�
��_c@s]
dZd
Z
dZddlZddlZddlZddlZddlZddlZddl	m
Z

ddlmZ
ddl
mZ
dd	lmZ
dd
lmZ
ddlmZmZmZ
ee�
Zd
�Zejdkr�d�Zd�Znd�Zd�Zd�Zejee�
ej de�
d�Z!de"f
d��YZ#dS(sSteven Hiscockss"Copyright (c) 2013 Steven HiscockstGPLi����N(
twraps(
tRLocki
(
tMyTime(
t
FailTicket(
tUtilsi(t	getLoggert
uni_stringt
PREFER_ENCc

Cs(t|t
�rt|�
}nt|�
S(
s/Avoid errors on types unknown in json-adapters.(t
isinstancetsettlistR(
t
x((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt
_json_default*s

ic
Csmy+tj
|d
tdt�
jtd�}Wn;tk
rh
}

tjd|
dtj	�dk
�

d}n
X|S(Ntensure_asciitdefaulttreplacesjson dumps failed: %rtexc_infois{}(
tjsontdumpstFalseR
tencodeRt	ExceptiontlogSysterrortgetEffectiveLevel(Rt
e((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt_json_dumps_safe1s



"


c
Csaytj
|jtd
��
}Wn;tk
r\
}

tjd|
dtj�dk
�

i}n
X|S(NRsjson loads failed: %rRi(RtloadstdecodeRRRRR(RR((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt_json_loads_safe;s


"


c
Cs�t|t
�r)t
d
�|j�D�
�
St|ttf�r[g|D]}
t|
�
^qESt|t�r�|jtd�j	t�
St|t
�r�|j	td�S|S(Nc
ss-|]#\}
}t|
�
t|�
fV
qdS(
N(
t
_normalize(t.0t
kt
v((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pys	<genexpr>FsR(R	tdictt	iteritemsRR
RtunicodeRRRt
basestring(Rtelement((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRDs







c
Csgy%tj
t|�
d
tdt�
}Wn;tk
rb
}

tjd|
dtj�dk
�

d}n
X|S(NRRsjson dumps failed: %rRis{}(	RRRRR
RRRR(RR((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRPs

%
"


c
Csaytj
|jtd
��
}Wn;tk
r\
}

tjd|
dtj�dk
�

i}n
X|S(NRsjson loads failed: %rRi(RRRRRRRR(RR((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRYs


"


tJSONc
st��
�f
d
��
}
|
S(Nc

s@|j�1
|j
�!
�||j
j�|
|�SWdQXWdQXdS(
N(t_lockt_dbtcursor(tselftargstkwargs(
t
f(s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytwrappergs



(
R
(R/R0((
R/s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytcommitandrollbackfs
t
Fail2BanDbcBsEeZ
dZd
Zd2d3d4d5d6fZee�
Zd8dd�Zed�
Z	d�Z
ed��
Zd�Z
ed��
Zed��
Zejd��
Zed�
Zeed�
�
Zd�Zed��
Zed��
Zed��
Zed��
Zed9d�
�
Zed��
Zd d9d!�Zed9d"�
�
Zed#��
Zd$�Zed d9d%��
Z ed&��
Z!ed'��
Z"ed(��
Z#ed9d9d9d)��
Z$d*�Z%d9d9d9d+�Z&ed9d9d9d9d,��
Z'd9d9d9d9d-�Z(ed9d9d9d9e)d9d.��
Z*d/�Z+d0�Z,ed1��
Z-RS(:s�Fail2Ban database for storing persistent data.

	This allows after Fail2Ban is restarted to reinstated bans and
	to continue monitoring logs from the same point.

	This will either create a new Fail2Ban database, connect to an
	existing, and if applicable upgrade the schema in the process.

	Parameters
	----------
	filename : str
		File name for SQLite3 database, which will be created if
		doesn't already exist.
	purgeAge : int
		Purge age in seconds, used to remove old bans from
		database during purge.

	Raises
	------
	sqlite3.OperationalError
		Error connecting/creating a SQLite3 database.
	RuntimeError
		If exisiting database fails to update to new schema.

