ВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВВђВ U &E-dЛ?г@s|ddlZddlZddlmZdZdZdZdZdZdZ dZ d d „Zdd„Zd d„Z dd„Zdd„Zdd„Zdd„Zdd„ZdS)йN)ЪHostingPanelЪFULLЪMINIMALйъйЪDENYЪALLOWcCst t|ЎS©N)Ъ functoolsЪpartialЪmax)Zminimum©r ъ?/opt/imunify360/venv/share/imunify360/config_schema/firewall.pyЪ not_less_thansrcCs"tttdd„|Dѓѓѓdd„dЌS)NcSsg|]}| ddЎ‘qS)ъ:ъ-)Ъreplace)Ъ.0Ъvr r rЪ sz%coerce_sort_ports..cSst| dЎdѓS)Nrr)ЪintЪrsplit)rr r rЪуz#coerce_sort_ports..)Ъkey)ЪsortedЪlistЪset©Ъvaluer r rЪcoerce_sort_portssюr cCstѓj||Sr )rZ OPEN_PORTS)ЪprotocolЪ directionr r rЪget_default_portssr#cCspdd„}t d|Ў}|s&||dѓdS|| dЎѓsB||dѓdS| dЎdk rl|| dЎѓsl||dѓdSdS) z {'type': 'boolean'} cSsdt|ѓkodkSS)Nrйяя)r)Ъportr r rЪin_range$sz,_validate_is_port_or_range..in_rangez^(\d+)([:|-](\d+))?$z,Port should be integer or range (2-4 or 2:4)Nrz#Port should be within range 0-65535й)ЪreЪmatchЪgroup)ЪfieldrЪerrorr&Ъportsr r rЪ_validate_is_port_or_ranges r.csddtdњ‡‡fdd„tdњS)NrЪstring)ЪtypeЪ check_withcs t€€ѓSr )r#r©r"Ъprotor rr:rzlist_of_ports..)r0ЪschemaЪdefault_setterЪcoerce)r.r )r3r"r r2rЪ list_of_ports3sющr7cCs$d|kr |dr d|d<d|d<|S)NЪphp_immunityЪKILLЪmodeTЪblamerr )Zproactive_defenser r rЪproactive_defense_rules?sяюr<cCsмddtddddњdtddddњdњidњdd dd dњd dd dњdgd њdњidњdid tttgdњtddѓtddѓtddѓtddѓddd њdњdњddtttѓfttdњdtttѓfdddњddtdddњdtttѓftdњidњdd d њdњidњddd d њd tt tgdњdddd њd dd!d"њd#њidњddd d њdtdd$dњdtdd%dњdtdd&d$dњdtdd$dњd'њidњddtd(њddtdd$dњdtdd%dњd)њd*њd%d+d,њd%d+d,њd-њdњddtdd.dњdtdd/dњdtdd0dњdtd1d+dњd2њidњddd3digdњdd3digdњd4њidњdd5dd6d њiidњddd d њdd7d њdd.d њdd8d њd9њidњdd:d d;d;dd?d>d@gdAњddd d њdddd њdBњidCњddd d њddd d њd d!d њd d!d њdd d њddd њdDњidњddEdddd њiidњddFdddd њiidњdddd d њddd d њdddd њdddd њdGњidњddHdddd њiidњdddd њddtd(њdIdJdKgdњdd3d igdњdd3d idLgdњddd њddd њdMњidњdddd њdd d њdNњidњdOњS)PNЪdictЪintegerripi )r0r6ЪminrЪdefault)ЪtimeoutZafter_unblock_timeout©r0r4r@r/T)r0r@Ъnullabler)r0r@)Z eth_deviceZeth6_deviceZeth_device_skip)r0r@ЪallowedЪtcpЪinЪoutЪudpЪbooleanF)Zport_blocking_modeZTCP_IN_IPv4ZTCP_OUT_IPv4ZUDP_IN_IPv4ZUDP_OUT_IPv4Zinternal_use_remote_iplist)r0r@r4)r0r6r?r@rйr$)r0r6r?r)r0r6r?)r0Ъ keyschemaЪvalueschemar@)Z default_limitЪintervalZport_limitsЪenabled©r0rCr@Ъ)r0Ъrequiredr@)Zapp_specific_rulesetZrulesetZ!cms_account_compromise_preventionZ prev_settingsййxй)ЪenableЪ max_incidentsЪcheck_periodZseverity_limitZdenied_num_limit)r0r6)rVrW)r0r4й )rWrV)i4‚i;‚йdi †йй)Znum_daysЪlimitZ min_log_levelZui_autorefresh_timeoutr0)Z http_portsZhttps_portsZcert_refresh_timeoutii`Ti/ )rNZ time_frameЪ max_countrAZdefault_moderDZdeniedZmodsec_directivesЪLOGЪDISABLEDr9)r0rCr@rD)r:r;r8)r0r6r4r@)rUZknown_proxies_supportZcaptcha_site_keyZcaptcha_secret_keyZ splash_screenZinvisible_captchaZactive_responseZcatch_lfd_events)rUZexim_dovecot_protectionZexim_dovecot_nativeZftp_protectionЪedfйiKiСZmail)rUr-Zallow_usersZallow_groupsZallow_localZredirect)Zcompromised_user_password_resetZ#compromised_user_admin_notification)ZAUTO_WHITELISTZNETWORK_INTERFACEZFIREWALLZDOSZMOD_SECZMOD_SEC_BLOCK_BY_SEVERITYZMOD_SEC_BLOCK_BY_CUSTOM_RULEZINCIDENT_LOGGINGZWEB_SERVICESZCAPTCHAZCAPTCHA_DOSZ BLOCKED_PORTSZ STOP_MANAGINGЪPROACTIVE_DEFENCEZ WEBSHIELDZOSSECZCSF_INTEGRATIONZPAMЪ KERNELCAREZ SMTP_BLOCKINGЪ CONTROL_PANEL)rЪPORT_BLOCKING_MODE_ALLOWЪPORT_BLOCKING_MODE_DENYr7rЪ_DOS_DETECTOR_MIN_LIMITЪ_DOS_DETECTOR_DEFAULT_LIMITЪ_DOS_DETECTOR_MIN_INTERVALЪMODSEC_RULESET_FULLЪMODSEC_RULESET_MINIMALr=r<r r r rЪget_root_configIs¶ыышоээх сюэютэ ь ььюърюб$Ъ)юэээсйюььыьиЯ$юььщююйььььндээътяыююцтэячюяшьээфлэююююнжэячэячээээриэячююъ яыяыююб$Ъ)ююы фЂЂЂУrlcCs.dddddddgddњd ddd њdњidњiS) Nrbr=r/Tr_r^r9)r0rCrDr@rIrO)r:r;rBr r r r rЪget_non_root_configsьэщ сяrm)r r(Z+defence360agent.subsys.panels.hosting_panelrrjrkrhrgrirfrerr r#r.r7r<rlrmr r r rЪs( B