rt readyr r retr r' )r r r r( r s>
z&Fail2banClientServerBase._wait_for_srvc G s* | || jd | jdd | | d S )Nr r ) assertRaisesr )r exitTyper r& r' r' r( r s z Fail2banClientServerBase.execCmdc G s: || dd }t|}z
||W | S | w )Nry r )r r sendrS )r r r& r sr' r' r(
execCmdDirect s
z&Fail2banClientServerBase.execCmdDirectc C sb t d d|d< z| td| d W d|d< d|d< t d d S d|d< d|d< t d w )Nzstart of test workerTr )z-fFr zend of test worker)r r+ r r )r rt r r r' r' r( r s
z-Fail2banClientServerBase._testStartForegroundr )z[Thread]zstacksize = 128r c C sR | | t|dd | d | t|d | t|d | t|dd d S )Nr threadz{'stacksize': 128}ping~~unknown~cmd~failed~~echo TEST-ECHO)r r r r r r rt r r' r' r( testStartForeground s
z,Fail2banClientServerBase.testStartForeground)r )TNN)rD rE rF r r r r r r r r r r r r r r r' r' r' r( r s
r c @ st e Zd ZeefZdd Zdd Zedd Z ee
dd Z ee
d d
Z ee
d d Z
ed
d Zdd ZdS )Fail2banClientTestc C s, | tttt | tttt d S rY )r r rb BINCLIENTSERVERr r' r' r( testConsistency s z"Fail2banClientTest.testConsistencyc C s | tdd | dt | d | | tdd | t | | tddd | dtj | | tdd d
| d d S ) Nr' -hUsage: Report bugs to z-Vz-vqz --versionz
Fail2Ban vz --str2sec1d12h30m131400)r r r r r r normVersionversionr r' r' r( testClientUsage s
z"Fail2banClientTest.testClientUsagec C sP t |d}| t|d | d | d | | t|d | d d S )NTz-vvdz
Loading filesz['set', 'logtarget',z--dp)r r r r r r
r' r' r( testClientDump s
z!Fail2banClientTest.testClientDumpc C s t |d}| td| d | j|d|d | d | d z8| t|dd | t|d | | td| d | d
W | | t|d | d | d n| | t|d | d | d w | | t|d | d
| d d S )NTz-br r r Exit with code 0r r r zServer already runningr r z Failed to access socket pathzIs fail2ban running?)r r r r r r r r
r' r' r( testClientStartBackgroundInside s.
z2Fail2banClientTest.testClientStartBackgroundInsidec C s t |t|dd}tjjr| t|d n0tjtt t
f}t d| || d }t
j|tddd}| t|o<|d | j|d|d
| d | z| t|d d
| d
| d | | t|dd | d | tt|d}z t|tj tt
j | t |dd W t|tj nt|tj w | d | t g d7 a | t|d | d | dd | d | t g d7 a | t|d | d | d | d | d | t d d g7 a | t|d | d | | t |d d! | d | d" | W | | t|d# | d | d d S | | t|d# | d | d w )$Nr r )r Start %s ...)--asyncr FTr> shelloutputr r r r r r r z0.1zServer replied: pongrq z1e-10z timed out)zecho INTERACT-ECHOstatusrJ z-iz
INTERACT-ECHOStatuszNumber of jail:)reloadrestartrJ zReading config files:r z reload ~~unknown~jail~fail~~rJ z@Failed during configuration: No section: '~~unknown~jail~fail~~'r% z~~unknown~jail~fail~~zExit with code 255r ) r rb r r fastr r sys
executabler
r r r+ r
executeCmdr r rK r r r r r r r SIGSTOPr- sleepDEFAULT_SHORT_INTERVALr SIGCONTrL )r rt r cmdr r r' r' r( testClientStartBackgroundCall2 sv
z0Fail2banClientTest.testClientStartBackgroundCallc C s t |dd}| tdddt|dd | dt|d d | | tddt|d
d t|d d
| d | tt|d d | tdddt|d
d t|d d | d | t t|d | tdd | d | d S )Nr r r' r rx missr Base configuration directory does not existr_ ry rp r% Could not find serveraLFail2ban seems to be in unexpected state (not running but the socket exists)r
r r r rb r r rQ rS r remover
r' r' r( testClientFailStart s*
z&Fail2banClientTest.testClientFailStartc C sX t |dd}| t|dd | d | | t|dddd | d | d S ) Nr r r% jailr4 r z--xxxz"Unexpected argument(s) for reload:)r r r r r r
r' r' r( testClientFailCommands s
z)Fail2banClientTest.testClientFailCommandsc C sn d}dD ]0}d}t |d }|r%| |r tjjs t| |d8 }|sW d n1 s/w Y qd S )NgQ ?)r r r0 r )r heartbeatr r r' r- r, )r sleeptimeverbosecntrvisr' r' r( testVisualWait s
z!Fail2banClientTest.testVisualWaitN)rD rE rF _exec_clientr r r r r r r r r0 r9 r; rB r' r' r' r( r s$
T
r c @ s e Zd ZeefZdd Zeedd Z eedd Z
eedd Z ed d
Z e
d d id
dd Zejjdde
ddddd
dd Zejjdde
ddd d d d
d d Ze
d!d" Zd(S ))Fail2banServerTestc C s* | tdd | dt | d d S )Nr' r r r )r r r r r r' r' r( testServerUsage s z"Fail2banServerTest.testServerUsagec C s t |t|dd}tjtttf}td| || d }tj |t
ddd}| t |o/|d | j
|d|d | d
| z'| t|d d | t|d
W | | t|d | d | d d S | | t|d | d | d w )Nr r r r FTr r r r r r r r r r )r rb r( r) r
r r r+ r r* r r rK r r r r r r r rt r r/ r r' r' r( testServerStartBackground s(
z,Fail2banServerTest.testServerStartBackgroundc
C s t |dd}| tddt|d | dt|d d | tt|dd | tddt|d
d t|d | d | t t|d d S )
Nr r r' rx r1 r2 r3 rp r5 r_ ry r6 r7 r
r' r' r( testServerFailStart s
z&Fail2banServerTest.testServerFailStartc C s t |dd}t|d}| d | t|d | d tt|ddd d
d d d | d
| t|d | jddddd | d | t|dd | jddddd d S )Nr r r_ z[test-phase 0]z--testz$OK: configuration test is successfulra r5 rP
[broken-jail]filter = broken-jail-filterenabled = truez[test-phase 0a].Unable to read the filter 'broken-jail-filter'z Errors in jail 'broken-jail'.z ERROR: test configuration failedTr z[test-phase 0b]z-tr )r rb r r r r rX r )r rt r r r' r' r( testServerTestFailStart s(
z*Fail2banServerTest.testServerTestFailStartc
s
zQt t dd}tjtttf}td| || d }tj |t
ddd}| t |o0|d | j
d|d | d
| td W | t n| t w t fd d
t
| tt d | d | | t | d d S )NzGf2b.log[format="SRV: %(relativeCreated)3d | %(message)s", datetime=off]r r r FTr r r r zKill server ... %sc s t t d S )Nrq )r rb r' rt r' r( r - r z7Fail2banServerTest.testKillAfterStart..rq r zcleanup: no pidfile for)r rb r( r) r
r r r+ r r* r r rK r r r r r8 assertFalser rF r' rO r( testKillAfterStart s(
z%Fail2banServerTest.testKillAfterStartr r` r c s
t |d t |dt |dt |dtt d dȇ fd d
}dɇ fdd }|dd |dd |dgg dd tt ddddddd tdgttt d fd R td td | d t j
j t j
k r}t | t|d | jd d dtd! | d" | d# | jd$d%dd& | jd'd(dtd! | jd)d*d+dd& | d, |dd-gd. td/ t j
j t j
k rt | t|d | jd td0 | jd1d#dd& | jd" d" dd& | jd2d3dd& | jd4d5dd& | jd6d7dd& | d8 | d9 |dgd. |dd:d d;d d | jd2d?dd& | d@ | dA | dB |ddCdD |d-d gd. | dE td/gttt dF fd ttt dG fd ttt dH fd ttt dI fd R t j
j t j