	Attributes
	----------
	filename
	purgeage
	it
fail2banDbs7CREATE TABLE IF NOT EXISTS fail2banDb(version INTEGER);tjailss�CREATE TABLE IF NOT EXISTS jails(name TEXT NOT NULL UNIQUE, enabled INTEGER NOT NULL DEFAULT 1);CREATE INDEX IF NOT EXISTS jails_name ON jails(name);tlogssS
CREATE TABLE IF NOT EXISTS logs(jail TEXT NOT NULL, path TEXT, firstlinemd5 TEXT, lastfilepos INTEGER DEFAULT 0, FOREIGN KEY(jail) REFERENCES jails(name) ON DELETE CASCADE, UNIQUE(jail, path),UNIQUE(jail, path, firstlinemd5));CREATE INDEX IF NOT EXISTS logs_path ON logs(path);CREATE INDEX IF NOT EXISTS logs_jail_path ON logs(jail, path);tbanss�
CREATE TABLE IF NOT EXISTS bans(jail TEXT NOT NULL, ip TEXT, timeofban INTEGER NOT NULL, bantime INTEGER NOT NULL, bancount INTEGER NOT NULL default 1, data JSON, FOREIGN KEY(jail) REFERENCES jails(name) );CREATE INDEX IF NOT EXISTS bans_jail_timeofban_ip ON bans(jail, timeofban);CREATE INDEX IF NOT EXISTS bans_jail_ip ON bans(jail, ip);CREATE INDEX IF NOT EXISTS bans_ip ON bans(ip);tbipssZ
CREATE TABLE IF NOT EXISTS bips(ip TEXT NOT NULL, jail TEXT NOT NULL, timeofban INTEGER NOT NULL, bantime INTEGER NOT NULL, bancount INTEGER NOT NULL default 1, data JSON, PRIMARY KEY(ip, jail), FOREIGN KEY(jail) REFERENCES jails(name) );CREATE INDEX IF NOT EXISTS bips_timeofban ON bips(timeofban);CREATE INDEX IF NOT EXISTS bips_ip ON bips(ip);ii<icCs>d
|_t
�|_|
|_||_||_|j�
dS(Ni
(t
maxMatchesRR)t_dbFilenamet	_purgeAget_outDatedFactort
_connectDB(R,tfilenametpurgeAgetoutDatedFactor((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt__init__�s
	

	
	
	
c
Cs�|j}y>t
j|d
tdt
j�
|_i|_tjd|�
Wn3t
j	k
r|
}
tj
d||jd�
�n
Xyddl}t
}Wntk
r�


t}n
X|jj�}z[
yN|jd�

|jd�

|s�|jd	�

n|jd
�

|jd�

Wn�t
j	k
r9



tjd|j��
n�t
jk
r�

}
tj
d
||jd�
tjj|�
s}
�n|j�
d}|j�
n|X|j�d}|tjkr|j|�
}|tjkr�
tjd||�
qtj
dtj||�
td�
�
nWd|
r�tjd�

|j |dt
�


tjd�

tjd�

|jd�

x-|j!�D]}	tjddj"|	�
�
qtW|jj#�
n|r�|r�|jd	�

n|j�
nXdS(Ntcheck_same_threadtdetect_typess.Connected to fail2ban persistent database '%s's9Error connecting to fail2ban persistent database '%s': %sii����sPRAGMA foreign_keys = ONsPRAGMA synchronous = OFFsPRAGMA journal_mode = MEMORYsPRAGMA temp_store = MEMORYs&SELECT version FROM fail2banDb LIMIT 1s"New database created. Version '%r's3Error opening fail2ban persistent database '%s': %ss"Database updated from '%r' to '%r'sIDatabase update failed to achieve version '%r': updated from '%r' to '%r'sFailed to fully updates#  Create missing tables/indices ...tincrementals  -> oks  Check integrity ...sPRAGMA integrity_checks  -> %st
 ($R9tsqlite3tconnectRtPARSE_DECLTYPESR*t_bansMergedCacheRtinfotOperationalErrorRR-t__pypy__tTruetImportErrorR+texecutetwarningtcreateDbtErrortostpathtisfiletclosetNonetrepairDBtfetchoneR2t__version__tupdateDbtRuntimeErrortdebugt	_createDbtfetchalltjointcommit(
R,tcheckIntegrityR=RRKtpypytcurtversiont
newversiont
s((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyR<�sz
	



	




















	












	

	















c

Cs+tj
d
�

|jj�
tjd�

dS(Ns Close connection to database ...sConnection to database closed.(RR\R*RURI(
R,((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRU
s




c

CsMy|jSWn;t
k
rH


|jd
tjdtj��|_|jSXdS(Nt
.s
%Y%m%d-%H%M%S(t_Fail2BanDb__dbBackupFilenametAttributeErrorR9ttimetstrftimeRtgmtime(
R,((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt_dbBackupFilename
s




&
c
Csh
d
tf
d��Y}
|j
}d|_
z/
y�tjd|j�
tj|j|j�
tjd|j�
t	j
d|j|jf�

tj|j�
j
}|r�tjd|�
|jdt�

ntjd|�
|
d	�
�
Wnrtk
rU

}
tjd
|j|jddt||
�o.
tj�d
k
�

tj|j�

|jdt�

n
XWd||_
XdS(NtRepairExceptionc
BseZ
RS((t__name__t
__module__(((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRn(
s
sTrying to repair database %ss  Database backup created: %ssHf2b_db=$0; f2b_dbbk=$1; sqlite3 "$f2b_dbbk" ".dump" | sqlite3 "$f2b_db" s5  Repair seems to be successful, restored %d byte(s).Ras1  Repair seems to be failed, restored %d byte(s).sRecreate ...s/  Error repairing of fail2ban database '%s': %siRi
(RRWRVRRIR9tshutiltmoveRmRt
executeCmdRRtstattst_sizeR<RLRR-R	Rtremove(R,Rnt	_repairDBt
dbFileSizeR((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRW'
s.
	
	


	





	

#

c


Cs|jS(
s&File name of SQLite3 database file.
		(
R9(
R,((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyR=H
sc


Cs|jS(
sPurge age in seconds.
		(
R:(
R,((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytpurgeageN
scCstj
|
�
|_dS(
N(Rtstr2secondsR:(R,tvalue((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRyT
scCsXx$tj
D]\}}|
j|�

q
W|
jd
tjf
�
|
jd�

|
j�dS(s8Creates a new database, called during initialisation.
		s\INSERT INTO fail2banDb(version) SELECT ? WHERE NOT EXISTS (SELECT 1 FROM fail2banDb LIMIT 1)s&SELECT version FROM fail2banDb LIMIT 1i(R2t_CREATE_SCRIPTSt
executescriptRNRYRX(R,RcRCt
nRf((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyR]X
s
	



cCs|j|
|�S(
N(
R](R,RcRC((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRPe
scCs3|
jd
|f
�
|
j
�}|dk	o2|dS(NsQselect 1 where exists (select 1 from sqlite_master WHERE type='table' AND name=?)i(RNRXRV(R,Rcttabletres((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt_tableExistsi
s
	



cCs�
|tj
krtd
�
�
nyD
tjd|j|�
tjj|j�
sxt	j
|j|j�
tjd|j�
n|dkr�|j|
d�r�|
j
dtjd�

n|dkr�|j|
d�r�|
j
d	tjd�

n|d
krF
|j|
d�rF
|
j
dtjd�

|j|
d�rF
|
jd
�

qF
n|
jd�

|
j�dSWnEtk
r�

}
tjd|j|jddtj�dk
�

�n
XdS(s�Update an existing database, called during initialisation.

