Module Expr Str Import alias Import alias Import alias ImportFrom alias Assign NameStore Str Assign NameStore AttributeLoad AttributeLoad NameLoad attr attr Assign NameStore Call AttributeLoad Str attr NameLoad Assign NameStore Call AttributeLoad NameLoad attr NameLoad Assign NameStore AttributeLoad AttributeLoad NameLoad attr attr Assign NameStore ListLoad Str Str Assign NameStore ListLoad Str Str Str Str Str Str Assign NameStore ListLoad Str Str Str Str Str Assign NameStore ListLoad Str Str Assign NameStore ListLoad Str Assign NameStore BinOpAdd SubscriptLoad NameLoad Slice SubscriptLoad NameLoad Slice Assign NameStore Num Assign NameStore Str Assign NameStore ListLoad Str Str Str FunctionDef arguments args NameParam NameParam defaults Num vararg kwarg body FunctionDef arguments args defaults vararg kwarg body Return Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad NameLoad decorator_list Assign NameStore BinOpAdd NameLoad Call AttributeLoad Str attr NameLoad Return Call SubscriptLoad NameLoad Index Str NameLoad ListLoad NameLoad Dict NameLoad NameLoad decorator_list FunctionDef arguments args defaults body Assign NameStore NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str Assign NameStore SubscriptLoad NameLoad Index Str Assign NameStore NameLoad If Call SubscriptLoad NameLoad Index Str body Assign NameStore NameLoad Return NameLoad decorator_list FunctionDef arguments args defaults body Assign NameStore NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str Assign NameStore SubscriptLoad NameLoad Index Str Assign NameStore NameLoad If Call SubscriptLoad NameLoad Index Str body Assign NameStore Call AttributeLoad NameLoad attr Str Str If CompareEq NameLoad Str body Assign NameStore NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults NameLoad body If CompareIs NameLoad NameLoad body Assign NameStore Dict Expr Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice Expr Call AttributeLoad NameLoad attr Str Dict Expr Call AttributeLoad NameLoad attr Str ListLoad Expr Call AttributeLoad NameLoad attr Str ListLoad Expr Call AttributeLoad NameLoad attr Str ListLoad Expr Call AttributeLoad NameLoad attr Str ListLoad Expr Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice Expr Call AttributeLoad NameLoad attr Str Call NameLoad Expr Call AttributeLoad NameLoad attr Str Call NameLoad Expr Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice Expr Call AttributeLoad NameLoad attr Str ListLoad Expr Call AttributeLoad NameLoad attr Str NameLoad Expr Call AttributeLoad NameLoad attr Str Call NameLoad If CompareIs SubscriptLoad NameLoad Index Str NameLoad body Assign SubscriptStore NameLoad Index Str Call NameLoad If CompareIs SubscriptLoad NameLoad Index Str NameLoad body Assign SubscriptStore NameLoad Index Str NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body Assign NameStore Dict For NameStore SubscriptLoad NameLoad Index Str body For NameStore Call AttributeLoad SubscriptLoad SubscriptLoad NameLoad Index Str Index NameLoad attr Str ListLoad body If CompareNotIn NameLoad NameLoad body Assign SubscriptStore NameLoad Index NameLoad NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return BoolOpOr Call AttributeLoad NameLoad attr Str Call AttributeLoad NameLoad attr Str decorator_list FunctionDef arguments args NameParam defaults NameLoad body If UnaryOpNot NameLoad body Assign NameStore Dict Return Call AttributeLoad NameLoad attr Str Call SubscriptLoad NameLoad Index Str decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults NameLoad body If UnaryOpNot NameLoad body Assign NameStore ListLoad Assign NameStore NameLoad If BoolOpAnd Call AttributeLoad NameLoad attr Str NameLoad UnaryOpNot Call NameLoad NameLoad BoolOpOr CompareIn NameLoad ListLoad Str CompareIn NameLoad NameLoad body If CompareIn NameLoad NameLoad body If CompareEq NameLoad SubscriptLoad NameLoad Index Num body Assign NameStore NameLoad orelse Assign NameStore NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults NameLoad body Assign NameStore NameLoad If CompareIs NameLoad NameLoad body Assign NameStore Dict Assign NameStore Call AttributeLoad NameLoad attr Str Call NameLoad Assign NameStore Call NameLoad NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str Assign NameStore SubscriptLoad NameLoad Index Str Assign NameStore SubscriptLoad NameLoad Index Str Assign NameStore ListComp NameLoad comprehension TupleStore NameStore NameStore NameLoad BoolOpAnd Call AttributeLoad NameLoad attr Str CompareIn Call NameLoad NameLoad ListLoad Num Num Assign NameStore Call NameLoad NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str Str For TupleStore NameStore NameStore NameLoad body Assign NameStore NameLoad If CompareIn NameLoad NameLoad body Continue If BoolOpOr BoolOpAnd NameLoad Call NameLoad NameLoad CompareEq NameLoad NameLoad body Assign NameStore NameLoad orelse If CompareIn Str NameLoad body Assign NameStore Str orelse If Call AttributeLoad NameLoad attr Str body Assign NameStore Str orelse If CompareIn Str NameLoad body Assign NameStore Str orelse If CompareIn Str NameLoad body Assign NameStore Str orelse If Call NameLoad NameLoad NameLoad NameLoad body Assign NameStore Str orelse If CompareIn NameLoad ListLoad Str Str Str body Assign NameStore NameLoad orelse If BoolOpOr Call AttributeLoad NameLoad attr Str Call AttributeLoad NameLoad attr Str body Assign NameStore Str If NameLoad body Assign NameStore Call AttributeLoad NameLoad attr NameLoad Dict Assign NameStore Call AttributeLoad NameLoad attr Str ListLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults NameLoad body Expr Str Assign NameStore Call NameLoad NameLoad Assign NameStore ListLoad For NameStore SubscriptLoad NameLoad Index Str body Assign NameStore Call AttributeLoad SubscriptLoad NameLoad Index Str attr NameLoad Dict Expr Call AttributeLoad NameLoad attr Str ListLoad For NameStore SubscriptLoad NameLoad Index Str body Expr Call AttributeLoad NameLoad attr NameLoad For NameStore SubscriptLoad NameLoad Index Str body If CompareNotIn NameLoad SubscriptLoad NameLoad Index Str body Expr Call AttributeLoad SubscriptLoad NameLoad Index Str attr NameLoad For NameStore SubscriptLoad NameLoad Index Str body If CompareNotIn NameLoad NameLoad body For NameStore SubscriptLoad NameLoad Index Str body Assign NameStore Call AttributeLoad SubscriptLoad NameLoad Index Str attr NameLoad Dict Assign NameStore Call AttributeLoad NameLoad attr Str ListLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults NameLoad body Expr Str If CompareIs NameLoad NameLoad body Assign NameStore Dict Assign NameStore ListComp NameLoad comprehension NameStore SubscriptLoad NameLoad Index Str Assign NameStore Call NameLoad NameLoad Assign NameStore Call NameLoad NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str NameLoad For NameStore SubscriptLoad NameLoad Index Str body For NameStore Call NameLoad NameLoad body Assign NameStore Call AttributeLoad Str attr NameLoad NameLoad If CompareIn NameLoad NameLoad body Continue For NameStore NameLoad body Assign NameStore Call AttributeLoad SubscriptLoad SubscriptLoad NameLoad Index Str Index NameLoad attr Str ListLoad If BoolOpAnd CompareIn NameLoad NameLoad CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Return NameLoad decorator_list FunctionDef arguments args defaults body Assign NameStore NameLoad Assign NameStore Dict Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str ListLoad NameLoad NameLoad ListLoad ListLoad SubscriptLoad NameLoad Slice NameLoad NameLoad NameLoad NameLoad ListLoad Str Str Str Dict Str Str Str Str Str Str ListLoad Str ListLoad Str ListLoad Str ListLoad Str ListLoad Str Str ListLoad Str Str Call NameLoad ListLoad TupleLoad Str Dict TupleLoad Str Dict TupleLoad Str Dict Str ListLoad Str TupleLoad Str Dict TupleLoad Str Dict TupleLoad Str Dict Str ListLoad Str Str Str Str TupleLoad Str Dict Str ListLoad Str Str TupleLoad Str Dict Str ListLoad Str Str TupleLoad Str Dict Str ListLoad TupleLoad Str Dict Str ListLoad Str Str Str TupleLoad Str Dict TupleLoad Str Dict TupleLoad