75 lines
3.0 KiB
Python
75 lines
3.0 KiB
Python
import io
|
|
import zipfile
|
|
from datetime import datetime, timezone
|
|
from app import models
|
|
|
|
|
|
class ShorewallGenerator:
|
|
def __init__(self, config: models.Config) -> None:
|
|
self._config = config
|
|
self._ts = datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
|
|
|
|
def _header(self, filename: str) -> str:
|
|
return (
|
|
f"# {filename} — generated by shorefront "
|
|
f"| config: {self._config.name} "
|
|
f"| {self._ts}\n"
|
|
)
|
|
|
|
def _col(self, *values: str, width: int = 16) -> str:
|
|
return "".join(v.ljust(width) for v in values).rstrip() + "\n"
|
|
|
|
def zones(self) -> str:
|
|
lines = [self._header("zones"), "#ZONE".ljust(16) + "TYPE".ljust(16) + "OPTIONS\n"]
|
|
for z in self._config.zones:
|
|
lines.append(self._col(z.name, z.type, z.options or "-"))
|
|
return "".join(lines)
|
|
|
|
def interfaces(self) -> str:
|
|
lines = [self._header("interfaces"), "#ZONE".ljust(16) + "INTERFACE".ljust(16) + "OPTIONS\n"]
|
|
for iface in self._config.interfaces:
|
|
lines.append(self._col(iface.zone.name, iface.name, iface.options or "-"))
|
|
return "".join(lines)
|
|
|
|
def policy(self) -> str:
|
|
lines = [self._header("policy"), "#SOURCE".ljust(16) + "DEST".ljust(16) + "POLICY".ljust(16) + "LOG LEVEL\n"]
|
|
for p in sorted(self._config.policies, key=lambda x: x.position):
|
|
lines.append(self._col(p.src_zone.name, p.dst_zone.name, p.policy, p.log_level or "-"))
|
|
return "".join(lines)
|
|
|
|
def rules(self) -> str:
|
|
lines = [
|
|
self._header("rules"),
|
|
"#ACTION".ljust(16) + "SOURCE".ljust(24) + "DEST".ljust(24) + "PROTO".ljust(10) + "DPORT".ljust(10) + "SPORT\n",
|
|
]
|
|
for r in sorted(self._config.rules, key=lambda x: x.position):
|
|
src = (r.src_zone.name if r.src_zone else "all") + (f":{r.src_ip}" if r.src_ip else "")
|
|
dst = (r.dst_zone.name if r.dst_zone else "all") + (f":{r.dst_ip}" if r.dst_ip else "")
|
|
lines.append(self._col(r.action, src, dst, r.proto or "-", r.dport or "-", r.sport or "-", width=16))
|
|
return "".join(lines)
|
|
|
|
def masq(self) -> str:
|
|
lines = [self._header("masq"), "#INTERFACE".ljust(24) + "SOURCE".ljust(24) + "ADDRESS\n"]
|
|
for m in self._config.masq_entries:
|
|
lines.append(self._col(m.out_interface, m.source_network, m.to_address or "-", width=24))
|
|
return "".join(lines)
|
|
|
|
def as_json(self) -> dict:
|
|
return {
|
|
"zones": self.zones(),
|
|
"interfaces": self.interfaces(),
|
|
"policy": self.policy(),
|
|
"rules": self.rules(),
|
|
"masq": self.masq(),
|
|
}
|
|
|
|
def as_zip(self) -> bytes:
|
|
buf = io.BytesIO()
|
|
with zipfile.ZipFile(buf, "w", zipfile.ZIP_DEFLATED) as zf:
|
|
zf.writestr("zones", self.zones())
|
|
zf.writestr("interfaces", self.interfaces())
|
|
zf.writestr("policy", self.policy())
|
|
zf.writestr("rules", self.rules())
|
|
zf.writestr("masq", self.masq())
|
|
return buf.getvalue()
|