		A timestamped backup is also created prior to attempting the update.
		sIAttempt to travel to future version of database ...how did you get here??s&Upgrade database: %s from version '%r's  Database backup created: %siR5s�BEGIN TRANSACTION;CREATE TEMPORARY TABLE logs_temp AS SELECT * FROM logs;DROP TABLE logs;%s;INSERT INTO logs SELECT * from logs_temp;DROP TABLE logs_temp;UPDATE fail2banDb SET version = 2;COMMIT;iR6s�BEGIN TRANSACTION;CREATE TEMPORARY TABLE bans_temp AS SELECT jail, ip, timeofban, -2 as bantime, 1 as bancount, data FROM bans;DROP TABLE bans;%s;
INSERT INTO bans SELECT * from bans_temp;DROP TABLE bans_temp;COMMIT;iR7s?BEGIN TRANSACTION;%s;
UPDATE fail2banDb SET version = 4;COMMIT;s�INSERT OR REPLACE INTO bips(ip, jail, timeofban, bantime, bancount, data)  SELECT ip, jail, timeofban, bantime, bancount, data FROM bans order by timeofbans&SELECT version FROM fail2banDb LIMIT 1is#Failed to upgrade database '%s': %sRi
N(R2RYtNotImplementedErrorRRIRmRRRSRTRqtcopyfileR=R�R}t_CREATE_TABSRNRXRRR9R-R(R,RcRdR((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyRZo
s6







		

	






	


cCsB|
jd
|j
f
�
|
jdk
r>|
jd|j
f
�
ndS(smAdds a jail to the database.

		Parameters
		----------
		jail : Jail
			Jail to be added to the database.
		s7INSERT OR IGNORE INTO jails(name, enabled) VALUES(?, 1)is<UPDATE jails SET enabled = 1 WHERE name = ? AND enabled != 1N(RNtnametrowcount(R,Rctjail((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytaddJail�
s	






cCs|
jd
|j
f
�
dS(svDeletes a jail from the database.

		Parameters
		----------
		jail : Jail
			Jail to be removed from the database.
		s'UPDATE jails SET enabled=0 WHERE name=?N(RNR�(R,RcR�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytdelJail�
s

cCs|
jd
�

dS(s'Deletes all jails from the database.
		sUPDATE jails SET enabled=0N(
RN(R,Rc((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytdelAllJails�
scCsP|dkr|
j
d
�

n|
j
dt|�
f
�

td�|
j�D�
�
S(sGet name of jails in database.

		Currently only used for testing purposes.

		Returns
		-------
		set
			Set of jail names.
		sSELECT name FROM jailss'SELECT name FROM jails WHERE enabled=%sc
ss|]}
|
dV
qd
S(iN((R trow((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pys	<genexpr>�
sN(RVRNtintR
t	fetchmany(R,Rctenabled((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytgetJailNames�
s

	

cCs+|j|
||j
�|j�|j��S(
s7
Adds a log to the database.

		Parameters
		----------
		jail : Jail
			Jail that log is being monitored by.
		container : FileContainer
			File container of the log file being added.

		Returns
		-------
		int
			If log was already present in database, value of last position
			in the log file; else `None`
		(t_addLogtgetFileNametgetPostgetHash(R,RcR�t	container((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytaddLog�
sicCs�d}|
j
d
|j|f�
y|
j�\}}Wntk
rN


d}n
X|r�|sb|r�|
j
d|j|||f�
n|dk	r�||kr�d}n|S(NsBSELECT firstlinemd5, lastfilepos FROM logs WHERE jail=? AND path=?sUINSERT OR REPLACE INTO logs(jail, path, firstlinemd5, lastfilepos) VALUES(?, ?, ?, ?)(RVRNR�RXt	TypeError(R,RcR�R�tpostmd5tlastLinePostfirstLineMD5((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyR��
s













	
cCs_d
}g}|dk	r5|d7}|j
|j�

n|
j||�
td�|
j�D�
�
S(s�Gets all the log paths from the database.

		Currently only for testing purposes.

		Parameters
		----------
		jail : Jail
			If specified, will only reutrn logs belonging to the jail.

		Returns
		-------
		set
			Set of log paths.
		sSELECT path FROM logss
 WHERE jail=?c
ss|]}
|
dV
qd
S(iN((R R�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pys	<genexpr>sN(RVtappendR�RNR
R�(R,RcR�tqueryt	queryArgs((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytgetLogPaths
s






cCs/|j|
||j
�|j�|j��
d
S(s�Updates hash and last position in log file.

		Parameters
		----------
		jail : Jail
			Jail of which the log file belongs to.
		container : FileContainer
			File container of the log file being updated.
		N(t
_updateLogR�R�R�(R,RcR�R�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt	updateLogscCsN|
jd
|||j
|f�
|
jsJ|
jd|j
|||f�
ndS(NsEUPDATE logs SET firstlinemd5=?, lastfilepos=? WHERE jail=? AND path=?sUINSERT OR REPLACE INTO logs(jail, path, firstlinemd5, lastfilepos) VALUES(?, ?, ?, ?)(RNR�R�(R,RcR�R�R�R�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyR�&s


	


cCs|j|
||||�S(
sA
Get journal position from database.