Str Dict SubscriptLoad NameLoad Slice SubscriptLoad NameLoad Slice SubscriptLoad NameLoad Slice ListLoad Str Dict Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Dict Str ListLoad Dict Str Str Call SubscriptLoad NameLoad Index Str Call SubscriptLoad NameLoad Index Str Call SubscriptLoad NameLoad Index Str Call SubscriptLoad NameLoad Index Str Call NameLoad Call NameLoad NameLoad Dict Str Str Str Str Str Dict Dict Str Str Dict Str Str Dict Str Str Dict Str Str Expr Call NameLoad NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str NameLoad NameLoad If CompareIs SubscriptLoad NameLoad Index Str NameLoad body Assign SubscriptStore NameLoad Index Str NameLoad If CompareIs SubscriptLoad NameLoad Index Str NameLoad body If SubscriptLoad NameLoad Index Str body Assign SubscriptStore NameLoad Index Str SubscriptLoad SubscriptLoad NameLoad Index Str Index Num orelse Assign SubscriptStore NameLoad Index Str SubscriptLoad NameLoad Index Num Assign NameStore Call NameLoad NameLoad Assign NameStore Call NameLoad NameLoad Assign NameStore Call NameLoad NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults Num body Assign NameStore BinOpAdd NameLoad Str Return Call SubscriptLoad NameLoad Index Str NameLoad ListLoad Dict NameLoad NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam defaults NameLoad NameLoad NameLoad NameLoad NameLoad body Assign NameStore Str If NameLoad body AugAssignAdd NameStore Str If NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad orelse If NameLoad body AugAssignAdd NameStore Str If Call NameLoad NameLoad NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If BoolOpAnd NameLoad BoolOpOr NameLoad NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body Assign NameStore BoolOpOr CompareIn Str NameLoad CompareIn Str NameLoad CompareIn Str NameLoad CompareIn Str NameLoad CompareIn Str NameLoad CompareIn Str NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body For NameStore ListComp NameLoad comprehension NameStore SubscriptLoad NameLoad Index Str body Assign NameStore SubscriptLoad SubscriptLoad NameLoad Index Str Index NameLoad If UnaryOpNot Call NameLoad NameLoad NameLoad body Expr Call AttributeLoad SubscriptLoad NameLoad Index Str attr NameLoad NameLoad Expr Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice For NameStore SubscriptLoad NameLoad Index Str body Assign NameStore Call AttributeLoad NameLoad attr NameLoad ListLoad For NameStore ListComp NameLoad comprehension NameStore NameLoad BoolOpAnd BoolOpOr Call AttributeLoad NameLoad attr BinOpAdd Str NameLoad Call AttributeLoad NameLoad attr BinOpAdd NameLoad Str CompareNotIn NameLoad ListLoad NameLoad body Assign NameStore SubscriptLoad NameLoad Index NameLoad If Call NameLoad NameLoad NameLoad body Assign NameStore ListLoad NameLoad If Call NameLoad NameLoad NameLoad body For NameStore NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad For NameStore ListComp NameLoad comprehension NameStore SubscriptLoad NameLoad Index Str body Assign NameStore SubscriptLoad SubscriptLoad NameLoad Index Str Index NameLoad Expr Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice For NameStore SubscriptLoad NameLoad Index Str body Assign NameStore Call AttributeLoad NameLoad attr NameLoad ListLoad For NameStore ListComp NameLoad comprehension NameStore NameLoad BoolOpAnd BoolOpOr Call AttributeLoad NameLoad attr BinOpAdd Str NameLoad Call AttributeLoad NameLoad attr BinOpAdd NameLoad Str CompareNotIn NameLoad ListLoad NameLoad body Assign NameStore SubscriptLoad NameLoad Index NameLoad If Call NameLoad NameLoad NameLoad body Assign NameStore ListLoad NameLoad If Call NameLoad NameLoad NameLoad body For NameStore NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body Assign NameStore UnaryOpNot BoolOpOr CompareIn Str NameLoad CompareIn Str NameLoad CompareIn Str NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return CompareNotIn Str NameLoad decorator_list FunctionDef arguments args NameParam defaults body Return CompareNotIn Str NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam defaults NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad body Expr Str If UnaryOpNot BoolOpAnd NameLoad BoolOpOr NameLoad Call NameLoad BoolOpOr NameLoad Str NameLoad NameLoad NameLoad BoolOpOr NameLoad NameLoad body Raise Call NameLoad Str orelse If CompareIs NameLoad NameLoad body Assign NameStore ListLoad If UnaryOpNot NameLoad body Assign NameStore Str Assign NameStore ListLoad NameLoad If NameLoad body Assign NameStore ListLoad For NameStore NameLoad body If CompareIn Str NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue orelse Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad For NameStore NameLoad body If Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue orelse Assign NameStore NameLoad AugAssignAdd NameStore Str If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If BoolOpAnd CompareEq Call NameLoad NameLoad Num UnaryOpNot NameLoad body Assign NameStore SubscriptLoad NameLoad Index Num Assign NameStore NameLoad If UnaryOpNot Call AttributeLoad NameLoad attr Str body Assign NameStore Call AttributeLoad Str attr NameLoad Assign NameStore ListLoad NameLoad If NameLoad body Assign NameStore ListLoad If Call NameLoad NameLoad AttributeLoad NameLoad attr body Assign NameStore ListLoad NameLoad orelse If UnaryOpNot Call NameLoad NameLoad NameLoad body Assign NameStore ListLoad Str Assign NameStore ListLoad For NameStore NameLoad body Assign NameStore Str If NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad For NameStore NameLoad body If Call NameLoad NameLoad body Continue For NameStore NameLoad body Assign NameStore Call AttributeLoad Str attr NameLoad NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad For NameStore NameLoad body If UnaryOpNot Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue For NameStore NameLoad body Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad For NameStore NameLoad body If UnaryOpNot Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue For NameStore NameLoad body Assign NameStore NameLoad If BoolOpAnd CompareIn Str NameLoad CompareIn Str NameLoad body Continue If BoolOpAnd CompareIn Str NameLoad CompareIn Str NameLoad body Continue AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad Assign NameStore NameLoad If UnaryOpNot NameLoad body Assign NameStore ListLoad Str Str For NameStore NameLoad body If Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue For TupleStore NameStore NameStore Call AttributeLoad NameLoad attr NameLoad body Assign NameStore SubscriptLoad NameLoad Index Str Assign NameStore Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice For NameStore NameLoad body Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad Assign NameStore NameLoad If UnaryOpNot NameLoad body Assign NameStore ListLoad Str Str For NameStore NameLoad body If Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue For TupleStore NameStore NameStore Call AttributeLoad NameLoad attr NameLoad body Assign NameStore SubscriptLoad NameLoad Index Str Assign NameStore Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice Assign NameStore Call AttributeLoad NameLoad attr Str Assign NameStore Call AttributeLoad NameLoad attr Str For NameStore NameLoad body Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad NameLoad If NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad For NameStore NameLoad body If Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue For NameStore NameLoad body Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad For NameStore NameLoad body If BoolOpOr UnaryOpNot BoolOpOr CompareIn Str NameLoad CompareIn Str NameLoad Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue For NameStore NameLoad body Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad For NameStore NameLoad body If BoolOpAnd Call NameLoad NameLoad Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad Assign NameStore Str If NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad For NameStore NameLoad body Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad orelse If NameLoad body Assign NameStore ListLoad AugAssignAdd NameStore Str If Call NameLoad NameLoad NameLoad body AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad For NameStore NameLoad body Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If BoolOpAnd NameLoad BoolOpOr NameLoad NameLoad body Assign NameStore ListLoad Assign NameStore Call AttributeLoad Str attr NameLoad For NameStore NameLoad body Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad If NameLoad body Assign NameStore ListLoad For NameStore NameLoad body If UnaryOpNot Call NameLoad NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue Assign NameStore NameLoad AugAssignAdd NameStore Call AttributeLoad Str attr NameLoad If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore NameLoad For NameStore NameLoad body If BoolOpAnd Call AttributeLoad NameLoad attr CompareNotIn NameLoad NameLoad CompareNotIn NameLoad ListLoad Str body Expr Call AttributeLoad NameLoad attr NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body If BoolOpAnd Call NameLoad NameLoad AttributeLoad NameLoad attr NameLoad CompareNotIn Str NameLoad body Assign NameStore Call AttributeLoad Str attr NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults NameLoad NameLoad Num body If UnaryOpNot NameLoad body Assign NameStore Num FunctionDef arguments args NameParam defaults body If UnaryOpNot NameLoad body Assign NameStore Call NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str Assign NameStore Call SubscriptLoad NameLoad Index Str Assign NameStore Call NameLoad Assign NameStore Call NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str Dict For NameStore Call AttributeLoad NameLoad attr Str ListLoad body For NameStore Call AttributeLoad Call AttributeLoad NameLoad attr NameLoad Dict attr Str ListLoad body Expr Call AttributeLoad NameLoad attr NameLoad For TupleStore NameStore NameStore Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr Str Dict body If CompareNotIn NameLoad NameLoad body Continue For NameStore NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad For TupleStore NameStore NameStore Call AttributeLoad NameLoad attr Str ListLoad body If CompareNotIn NameLoad NameLoad body Continue For NameStore NameLoad body If NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad For NameStore Call AttributeLoad NameLoad attr Str ListLoad body For TupleStore NameStore NameStore Call AttributeLoad NameLoad attr NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Str Str If CompareNotIn NameLoad NameLoad body Continue Assign NameStore Call AttributeLoad NameLoad attr Str Str If NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore Call NameLoad NameLoad FunctionDef arguments args NameParam defaults body FunctionDef arguments args NameParam defaults body If NameLoad body Return Call SubscriptLoad NameLoad Index Str NameLoad orelse Return UnaryOpNot Call SubscriptLoad NameLoad Index Str NameLoad decorator_list Return NameLoad decorator_list Assign NameStore NameLoad For NameStore SubscriptLoad NameLoad Slice body If Call SubscriptLoad NameLoad Index Str NameLoad body Assign NameStore NameLoad Break If Call NameLoad NameLoad body Assign NameStore NameLoad Assign NameStore Call NameLoad Call NameLoad NameLoad NameLoad Return NameLoad decorator_list Assign NameStore BinOpAdd NameLoad Str Return Call SubscriptLoad NameLoad Index Str NameLoad ListLoad NameLoad Dict NameLoad NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam NameParam defaults Str NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad NameLoad Str NameLoad NameLoad body Expr Str Assign NameStore ListLoad If UnaryOpNot NameLoad body Assign NameStore ListLoad Assign NameStore SubscriptLoad NameLoad Slice If BoolOpAnd NameLoad CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad If CompareIs NameLoad NameLoad body Assign NameStore ListLoad orelse If UnaryOpNot NameLoad body Assign NameStore SubscriptLoad NameLoad Slice If UnaryOpNot NameLoad body Assign NameStore Call NameLoad Assign NameStore ListComp Call NameLoad NameLoad comprehension NameStore NameLoad NameLoad Assign NameStore ListComp Call NameLoad NameLoad comprehension NameStore NameLoad NameLoad Assign NameStore NameLoad If UnaryOpNot NameLoad body Assign NameStore ListLoad If UnaryOpNot NameLoad body Assign NameStore ListLoad Str Str If UnaryOpNot NameLoad body Assign NameStore ListLoad If UnaryOpNot NameLoad body Assign NameStore ListLoad Assign NameStore SubscriptLoad NameLoad Slice If BoolOpAnd NameLoad CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore Dict For NameStore NameLoad body If Call NameLoad NameLoad TupleLoad NameLoad body Assign NameStore Call AttributeLoad Str attr NameLoad If Call NameLoad NameLoad AttributeLoad NameLoad attr body Assign NameStore Dict Str Str NameLoad SubscriptLoad NameLoad Slice If Call NameLoad NameLoad NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice Assign NameStore Call AttributeLoad NameLoad attr SubscriptLoad NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index Str SubscriptLoad NameLoad Index Str For NameStore NameLoad body If CompareNotIn NameLoad SubscriptLoad NameLoad Index Str body Expr Call AttributeLoad SubscriptLoad NameLoad Index Str attr NameLoad orelse Raise Call NameLoad Call AttributeLoad Str attr NameLoad Assign NameStore NameLoad Assign NameStore SubscriptLoad NameLoad Slice If BoolOpAnd NameLoad CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore ListComp NameLoad comprehension NameStore NameLoad Call NameLoad NameLoad NameLoad If UnaryOpNot NameLoad body Assign NameStore ListLoad Assign NameStore SubscriptLoad NameLoad Slice If BoolOpAnd NameLoad CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore ListComp NameLoad comprehension NameStore NameLoad NameLoad If UnaryOpNot NameLoad body Assign NameStore Str If UnaryOpNot NameLoad body Assign NameStore ListLoad Assign NameStore SubscriptLoad NameLoad Slice If BoolOpAnd NameLoad CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Assign NameStore Dict For NameStore SubscriptLoad NameLoad Slice body If BoolOpAnd CompareNotIn Str NameLoad CompareNotIn Str NameLoad body Raise Call NameLoad Call AttributeLoad Str attr NameLoad Assign NameStore NameLoad If BoolOpAnd CompareIn Str NameLoad CompareNotIn Str NameLoad body Assign NameStore SubscriptLoad NameLoad Index Str If BoolOpAnd NameLoad Call NameLoad NameLoad NameLoad body Assign NameStore Call AttributeLoad Str attr NameLoad If CompareIsNot NameLoad NameLoad body Assign SubscriptStore NameLoad Index Str SubscriptStore NameLoad Index Str NameLoad For NameStore ListLoad Str Str body If Call NameLoad Call AttributeLoad NameLoad attr NameLoad NameLoad body Assign SubscriptStore NameLoad Index NameLoad Call AttributeLoad Str attr SubscriptLoad NameLoad Index NameLoad Expr Call AttributeLoad NameLoad attr Str SubscriptLoad NameLoad Slice If CompareIn SubscriptLoad NameLoad Index Str NameLoad body Expr Call AttributeLoad NameLoad attr SubscriptLoad NameLoad Index Str NameLoad Assign SubscriptStore NameLoad Index SubscriptLoad NameLoad Index Str NameLoad Assign NameStore ListComp Call NameLoad NameLoad comprehension NameStore NameLoad Assign NameStore ListComp NameLoad comprehension NameStore NameLoad NameLoad If UnaryOpNot NameLoad body Raise Call NameLoad Str If NameLoad body Assign NameStore Call NameLoad NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad Return NameLoad If NameLoad body Assign NameStore Call NameLoad NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad Return NameLoad If NameLoad body Assign NameStore Call NameLoad NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad If NameLoad body Assign NameStore Call NameLoad NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad If NameLoad body Assign NameStore Call NameLoad NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad If BoolOpAnd BoolOpAnd BoolOpOr NameLoad NameLoad NameLoad UnaryOpNot BoolOpOr NameLoad NameLoad NameLoad NameLoad body Assign NameStore Call NameLoad NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword NameLoad Return NameLoad decorator_list FunctionDef arguments args defaults kwarg body Return SubscriptLoad Call NameLoad NameLoad Index Num decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam defaults NameLoad NameLoad NameLoad kwarg body Assign NameStore Call NameLoad NameLoad If CompareIs NameLoad NameLoad body Assign NameStore ListLoad If BoolOpAnd Call NameLoad NameLoad AttributeLoad NameLoad attr CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad For NameStore NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad If UnaryOpNot NameLoad body Assign NameStore ListComp NameLoad comprehension NameStore SubscriptLoad NameLoad Index Str For NameStore NameLoad body Assign NameStore Call AttributeLoad SubscriptLoad SubscriptLoad NameLoad Index Str Index NameLoad attr Str ListLoad For NameStore NameLoad body If CompareNotIn NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults NameLoad body Assign NameStore Call NameLoad NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str Dict For NameStore SubscriptLoad NameLoad Index Str body Assign NameStore Call AttributeLoad NameLoad attr NameLoad Dict Assign NameStore Call AttributeLoad NameLoad attr Str NameLoad If SubscriptLoad NameLoad Index Str body Assign NameStore Str Assign NameStore Call AttributeLoad SubscriptLoad NameLoad Index Str attr NameLoad Dict Assign SubscriptStore NameLoad Index Str NameLoad For NameStore SubscriptLoad NameLoad Index Str body Assign NameStore Call AttributeLoad NameLoad attr NameLoad Dict Assign NameStore Call AttributeLoad NameLoad attr Str NameLoad If SubscriptLoad NameLoad Index Str body Assign NameStore Str Assign NameStore Call AttributeLoad SubscriptLoad NameLoad Index Str attr NameLoad Dict Assign SubscriptStore NameLoad Index Str NameLoad If UnaryOpNot Call AttributeLoad NameLoad attr Str NameLoad body Assign NameStore Str Expr Call NameLoad NameLoad keyword NameLoad For NameStore SubscriptLoad NameLoad Index Str body Expr Call NameLoad NameLoad keyword NameLoad keyword Str For NameStore SubscriptLoad NameLoad Index Str body Expr Call NameLoad NameLoad keyword NameLoad keyword Str Return NameLoad decorator_list FunctionDef arguments args NameParam defaults NameLoad body Expr Str Assign NameStore Call NameLoad NameLoad Assign NameStore Call NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str Dict Assign NameStore ListLoad For NameStore Call AttributeLoad NameLoad attr Str Dict body If CompareNotIn NameLoad Call AttributeLoad NameLoad attr Str ListLoad body Expr Call AttributeLoad NameLoad attr NameLoad Continue Assign NameStore SubscriptLoad SubscriptLoad NameLoad Index Str Index NameLoad For NameStore Call AttributeLoad NameLoad attr Str ListLoad body For NameStore Call AttributeLoad NameLoad attr NameLoad ListLoad body Expr Call AttributeLoad NameLoad attr NameLoad If UnaryOpNot NameLoad body Assign NameStore NameLoad If SubscriptLoad NameLoad Index Str body For NameStore SubscriptLoad NameLoad Index Str body Assign NameStore SubscriptLoad Call AttributeLoad NameLoad attr Str Index Num If Call SubscriptLoad NameLoad Index Str NameLoad body Continue Expr Call NameLoad keyword NameLoad keyword NameLoad keyword Call AttributeLoad Str attr NameLoad keyword Str If UnaryOpNot Call NameLoad NameLoad body For NameStore NameLoad body Expr Call NameLoad keyword NameLoad keyword NameLoad keyword NameLoad keyword Call AttributeLoad Str attr NameLoad keyword Call AttributeLoad Str attr NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults NameLoad body Assign NameStore Call NameLoad NameLoad Assign NameStore NameLoad Assign NameStore Call SubscriptLoad NameLoad Index Str Assign NameStore Call SubscriptLoad NameLoad Index Str For NameStore ListLoad Str Str body For NameStore SubscriptLoad NameLoad Index NameLoad body Expr Call AttributeLoad SubscriptLoad NameLoad Index Str attr NameLoad Dict If UnaryOpNot Call AttributeLoad NameLoad attr Str NameLoad body If SubscriptLoad SubscriptLoad NameLoad Index Str Index Str body If CompareNotIn Str SubscriptLoad NameLoad Index Str body Expr Call AttributeLoad SubscriptLoad NameLoad Index Str attr Str If SubscriptLoad SubscriptLoad NameLoad Index Str Index Str body If CompareNotIn Str SubscriptLoad NameLoad Index Str body Expr Call AttributeLoad SubscriptLoad NameLoad Index Str attr Str For NameStore ListComp NameLoad comprehension NameStore SubscriptLoad NameLoad Index Str CompareNotEq NameLoad Str body Assign NameStore SubscriptLoad SubscriptLoad NameLoad Index Str Index NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str Dict Assign NameStore Call AttributeLoad NameLoad attr Str ListLoad Assign NameStore Call AttributeLoad NameLoad attr Str ListLoad If UnaryOpNot NameLoad body Expr Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr SubscriptLoad NameLoad Index Str If UnaryOpNot NameLoad body Expr Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr SubscriptLoad NameLoad Index Str If UnaryOpNot NameLoad body Expr Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr SubscriptLoad NameLoad Index Str For NameStore ListLoad NameLoad NameLoad body For NameStore NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad Dict For NameStore ListComp NameLoad comprehension NameStore SubscriptLoad NameLoad Index Str CompareNotIn NameLoad NameLoad body Assign SubscriptStore NameLoad Index NameLoad Call AttributeLoad NameLoad attr SubscriptLoad SubscriptLoad NameLoad Index Str Index NameLoad Assign NameStore ListComp NameLoad comprehension NameStore NameLoad FunctionDef arguments args NameParam NameParam defaults body FunctionDef arguments args NameParam defaults body Assign NameStore Str If CompareIn NameLoad NameLoad body Assign NameStore Str orelse If CompareIn NameLoad NameLoad body Assign NameStore Str Return Call AttributeLoad Str attr NameLoad NameLoad decorator_list Return NameLoad decorator_list Expr Call AttributeLoad NameLoad attr keyword Call NameLoad NameLoad NameLoad For NameStore NameLoad body If CompareNotIn NameLoad SubscriptLoad NameLoad Index Str body Assign SubscriptStore SubscriptLoad NameLoad Index Str Index NameLoad Call AttributeLoad NameLoad attr SubscriptLoad NameLoad Index NameLoad Assign NameStore NameLoad If CompareIn NameLoad NameLoad body Assign NameStore Str orelse If CompareIn NameLoad NameLoad body Assign NameStore Str orelse Assign NameStore NameLoad If CompareEq NameLoad Str body Assign NameStore ListComp NameLoad comprehension NameStore SubscriptLoad NameLoad Index Str If UnaryOpNot NameLoad body Assign NameStore ListLoad Str If UnaryOpNot NameLoad body Assign NameStore ListLoad Assign NameStore Call SubscriptLoad NameLoad Index Str Call NameLoad NameLoad If BoolOpAnd NameLoad SubscriptLoad NameLoad Index Str CompareNotEq NameLoad Str body Assign NameStore Str If BoolOpAnd NameLoad NameLoad UnaryOpNot NameLoad body Assign NameStore Str If NameLoad body Assign NameStore Call AttributeLoad NameLoad attr If UnaryOpNot BoolOpOr NameLoad NameLoad body Continue Expr Call NameLoad NameLoad keyword ListLoad NameLoad keyword NameLoad keyword NameLoad keyword NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body Assign NameStore NameLoad If Call SubscriptLoad NameLoad Index Str body Assign NameStore Call SubscriptLoad NameLoad Index Str Assign NameStore Call AttributeLoad Call AttributeLoad NameLoad attr Str Dict attr Str ListLoad For TupleStore NameStore NameStore Call AttributeLoad NameLoad attr NameLoad body Expr Call NameLoad NameLoad keyword SubscriptLoad NameLoad Index Str keyword Dict Str Str Str SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str SubscriptLoad NameLoad Index Str Return NameLoad decorator_list FunctionDef arguments args defaults body Expr Str FunctionDef arguments args defaults body Assign NameStore Call NameLoad Assign NameStore Call NameLoad NameLoad Assign NameStore Call NameLoad NameLoad Assign NameStore Call NameLoad NameLoad Assign NameStore Call NameLoad NameLoad Return NameLoad decorator_list Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad NameLoad Return Call NameLoad decorator_list
N/A N/A 

.. _module_mc_firewalld:

mc_firewalld / firewalld functions
============================================



 N/A logging N/A copy N/A mc_states.api salt.utils.odict OrderedDict N/A __name firewalld N/A six N/A N/A mc_states api six N/A PREFIX N/A N/A makina-states.services.firewall.{0} format __name N/A logger N/A N/A logging getLogger __name__ N/A prefered_ips N/A N/A mc_states api prefered_ips N/A PUBLIC_ZONES N/A public external N/A INTERNAL_ZONES N/A internal dmz home docker lxc virt N/A PUBLIC_SERVICES N/A http https smtp dns ssh N/A DIRECT_RULESETS N/A passthrough direct N/A ZONE_RULESETS N/A rules N/A RULESETS N/A N/A DIRECT_RULESETS N/A N/A ZONE_RULESETS N/A N/A FAILOVER_COUNT 16 N/A DEFAULT_TARGET drop N/A LOCAL_NETS N/A 10.0.0.0/8 192.168.0.0/16 172.16.0.0/12 prefered_ips N/A N/A ips ttl N/A 60 args kw N/A _do N/A N/A N/A a k N/A N/A N/A N/A N/A mc_states api prefered_ips a k N/A N/A cache_key N/A __name N/A N/A .prefered_ips{0} format ips N/A N/A N/A __salt__ N/A mc_utils.memoize_cache _do N/A ips N/A cache_key ttl N/A is_allow_local N/A N/A N/A N/A N/A _s __salt__ N/A data_net N/A N/A _s N/A mc_network.default_net N/A default_route N/A data_net N/A default_route N/A local_mode False N/A N/A N/A __salt__ N/A mc_nodetypes.is_container N/A N/A local_mode True N/A local_mode N/A is_permissive N/A N/A N/A N/A N/A _s __salt__ N/A data_net N/A N/A _s N/A mc_network.default_net N/A default_route N/A data_net N/A default_route N/A permissive_mode False N/A N/A N/A __salt__ N/A mc_nodetypes.is_container N/A N/A rif N/A N/A default_route get iface eth0 N/A N/A rif eth0 N/A N/A permissive_mode True N/A permissive_mode N/A fix_data N/A N/A data N/A None N/A N/A N/A data None N/A N/A data N/A N/A N/A N/A data setdefault local_networks N/A LOCAL_NETS N/A N/A N/A N/A data setdefault services N/A N/A N/A N/A data setdefault public_services N/A N/A N/A N/A data setdefault restricted_services N/A N/A N/A N/A data setdefault aliased_interfaces N/A N/A N/A N/A data setdefault banned_networks N/A N/A N/A N/A data setdefault internal_zones N/A INTERNAL_ZONES N/A N/A N/A N/A data setdefault permissive_mode N/A is_permissive N/A N/A N/A data setdefault allow_local N/A is_allow_local N/A N/A N/A data setdefault public_zones N/A PUBLIC_ZONES N/A N/A N/A N/A data setdefault trusted_networks N/A N/A N/A N/A data setdefault trust_internal True N/A N/A N/A data setdefault zones N/A OrderedDict N/A N/A N/A data N/A permissive_mode None N/A N/A N/A data N/A permissive_mode N/A is_permissive N/A N/A N/A data N/A trust_internal None N/A N/A N/A data N/A trust_internal True N/A data N/A get_configured_ifs N/A N/A data N/A N/A N/A configured_ifs N/A N/A i N/A data N/A zones N/A N/A f N/A N/A N/A N/A data N/A zones N/A i get interfaces N/A N/A N/A N/A f configured_ifs N/A N/A N/A configured_ifs N/A f i N/A configured_ifs N/A is_eth N/A N/A ifc N/A N/A N/A N/A N/A N/A ifc startswith eth N/A N/A ifc startswith em N/A test_container N/A N/A data N/A None N/A N/A N/A data N/A N/A data N/A N/A N/A N/A data setdefault is_container N/A N/A __salt__ N/A mc_nodetypes.is_container N/A test_rpn N/A N/A data iface ems N/A None N/A N/A N/A ems N/A N/A ems N/A N/A realrpn False N/A N/A N/A N/A data get have_rpn False N/A N/A test_container data N/A N/A iface N/A eth1 N/A iface ems N/A N/A N/A iface ems N/A N/A N/A iface N/A ems N/A -1 N/A N/A realrpn True N/A N/A realrpn True N/A realrpn N/A add_real_interfaces N/A N/A data N/A None N/A N/A _s __salt__ N/A N/A data None N/A N/A data N/A N/A fzones N/A N/A data setdefault zones N/A OrderedDict N/A is_container N/A test_container data N/A data_net N/A N/A _s N/A mc_network.default_net N/A gifaces N/A data_net N/A gifaces N/A default_if N/A data_net N/A default_if N/A ems N/A i N/A N/A i ips gifaces N/A N/A N/A i startswith em N/A N/A len i N/A 3 4 N/A configured_ifs N/A get_configured_ifs data N/A dz N/A N/A data get default_zone public N/A N/A iface ips gifaces N/A N/A z None N/A N/A iface configured_ifs N/A N/A N/A N/A N/A is_container N/A is_eth iface N/A iface default_if N/A N/A z dz N/A N/A N/A lo iface N/A N/A z trusted N/A N/A N/A N/A iface startswith tun N/A N/A z vpn N/A N/A N/A docker iface N/A N/A z dck N/A N/A N/A lxc iface N/A N/A z lxc N/A N/A N/A test_rpn data iface ems N/A N/A z rpn N/A N/A N/A iface N/A br0 eth0 em0 N/A N/A z dz N/A N/A N/A N/A N/A iface startswith eth N/A N/A iface startswith em N/A N/A z internal N/A z N/A N/A zone N/A N/A fzones setdefault z N/A N/A ifs N/A N/A zone setdefault interfaces N/A N/A N/A iface ifs N/A N/A N/A N/A ifs append iface N/A data N/A search_aliased_interfaces N/A N/A data N/A None N/A N/A 
    Add public interfaces as candidates for aliased zones
    to support common IP Failover scenarii
     N/A data N/A fix_data data N/A public_ifs N/A N/A z N/A data N/A public_zones N/A N/A zone N/A N/A N/A data N/A zones setdefault z N/A N/A N/A N/A zone setdefault interfaces N/A N/A i N/A zone N/A interfaces N/A N/A N/A N/A public_ifs append i N/A i N/A zone N/A interfaces N/A N/A N/A i N/A data N/A aliased_interfaces N/A N/A N/A N/A N/A data N/A aliased_interfaces append i N/A ifc N/A data N/A aliased_interfaces N/A N/A N/A ifc public_ifs N/A N/A z N/A data N/A public_zones N/A N/A zdata N/A N/A N/A data N/A zones setdefault z N/A N/A ifcs N/A N/A zdata setdefault interfaces N/A N/A N/A ifc ifcs N/A N/A N/A N/A ifcs append ifc N/A data N/A add_aliased_interfaces N/A N/A data N/A None N/A N/A 
    Mark aliases of interfaces to belong to the same interface
    of the attached interface, by default
     N/A N/A data None N/A N/A data N/A N/A zonesn N/A z N/A z N/A data N/A zones N/A data N/A search_aliased_interfaces data N/A cfgs N/A get_configured_ifs data N/A count N/A N/A data setdefault aliases FAILOVER_COUNT N/A i N/A data N/A aliased_interfaces N/A N/A c N/A range count N/A N/A j N/A N/A {0}:{1} format i c N/A N/A j cfgs N/A N/A N/A z zonesn N/A N/A ifs N/A N/A N/A N/A data N/A zones N/A z get interfaces N/A N/A N/A N/A i ifs N/A j ifs N/A N/A N/A N/A ifs append j N/A data N/A default_settings N/A N/A N/A N/A N/A _s __salt__ N/A DEFAULTS N/A aliased_interfaces default_zone aliases banned_networks trusted_networks local_networks no_cloud_rules no_salt no_ping no_default_alias packages natted_networks zones internal_zones public_zones public_services restricted_services services have_rpn have_docker have_vpn have_lxc permissive_mode allow_local trust_internal extra_confs N/A None FAILOVER_COUNT N/A N/A N/A LOCAL_NETS N/A False False False False N/A ipset ebtables firewalld N/A docker1 docker0 lxcbr1 lxcbr0 virt vibr0 N/A 10.7.0.0/16 N/A 172.17.0.0/24 N/A 10.5.0.0/16 N/A 10.0.3.0/24 N/A 192.168.122.0/24 10.6.0.0/16 N/A 192.168.122.0/24 10.6.0.0/16 N/A OrderedDict N/A N/A block N/A N/A drop N/A N/A trusted N/A interfaces N/A lo N/A dmz N/A N/A rpn N/A N/A virt N/A interfaces N/A virbr0 vibr0 virbr1 vibr1 N/A lxc N/A interfaces N/A lxcbr0 lxcbr1 N/A docker N/A interfaces N/A docker0 docker1 N/A internal N/A interfaces N/A N/A public N/A interfaces N/A br0 eth0 em0 N/A external N/A N/A home N/A N/A work N/A N/A INTERNAL_ZONES N/A N/A PUBLIC_ZONES N/A N/A PUBLIC_SERVICES N/A N/A snmp N/A burp dhcp mastersalt mongodb ftpnc mumble mysql postgresql rabbitmq redis salt smtps imap imaps http https N/A port N/A N/A port 4971-4974 N/A port N/A N/A port 67-68 N/A port N/A N/A port 4605-4606 N/A port N/A N/A port 27017 N/A port N/A N/A port 21 N/A port N/A N/A port 64738 N/A port N/A N/A port 3306 N/A port N/A N/A port 5432 N/A port N/A N/A port 15672 N/A port 25672 N/A port N/A N/A port 6379 N/A port N/A N/A port 4505-4506 N/A port N/A N/A port 465 N/A port N/A N/A port 143 N/A port N/A N/A port 993 N/A port N/A N/A port 80 N/A port N/A N/A port 443 N/A N/A _s N/A mc_provider.have_rpn N/A N/A _s N/A mc_network.have_docker_if N/A N/A _s N/A mc_network.have_vpn_if N/A N/A _s N/A mc_network.have_lxc_if N/A is_permissive N/A is_allow_local None N/A /etc/default/firewalld /etc/firewalld.json /etc/init.d/firewalld /etc/systemd/system/firewalld.service /usr/bin/ms_firewalld.py N/A N/A mode 644 N/A mode 755 N/A mode 644 N/A mode 755 N/A N/A test_container DEFAULTS N/A data N/A N/A _s N/A mc_utils.defaults PREFIX DEFAULTS N/A N/A N/A data N/A trust_internal None N/A N/A N/A data N/A trust_internal True N/A N/A N/A data N/A default_zone None N/A N/A N/A data N/A public_zones N/A N/A N/A data N/A default_zone N/A N/A data N/A public_zones N/A 0 N/A N/A N/A data N/A default_zone N/A PUBLIC_ZONES N/A 0 N/A data N/A complete_rules data N/A data N/A add_real_interfaces data N/A data N/A add_aliased_interfaces data N/A data N/A cached_default_settings N/A N/A ttl N/A 60 N/A N/A cache_key N/A __name cached_default_settings N/A N/A N/A __salt__ N/A mc_utils.memoize_cache default_settings N/A N/A cache_key ttl N/A get_endrule N/A N/A audit log log_level log_prefix limit N/A None None None None None N/A N/A endrule N/A log N/A N/A endrule  log N/A log_level N/A N/A endrule N/A N/A  level="{0}" format log_level N/A log_prefix N/A N/A endrule N/A N/A  prefix="{0}" format log_prefix N/A N/A audit N/A N/A endrule  audit N/A N/A isinstance audit basestring N/A N/A endrule N/A N/A  {0} format audit N/A N/A limit N/A log audit N/A N/A endrule N/A N/A  limit value="{0}" format limit N/A endrule N/A has_action N/A N/A rule N/A N/A N/A ret N/A N/A service rule N/A  port  rule N/A  protocol  rule N/A icmp-block rule N/A masquerade rule N/A forward-port rule N/A ret N/A complete_rules N/A N/A data N/A N/A N/A z N/A a N/A a N/A data N/A zones N/A N/A zdata N/A N/A data N/A zones N/A z N/A N/A N/A isinstance zdata dict N/A N/A N/A N/A N/A data N/A zones pop z None N/A N/A N/A data setdefault rulesets N/A DIRECT_RULESETS N/A N/A ruleset N/A data N/A rulesets N/A N/A rules N/A N/A data setdefault ruleset N/A N/A i N/A a N/A a data N/A N/A N/A N/A a endswith N/A - ruleset N/A N/A a startswith N/A ruleset - N/A a N/A ruleset N/A N/A val N/A data N/A i N/A N/A isinstance val basestring N/A N/A val N/A val N/A N/A isinstance val list N/A N/A i val N/A N/A N/A i rules N/A N/A N/A N/A rules append i N/A z N/A a N/A a N/A data N/A zones N/A N/A zdata N/A N/A data N/A zones N/A z N/A N/A N/A zdata setdefault rulesets N/A ZONE_RULESETS N/A N/A ruleset N/A zdata N/A rulesets N/A N/A rules N/A N/A zdata setdefault ruleset N/A N/A i N/A a N/A a zdata N/A N/A N/A N/A a endswith N/A - ruleset N/A N/A a startswith N/A ruleset - N/A a N/A ruleset N/A N/A val N/A zdata N/A i N/A N/A isinstance val basestring N/A N/A val N/A val N/A N/A isinstance val list N/A N/A i val N/A N/A N/A i rules N/A N/A N/A N/A rules append i N/A data N/A action_allowed N/A N/A rule N/A N/A N/A ret N/A N/A N/A masquerade rule N/A forward-port rule N/A icmp-block rule N/A ret N/A source_allowed N/A N/A rule N/A N/A N/A N/A  source  rule N/A destination_allowed N/A N/A rule N/A N/A N/A N/A  destination rule N/A complete_rich_rules N/A N/A rules rule family destinations icmp_block masquerade sources protocols ports forward_ports services endrule audit log log_prefix log_level limit action N/A None None None None None None None None None None None None None None None None None None N/A N/A 
    Subroutine of the rich rule helper
     N/A N/A N/A family N/A masquerade N/A has_action N/A endrule ports forward_ports icmp_block N/A sources destinations N/A N/A N/A ValueError invalid invocation N/A N/A N/A rules None N/A N/A rules N/A N/A N/A rule N/A N/A rule rule N/A to_add_rules N/A rule N/A family N/A N/A buffer_rules N/A N/A rule to_add_rules N/A N/A N/A family rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A N/A prule rule N/A prule N/A N/A  family="{0}" format family N/A N/A prule to_add_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A masquerade N/A N/A buffer_rules N/A N/A rule to_add_rules N/A N/A N/A has_action rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A N/A prule rule N/A prule  masquerade N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A N/A N/A N/A len sources 1 N/A destinations N/A N/A source N/A sources N/A 0 N/A destination source N/A N/A N/A N/A source startswith not  N/A N/A destination N/A N/A not {0} format destination N/A destinations N/A destination N/A icmp_block N/A N/A buffer_rules N/A N/A N/A isinstance icmp_block N/A six string_types N/A N/A icmp_block N/A icmp_block N/A N/A N/A N/A isinstance icmp_block list N/A N/A icmp_block N/A N/A prules N/A N/A i icmp_block N/A N/A rule icmp-block N/A i N/A N/A rule N/A N/A  name="{0}" format i N/A N/A rule prules N/A N/A N/A N/A prules append rule N/A rule to_add_rules N/A N/A N/A has_action rule N/A N/A N/A prule prules N/A N/A prule N/A N/A {0} {1} format rule prule N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A sources N/A N/A buffer_rules N/A N/A rule to_add_rules N/A N/A N/A N/A source_allowed rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A p sources N/A N/A prule rule N/A prule N/A N/A  source {0} format p N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A destinations N/A N/A buffer_rules N/A N/A rule to_add_rules N/A N/A N/A N/A destination_allowed rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A p destinations N/A N/A prule rule N/A N/A N/A ipv4 rule N/A : p N/A N/A N/A N/A N/A ipv6 rule N/A . p N/A N/A N/A prule N/A N/A  destination {0} format p N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A ports N/A N/A buffer_rules N/A N/A pprotocols protocols N/A N/A pprotocols N/A N/A pprotocols N/A tcp udp N/A rule to_add_rules N/A N/A N/A has_action rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A N/A portid fromport N/A N/A six iteritems ports N/A N/A fromp N/A fromport N/A port N/A protocols N/A N/A fromport get protocols N/A pprotocols N/A N/A protocol protocols N/A N/A prule rule N/A prule N/A N/A  port port="{0}" protocol="{1}" format fromp protocol N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A forward_ports N/A N/A buffer_rules N/A N/A pprotocols protocols N/A N/A pprotocols N/A N/A pprotocols N/A tcp udp N/A rule to_add_rules N/A N/A N/A has_action rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A N/A portid portdata N/A N/A six iteritems forward_ports N/A N/A fromp N/A portdata N/A port N/A protocols N/A N/A portdata get protocols N/A pprotocols N/A N/A to_port N/A N/A portdata get to_port N/A to_addr N/A N/A portdata get to_addr N/A protocol protocols N/A N/A prule rule N/A prule N/A N/A  forward-port port="{0}" protocol="{1}" format fromp protocol N/A to_port N/A N/A prule N/A N/A  to-port="{0}" format to_port N/A to_addr N/A N/A prule N/A N/A  to-addr="{0}" format to_addr N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A services N/A N/A buffer_rules N/A N/A rule to_add_rules N/A N/A N/A has_action rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A svc services N/A N/A prule rule N/A prule N/A N/A  service name="{0}" format svc N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A protocols N/A N/A buffer_rules N/A N/A rule to_add_rules N/A N/A N/A N/A N/A N/A source  rule N/A destination  rule N/A has_action rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A protocol protocols N/A N/A prule rule N/A prule N/A N/A  protocol value="{0}" format protocol N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A endrule N/A N/A buffer_rules N/A N/A rule to_add_rules N/A N/A N/A N/A has_action endrule N/A has_action rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A prule rule N/A prule N/A N/A  {0} format endrule N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A log N/A N/A buffer_rules N/A N/A logrule  log N/A log_level N/A N/A logrule N/A N/A  level="{0}" format log_level N/A log_prefix N/A N/A logrule N/A N/A  prefix="{0}" format log_prefix N/A rule to_add_rules N/A N/A prule rule N/A prule N/A N/A  {0} format logrule N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A N/A audit N/A N/A buffer_rules N/A N/A logrule  audit N/A N/A isinstance audit basestring N/A N/A logrule N/A N/A  {0} format audit N/A rule to_add_rules N/A N/A prule rule N/A prule N/A N/A  {0} format logrule N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A N/A limit N/A log audit N/A N/A buffer_rules N/A N/A logrule N/A N/A  limit value="{0}" format limit N/A rule to_add_rules N/A N/A prule rule N/A prule N/A N/A  {0} format logrule N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A action N/A N/A buffer_rules N/A N/A rule to_add_rules N/A N/A N/A N/A action_allowed rule N/A N/A N/A rule buffer_rules N/A N/A N/A N/A buffer_rules append rule N/A N/A prule rule N/A prule N/A N/A  {0} format action N/A N/A prule buffer_rules N/A N/A N/A N/A buffer_rules append prule N/A to_add_rules buffer_rules N/A rule to_add_rules N/A N/A N/A N/A N/A rule strip N/A rule rules N/A rule N/A rule N/A N/A N/A N/A rules append rule N/A rules N/A complete_address N/A N/A address N/A N/A N/A N/A N/A isinstance address N/A six string_types address N/A address= address N/A N/A address N/A N/A address="{0}" format address N/A address N/A get_public_ips N/A N/A cache data ttl N/A True None 120 N/A N/A N/A cache N/A N/A ttl 0 _do N/A N/A data N/A N/A N/A N/A data N/A N/A data N/A cached_default_settings N/A running_net N/A N/A __salt__ N/A mc_network.default_net N/A net N/A N/A __salt__ N/A mc_network.settings N/A ifcs N/A set N/A public_ips N/A set N/A zones N/A N/A data get zones N/A N/A z N/A N/A data get public_zones N/A N/A N/A ifc N/A N/A N/A N/A zones get z N/A get interfaces N/A N/A N/A N/A N/A ifcs add ifc N/A N/A ifc ips N/A N/A six iteritems N/A N/A __grains__ get ip4_interfaces N/A N/A N/A N/A ifc ifcs N/A N/A N/A ip ips N/A N/A N/A N/A public_ips add ip N/A N/A iface ips N/A N/A running_net get gifaces N/A N/A N/A N/A ifc ifcs N/A N/A N/A addr ips N/A N/A addr N/A N/A N/A N/A public_ips add addr N/A interfaces N/A N/A net get ointerfaces N/A N/A N/A N/A ifc odata N/A N/A six iteritems interfaces N/A N/A ifc N/A N/A ifc replace _ : N/A N/A ifc ifcs N/A N/A N/A addr N/A N/A odata get address N/A addr N/A N/A N/A N/A public_ips add addr N/A public_ips N/A list public_ips _filter_local N/A N/A is_public N/A N/A do N/A N/A ip N/A N/A N/A is_public N/A N/A N/A N/A __salt__ N/A mc_network.is_public ip N/A N/A N/A N/A N/A __salt__ N/A mc_network.is_loopback ip N/A N/A do N/A N/A is_public False N/A i N/A public_ips N/A N/A N/A N/A N/A __salt__ N/A mc_network.is_public i N/A N/A is_public True N/A N/A N/A test_container data N/A N/A is_public False N/A public_ips N/A filter N/A _filter_local is_public public_ips N/A public_ips N/A N/A cache_key N/A __name get_public_ips N/A N/A N/A __salt__ N/A mc_utils.memoize_cache _do N/A data N/A cache_key ttl N/A rich_rules N/A N/A family sources source destinations destination services service ports port audit log log_prefix log_level forward_ports forward_port limit icmp_block masquerade action public_ips protocols N/A ipv4 None None None None None None None None None None None None None None None None False accept None None N/A N/A 
    Helper to generate rich rules compatibles with firewalld

    see firewalld.richlanguage(5) (man)

    public_ips
        firewalld does make special forward rules relying on packet
        marking whenever they macth the port and the source/dest.
        This means that it will remap all traffic from an aforementioned rule
        matching this port on the public zone to be reentrant and goes to the
        destination of the rule instead of the real destination.
        Thus to correctly NAT services without limiting outgoing
        traffic on the same ports from network branches withing the NAT,
        we limit the exposure of the target rules to the public
        facing ips of the underlying host.
        This also means, that logically, as nearly always with natted
        services, network access points from within the NAT
        cant access the services as if they would be outside of the NAT.
        Technically speaking, in case of forward ports, we only apply the rule
        on the public facing address (aka addresses of interfaces which are
        linked to the public zones) by limitating the rule scopes to those
        destinations.

        public_ips is indeed a list of ips, which if empty or None will
        be computed from host network informations.

        To disable destinations restrictions, you can set public_ips to False.

    .. code-block:: python

        rich_rules(forward_port={'port': '12', addr='1.2.3.4'}, port='22')
        rich_rules(forward_port={'port': '12', addr='1.2.3.4'}, port='22'},
                   destination='x.x.x.x')
        rich_rules(masquerade=True, source='x.x.x.x', dest='x.x.x.x')
        rich_rules(source='address="1.2.3.4"', port='22', action='drop')
        rich_rules(destination='address="1.2.3.4"',
                   port='22',
                   audit=True,
                   action='drop')
        rich_rules(destination='address="1.2.3.4"',
                   port={'port': '22', 'protocol': 'tcp'})
        rich_rules(destination='address="1.2.3.4"', port='22',
                   audit=True, action='drop')
     N/A rules N/A N/A N/A destinations N/A N/A destinations N/A N/A destinations N/A destinations N/A N/A N/A destination N/A destination destinations N/A N/A N/A N/A destinations append destination N/A N/A public_ips False N/A N/A public_ips N/A N/A N/A N/A public_ips N/A N/A public_ips N/A destinations N/A N/A N/A public_ips N/A N/A public_ips N/A get_public_ips N/A public_ips N/A N/A complete_address d N/A d public_ips d N/A destinations N/A N/A complete_address d N/A d destinations d N/A address_protocols protocols N/A N/A address_protocols N/A N/A address_protocols N/A N/A N/A protocols N/A N/A protocols N/A udp tcp N/A N/A forward_ports N/A N/A forward_ports N/A N/A N/A ports N/A N/A ports N/A N/A ports N/A ports N/A N/A N/A port N/A port ports N/A N/A N/A N/A ports append port N/A nports N/A N/A port ports N/A N/A N/A isinstance port N/A int N/A N/A port N/A N/A {0} format port N/A N/A isinstance port N/A six string_types N/A N/A port N/A port protocols port N/A protocols N/A N/A N/A isinstance port dict N/A N/A protos N/A N/A port setdefault protocols N/A protocols N/A N/A nport N/A N/A nports setdefault N/A port N/A port port N/A N/A nport N/A port N/A port N/A port N/A p protos N/A N/A N/A p N/A nport N/A protocols N/A N/A N/A N/A N/A nport N/A protocols append p N/A N/A N/A ValueError N/A N/A '{0}' is not a dict format port N/A ports nports N/A forward_ports N/A forward_ports N/A N/A N/A forward_port N/A forward_port forward_ports N/A N/A N/A N/A forward_ports append forward_port N/A forward_ports N/A a N/A a forward_ports N/A isinstance a dict N/A N/A services N/A N/A services N/A N/A services N/A services N/A N/A N/A service N/A service services N/A N/A N/A N/A services append service N/A services N/A a N/A a services a N/A N/A family N/A N/A family ipv4 N/A N/A sources N/A N/A sources N/A N/A sources N/A sources N/A N/A N/A source N/A source sources N/A N/A N/A N/A sources append source N/A nforward_ports N/A N/A p N/A forward_ports N/A N/A N/A N/A N/A to_port p N/A port p N/A N/A N/A ValueError N/A N/A "{0}" does not contains port info format p N/A port None N/A N/A N/A to_port p N/A port p N/A N/A port N/A p N/A to_port N/A N/A port N/A isinstance port int N/A N/A port N/A N/A {0} format port N/A N/A port None N/A N/A N/A p N/A to_port N/A p N/A port port N/A i N/A port to_port N/A N/A N/A isinstance N/A N/A p get i int N/A N/A N/A p N/A i N/A N/A {0} format N/A p N/A i N/A N/A N/A p setdefault protocols N/A protocols N/A N/A N/A N/A p N/A port ports N/A N/A N/A N/A ports pop N/A p N/A port None N/A N/A nforward_ports N/A N/A p N/A port p N/A sources N/A N/A complete_address d N/A d sources N/A lsources N/A a N/A a sources a N/A N/A family N/A N/A N/A ValueError At least one network family must be selected N/A masquerade N/A N/A rules N/A complete_rich_rules rules family family masquerade masquerade sources lsources destinations destinations log log log_level log_level log_prefix log_prefix limit limit N/A rules N/A icmp_block N/A N/A rules N/A complete_rich_rules rules family family icmp_block icmp_block sources lsources destinations destinations log log log_level log_level log_prefix log_prefix limit limit N/A rules N/A ports N/A N/A rules N/A complete_rich_rules rules family family sources sources destinations public_ips audit audit ports ports log log log_level log_level log_prefix log_prefix limit limit action action N/A forward_ports N/A N/A rules N/A complete_rich_rules rules family family sources sources destinations public_ips audit audit forward_ports nforward_ports log log log_level log_level log_prefix log_prefix limit limit action action N/A services N/A N/A rules N/A complete_rich_rules rules family family sources sources destinations public_ips audit audit services services log log log_level log_level log_prefix log_prefix limit limit action action N/A N/A N/A N/A sources destinations protocols N/A N/A masquerade ports services forward_ports N/A N/A rules N/A complete_rich_rules rules family family sources sources destinations destinations audit audit log log log_level log_level log_prefix log_prefix limit limit protocols address_protocols action action N/A rules N/A rich_rule N/A N/A N/A kwargs N/A N/A N/A N/A rich_rules kwargs N/A 0 N/A add_rule N/A N/A data zones rule rules N/A None None None kwargs N/A N/A rrules N/A rich_rules kwargs N/A N/A rules None N/A N/A rules N/A N/A N/A N/A isinstance rule N/A six string_types N/A rule rules N/A N/A N/A N/A rules append rule N/A i rules N/A N/A N/A i rrules N/A N/A N/A N/A rrules append rule N/A N/A zones N/A N/A zones N/A z N/A z N/A data N/A zones N/A z zones N/A N/A rules N/A N/A N/A N/A data N/A zones N/A z setdefault rules N/A N/A rule rrules N/A N/A N/A rule rules N/A N/A N/A N/A rules append rule N/A data N/A add_zones_policies N/A N/A data N/A None N/A N/A data N/A fix_data data N/A zones N/A N/A data get zones N/A N/A z N/A data N/A public_zones N/A N/A zdata N/A N/A zones get z N/A N/A t N/A N/A zdata get target DEFAULT_TARGET N/A N/A data N/A permissive_mode N/A N/A t accept N/A zone N/A N/A N/A data N/A zones setdefault z N/A N/A N/A zone N/A target t N/A z N/A data N/A internal_zones N/A N/A zdata N/A N/A zones get z N/A N/A t N/A N/A zdata get target DEFAULT_TARGET N/A N/A data N/A trust_internal N/A N/A t accept N/A zone N/A N/A N/A data N/A zones setdefault z N/A N/A N/A zone N/A target t N/A N/A N/A N/A data get no_ping False N/A N/A rule rule family="ipv4" protocol value="icmp" accept N/A N/A add_rule data rule rule N/A network N/A data N/A banned_networks N/A N/A N/A add_rule data source network action drop N/A network N/A data N/A trusted_networks N/A N/A N/A add_rule data source network action accept N/A data N/A add_natted_networks N/A N/A data N/A None N/A N/A 
    Add nat rules if possible on non
    public zones
     N/A data N/A fix_data data N/A to_nat N/A set N/A natted N/A N/A data get natted_networks N/A N/A notinternal N/A N/A z N/A N/A data get zones N/A N/A N/A N/A z N/A N/A data get internal_zones N/A N/A N/A N/A N/A notinternal append z N/A N/A zdata N/A N/A data N/A zones N/A z N/A ifc N/A N/A zdata get interfaces N/A N/A N/A network N/A N/A natted get ifc N/A N/A N/A N/A N/A to_nat add network N/A N/A notinternal N/A N/A notinternal None N/A N/A data N/A allow_local N/A N/A network N/A data N/A local_networks N/A N/A nw N/A N/A N/A network split / N/A 0 N/A N/A N/A __salt__ N/A mc_network.is_public nw N/A N/A N/A N/A add_rule data data zones notinternal source N/A N/A address="{0}" format network action accept N/A N/A N/A test_container data N/A N/A network to_nat N/A N/A N/A add_rule data data zones notinternal masquerade True source N/A N/A address="{0}" format network destination N/A N/A not address="{0}" format network N/A data N/A add_services_policies N/A N/A data N/A None N/A N/A data N/A fix_data data N/A _s __salt__ N/A burpsettings N/A N/A _s N/A mc_burp.settings N/A controllers_registry N/A N/A _s N/A mc_controllers.registry N/A i N/A public_services restricted_services N/A N/A s N/A data N/A i N/A N/A N/A N/A N/A data N/A services setdefault s N/A N/A N/A N/A N/A data get no_salt False N/A N/A N/A N/A controllers_registry N/A is N/A salt_master N/A N/A N/A salt N/A data N/A public_services N/A N/A N/A N/A N/A data N/A public_services append salt N/A N/A N/A controllers_registry N/A is N/A mastersalt_master N/A N/A N/A mastersalt N/A data N/A public_services N/A N/A N/A N/A N/A data N/A public_services append mastersalt N/A z N/A a N/A a N/A data N/A zones N/A a trusted N/A N/A zdata N/A N/A data N/A zones N/A z N/A services N/A N/A zdata setdefault services N/A N/A pservices N/A N/A zdata setdefault public_services N/A N/A rservices N/A N/A zdata setdefault restricted_services N/A N/A N/A services N/A N/A N/A N/A services update N/A N/A copy deepcopy N/A data N/A services N/A N/A pservices N/A N/A N/A N/A pservices extend N/A N/A copy deepcopy N/A data N/A public_services N/A N/A rservices N/A N/A N/A N/A rservices extend N/A N/A copy deepcopy N/A data N/A restricted_services N/A i N/A rservices pservices N/A N/A s i N/A N/A N/A N/A services setdefault s N/A N/A s N/A a N/A a N/A data N/A services N/A a services N/A N/A N/A services N/A s N/A N/A copy deepcopy N/A N/A data N/A services N/A s N/A to_add N/A a N/A a services order_policies N/A N/A apservices arservices N/A N/A do N/A N/A a N/A N/A N/A pref z N/A N/A a apservices N/A N/A pref m N/A N/A N/A a arservices N/A N/A pref a N/A N/A N/A {0}_{1} format pref a N/A N/A do N/A N/A N/A N/A to_add sort key N/A order_policies pservices rservices N/A s to_add N/A N/A N/A s N/A data N/A services N/A N/A N/A N/A data N/A services N/A s N/A N/A copy deepcopy N/A services N/A s N/A sources None N/A N/A s pservices N/A N/A policy accept N/A N/A N/A s rservices N/A N/A policy drop N/A N/A policy None N/A N/A s burp N/A N/A sources N/A a N/A a N/A burpsettings N/A clients N/A N/A sources N/A N/A sources N/A 127.0.0.1 N/A N/A sources N/A N/A sources N/A N/A sources N/A N/A _s N/A mc_utils.uniquify N/A prefered_ips sources N/A N/A policy N/A data N/A permissive_mode N/A policy accept N/A N/A policy accept N/A N/A s sources N/A policy N/A N/A policy accept N/A policy N/A N/A policy N/A N/A policy lower N/A N/A N/A sources policy N/A N/A N/A N/A add_rule data zones N/A z sources sources service s action policy N/A data N/A add_cloud_proxies N/A N/A data N/A N/A N/A _s __salt__ N/A N/A N/A _s N/A mc_cloud.is_compute_node N/A N/A cloud_reg N/A N/A _s N/A mc_cloud_compute_node.settings N/A cloud_rules N/A N/A N/A N/A cloud_reg get reverse_proxies N/A get network_mappings N/A N/A N/A port portdata N/A N/A six iteritems cloud_rules N/A N/A N/A add_rule data zones N/A data N/A public_zones forward_port N/A port to_port to_addr N/A portdata N/A hostPort N/A portdata N/A port N/A portdata N/A to_addr N/A data N/A settings N/A N/A N/A N/A N/A 
    firewalld settings

    makina-states.services.firewalld.enabled
        set to true to activate firewalld

    DESIGN
        all services & forwardport & ports & etc are setted
        via rich rules to allow fine-graines selections of source
        and destination variations.

    GLOBAL SETTINGS

        permissive_mode
            force all traffic to be accepted
        allow_local
            force all traffic from rfc1918 to be accepted
        public_interfaces
            internet faced interfaces
        internal_interfaces
            interfaces wired to internal network with no much restriction
        public_services
            services to allow
        restricted_services
            services to block
        <XXX>-direct
            direct rules
        <XXX>-passthrough
            direct/passthrough rules (not implemented yet)
        services
            list of services to deine
        zones
            mapping of zones definitions

    PER ZONE SETTINGS:

    You can configure zone settings via via entries in the zone pillar:
        default_policy
          enforce policy, attention in firewalld world, everything
          is dropped if no match, so no need to force reject.
          Its even harmful as it wont cut any further rich rules
          to have a change to apply !
        interfaces
            interfaces to add to the zone

        XXX-rules
            rich rules

    For exmeple, to Add some rich rules in pillar to a zone, all
    ``makina-states.services.firewall.firewalld.zones.public.rules<id>``
    are merged ::

    .. code-block:: yaml

        makina-states.services.firewall.firewalld.zones.public.rules-foo:
          {% for i in salt['mc_firewalld.rich_rules'](
            port=22, action='drop'
          )- {{i}} {% endfor %}
          {% for i in salt['mc_firewalld.rich_rules'](
            forward_port={'port': 1122, 'to_addr': '1.2.3.4', 'to_port'=22}
          )- {{i}} {% endfor %}
        makina-states.services.firewall.firewalld.zones.public.rules-bar:
          - "rule service name="ftp" log limit value="1/m" audit accept"
          {% for i in salt['mc_firewalld.rich_rules'](
            port=22, destinations=['127.0.0.1'],  action='drop'
          )- {{i}} {% endfor %}
          {% for i in salt['mc_firewalld.rich_rules'](
              port=22, destinations=['not address="127.0.0.2"'],  action='drop'
          )- {{i}} {% endfor %}

    NOTE
       **DO NOT ACTIVATE MASQUERADING, IT IS TOO MUCH CATCHY**
        PLEASE USE APPROPRIATE RESTRICTIVES RICH MASQUERADE RULES

    Whitelist some services

    .. code-block:: yaml

        makina-states.services.firewall.firewalld.public_services-append:
            - smtp

    Change whitelisted services

    .. code-block:: yaml

        makina-states.services.firewall.firewalld.public_services: [http]

    Define a new service

    .. code-block:: yaml

        makina-states.services.firewall.firewalld.services.foo:
            port: [{protocol: tcp, port: 2222}]
     _settings N/A N/A N/A N/A N/A data N/A default_settings N/A data N/A add_zones_policies data N/A data N/A add_natted_networks data N/A data N/A add_services_policies data N/A data N/A add_cloud_proxies data N/A data N/A N/A N/A N/A mc_states api lazy_subregistry_get __salt__ __name N/A N/A _settings N/A