+ ޠiANcsT^RIt^RI5^RIt^RItRt!RR4t!RR4tR#)N)Z*z0.1cs0a]tRt^toRtRtRtRtVtR#)SchemaValidatorz+Libnftables JSON validator using jsonschemacs2\PP\PP\4R4p\ VR4;_uu_4p\ P!V4VnRRR4^RI pW0n R# +'giL;i)z schema.jsonZrN) osZpathZjoinZdirnameZ__file__ZopenjsonZloadschema jsonschema)selfZ schema_pathZ schema_filers& 6/usr/lib/python3.14/site-packages/nftables/nftables.py__init__ZSchemaValidator.__init__sXggll277??8#t0R?t1R@t2RAt3RBt4RCt5Vt6R#)INftablesz*A class representing libnftables interfacezno-dnsrZscannerZparserZevalZnetlinkZmnlz proto-ctxZsegtree reversednsservice statelesshandleechoguid numeric_proto numeric_prionumeric_symbol numeric_timeterseNc s RVn\PV4pVPVn\VPn\ .VPnVPVn\VPn\.VPnVPVn \VPn\\.VPnVPVn \VPn\.VPnVPVn \\.VPnVPVn \ VPn\.VPnVPVn\\ .VPnVPVn\ VPn\.VPnVP Vn\"VP n\.VP nVP$Vn\ VP$n\.VP$nVP&Vn\"VP&n\.VP&nVP(Vn\ VP(n\\".VP(nVP*Vn\ VP*n\\".VP*nVP,Vn\ VP,n\\".VP,nVP.Vn\.VP.nVP0Vn\2VP0n\.VP0nVP4Vn\\2.VP4nVP6Vn\ VP6n\\".VP6nVP8Vn\.VP8nVP:Vn\.VP:nVP^4VnVPVP4VP%VP4R#)a<Instantiate a new Nftables class object. Accepts a shared object file to open, by default standard search path is searched for a file named 'libnftables.so'. After loading the library using ctypes module, a new nftables context is requested from the library and buffering of output and error streams is turned on. N)_Nftables__ctxZcdllZ LoadLibrary nft_ctx_newZc_void_pZrestypeZc_intZargtypesnft_ctx_input_get_flagsZc_uintnft_ctx_input_set_flagsnft_ctx_output_get_flagsnft_ctx_output_set_flagsnft_ctx_output_get_debugnft_ctx_output_set_debugnft_ctx_buffer_outputnft_ctx_get_output_bufferZc_char_pnft_ctx_buffer_errornft_ctx_get_error_buffernft_run_cmd_from_buffernft_run_cmd_from_filenamenft_ctx_add_include_pathnft_ctx_clear_include_pathsnft_ctx_get_dry_runZc_boolnft_ctx_set_dry_runnft_ctx_add_varnft_ctx_clear_vars nft_ctx_free)rZsofileZlib&& rrZNftables.__init__Hs v&??#+ %*G!'*'B'B$/5$$,19 $$-'*'B'B$/5$$,1960B$$-(+(D(D%06%%-2:%%.(+(D(D%2:F1C%%.(+(D(D%05%%-2:%%.(+(D(D%2:E1B%%.%(%>%>"-2""*/7j""+),)F)F&19&&.3;*&&/$'$<$<!,1!!).6Z!!*(+(D(D%08%%-2:%%.'*'B'B$/4$$,1980D$$-),)F)F&16&&.3;X2F&&/(+(D(D%05%%-2:H1E%%.+.+J+J(5=J((1#&#:#: +1  (-5J  )#&#:#: -5v,>  )"22',$)18(<%"%"8"8,4:(,,%-J!%%a(  ""4::. !!$**-r csjVPe%VPVP4RVnR#R#N)r!r5r&r__del__ZNftables.__del__s* :: !   djj )DJ "r cs.pVP4F/wrEW%,'gKVPV4W%(,pK1 V'dVPV4V#r7)ZitemsZappend)r flags_dictvalZnamesZnv&&& r_flags_from_numericZNftables._flags_from_numericsM$$&DAww Qr '  LL  r csN\V\\34'dV3p^pVF}p\V\4'd"VPV4pVf \ R4hM;\V\4'dV^8gVR8d \ R4hM \ R4hW4,pK V#)rzInvalid argumentlzNot a valid flag) isinstancestrZintZgetZ ValueErrorZ TypeError)rr;valuesr<r=s&&& r_flags_to_numericZNftables._flags_to_numerics fsCj ) )YFA!S!!NN1%9$%788As##q5A N$%788+ 233 HC r c pVPVP4pVPVPV4#)zcGet currently active input flags. Returns a set of flag names. See set_input_flags() for details. )r#r!r? input_flagsrr<& rget_input_flagsZNftables.get_input_flagss1 **4::6''(8(8#>>r c sVPVPV4pVPVPV4pVP VPV4#)aSet input flags. Resets all input flags to values. Accepts either a single flag or a list of flags. Each flag might be given either as string or integer value as shown in the following table: Name | Value (hex) ----------------------- "no-dns" | 0x1 "json" | 0x2 "no-dns" disables blocking address lookup. "json" enables JSON mode for input. Returns a set of previously active input flags, as returned by get_input_flags() method. )rCrEr$r!r?rrBr<old&& rset_input_flagsZNftables.set_input_flagssK$$$T%5%5v>**4::s;''(8(8#>>r csrVPV,pVPVP4V,^8g#r) output_flagsr%r!)rnameflagr6rZ__get_output_flagZNftables.__get_output_flags1  &--djj9D@QFFr csVPV,pVPVP4pV'd WC,pM WC(,pVPVPV4WC,^8g#rM)rNr%r!r&)rrOr<rPZflagsZ new_flagsr>rZ__set_output_flagZNftables.__set_output_flagsZ  &--djj9  I I %%djj)< ""r c $VPR4#)zGet the current state of reverse DNS output. Returns a boolean indicating whether reverse DNS lookups are performed for IP addresses in output. r_Nftables__get_output_flagr8r9rget_reversedns_outputZNftables.get_reversedns_outputs %%l33r c &VPRV4#)zEnable or disable reverse DNS output. Accepts a boolean turning reverse DNS lookups in output on or off. Returns the previous value. r_Nftables__set_output_flagrFr rset_reversedns_outputZNftables.set_reversedns_outputs%%lC88r c rQ)zGet the current state of service name output. Returns a boolean indicating whether service names are used for port numbers in output or not. rrRr8r9rget_service_outputZNftables.get_service_outputs %%i00r c rU)zEnable or disable service name output. Accepts a boolean turning service names for port numbers in output on or off. Returns the previous value. rrVrFr rset_service_outputZNftables.set_service_outputs%%i55r c rQ)ztGet the current state of stateless output. Returns a boolean indicating whether stateless output is active or not. rrRr8r9rget_stateless_outputZNftables.get_stateless_outputs %%k22r c rU)zEnable or disable stateless output. Accepts a boolean turning stateless output either on or off. Returns the previous value. rrVrFr rset_stateless_outputZNftables.set_stateless_outputs%%k377r c rQ)znGet the current state of handle output. Returns a boolean indicating whether handle output is active or not. rrRr8r9rget_handle_outputZNftables.get_handle_output(s %%h//r c rU)zrEnable or disable handle output. Accepts a boolean turning handle output on or off. Returns the previous value. rrVrFr rset_handle_outputZNftables.set_handle_output/s%%h44r c rQ)zjGet the current state of JSON output. Returns a boolean indicating whether JSON output is active or not. rrRr8r9rget_json_outputZNftables.get_json_output8 %%f--r c rU)zuEnable or disable JSON output. Accepts a boolean turning JSON output either on or off. Returns the previous value. rrVrFr rset_json_outputZNftables.set_json_output?%%fc22r c rQ)zjGet the current state of echo output. Returns a boolean indicating whether echo output is active or not. rrRr8r9rget_echo_outputZNftables.get_echo_outputHr`r c rU)znEnable or disable echo output. Accepts a boolean turning echo output on or off. Returns the previous value. rrVrFr rset_echo_outputZNftables.set_echo_outputOrbr c rQ)zGet the current state of GID/UID output. Returns a boolean indicating whether names for group/user IDs are used in output or not. rrRr8r9rget_guid_outputZNftables.get_guid_outputXs %%f--r c rU)z~Enable or disable GID/UID output. Accepts a boolean turning names for group/user IDs on or off. Returns the previous value. rrVrFr rset_guid_outputZNftables.set_guid_output`rbr c rQ)zdGet current status of numeric protocol output flag. Returns a boolean value indicating the status. rrRr8r9rget_numeric_proto_outputZ!Nftables.get_numeric_proto_outputis %%o66r c rU)zSet numeric protocol output flag. Accepts a boolean turning numeric protocol output either on or off. Returns the previous value. rrVrFr rset_numeric_proto_outputZ!Nftables.set_numeric_proto_outputps%%os;;r c rQ)zjGet current status of numeric chain priority output flag. Returns a boolean value indicating the status. rrRr8r9rget_numeric_prio_outputZ Nftables.get_numeric_prio_outputy %%n55r c rU)zSet numeric chain priority output flag. Accepts a boolean turning numeric chain priority output either on or off. Returns the previous value. rrVrFr rset_numeric_prio_outputZ Nftables.set_numeric_prio_output%%nc::r c rQ)zcGet current status of numeric symbols output flag. Returns a boolean value indicating the status. rrRr8r9rget_numeric_symbol_outputZ"Nftables.get_numeric_symbol_outputs %%&677r c rU)zSet numeric symbols output flag. Accepts