k rt | jdJdKdtd! | t|dLdMdNdO | jdPtd0 | jdQdRdSdTdUdVdWdd& | jdXdYdZd[dd& t | | |d\d]d^g d_idMg d`igf | | |d\dadbdcd]d^gd^dMgg gf | | |ddd^d\d g d_ | | |dddMd\d g d` | | |ddd^d\ded d | | |ddd^d\dOd d] | | |ddd^d\dedOd dd]g td/ td/ | df | t|dgdM | jd dhdPdtd! | jdidjdkdld5dmdndodd& | jdpdqdtd! | jdrdsdd& | dt | t|dLdMdNdu | t|dLdMdNdv | jdwdxdtd! t | dy | t|dddMdNdz | jdbd{dudvdtd! | d| | t|ddd^dN | jdad}dedbd{dtd! | d~ | t|dgddM | jd d5dtd! | jdld5didjdkdd& | jdddd& | d | jdddd& | jdUdVdd& |ddCdD |g d. | d | t|d d^ | jd td0 | jdddd& | jddddd& | d |dgd | t|d | jd td0 | d | jddldd& | jd d dd& | d td/gttt d fd ttt d fd ttt d fd R t j
j t j
k rt | jdddtd! | jdddddd& | d | d | t|dddd | jdddtd! | d | t|ddd | jdddtd! | t|dddd | jdddtd! | d | t|ddLd^dNdd | jdddtd! | t|ddLd^dd | jdddtd! | d | t|d d | jd td0 | jdd1ddd& | jddd#dSdd& | d | t|ddd | jdddd& | d |dgdd | t|d | jd td0 | jdddd& | d |dgd | t|d | jd td0 | d | t|dd dM | jd td0 | d | | t|dd ddM | jd td0 | jd4d5dd& | d | t|dd dd | jd td0 | jdddtd! | dá | t|ddLd^dddơ | t|dddd^dǡ | jdddd& d S )Nr_ test1.logz test2.logz test3.logrj test-action1TrP c sn t dd| }|st| d S t|ddddddd d
d d |d
|d|d|d| tjjtjkr5t | d S d S )Nrj %s.confrm rs z_exec_once = 0rP rn znorestored = %(_exec_once)sz
restore = zinfo = z<_use_flush_ = echo '[%(name)s] %(actname)s: -- flushing IPs'z6actionstart = echo '[%(name)s] %(actname)s: ** start'z7actionreload = echo '[%(name)s] %(actname)s: .. reload'zMactionban = echo '[%(name)s] %(actname)s: ++ ban %(restore)s%(info)s'z;actionunban = echo '[%(name)s] %(actname)s: -- unban 'z5actionstop = echo '[%(name)s] %(actname)s: __ stop')
rb r r8 rX r r r r r r )actnameallowr r% banunbanr rT r r' r( _write_action_cfgE s,
zBFail2banServerTest.testServerReloadTest.._write_action_cfgr r r' pollingc sP t g t dddddddddd d
d dd d
| ddd|v r/dndd|v r7dndd|v r?dndd d| v rMd ndd| v rWd ndd d| v radndd| v ridndddd
| ddd|v r}dndd|v rdndd d| v rdndR tjjtjkrtt d d S d S )Nra rm rr rP rs usedns = no maxretry = 3zfindtime = 10mzBfailregex = ^\s*failure 401|403 from datepattern = {^LN-BEG}EPOCHzignoreip = 127.0.0.1/8 ::1 [test-jail1]
backend = filter =z action = r z* test-action1[name='%(__name__)s']r zj test-action2[name='%(__name__)s', restore='restored: ', info=', err-code: '] z test-action2[name='%(__name__)s', actname=test-action3, _exec_once=1, restore='restored: ', actionflush=<_use_flush_>]
logpath = z
z@ ^\s*error 401|403 from rK z [test-jail2]rX rb r r r r r r )enabledactionsbackendr test1logtest2logtest3logr' r( _write_jail_cfg] s
!"#%z@Fail2banServerTest.testServerReloadTest.._write_jail_cfg)rU test-action2r )r r rc )rf rg ra r5 rI rJ rK rm z# failure 401 from 192.0.2.1: test 1rc z[test-phase 1a]r% Reload finished.z1 ticket(s) in 'test-jail1r zAdded logfile: %rz[test-jail1] Ban 192.0.2.1z-stdout: '[test-jail1] test-action1: ** start'z-stdout: '[test-jail1] test-action2: ** start'rM zPstdout: '[test-jail1] test-action2: ++ ban 192.0.2.1 restored: 0, err-code: 401'zAstdout: '[test-jail1] test-action3: ++ ban 192.0.2.1 restored: 