FM / core

/usr/lib/python3.6/site-packages/firewall/core/

/usr/lib/python3.6/site-packages/firewall/core

Name	Size	Mode	Actions
io/	-	0755	rm
__pycache__/	-	0755	rm
base.py	2102	0644	edit dl rm
ebtables.py	9390	0644	edit dl rm
fw.py	50405	0644	edit dl rm
fw_config.py	48408	0644	edit dl rm
fw_direct.py	22518	0644	edit dl rm
fw_helper.py	1833	0644	edit dl rm
fw_icmptype.py	2485	0644	edit dl rm
fw_ifcfg.py	2562	0644	edit dl rm
fw_ipset.py	9674	0644	edit dl rm
fw_nm.py	7186	0644	edit dl rm
fw_policies.py	2803	0644	edit dl rm
fw_policy.py	87613	0644	edit dl rm
fw_service.py	1639	0644	edit dl rm
fw_transaction.py	6310	0644	edit dl rm
fw_zone.py	45689	0644	edit dl rm
helper.py	804	0644	edit dl rm
icmp.py	4554	0644	edit dl rm
ipset.py	12913	0644	edit dl rm
ipXtables.py	61733	0644	edit dl rm
logger.py	31038	0644	edit dl rm
modules.py	3822	0644	edit dl rm
nftables.py	95554	0644	edit dl rm
prog.py	1510	0644	edit dl rm
rich.py	33848	0644	edit dl rm
watcher.py	3228	0644	edit dl rm
__init__.py	0	0644	edit dl rm

Edit: /usr/lib/python3.6/site-packages/firewall/core/icmp.py (4554B)

# -*- coding: utf-8 -*-
#
# Copyright (C) 2017 Red Hat, Inc.
#
# Authors:
# Thomas Woerner <twoerner@redhat.com>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

__all__ = [ "ICMP_TYPES", "ICMPV6_TYPES",
            "check_icmp_type_code", "check_icmpv6_type_code" ]

ICMP_TYPES = {
     # "type": (type, code, backend omit code)
     "echo-reply": (0, 0, True),
     "pong": (0, 0, True),
     "destination-unreachable": (3, 0, True),
     "network-unreachable": (3, 0, False),
     "tos-network-unreachable": (3, 0, False),
     "host-unreachable": (3, 1, False),
     "tos-host-unreachable": (3, 1, False),
     "protocol-unreachable": (3, 2, False),
     "port-unreachable": (3, 3, False),
     "fragmentation-needed": (3, 4, False),
     "source-route-failed": (3, 5, False),
     # RFC-1112 Section 3.2.2.1 defines type 3, code 6-12
     "network-unknown": (3, 6, False),
     "host-unknown": (3, 7, False),
     "network-prohibited": (3, 9, False),
     "host-prohibited": (3, 10, False),
     "TOS-network-unreachable": (3, 11, False),
     "TOS-host-unreachable": (3, 12, False),
     # RFC-1812 Section 5.2.7.1 defines type 3, code 13-15
     "communication-prohibited": (3, 13, False),
     "host-precedence-violation": (3, 14, False),
     "precedence-cutoff": (3, 15, False),
     "source-quench": (4, 0, True),
     "network-redirect": (5, 0, False),
     "redirect": (5, 0, True),
     "host-redirect": (5, 1, False),
     "tos-host-redirect": (5, 1, False),
     "TOS-network-redirect": (5, 2, False),
     "tos-network-redirect": (5, 2, False),
     "TOS-host-redirect": (5, 3, False),
     "echo-request": (8, 0, True),
     "ping": (8, 0, True),
     "router-advertisement": (9, 0, True),
     "router-solicitation": (10, 0, True),
     "time-exceeded": (11, 0, True),
     "ttl-zero-during-transit": (11, 0, False),
     "ttl-zero-during-reassembly": (11, 1, False),
     "parameter-problem": (12, 0, True),
     "ip-header-bad": (12, 0, False),
     "required-option-missing": (12, 1, False),
     "timestamp-request": (13, 0, True),
     "timestamp-reply": (14, 0, True),
     "address-mask-request": (17, 0, False),
     "address-mask-reply": (18, 0, False),
}

ICMPV6_TYPES = {
    # "type": (type, code, backend omit code)
    "destination-unreachable": (1, 0, True),
    "no-route": (1, 0, False),
    "communication-prohibited": (1, 1, False),
    "beyond-scope": (1, 2, False),
    "address-unreachable": (1, 3, False),
    "port-unreachable": (1, 4, False),
    "failed-policy": (1, 5, False),
    "reject-route": (1, 6, False),
    "packet-too-big": (2, 0, True),
    "time-exceeded": (3, 0, True),
    "ttl-zero-during-transit": (3, 0, False),
    "ttl-zero-during-reassembly": (3, 1, False),
    "parameter-problem": (4, 0, True),
    "bad-header": (4, 0, False),
    "unknown-header-type": (4, 1, False),
    "unknown-option": (4, 2, False),
    "echo-request": (128, 0, True),
    "ping": (128, 0, True),
    "echo-reply": (129, 0, True),
    "pong": (129, 0, True),
    "router-solicitation": (133, 0, True),
    "router-advertisement": (134, 0, True),
    "neighbour-solicitation": (135, 0, True),
    "neigbour-solicitation": (135, 0, True),
    "neighbour-advertisement": (136, 0, True),
    "neigbour-advertisement": (136, 0, True),
    "redirect": (137, 0, True),
    # MLD is RFC-2710
    "mld-listener-query": (130, 0, True),
    "mld-listener-report": (131, 0, True),
    "mld-listener-done": (132, 0, True),
    # MLDv2 is RFC-9777
    "mld2-listener-report": (143, 0, True),
}

def check_icmp_name(_name):
    if _name in ICMP_TYPES:
        return True
    return False

def check_icmp_type_code(_type, _code):
    if (_type, _code) in ICMP_TYPES.values():
        return True
    return False

def check_icmpv6_name(_name):
    if _name in ICMP_TYPES:
        return True
    return False

def check_icmpv6_type_code(_type, _code):
    if (_type, _code) in ICMPV6_TYPES.values():
        return True
    return False

cmd: