ó
¡ôXc @ sŽ d d l Z d d l m Z m Z d d l m Z d d l m Z m Z d e f d „ ƒ YZ d e f d „ ƒ YZ
d e f d
„ ƒ YZ d S( iÿÿÿÿN( t Argt MutuallyExclusiveArgList( t
ArgumentError( t
EC2Requestt parse_portst _ModifyNetworkAclEntryc B sa e Z d Z e d d d d d ƒe d d d d d d
d e d e d d
ƒe e d d d d d d d d d ƒe d d d d d d d d d ƒƒ j ƒ e d d d d d d d e d d ƒe d d d d d d! d d" ƒe d# d d$ d d% d d& ƒe d' d( d d) d d* d+ d5 d d, ƒe d- d. d d/ d d0 d+ d5 d d1 ƒg Z d2 „ Z
d3 „ Z d4 „ Z RS(6 s Modify a network ACL entry
This is not an actual EC2 request -- see euca-create-network-acl-entry(1) or euca-replace-network-acl-entry(1) for something usable.t NetworkAclIdt metavart NACLt helps4 ID of the network ACL to add the entry to (required)s -ns
--rule-numbert destt
RuleNumbert INTt requiredt types( rule number for the new entry (required)s --allowt
RuleActiont actiont store_constt constt allows/ make the new entry allow the traffic it matchess --denyt denys/ make the new entry block the traffic it matchess -rs --cidrt CidrBlockt CIDRs5 CIDR address range the entry should affect (required)s -Ps
--protocolt Protocolt defaults -1s1 protocol the entry should apply to (default: all)s --egresst Egresst
store_truest make the entry affect outgoing (egress) network
traffic (default: affect incoming (ingress) traffic)s -ps --port-ranget
port_ranget RANGEt route_tosj range of ports (specified as "from-to")
or a single port number (required for tcp and udp)s -ts --icmp-type-codet icmp_type_codes TYPE:CODEsQ ICMP type and
code (specified as "type:code") (required for icmp)c C s | j ƒ d S( N( t process_port_cli_args( t self( ( sP /usr/lib/python2.7/site-packages/euca2ools/commands/ec2/modifynetworkaclentry.pyt process_cli_argsC s c C sX t j | ƒ | j j d ƒ s/ t | j d <n | j j d ƒ pD d } y t | ƒ | j d <Wny t k
rÙ | j ƒ d k r d | j d <qÚ y t j
| ƒ | j d <WqÚ t j k
rÕ t d j
| ƒ ƒ ‚ qÚ Xn Xt | | j j d ƒ | j j d ƒ ƒ \ } } | j d d k r:| | j d <| | j d
<n | | j d <| | j d <d S(
NR R iÿÿÿÿt alls1 argument -n/--rule-number: unknown protocol "{0}"R R i s Icmp.Types Icmp.Codes PortRange.Froms PortRange.To( R t configuret paramst gett Falset argst intt
ValueErrort lowert sockett getprotobynamet errorR t formatR ( R t protot from_portt to_port( ( sP /usr/lib/python2.7/site-packages/euca2ools/commands/ec2/modifynetworkaclentry.pyR# F s*
c C s | j j d ƒ r d } n d } | j d } i d d 6d d 6d d
6d d 6d
d 6} y" | j t | ƒ t | ƒ ƒ } Wn t k
rŒ n X| j d | | j j d ƒ | j j d ƒ | j j d ƒ | | j j d ƒ pê | j j d ƒ | j j d ƒ p | j j d ƒ f ƒ GHd S( NR t egresst ingressR R" iÿÿÿÿt icmpi t tcpi t udpi t sctpi„ t ENTRYR R R s Icmp.Types PortRange.Froms Icmp.Codes PortRange.To( R' R% R$ R( R) t tabify( R t _t directiont protocolt port_map( ( sP /usr/lib/python2.7/site-packages/euca2ools/commands/ec2/modifynetworkaclentry.pyt print_result_ s
)"
!N(
t __name__t
__module__t DESCRIPTIONR t TrueR( R R
t Nonet ARGSR! R# R> ( ( ( sP /usr/lib/python2.7/site-packages/euca2ools/commands/ec2/modifynetworkaclentry.pyR " s: t CreateNetworkAclEntryc B s e Z d Z RS( s' Create a new entry in a VPC network ACL( R? R@ RA ( ( ( sP /usr/lib/python2.7/site-packages/euca2ools/commands/ec2/modifynetworkaclentry.pyRE s s t ReplaceNetworkAclEntryc B s e Z d Z RS( s% Replace an entry in a VPC network ACL( R? R@ RA ( ( ( sP /usr/lib/python2.7/site-packages/euca2ools/commands/ec2/modifynetworkaclentry.pyRF w s ( R+ t requestbuilderR R t requestbuilder.exceptionsR t euca2ools.commands.ec2R R R RE RF ( ( ( sP /usr/lib/python2.7/site-packages/euca2ools/commands/ec2/modifynetworkaclentry.pyt <module> s Q