CyberPanel/plogical/csf.py

#!/usr/local/CyberCP/bin/python2
import CyberCPLogFileWriter as logging
import subprocess
import shlex
import argparse
from virtualHostUtilities import virtualHostUtilities
import os
import tarfile
import shutil
from mailUtilities import mailUtilities
import threading as multi
from plogical.processUtilities import ProcessUtilities

class CSF(multi.Thread):
    installLogPath = "/home/cyberpanel/csfInstallLog"
    csfURL = 'https://download.configserver.com/csf.tgz'

    def __init__(self, installApp, extraArgs):
        multi.Thread.__init__(self)
        self.installApp = installApp
        self.extraArgs = extraArgs

    def run(self):
        try:
            if self.installApp == 'installCSF':
                self.installCSF()
            elif self.installApp == 'removeCSF':
                self.removeCSF()
        except BaseException, msg:
            logging.CyberCPLogFileWriter.writeToFile(str(msg) + ' [CSF.run]')

    @staticmethod
    def installCSF():
        try:
            ##

            logging.CyberCPLogFileWriter.statusWriter(CSF.installLogPath, 'Downloading CSF..\n', 1)

            command = 'wget ' + CSF.csfURL
            ProcessUtilities.normalExecutioner(command)

            ##

            logging.CyberCPLogFileWriter.statusWriter(CSF.installLogPath, 'Extracting CSF..\n', 1)

            command = 'tar -xzf csf.tgz'
            ProcessUtilities.normalExecutioner(command)

            ##

            logging.CyberCPLogFileWriter.statusWriter(CSF.installLogPath, 'Installing CSF..\n', 1)

            os.chdir('csf')

            command = "chmod +x install.sh"
            ProcessUtilities.normalExecutioner(command)

            command = 'bash install.sh'
            ProcessUtilities.normalExecutioner(command)


            ## Some initial configurations

            data = open('/etc/csf/csf.conf', 'r').readlines()
            writeToConf = open('/etc/csf/csf.conf', 'w')

            for items in data:
                if items.find('TCP_IN') > -1 and items.find('=') > -1 and (items[0] != '#'):
                    writeToConf.writelines('TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,993,995,8090,40110:40210"\n')
                elif items.find('TCP_OUT') > -1 and items.find('=') > -1 and (items[0] != '#'):
                    writeToConf.writelines('TCP_OUT = "20,21,22,25,53,80,110,113,443,587,993,995,8090,40110:40210"\n')
                elif items.find('UDP_IN') > -1 and items.find('=') > -1 and (items[0] != '#'):
                    writeToConf.writelines('UDP_IN = "20,21,53"\n')
                elif items.find('UDP_OUT') > -1 and items.find('=') > -1 and (items[0] != '#'):
                    writeToConf.writelines('UDP_OUT = "20,21,53,113,123"\n')
                else:
                    writeToConf.writelines(items)

            writeToConf.close()
            ##

            command = 'csf -s'
            ProcessUtilities.normalExecutioner(command)

            logging.CyberCPLogFileWriter.statusWriter(CSF.installLogPath, 'CSF successfully Installed.[200]\n', 1)

            try:
                os.remove('csf.tgz')
                os.removedirs('csf')
            except:
                pass

            return 1
        except BaseException, msg:
            try:
                os.remove('csf.tgz')
                os.removedirs('csf')
            except:
                pass
            writeToFile = open(CSF.installLogPath, 'a')
            writeToFile.writelines(str(msg) + " [404]")
            writeToFile.close()
            logging.CyberCPLogFileWriter.writeToFile(str(msg) + "[installCSF]")

    def removeCSF(self):
        try:

            ##

            os.chdir('/etc/csf')

            command = './uninstall.sh'
            cmd = shlex.split(command)
            subprocess.call(cmd)

            os.chdir('/usr/local/CyberCP')

            #

            command = 'systemctl unmask firewalld'
            subprocess.call(shlex.split(command))

            #

            command = 'systemctl start firewalld'
            subprocess.call(shlex.split(command))

            ##

            command = 'systemctl enable firewalld'
            subprocess.call(shlex.split(command))

            return 1
        except BaseException, msg:
            logging.CyberCPLogFileWriter.writeToFile(str(msg) + "[removeCSF]")

    @staticmethod
    def fetchCSFSettings():
        try:

            currentSettings = {}

            command = 'sudo cat /etc/csf/csf.conf'
            output = ProcessUtilities.outputExecutioner(command).splitlines()

            for items in output:
                if items.find('TESTING') > -1 and items.find('=') > -1 and (items[0]!= '#') and items.find('TESTING_INTERVAL') == -1:
                    if items.find('0') > -1:
                        currentSettings['TESTING'] = 0
                    else:
                        currentSettings['TESTING'] = 1
                elif items.find('TCP_IN') > -1 and items.find('=') > -1 and (items[0] != '#'):
                    tcpIN = items[items.find('"'):]
                    currentSettings['tcpIN'] = tcpIN.strip('"')
                elif items.find('TCP_OUT') > -1 and items.find('=') > -1 and (items[0] != '#'):
                    tcpOUT = items[items.find('"'):]
                    currentSettings['tcpOUT'] = tcpOUT.strip('"')
                elif items.find('UDP_IN') > -1 and items.find('=') > -1 and (items[0] != '#'):
                    udpIN = items[items.find('"'):]
                    currentSettings['udpIN'] = udpIN.strip('"')
                elif items.find('UDP_OUT') > -1 and items.find('=') > -1 and (items[0] != '#'):
                    udpOUT = items[items.find('"'):]
                    currentSettings['udpOUT'] = udpOUT.strip('"')