0'rL z)Errors in jail 'broken-jail'. Skipping...z:Jail 'broken-jail' skipped, because of wrong configurationz[test-phase 1b]r )rg w+r z [test-jail1] Unban 192.0.2.1z.stdout: '[test-jail1] test-action1: .. reload'z.stdout: '[test-jail1] test-action2: .. reload'z Creating new jail 'test-jail2'zJail 'test-jail2' startedz4stdout: '[test-jail1] test-action3: -- flushing IPs'z,stdout: '[test-jail1] test-action3: __ stop'z7stdout: '[test-jail1] test-action3: -- unban 192.0.2.1'z[test-phase 2a]z+ echo '[] %s: started.'z, echo '[] %s: reloaded.'z+ echo '[] %s: stopped.')rU r r% r zAdded logfile:z.stdout: '[test-jail1] test-action1: reloaded.'z7stdout: '[test-jail1] test-action2: -- unban 192.0.2.1'z,stdout: '[test-jail1] test-action2: __ stop'z7stdout: '[test-jail1] test-action1: -- unban 192.0.2.1'F)rU rV z[test-phase 2b]z# error 403 from 192.0.2.2: test 2z# error 403 from 192.0.2.3: test 2z# failure 401 from 192.0.2.4: test 2z# failure 401 from 192.0.2.8: test 2z2 ticket(s) in 'test-jail2z5 ticket(s) in 'test-jail1setz
test-jail2banip 192.0.2.9z3 ticket(s) in 'test-jail2z[test-jail1] Ban 192.0.2.2z[test-jail1] Ban 192.0.2.3z[test-jail1] Ban 192.0.2.4z[test-jail1] Ban 192.0.2.8z[test-jail2] Ban 192.0.2.4z[test-jail2] Ban 192.0.2.8z[test-jail2] Ban 192.0.2.9z [test-jail2] Found 192.0.2.2z[test-jail2] Ban 192.0.2.2z [test-jail2] Found 192.0.2.3z[test-jail2] Ban 192.0.2.3bannedr
test-jail1) 192.0.2.4 192.0.2.1 192.0.2.8 192.0.2.3 192.0.2.2)rw rt ry rx rw z 192.0.2.222r rz z[test-phase 2c]r& z Restore Banz [test-jail2] Unban 192.0.2.4z [test-jail2] Unban 192.0.2.8z [test-jail2] Unban 192.0.2.9zJail 'test-jail2' stoppedz"[test-jail2] Restore Ban 192.0.2.4z"[test-jail2] Restore Ban 192.0.2.8z"[test-jail2] Restore Ban 192.0.2.9zPstdout: '[test-jail2] test-action2: ++ ban 192.0.2.4 restored: 1, err-code: 401'zPstdout: '[test-jail2] test-action2: ++ ban 192.0.2.8 restored: 1, err-code: 401'zAstdout: '[test-jail2] test-action3: ++ ban 192.0.2.4 restored: 1'zAstdout: '[test-jail2] test-action3: ++ ban 192.0.2.8 restored: 1'z[test-phase 2d]z
192.0.2.21z
192.0.2.22z5stdout: '[test-jail2] test-action3: ++ ban 192.0.2.22z6stdout: '[test-jail2] test-action3: ++ ban 192.0.2.22 z[test-phase 2d.1]rO ry z[test-phase 2d.2]r{ z[test-phase 2e]z--unbanz7stdout: '[test-jail2] test-action2: -- unban 192.0.2.21z8stdout: '[test-jail2] test-action2: -- unban 192.0.2.22'z4stdout: '[test-jail2] test-action3: -- flushing IPs'z8stdout: '[test-jail2] test-action3: -- unban 192.0.2.21'z8stdout: '[test-jail2] test-action3: -- unban 192.0.2.22'z[test-phase 3]zReload jail 'test-jail1'zJail 'test-jail1' reloadedzReload jail 'test-jail2'zJail 'test-jail2' reloadedzJail 'test-jail1' startedz[test-phase 4])rf zStopping jail 'test-jail2'zRemoved logfile: %rz[test-phase 5]z# failure 401 from 192.0.2.1: test 5z# error 403 from 192.0.2.5: test 5z# failure 401 from 192.0.2.6: test 5z6 ticket(s) in 'test-jail1z%[test-jail1] 192.0.2.1 already bannedz [test-jail1] Found 192.0.2.1z [test-jail1] Found 192.0.2.6z[test-jail1] Ban 192.0.2.6z [test-jail1] Found 192.0.2.5z[test-phase 6a]r rX z 192.0.2.5z 192.0.2.6z192.0.2.5 is not bannedz [test-jail1] Unban 192.0.2.6z[test-phase 6b]z 192.0.2.2/31z [test-jail1] Unban 192.0.2.2z [test-jail1] Unban 192.0.2.3z 192.0.2.8/31z192.0.2.100/31z [test-jail1] Unban 192.0.2.8z 192.0.2.100/31 is not bannedz[test-phase 6c]z
192.0.2.96/28z192.0.2.112/28z [test-jail1] Ban 192.0.2.96/28z [test-jail1] Ban 192.0.2.112/28unbanipz
192.0.2.64/26z [test-jail1] Unban 192.0.2.96/28z![test-jail1] Unban 192.0.2.112/28z[test-phase 7]z [test-jail1] Unban 192.0.2.4zJail 'test-jail1' stoppedz[test-phase 7b]--allzFlush ban listz'Unbanned 0, 0 ticket(s) in 'test-jail1'z[test-phase 8a]zxxx-unknown-backend-zzz)rf rh z0Restart jail 'test-jail1' (reason: 'polling' != zUnknown backend z[test-phase 8b]z[test-phase end-1]z$the jail 'test-jail2' does not existz --if-existsz[test-phase end-2] --restartz[test-phase end-3] addignoreipz 192.0.2.1/32z2001:DB8::1/96ignoreip)rS TrP rP rP rP rP )r[ r' r\ )rb r r rX r r r r- r r r r r r r r r r r4 assertNotLoggedr6 assertSortedEqualr assertEqualr )r rt r rZ rm r' ri r( testServerReloadTest5 sZ
*
(
z'Fail2banServerTest.testServerReloadTestznginx-block-map)action)%(tmp)s/blck-failures.log)rj ) z[nginx-blck-lst]rl r] z#logpath = %(tmp)s/blck-failures.logzRaction = nginx-block-map[blck_lst_reload="", blck_lst_file="%(tmp)s/blck-lst.map"]z blocklist_de[actionban='curl() { echo "*** curl" "$*";}; ', email="Fail2Ban ", apikey="TEST-API-KEY", agent="fail2ban-test-agent", service=]rb datepattern = ^Epochz3failregex = ^ failure "[^"]+" - z maxretry = 1rK )r r r c C s t |d}dd|i }dd|i }t|dttt d ttt d ttt d ttt d ttt d
| jd d d
ddddtd t| t |}|
d| |
d| |
d| |
d| |
d| | jdddtd | t |ddd d t| t |}|
d| |
d| |
d| |
d| |
d| | t | d t| t |}| |d d S ) Nr_ r rt z%(tmp)s/blck-lst.maprp z" failure "125-000-001" - 192.0.2.1z" failure "125-000-002" - 192.0.2.1u1 failure "125-000-003" - 192.0.2.1 (òðåòèé)u1 failure "125-000-004" - 192.0.2.1 (òðåòèé)z" failure "125-000-005" - 192.0.2.1z [nginx-blck-lst] Ban 125-000-001z [nginx-blck-lst] Ban 125-000-002z [nginx-blck-lst] Ban 125-000-003z [nginx-blck-lst] Ban 125-000-004z [nginx-blck-lst] Ban 125-000-005z 5 ticket(s)Tr z\125-000-001 1;
z\125-000-002 1;
z\125-000-003 1;
z\125-000-004 1;
z\125-000-005 1;
zstdout: '*** curl --fail --data-urlencode server=Fail2Ban --data apikey=TEST-API-KEY --data service=nginx-blck-lst z=stdout: ' --data format=text --user-agent fail2ban-test-agentrX z 125-000-001z 125-000-002z 125-000-005z5[nginx-blck-lst] Flush ticket(s) with nginx-block-maprP )rb rX r r r r- r r4 r r[ assertInr r assertNotInr r )r rt r r lgfnmpfnmpr' r' r( testServerActions_NginxBlockMap' sX
z2Fail2banServerTest.testServerActions_NginxBlockMapz
