+  G_|T^RIt^RI5^RIt^RItRt!RR4t!RR4tR#)N)*z0.1c0a]tRt^toRtRtRtRtVtR#)SchemaValidatorz+Libnftables JSON validator using jsonschemac2\PP\PP\4R4p\ VR4;_uu_4p\ P!V4VnRRR4^RI pW0n R# +'giL;i)z schema.jsonrN) ospathjoindirname__file__openjsonloadschema jsonschema)self schema_path schema_filers& 6/usr/lib/python3.14/site-packages/nftables/nftables.py__init__SchemaValidator.__init__sXggll277??8#t0R?t1R@t2RAt3RBt4RCt5Vt6R#)INftablesz*A class representing libnftables interfacezno-dnsrscannerparserevalnetlinkmnlz proto-ctxsegtree reversednsservice statelesshandleechoguid numeric_proto numeric_prionumeric_symbol numeric_timeterseNc RVn\PV4pVPVn\VPn\ .VPnVPVn\VPn\.VPnVPVn \VPn\\.VPnVPVn \VPn\.VPnVPVn \\.VPnVPVn \ VPn\.VPnVPVn\\ .VPnVPVn\ VPn\.VPnVP Vn\"VP n\.VP nVP$Vn\ VP$n\.VP$nVP&Vn\"VP&n\.VP&nVP(Vn\ VP(n\\".VP(nVP*Vn\ VP*n\\".VP*nVP,Vn\ VP,n\\".VP,nVP.Vn\.VP.nVP0Vn\2VP0n\.VP0nVP4Vn\\2.VP4nVP6Vn\ VP6n\\".VP6nVP8Vn\.VP8nVP:Vn\.VP:nVP^4VnVPVP4VP%VP4R#)a<Instantiate a new Nftables class object. Accepts a shared object file to open, by default standard search path is searched for a file named 'libnftables.so'. After loading the library using ctypes module, a new nftables context is requested from the library and buffering of output and error streams is turned on. N)_Nftables__ctxcdll LoadLibrary nft_ctx_newc_void_prestypec_intargtypesnft_ctx_input_get_flagsc_uintnft_ctx_input_set_flagsnft_ctx_output_get_flagsnft_ctx_output_set_flagsnft_ctx_output_get_debugnft_ctx_output_set_debugnft_ctx_buffer_outputnft_ctx_get_output_bufferc_char_pnft_ctx_buffer_errornft_ctx_get_error_buffernft_run_cmd_from_buffernft_run_cmd_from_filenamenft_ctx_add_include_pathnft_ctx_clear_include_pathsnft_ctx_get_dry_runc_boolnft_ctx_set_dry_runnft_ctx_add_varnft_ctx_clear_vars nft_ctx_free)rsofilelibs&& rrNftables.__init__Hs v&??#+ %*G!'*'B'B$/5$$,19 $$-'*'B'B$/5$$,1960B$$-(+(D(D%06%%-2:%%.(+(D(D%2:F1C%%.(+(D(D%05%%-2:%%.(+(D(D%2:E1B%%.%(%>%>"-2""*/7j""+),)F)F&19&&.3;*&&/$'$<$<!,1!!).6Z!!*(+(D(D%08%%-2:%%.'*'B'B$/4$$,1980D$$-),)F)F&16&&.3;X2F&&/(+(D(D%05%%-2:H1E%%.+.+J+J(5=J((1#&#:#: +1  (-5J  )#&#:#: -5v,>  )"22',$)18(<%"%"8"8,4:(,,%-J!%%a(  ""4::. !!$**-rcjVPe%VPVP4RVnR#R#N)r:rWrs&r__del__Nftables.__del__s* :: !   djj )DJ "rc.pVP4F/wrEW%,'gKVPV4W%(,pK1 V'dVPV4V#r\)itemsappend)r flags_dictvalnamesnvs&&& r_flags_from_numericNftables._flags_from_numericsM$$&DAww Qr '  LL  rcN\V\\34'dV3p^pVF}p\V\4'd"VPV4pVf \ R4hM;\V\4'dV^8gVR8d \ R4hM \ R4hW4,pK V#)rzInvalid argumentlzNot a valid flag) isinstancestrintget ValueError TypeError)rrcvaluesrdrgs&&& r_flags_to_numericNftables._flags_to_numerics fsCj ) )YFA!S!!NN1%9$%788As##q5A N$%788+ 233 HC rc pVPVP4pVPVPV4#)zcGet currently active input flags. Returns a set of flag names. See set_input_flags() for details. )rBr:rh input_flagsrrds& rget_input_flagsNftables.get_input_flagss1 **4::6''(8(8#>>rc VPVPV4pVPVPV4pVP VPV4#)aSet input flags. Resets all input flags to values. Accepts either a single flag or a list of flags. Each flag might be given either as string or integer value as shown in the following table: Name | Value (hex) ----------------------- "no-dns" | 0x1 "json" | 0x2 "no-dns" disables blocking address lookup. "json" enables JSON mode for input. Returns a set of previously active input flags, as returned by get_input_flags() method. )rrrurDr:rhrrqrdolds&& rset_input_flagsNftables.set_input_flagssK$$$T%5%5v>**4::s;''(8(8#>>rcrVPV,pVPVP4V,^8g#r) output_flagsrEr:)rnameflags&& r__get_output_flagNftables.__get_output_flags1  &--djj9D@QFFrcVPV,pVPVP4pV'd WC,pM WC(,pVPVPV4WC,^8g#r)rrEr:rF)rrrdrflags new_flagss&&& r__set_output_flagNftables.__set_output_flagsZ  &--djj9  I I %%djj)< ""rc $VPR4#)zGet the current state of reverse DNS output. Returns a boolean indicating whether reverse DNS lookups are performed for IP addresses in output. r._Nftables__get_output_flagr]s&rget_reversedns_outputNftables.get_reversedns_outputs %%l33rc &VPRV4#)zEnable or disable reverse DNS output. Accepts a boolean turning reverse DNS lookups in output on or off. Returns the previous value. r._Nftables__set_output_flagrvs&&rset_reversedns_outputNftables.set_reversedns_outputs%%lC88rc $VPR4#)zGet the current state of service name output. Returns a boolean indicating whether service names are used for port numbers in output or not. r/rr]s&rget_service_outputNftables.get_service_outputs %%i00rc &VPRV4#)zEnable or disable service name output. Accepts a boolean turning service names for port numbers in output on or off. Returns the previous value. r/rrvs&&rset_service_outputNftables.set_service_outputs%%i55rc $VPR4#)ztGet the current state of stateless output. Returns a boolean indicating whether stateless output is active or not. r0rr]s&rget_stateless_outputNftables.get_stateless_outputs %%k22rc &VPRV4#)zEnable or disable stateless output. Accepts a boolean turning stateless output either on or off. Returns the previous value. r0rrvs&&rset_stateless_outputNftables.set_stateless_outputs%%k377rc $VPR4#)znGet the current state of handle output. Returns a boolean indicating whether handle output is active or not. r1rr]s&rget_handle_outputNftables.get_handle_output(s %%h//rc &VPRV4#)zrEnable or disable handle output. Accepts a boolean turning handle output on or off. Returns the previous value. r1rrvs&&rset_handle_outputNftables.set_handle_output/s%%h44rc $VPR4#)zjGet the current state of JSON output. Returns a boolean indicating whether JSON output is active or not. rrr]s&rget_json_outputNftables.get_json_output8 %%f--rc &VPRV4#)zuEnable or disable JSON output. Accepts a boolean turning JSON output either on or off. Returns the previous value. rrrvs&&rset_json_outputNftables.set_json_output?%%fc22rc $VPR4#)zjGet the current state of echo output. Returns a boolean indicating whether echo output is active or not. r2rr]s&rget_echo_outputNftables.get_echo_outputHrrc &VPRV4#)znEnable or disable echo output. Accepts a boolean turning echo output on or off. Returns the previous value. r2rrvs&&rset_echo_outputNftables.set_echo_outputOrrc $VPR4#)zGet the current state of GID/UID output. Returns a boolean indicating whether names for group/user IDs are used in output or not. r3rr]s&rget_guid_outputNftables.get_guid_outputXs %%f--rc &VPRV4#)z~Enable or disable GID/UID output. Accepts a boolean turning names for group/user IDs on or off. Returns the previous value. r3rrvs&&rset_guid_outputNftables.set_guid_output`rrc $VPR4#)zdGet current status of numeric protocol output flag. Returns a boolean value indicating the status. r4rr]s&rget_numeric_proto_output!Nftables.get_numeric_proto_outputis %%o66rc &VPRV4#)zSet numeric protocol output flag. Accepts a boolean turning numeric protocol output either on or off. Returns the previous value. r4rrvs&&rset_numeric_proto_output!Nftables.set_numeric_proto_outputps%%os;;rc $VPR4#)zjGet current status of numeric chain priority output flag. Returns a boolean value indicating the status. r5rr]s&rget_numeric_prio_output Nftables.get_numeric_prio_outputy %%n55rc &VPRV4#)zSet numeric chain priority output flag. Accepts a boolean turning numeric chain priority output either on or off. Returns the previous value. r5rrvs&&rset_numeric_prio_output Nftables.set_numeric_prio_output%%nc::rc $VPR4#)zcGet current status of numeric symbols output flag. Returns a boolean value indicating the status. r6rr]s&rget_numeric_symbol_output"Nftables.get_numeric_symbol_outputs %%&677rc &VPRV4#)zSet numeric symbols output flag. Accepts a boolean turning numeric representation of symbolic constants in output either on or off. Returns the previous value. r6rrvs&&rset_numeric_symbol_output"Nftables.set_numeric_symbol_outputs%%&6<>rc VPVPV4pVP4pVPVPV4V#)aSet debug output flags. Accepts either a single flag or a set of flags. Each flag might be given either as string or integer value as shown in the following table: Name | Value (hex) ----------------------- scanner | 0x1 parser | 0x2 eval | 0x4 netlink | 0x8 mnl | 0x10 proto-ctx | 0x20 segtree | 0x40 Returns a set of previously active debug flags, as returned by get_debug() method. )rrrrrHr:rzs&& r set_debugNftables.set_debugsA($$T%5%5v>nn %%djj#6 rc XRp\V\4'gRpVPR4pVPVPV4pVP VP4pVP VP4pV'd#VPR4pVPR4pW4V3#)aRun a simple nftables command via libnftables. Accepts a string containing an nftables command just like what one would enter into an interactive nftables (nft -i) session. Returns a tuple (rc, output, error): rc -- return code as returned by nft_run_cmd_from_buffer() fuction output -- a string containing output written to stdout error -- a string containing output written to stderr FTutf-8)rkbytesencoderNr:rJrMdecode)rcmdlinecmdline_is_unicodercoutputerrors&& rcmd Nftables.cmds#'5))!% nnW-G  ) )$**g >// ;--djj9 ]]7+FLL)EE""rc VPR4pVP\P!V44wr4pV'gVPV4\ V4'd\P !V4pW4V3#)a9Run an nftables command in JSON syntax via libnftables. Accepts a hash object as input. Returns a tuple (rc, output, error): rc -- return code as returned by nft_run_cmd_from_buffer() function output -- a hash object containing library standard output error -- a string containing output written to stderr T)rrrdumpslenloads)r json_root json_out_oldrrrs&& rjson_cmdNftables.json_cmdsc++D1  HHTZZ %:;E   . v;;ZZ'FE""rc ~VP'g\4VnVPPV4R#)zValidate JSON object against libnftables schema. Accepts a hash object as input. Returns True if JSON is valid, raises an exception otherwise. T) validatorrr)rrs&&r json_validateNftables.json_validates,~~~,.DN  *rc nRp\V\4'gRp\V4pVPR4pVP VP V4pVP VP 4pVPVP 4pV'd#VPR4pVPR4pW4V3#)a&Run a nftables command set from a file filename can be a str or a Path Returns a tuple (rc, output, error): rc -- return code as returned by nft_run_cmd_from_filename() function output -- a string containing output written to stdout error -- a string containing output written to stderr FTr) rkrrlrrOr:rJrMr)rfilenamefilename_is_unicoderrrs&& r cmd_from_fileNftables.cmd_from_files$(E**"& 8}Hoog.H  + +DJJ A// ;--djj9 ]]7+FLL)EE""rc \V\4'g\V4pVPR4pVP VP V4pV^8H#)zAdd a path to the include file list The default list includes the built-in default one Returns True on success, False if memory allocation fails r)rkrrlrrPr:)rrrs&& radd_include_pathNftables.add_include_path+sG (E**8}Hoog.H  * *4::x @Qwrc <VPVP4R#)zCClear include path list Will also remove the built-in default one N)rQr:r]s&rclear_include_pathsNftables.clear_include_paths7s ((4rc 8VPVP4#)z8Get dry run state Returns True if set, False otherwise )rRr:r]s&r get_dry_runNftables.get_dry_run>s '' 33rc ^VP4pVPVPV4V#)z6Set dry run state Returns the previous dry run state )rrTr:)ronoffr{s&& r set_dry_runNftables.set_dry_runEs+     U3 rc \V\4'gVPR4pVPVPV4pV^8H#)zLAdd a variable to the variable list Returns True if added, False otherwise r)rkrrrUr:)rvarrs&& radd_varNftables.add_varOs> #u%%**W%C  ! !$**c 2Qwrc <VPVP4R#)zClear variable list N)rVr:r]s&r clear_varsNftables.clear_varsYs  +r)__ctxrPrUrLrIrQrVrWrRrMrJrBrDr=rGrErHrFrTrNrOriii)zlibnftables.so.1)7rrrr r!rurrrrr^rhrrrwr|rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr r rr"r#r$s@rr'r'%sw4 #K SSSS TTTK 666666666677 LI].~ &??,G#49163805.3.3.37<6;8=6;/4?2#0#$ #. 54,,rr')rctypessysrNFTABLES_VERSIONrr'rrrs1"   D Dw,w,r