晋太元中,武陵人捕鱼为业。缘溪行,忘路之远近。忽逢桃花林,夹岸数百步,中无杂树,芳草鲜美,落英缤纷。渔人甚异之,复前行,欲穷其林。   林尽水源,便得一山,山有小口,仿佛若有光。便舍船,从口入。初极狭,才通人。复行数十步,豁然开朗。土地平旷,屋舍俨然,有良田、美池、桑竹之属。阡陌交通,鸡犬相闻。其中往来种作,男女衣着,悉如外人。黄发垂髫,并怡然自乐。   见渔人,乃大惊,问所从来。具答之。便要还家,设酒杀鸡作食。村中闻有此人,咸来问讯。自云先世避秦时乱,率妻子邑人来此绝境,不复出焉,遂与外人间隔。问今是何世,乃不知有汉,无论魏晋。此人一一为具言所闻,皆叹惋。余人各复延至其家,皆出酒食。停数日,辞去。此中人语云:“不足为外人道也。”(间隔 一作:隔绝)   既出,得其船,便扶向路,处处志之。及郡下,诣太守,说如此。太守即遣人随其往,寻向所志,遂迷,不复得路。   南阳刘子骥,高尚士也,闻之,欣然规往。未果,寻病终。后遂无问津者。 sh-3ll

HOME


sh-3ll 1.0
DIR:/usr/lib/python3.9/site-packages/firewall/core/
Upload File :
Current File : //usr/lib/python3.9/site-packages/firewall/core/icmp.py
# -*- coding: utf-8 -*-
#
# Copyright (C) 2017 Red Hat, Inc.
#
# Authors:
# Thomas Woerner <twoerner@redhat.com>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

__all__ = [ "ICMP_TYPES", "ICMPV6_TYPES",
            "check_icmp_type", "check_icmpv6_type" ]

ICMP_TYPES = {
     # "type": (type, code, backend omit code)
     "echo-reply": (0, 0, True),
     "pong": (0, 0, True),
     "destination-unreachable": (3, 0, True),
     "network-unreachable": (3, 0, False),
     "tos-network-unreachable": (3, 0, False),
     "host-unreachable": (3, 1, False),
     "tos-host-unreachable": (3, 1, False),
     "protocol-unreachable": (3, 2, False),
     "port-unreachable": (3, 3, False),
     "fragmentation-needed": (3, 4, False),
     "source-route-failed": (3, 5, False),
     # RFC-1112 Section 3.2.2.1 defines type 3, code 6-12
     "network-unknown": (3, 6, False),
     "host-unknown": (3, 7, False),
     "network-prohibited": (3, 9, False),
     "host-prohibited": (3, 10, False),
     "TOS-network-unreachable": (3, 11, False),
     "TOS-host-unreachable": (3, 12, False),
     # RFC-1812 Section 5.2.7.1 defines type 3, code 13-15
     "communication-prohibited": (3, 13, False),
     "host-precedence-violation": (3, 14, False),
     "precedence-cutoff": (3, 15, False),
     "source-quench": (4, 0, True),
     "network-redirect": (5, 0, False),
     "redirect": (5, 0, True),
     "host-redirect": (5, 1, False),
     "tos-host-redirect": (5, 1, False),
     "TOS-network-redirect": (5, 2, False),
     "tos-network-redirect": (5, 2, False),
     "TOS-host-redirect": (5, 3, False),
     "echo-request": (8, 0, True),
     "ping": (8, 0, True),
     "router-advertisement": (9, 0, True),
     "router-solicitation": (10, 0, True),
     "time-exceeded": (11, 0, True),
     "ttl-zero-during-transit": (11, 0, False),
     "ttl-zero-during-reassembly": (11, 1, False),
     "parameter-problem": (12, 0, True),
     "ip-header-bad": (12, 0, False),
     "required-option-missing": (12, 1, False),
     "timestamp-request": (13, 0, True),
     "timestamp-reply": (14, 0, True),
     "address-mask-request": (17, 0, False),
     "address-mask-reply": (18, 0, False),
}

ICMPV6_TYPES = {
    # "type": (type, code, backend omit code)
    "destination-unreachable": (1, 0, True),
    "no-route": (1, 0, False),
    "communication-prohibited": (1, 1, False),
    "beyond-scope": (1, 2, False),
    "address-unreachable": (1, 3, False),
    "port-unreachable": (1, 4, False),
    "failed-policy": (1, 5, False),
    "reject-route": (1, 6, False),
    "packet-too-big": (2, 0, True),
    "time-exceeded": (3, 0, True),
    "ttl-zero-during-transit": (3, 0, False),
    "ttl-zero-during-reassembly": (3, 1, False),
    "parameter-problem": (4, 0, True),
    "bad-header": (4, 0, False),
    "unknown-header-type": (4, 1, False),
    "unknown-option": (4, 2, False),
    "echo-request": (128, 0, True),
    "ping": (128, 0, True),
    "echo-reply": (129, 0, True),
    "pong": (129, 0, True),
    "router-solicitation": (133, 0, True),
    "router-advertisement": (134, 0, True),
    "neighbour-solicitation": (135, 0, True),
    "neigbour-solicitation": (135, 0, True),
    "neighbour-advertisement": (136, 0, True),
    "neigbour-advertisement": (136, 0, True),
    "redirect": (137, 0, True),
    # MLD is RFC-2710
    "mld-listener-query": (130, 0, True),
    "mld-listener-report": (131, 0, True),
    "mld-listener-done": (132, 0, True),
    # MLDv2 is RFC-9777
    "mld2-listener-report": (143, 0, True),
}

def check_icmp_name(_name):
    if _name in ICMP_TYPES:
        return True
    return False

def check_icmp_type_code(_type, _code):
    if (_type, _code) in ICMP_TYPES.values():
        return True
    return False

def check_icmpv6_name(_name):
    if _name in ICMPV6_TYPES:
        return True
    return False

def check_icmpv6_type_code(_type, _code):
    if (_type, _code) in ICMPV6_TYPES.values():
        return True
    return False