            ### Check if rules are applied

            currentSettings['firewallStatus'] = 0

            command = 'sudo iptables -nv -L'
            output = ProcessUtilities.outputExecutioner(command)

            if output.find('0.0.0.0/0') > -1:
                currentSettings['firewallStatus'] = 1


            return currentSettings

        except BaseException, msg:
            logging.CyberCPLogFileWriter.writeToFile(str(msg) + " [fetchCSFSettings]")

    @staticmethod
    def changeStatus(controller, status):
        try:
            if controller == 'csf':
                if status == 'enable':
                    command = 'csf -s'
                    subprocess.call(shlex.split(command))
                    print '1,None'
                else:
                    command = 'csf -f'
                    subprocess.call(shlex.split(command))
                    print '1,None'

            elif controller == 'testingMode':
                data = open('/etc/csf/csf.conf', 'r').readlines()
                writeToFile = open('/etc/csf/csf.conf', 'w')

                for items in data:
                    if items.find('TESTING') > -1 and items.find('=') > -1 and (items[0] != '#') and items.find(
                            'TESTING_INTERVAL') == -1:
                        if status == 'enable':
                            writeToFile.writelines('TESTING = "1"\n')
                        else:
                            writeToFile.writelines('TESTING = "0"\n')
                    else:
                        writeToFile.writelines(items)
                writeToFile.close()
                print '1,None'

        except BaseException, msg:
            logging.CyberCPLogFileWriter.writeToFile(str(msg) + "[changeStatus]")
            print '0',str(msg)

    @staticmethod
    def modifyPorts(protocol, portsPath):
        try:

            data = open('/etc/csf/csf.conf', 'r').readlines()
            writeToFile = open('/etc/csf/csf.conf', 'w')

            ports = open(portsPath, 'r').read()

            if protocol == 'TCP_IN':
                for items in data:
                    if items.find('TCP_IN') > -1 and items.find('=') > -1 and (items[0] != '#'):
                        writeToFile.writelines('TCP_IN = "' + ports + '"\n')
                    else:
                        writeToFile.writelines(items)
                writeToFile.close()
            elif protocol == 'TCP_OUT':
                for items in data:
                    if items.find('TCP_OUT') > -1 and items.find('=') > -1 and (items[0] != '#'):
                        writeToFile.writelines('TCP_OUT = "' + ports + '"\n')
                    else:
                        writeToFile.writelines(items)
                writeToFile.close()
            elif protocol == 'UDP_IN':
                for items in data:
                    if items.find('UDP_IN') > -1 and items.find('=') > -1 and (items[0] != '#'):
                        writeToFile.writelines('UDP_IN = "' + ports + '"\n')
                    else:
                        writeToFile.writelines(items)
                writeToFile.close()
            elif protocol == 'UDP_OUT':
                for items in data:
                    if items.find('UDP_OUT') > -1 and items.find('=') > -1 and (items[0] != '#'):
                        writeToFile.writelines('UDP_OUT = "' + ports + '"\n')
                    else:
                        writeToFile.writelines(items)
                writeToFile.close()

            command = 'csf -r'
            subprocess.call(shlex.split(command))

            try:
                os.remove(portsPath)
            except:
                pass

            print '1,None'

        except BaseException, msg:
            logging.CyberCPLogFileWriter.writeToFile(str(msg) + "[modifyPorts]")
            print '0', str(msg)

    @staticmethod
    def allowIP(ipAddress):
        try:
            command = 'sudo csf -dr ' + ipAddress
            ProcessUtilities.executioner(command)

            command = 'sudo csf -a ' + ipAddress
            ProcessUtilities.executioner(command)

        except BaseException, msg:
            logging.CyberCPLogFileWriter.writeToFile(str(msg) + "[allowIP]")

    @staticmethod
    def blockIP(ipAddress):
        try:

            command = 'sudo csf -tr ' + ipAddress
            ProcessUtilities.executioner(command)

            command = 'sudo csf -d ' + ipAddress
            ProcessUtilities.executioner(command)

        except BaseException, msg:
            logging.CyberCPLogFileWriter.writeToFile(str(msg) + "[blockIP]")


def main():

    parser = argparse.ArgumentParser(description='CSF Manager')
    parser.add_argument('function', help='Specific a function to call!')

    parser.add_argument('--controller', help='Controller selection!')
    parser.add_argument('--status', help='Controller status!')
    parser.add_argument('--protocol', help='Protocol Modifications!')
    parser.add_argument('--ports', help='Ports!')

    args = parser.parse_args()

    if args.function == "installCSF":
       CSF.installCSF()
    elif args.function == 'removeCSF':
        controller = CSF(args.function, {})
        controller.run()
    elif args.function == 'changeStatus':
        CSF.changeStatus(args.controller, args.status)
    elif args.function == 'modifyPorts':
        CSF.modifyPorts(args.protocol, args.ports)

if __name__ == "__main__":
    main()