dissect.target.plugins.os.unix.linux.iptables#

Module Contents#

Classes#

IptablesSavePlugin

Parser for iptables-save, ip6tables-save and ufw rules.

Attributes#

PATTERN_IPTABLES_SAVE_GENERATED

PATTERN_IPTABLES_SAVE_POLICY

PATTERN_IPTABLES_SAVE_RULE

IptablesSaveRecord

dissect.target.plugins.os.unix.linux.iptables.PATTERN_IPTABLES_SAVE_GENERATED#
dissect.target.plugins.os.unix.linux.iptables.PATTERN_IPTABLES_SAVE_POLICY#
dissect.target.plugins.os.unix.linux.iptables.PATTERN_IPTABLES_SAVE_RULE#
dissect.target.plugins.os.unix.linux.iptables.IptablesSaveRecord#
class dissect.target.plugins.os.unix.linux.iptables.IptablesSavePlugin(target: dissect.target.target.Target)#

Bases: dissect.target.plugin.Plugin

Parser for iptables-save, ip6tables-save and ufw rules.

As iptables rules are not stored on disk by default, users that want persistent rules need to store them somewhere and reload them on boot. iptables provides tools to save and reload rules (iptables-save and iptables-restore). These tools do not have a default path to look for rules, however there are multiple commonly used paths.

References

COMMON_SAVE_PATHS = ('/etc/iptables/rules.v4', '/etc/sysconfig/iptables', '/etc/iptables.rules',...#
LOG_TIME_FORMAT = '%a %b  %d %H:%M:%S %Y'#
check_compatible() → None#

Perform a compatibility check with the target.

This function should return None if the plugin is compatible with the current target (self.target). For example, check if a certain file exists. Otherwise it should raise an UnsupportedPluginError.

Raises:

UnsupportedPluginError – If the plugin could not be loaded.

iptables() → Iterator[IptablesSaveRecord]#

Return iptables and ufw rules saved using iptables-save.