lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-15 00:54:41 +00:00
Code Issues Packages Projects Releases Wiki Activity

find_table_references.py: use pfctl for IP check (#4320)

Browse Source
This commit is contained in:
kulikov-a 2020-09-03 22:59:17 +03:00 committed by GitHub
parent 37ad98237b
commit d6bfe637da
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/opnsense/scripts/filter/find_table_references.py
View File

@ -49,13 +49,12 @@ if __name__ == '__main__':
for line in sp.stdout.strip().split('\n'):
tables.append(line.strip())
# Fetch IP ranges in this table and check if they match
# Test given address against tables
for table in tables:
sp = subprocess.run(['/sbin/pfctl', '-t', table, '-T', 'show'], capture_output=True, text=True)
for line in sp.stdout.strip().split('\n'):
if line.strip() != "":
if ip in IPNetwork(line.strip()):
result['matches'].append(table)
sp = subprocess.run(['/sbin/pfctl', '-t', table, '-Ttest', sys.argv[1]], capture_output=True, text=True)
line = sp.stderr.strip()
if line.find("1/1") == 0:
result['matches'].append(table)
print(ujson.dumps(result))
except AddrFormatError: