| Server IP : 199.250.214.225 / Your IP : 3.129.250.207 Web Server : Apache System : Linux vps64074.inmotionhosting.com 3.10.0-1160.105.1.vz7.214.3 #1 SMP Tue Jan 9 19:45:01 MSK 2024 x86_64 User : nicngo5 ( 1001) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : OFF Directory : /usr/lib/python2.7/site-packages/firewall/core/ |
Upload File : |
# -*- coding: utf-8 -*-
#
# Copyright (C) 2011-2016 Red Hat, Inc.
#
# Authors:
# Thomas Woerner <twoerner@redhat.com>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
"""Base firewall settings"""
DEFAULT_ZONE_TARGET = "{chain}_{zone}"
ZONE_TARGETS = [ "ACCEPT", "%%REJECT%%", "DROP", DEFAULT_ZONE_TARGET,
"default" ]
SHORTCUTS = {
"PREROUTING": "PRE",
"POSTROUTING": "POST",
"INPUT": "IN",
"FORWARD_IN": "FWDI",
"FORWARD_OUT": "FWDO",
"OUTPUT": "OUT",
}
REJECT_TYPES = {
"ipv4": [ "icmp-host-prohibited", "host-prohib", "icmp-net-unreachable",
"net-unreach", "icmp-host-unreachable", "host-unreach",
"icmp-port-unreachable", "port-unreach", "icmp-proto-unreachable",
"proto-unreach", "icmp-net-prohibited", "net-prohib", "tcp-reset",
"tcp-rst", "icmp-admin-prohibited", "admin-prohib" ],
"ipv6": [ "icmp6-adm-prohibited", "adm-prohibited", "icmp6-no-route",
"no-route", "icmp6-addr-unreachable", "addr-unreach",
"icmp6-port-unreachable", "port-unreach", "tcp-reset" ]
}
# ipset types that can be used as a source in zones
# The match-set option will be src or src,src according to the
# dimension of the ipset.
ZONE_SOURCE_IPSET_TYPES = [
"hash:ip", "hash:ip,port", "hash:ip,mark",
"hash:net", "hash:net,port", "hash:net,iface",
"hash:mac"
]