		Parameters
		----------
		jail : Jail
			Jail of which the journal belongs to.
		name, time, iso :
			Journal name (typically systemd-journal) and last known time.

		Returns
		-------
		int (or float)
			Last position (as time) if it was already present in database; else `None`
		(
R�(R,RcR�R�Rjtiso((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt
getJournalPos0scCs|j|
||||�
d
S(s�Updates last position (as time) of journal.

		Parameters
		----------
		jail : Jail
			Jail of which the journal belongs to.
		name, time, iso :
			Journal name (typically systemd-journal) and last known time.
		N(
R�(R,RcR�R�RjR�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt
updateJournalBsc	Cs�
t|j
��
}y|j||f=Wntk
r9


n
Xy|j|df=Wntk
ra


n
X|j�}|jd
�
}|jr�|r�t|�
|jkr�|j	�}||j|d
<q�n|r�|j	�}|d
=n|
j
d|j|tt
|j��
�
|j|jj��
|j�|f�
|
j
d||jtt
|j��
�
|j|jj��
|j�|f�
dS(s�Add a ban to the database.

		Parameters
		----------
		jail : Jail
			Jail in which the ban has occurred.
		ticket : BanTicket
			Ticket of the ban to be added.
		tmatchessWINSERT INTO bans(jail, ip, timeofban, bantime, bancount, data) VALUES(?, ?, ?, ?, ?, ?)sbINSERT OR REPLACE INTO bips(ip, jail, timeofban, bantime, bancount, data) VALUES(?, ?, ?, ?, ?, ?)N(tstrtgetIPRHtKeyErrorRVtgetDatatgetR8tlentcopyRNR�R�troundtgetTimet
getBanTimetactionstgetBanCount(R,RcR�ttickettiptdataR�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytaddBanOs4











	









<




<
cGs�d
}d}|jg
}t
|�
sH|
j||�
|
j||�
dS|d7}|d7}|jd�

x>|D]6}t|�
|d<|
j||�
|
j||�
qpWdS(s�Delete a single or multiple tickets from the database.

		Parameters
		----------
		jail : Jail
			Jail in which the ticket(s) should be removed.
		args : list of IP
			IPs to be removed, if not given all tickets of jail will be removed.
		sDELETE FROM bips WHERE jail = ?sDELETE FROM bans WHERE jail = ?Ns AND ip = ?ti
(R�R�RNR�R�(R,RcR�R-tquery1tquery2R�R�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytdelBanvs
















cCs�d
}g}|dk	r5|d7}|j
|j�

n|dk	rq|dkrq|d7}|j
tj�|�

n|dk	r�|d7}|j
t|�
�

n|d7}t|
j||��
S(Ns,SELECT ip, timeofban, data FROM bans WHERE 1s AND jail=?is AND timeofban > ?s	 AND ip=?s ORDER BY ip, timeofban desc(RVR�R�RRjR�RRN(R,RcR�tbantimeR�R�R�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt_getBans�s













c
KsTg}xG|j|
�D]6\}}}|j
t||��

|d
j|�

qW|S(s�
Get bans from the database.

		Parameters
		----------
		jail : Jail
			Jail that the ban belongs to. Default `None`; all jails.
		bantime : int
			Ban time in seconds, such that bans returned would still be
			valid now.  Negative values are equivalent to `None`.
			Default `None`; no limit.
		ip : str
			IP Address to filter bans by. Default `None`; all IPs.