sendmail-auth)filter)%(tmp)s/test.logT)rs zdbmaxmatches = 1)ztest_action = dummy[actionstart_on_demand=1, init="start: %(__name__)s", target="%(tmp)s/test.txt",
actionban=';
echo ""; printf "=====\n%%b\n=====\n\n" "" >> ']z[sendmail-auth]rl r] logpath = %(tmp)s/test.logaction = %(test_action)sz%filter = sendmail-auth[logtype=short]r r^ zmaxmatches = 2rK z[sendmail-reject]rl r] r r z'filter = sendmail-reject[logtype=short]r r^ rK )r r r r c
C s` t |d}dd|i }dd|i }ttt d ttt d ttt d f}ttt d ttt d ttt d
f}| d t|d g|R | jd
ddtd t | t
|}|d } | | | |dd D ]} | | | qz| d t|d g|R | jdddtd t | t
|}|D ]} | | | q| d |
t|ddd | jddddtd t
|}|d } | | | | | |dd D ]
} | | | | | q| jd ddtd t
|}|d } | | | | | |dd D ]} | | | | | q| d | t | t| d S ) Nr_ r rt z%(tmp)s/test.txtz] smtp1 sm-mta[5133]: s1000000000001: [192.0.2.1]: possible SMTP attack: command=AUTH, count=1z] smtp1 sm-mta[5133]: s1000000000002: [192.0.2.1]: possible SMTP attack: command=AUTH, count=2z] smtp1 sm-mta[5133]: s1000000000003: [192.0.2.1]: possible SMTP attack: command=AUTH, count=3z smtp1 sm-mta[21134]: s2000000000001: ruleset=check_rcpt, arg1=<123@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <123@example.com>... Relaying denied. Proper authentication required.z smtp1 sm-mta[21134]: s2000000000002: ruleset=check_rcpt, arg1=<345@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <345@example.com>... Relaying denied. Proper authentication required.z smtp1 sm-mta[21134]: s3000000000003: ruleset=check_rcpt, arg1=<567@example.com>, relay=xxx.dynamic.example.com [192.0.2.2], reject=550 5.7.1 <567@example.com>... Relaying denied. Proper authentication required.z[test-phase sendmail-auth]rp z [sendmail-auth] Ban 192.0.2.1z 1 ticket(s) in 'sendmail-auth'Tr r r z [test-phase sendmail-reject]z [sendmail-reject] Ban 192.0.2.2z 1 ticket(s) in 'sendmail-reject'z [test-phase restart sendmail-*]r% r~ r} ro z%[sendmail-auth] Restore Ban 192.0.2.1r z'[sendmail-reject] Restore Ban 192.0.2.2z[test-phase stop server])rb r r r r- r rX r r4 r r[ r r r r r r rP r )
r rt r r r tofn smaut_msg smrej_msgtdmr' r' r( testServerJails_Sendmailw sv
(
z+Fail2banServerTest.testServerJails_Sendmailc s t |dt |dtt d d=fdd }d>fd d
}|dd d |d
dd | td | d | t|d tdgttt
d fd R t | j dddt
d t | d td t | j ddddt
d t | d d tfd d tdgttt
d fd R | j d!d"dt
d | d# | t|d$d%d&d' | j d(d)dt
d dt | d* td+ t | j d,dt
d t | d- | t|d$d%d&d' | j d(d.dt
d | d/ t d0d1i tj fd2d3}d4| d4d5d t fd6d t jtjjr-d7nd8dffd9d: }|_| t | d; | j | j d d d0< | j d;dd< ! d S )?Nr_ rR rj rS Tc sL t dd| }t|ddddd|rdndd tjjtjkr$t| d S d S )
Nrj rT rm rs rP rn zeactionban = printf %%s "[%(name)s] %(actname)s: ++ ban -c -t : "ziactionprolong = printf %%s "[%(name)s] %(actname)s: ++ prolong -c -t : "zBactionunban = printf %%b '[%(name)s] %(actname)s: -- unban ')rb rX r r r r r r )rU prolongrT rY r' r( rZ s z@Fail2banServerTest.testServerObserver.._write_action_cfgr\ c sd t t dddddddddd d