a boolean turning numeric representation of symbolic constants in output either on or off. Returns the previous value. rrVrFr rset_numeric_symbol_outputZ"Nftables.set_numeric_symbol_outputs%%&6<>r c sVPVPV4pVP4pVPVPV4V#)aSet debug output flags. Accepts either a single flag or a set of flags. Each flag might be given either as string or integer value as shown in the following table: Name | Value (hex) ----------------------- scanner | 0x1 parser | 0x2 eval | 0x4 netlink | 0x8 mnl | 0x10 proto-ctx | 0x20 segtree | 0x40 Returns a set of previously active debug flags, as returned by get_debug() method. )rCrsrtr(r!rIrKr set_debugZNftables.set_debugsA($$T%5%5v>nn %%djj#6 r c sXRp\V\4'gRpVPR4pVPVPV4pVP VP4pVP VP4pV'd#VPR4pVPR4pW4V3#)aRun a simple nftables command via libnftables. Accepts a string containing an nftables command just like what one would enter into an interactive nftables (nft -i) session. Returns a tuple (rc, output, error): rc -- return code as returned by nft_run_cmd_from_buffer() fuction output -- a string containing output written to stdout error -- a string containing output written to stderr FTutf-8)r@bytesencoder-r!r*r,decode)rZcmdlineZcmdline_is_unicodercoutputerror&& rcmdZ Nftables.cmds#'5))!% nnW-G  ) )$**g >// ;--djj9 ]]7+FLL)EE""r c sVPR4pVP\P!V44wr4pV'gVPV4\ V4'd\P !V4pW4V3#)a9Run an nftables command in JSON syntax via libnftables. Accepts a hash object as input. Returns a tuple (rc, output, error): rc -- return code as returned by nft_run_cmd_from_buffer() function output -- a hash object containing library standard output error -- a string containing output written to stderr T)rar~rZdumpsZlenZloads)r json_rootZ json_out_oldrzr{r|r}rjson_cmdZNftables.json_cmdsc++D1  HHTZZ %:;E   . v;;ZZ'FE""r c s~VP'g\4VnVPPV4R#)zValidate JSON object against libnftables schema. Accepts a hash object as input. Returns True if JSON is valid, raises an exception otherwise. T) validatorrr )rrr r json_validateZNftables.json_validates,~~~,.DN  *r c snRp\V\4'gRp\V4pVPR4pVP VP V4pVP VP 4pVPVP 4pV'd#VPR4pVPR4pW4V3#)a&Run a nftables command set from a file filename can be a str or a Path Returns a tuple (rc, output, error): rc -- return code as returned by nft_run_cmd_from_filename() function output -- a string containing output written to stdout error -- a string containing output written to stderr FTrv) r@rwrArxr.r!r*r,ry)rfilenameZfilename_is_unicoderzr{r|r}r cmd_from_fileZNftables.cmd_from_files$(E**"& 8}Hoog.H  + +DJJ A// ;--djj9 ]]7+FLL)EE""r c s\V\4'g\V4pVPR4pVP VP V4pV^8H#)zAdd a path to the include file list The default list includes the built-in default one Returns True on success, False if memory allocation fails rv)r@rwrArxr/r!)rrrzr6radd_include_pathZNftables.add_include_path+sG (E**8}Hoog.H  * *4::x @Qwr c <VPVP4R#)zCClear include path list Will also remove the built-in default one N)r0r!r8r9rclear_include_pathsZNftables.clear_include_paths7s ((4r c s8VPVP4#)z8Get dry run state Returns True if set, False otherwise )r1r!r8r9r get_dry_runZNftables.get_dry_run>s '' 33r c s^VP4pVPVPV4V#)z6Set dry run state Returns the previous dry run state )rr2r!)rZonoffrJr6r set_dry_runZNftables.set_dry_runEs+     U3 r c s\V\4'gVPR4pVPVPV4pV^8H#)zLAdd a variable to the variable list Returns True if added, False otherwise rv)r@rwrxr3r!)rZvarrzr6radd_varZNftables.add_varOs> #u%%**W%C  ! !$**c 2Qwr c r)zClear variable list N)r4r!r8r9r clear_varsZNftables.clear_varsYs  +r )Z__ctxr/r3r+r)r0r4r5r1r,r*r#r$r"r'r%r(r&r2r-r.riiii)zlibnftables.so.1)7r r rrrrErsrNrrr:r?rCrHrLrSrWrTrXrYrZr[r\r]r^r_rarcrdrerfrgrhrirkrmrnrorprqrrrtrur~rrrrrrrrrrrrrrrr%sw4 #K SSSS TTTK 666666666677 LI].~ &??,G#49163805.3.3.37<6;8=6;/4?2#0#$ #. 54,,r r)rZctypesZsysrZNFTABLES_VERSIONrr)r rrs1"   D Dw,w,r