		Returns
		-------
		list
			List of `Ticket`s for bans stored in database.
		i����(R�R�RtsetData(R,R.tticketsR�t	timeofbanR�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytgetBans�s



c
Cs|j�
d	}|d	ks(|d
krQ|
|f}||jkrQ|j|Sng}d	}t|jd|
d|d|��
}|r�
|d
d
}g}	d
}
i}x	
|D]

\}}
}||kr
t|||	�}|j|
�

|j|�

|}g}	d
}
i}n|jdg�}|j	t
|	�
}|d
krr
t
|�
|k
r`
||	}	qr
|||	}	n|
|jdd�7}
|
|d<|	|d<|j|�

|
}q�Wt||d|�
}|j|�

n|r|
d	kr�
|n||j|<n|
d	kr|S|SWd	QXd	S(
s}Get bans from the database, merged into single ticket.

		This is the same as `getBans`, but bans merged into single
		ticket.

		Parameters
		----------
		jail : Jail
			Jail that the ban belongs to. Default `None`; all jails.
		bantime : int
			Ban time in seconds, such that bans returned would still be
			valid now. Negative values are equivalent to `None`.
			Default `None`; no limit.
		ip : str
			IP Address to filter bans by. Default `None`; all IPs.

		Returns
		-------
		list or Ticket
			Single ticket representing bans stored in database per IP
			in a list. When `ip` argument passed, a single `Ticket` is
			returned.
		iR�R�R�R�tfailuresi
R�N(R)RVRHRR�Rt
setAttemptR�R�R8R�tupdate(R,R�R�R�tcacheKeyR�R�tresultst
prev_banipR�R�ttickdatatbanipR�R�tprev_timeofbant
mtmaxadd((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt
getBansMerged�sN






$













	
















"
c	Cs�t|�
}|sd
}nd}|d7}|g
}|rd|dk	rd|d7}|j|j�

n|dk	r�|d7}|jtj�|�

n|dk	r�|d7}|j|�

n|s�|dkr�|d7}n|jj�}
t|
j	||��
S(Ns-SELECT bancount, timeofban, bantime FROM bipss<SELECT sum(bancount), max(timeofban), sum(bantime) FROM bipss
 WHERE ip = ?s AND jail=?s AND timeofban > ?s, GROUP BY ip ORDER BY timeofban DESC LIMIT 1(
R�RVR�R�RRjR*R+RRN(	R,RcR�R�t
forbantimetoveralljailstfromtimeR�R�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytgetBans&

	


	















cCs�g}|dk	r+d
}|j
|j�

nd}|dk	rW|d7}|j
|�

n|d7}|j
|�

|d	kr�|d7}|j
||�

n|dkr�|d7}n
|d7}|jj�}
|
j||�S(
NsDSELECT ip, timeofban, bantime, bancount, data FROM bips WHERE jail=?sDSELECT ip, max(timeofban), bantime, bancount, data FROM bips WHERE 1s	 AND ip=?s/ AND (timeofban + bantime > ? OR bantime <= -1)i����s AND timeofban > ?s( GROUP BY ip ORDER BY ip, timeofban DESCs  ORDER BY timeofban DESC LIMIT 1(Ni����(RVR�R�R*R+RN(R,RcR�R�R�R�R�R�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt_getCurrentBanss$





















cCsv|dkrt
j�}ng}d}	|tkri|dk	rK|j�nd}|d
krid}qinx|j|
d|d|d|d|�
D]�
}	y�|	\}
}}}
}|
dks�|
dkr�td|
f
�
�
n|dkr
|dk	r
|jj�n|r
|nd	}n6|rO
|d
krO
|d
ksC
||krO
|}qO
n|d
kr�
|||k
r�
t	j
d|||||	�
w�nWn)tk
r�

}
t	j
d|	|�
q�n
Xt|
|d
|�
}	|dkr�
|j}n|r*|	j
�}|r7t|�
|kr7|	j||�

q7n
|	jd�

|	j|�

|	j|
�

|dk	ra|	S|j|	�

q�W|S(s�
Reads tickets (with merged info) currently affected from ban from the database.
		
		There are all the tickets corresponding parameters jail/ip, forbantime,
		fromtime (normally now).
		