d dd d
| dddd ddd tjjtjkr0tt d d S d S )Nra rm rr rP rs r] r^ z
findtime = 1mz bantime = 5mzbantime.increment = truer_ r` ra rb z*action = test-action1[name='%(__name__)s']z* test-action2[name='%(__name__)s']rd zXfailregex = ^\s*failure 401|403 from :\s*.*$rK re )rh )r rj r' r( rm s*
z>Fail2banServerTest.testServerObserver.._write_jail_cfgF)rU r rn rm z[test-phase 0) time-0]r% rp z> failure 401 from 192.0.2.11: I'm bad "hacker" `` $(echo test)rc zDstdout: '[test-jail1] test-action1: ++ ban 192.0.2.11 -c 1 -t 300 : zDstdout: '[test-jail1] test-action2: ++ ban 192.0.2.11 -c 1 -t 300 : r z[test-phase 1) time+10m]
z7stdout: '[test-jail1] test-action1: -- unban 192.0.2.11z7stdout: '[test-jail1] test-action2: -- unban 192.0.2.11z0 ticket(s) in 'test-jail1'z[test-phase 2) time+10m]c s S rY r' r' )wakeObsr' r( r 9 r z7Fail2banServerTest.testServerObserver..zC failure 401 from 192.0.2.11: I'm very bad "hacker" `` $(echo test)r zDstdout: '[test-jail1] test-action1: ++ ban 192.0.2.11 -c 2 -t 300 : zDstdout: '[test-jail1] test-action2: ++ ban 192.0.2.11 -c 2 -t 300 : z"[test-phase 2) time+10m - get-ips]r rv rs z --with-timez
192.0.2.11z+ 300 =z[test-phase 2) time+11m]r zHstdout: '[test-jail1] test-action2: ++ prolong 192.0.2.11 -c 2 -t 600 : z"[test-phase 2) time+11m - get-ips]z+ 600 =z'[test-phase end) stop on busy observer]stater c s< t d d d< t fddt t d d S )Nz!++ observer enters busy state ...r r c d dkS )Nr r r' r' r5 r' r( r e r zMFail2banServerTest.testServerObserver.._long_action..z -- observer leaves busy state.)r r$ r r8 r db_purger' )r5 obsMainr' r( _long_actionb s
z;Fail2banServerTest.testServerObserver.._long_actioncallc S r rY r' r' r' r' r( r i r c r )Nr r r' r' r r' r( r k r g{Gz?g?c s
| |S rY r' )wtime forceQuit) obsMain_stopr' r( _stopn s
z4Fail2banServerTest.testServerObserver.._stopzobserver leaves busy staterq )rS T)r\ )"rb r r rX r r r r r r r- r6 r r4 r/ r@ r! r1 r2 addr r8 r r r r r' r r rP idler _ObserverThread__dbr )r rt r rZ rm r r r' )r5 r r r rj r r( testServerObserver s
z%Fail2banServerTest.testServerObserverFc C s | t d S rY )r r r
r' r' r( _testServerStartStop~ s z'Fail2banServerTest._testServerStartStopc C s t dD ]}| qd S )Ni )ranger )r ir' r' r( testServerStartStop s
z&Fail2banServerTest.testServerStartStopN)rD rE rF _exec_serverr r rE r r rG rH rN rQ r r r r skip_if_cfg_missingr r r r r r' r' r' r( rD sL
t : &L
rD )FNr\ r] r' r^ N)`
__author__
__copyright__ __license__r r r~ r( r- r r os.pathr rb r r r r functoolsr threadingr
clientr r
r client.fail2bancmdliner client.fail2banclientr rC r r client.fail2banserverr r rP r r
server.mytimer server.utilsr utilsr r r r r r r r r| r r! helpersr" rD r r
getServerPathr
r maxWaitTimer r4 r r r r r) r" r/ r1 r6 r@ rB rI r r rL rN
input_command
PRODUCTIONdumpFiler rX r[ r r r r r r r r rD r' r' r' r( s ,
W
, Fh U