		If correctBanTime specified (default True) it will fix the restored ban-time 
		(and therefore endOfBan) of the ticket (normally it is ban-time of jail as maximum)
		for all tickets with ban-time greater (or persistent).
		i����R�R�R�R�R�sunexpected value %ri����iXisFignore ticket (with new max ban-time %r): too old %r <= %r, ticket: %rs$get current bans: ignore row %r - %sR�N(RVRRjRLt
getMaxBanTimeR�t
ValueErrorR�R�RR\RR8t
getMatchesR�t
setMatchest
setBanTimetsetBanCountR�(R,RcR�R�R�R�tcorrectBanTimet
maxmatchesR�R�R�R�R�tbancountR�RR�((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytgetCurrentBans2sR












	
















cCs|
jd
�

dS(s8Remove empty jails jails and log files from database.
		s�DELETE FROM jails WHERE enabled = 0 AND NOT EXISTS(SELECT * FROM bans WHERE jail = jails.name) AND NOT EXISTS(SELECT * FROM bips WHERE jail = jails.name)N(
RN(R,Rc((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt_cleanjailsus
cCsF|
jd
t
tj��
|j|jt
tj��
|jf�
dS(s�Purge old bad ips (jails and log files from database).
		Currently it is timed out IP, whose time since last ban is several times out-dated (outDatedFactor is default 3).
		Permanent banned ips will be never removed.
		sZDELETE FROM bips WHERE timeofban < ? and bantime != -1 and (timeofban + (bantime * ?)) < ?N(RNR�RRjR:R;(R,Rc((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt_purge_bips}s

cCsGi|_|
j
d
tj�|jf
�
|j|
�

|j|
�

dS(s5Purge old bans, jails and log files from database.
		s$DELETE FROM bans WHERE timeofban < ?N(RHRNRRjR:R�R�(R,Rc((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pytpurge�s	





(R3s7CREATE TABLE IF NOT EXISTS fail2banDb(version INTEGER);(R4s�CREATE TABLE IF NOT EXISTS jails(name TEXT NOT NULL UNIQUE, enabled INTEGER NOT NULL DEFAULT 1);CREATE INDEX IF NOT EXISTS jails_name ON jails(name);(slogssS
CREATE TABLE IF NOT EXISTS logs(jail TEXT NOT NULL, path TEXT, firstlinemd5 TEXT, lastfilepos INTEGER DEFAULT 0, FOREIGN KEY(jail) REFERENCES jails(name) ON DELETE CASCADE, UNIQUE(jail, path),UNIQUE(jail, path, firstlinemd5));CREATE INDEX IF NOT EXISTS logs_path ON logs(path);CREATE INDEX IF NOT EXISTS logs_jail_path ON logs(jail, path);(sbanss�
CREATE TABLE IF NOT EXISTS bans(jail TEXT NOT NULL, ip TEXT, timeofban INTEGER NOT NULL, bantime INTEGER NOT NULL, bancount INTEGER NOT NULL default 1, data JSON, FOREIGN KEY(jail) REFERENCES jails(name) );CREATE INDEX IF NOT EXISTS bans_jail_timeofban_ip ON bans(jail, timeofban);CREATE INDEX IF NOT EXISTS bans_jail_ip ON bans(jail, ip);CREATE INDEX IF NOT EXISTS bans_ip ON bans(ip);(sbipssZ
CREATE TABLE IF NOT EXISTS bips(ip TEXT NOT NULL, jail TEXT NOT NULL, timeofban INTEGER NOT NULL, bantime INTEGER NOT NULL, bancount INTEGER NOT NULL default 1, data JSON, PRIMARY KEY(ip, jail), FOREIGN KEY(jail) REFERENCES jails(name) );CREATE INDEX IF NOT EXISTS bips_timeofban ON bips(timeofban);CREATE INDEX IF NOT EXISTS bips_ip ON bips(ip);i�i�Q
N(.RoRpt__doc__RYR|R#R�R@RR<RUtpropertyRmRWR=RytsetterR]R1RPR�RZR�R�R�RVR�R�R�R�R�R�R�R�R�R�R�R�R�R�R�RLR�R�R�R�(((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyR2osd

	
Q		!

	5



	


'
	G


A			(
i($t
__author__t
__copyright__t__license__RRRRqREtsysRjt	functoolsR
t	threadingRtmytimeRR�RtutilsRthelpersRRRRoRR
tversion_infoRRRtregister_adapterR#tregister_converterR1tobjectR2(((s</usr/lib/python2.7/site-packages/fail2ban/server/database.pyt<module>s4