Firewall on Demand

            rows = queryset.update(is_online=False, is_active=False)

    deactivate.short_description = "Deactivate selected routes from network"

    list_display = ('name', 'is_online', 'applier', 'get_match', 'get_then', 'response')

    fieldsets = [

        (None,               {'fields': ['name',]}),

        ("Match",               {'fields': ['source', 'sourceport', 'destination', 'destinationport', 'port']}),

        ('Advanced Match Statements', {'fields': ['dscp', 'fragmenttype', 'icmpcode', 'icmptype', 'packetlength', 'protocol', 'tcpflag'], 'classes': ['collapse']}),

        ("Then",               {'fields': ['then' ]}),

        (None,               {'fields': ['comments',]}),

    ]

#    fields = ('name', 'applier', 'expires')

#admin.site.register(MatchAddress)

#admin.site.register(MatchFragmentType)

#admin.site.register(MatchIcmpCode)

#admin.site.register(MatchIcmpType)

#admin.site.register(MatchPacketLength)

#admin.site.register(MatchProtocol)

#admin.site.register(MatchTcpFlag)

#admin.site.register(ThenStatement)

#admin.site.register(MatchStatement)

from django.conf import settings

from datetime import *

def days_offset(): return datetime.now() + timedelta(days = settings.EXPIRATION_DAYS_OFFSET)

    action = models.CharField(max_length=60, choices=THEN_CHOICES, verbose_name="Action")

    action_value = models.CharField(max_length=255, blank=True, null=True, verbose_name="Action Value")

        return "%s: %s" %(self.action, self.action_value)

    source = models.CharField(max_length=32, blank=True, null=True, help_text=u"Network address. Use address/CIDR notation", verbose_name="Source Address")

    sourceport = models.ManyToManyField(MatchPort, blank=True, null=True, related_name="matchSourcePort", verbose_name="Source Port")

    destination = models.CharField(max_length=32, blank=True, null=True, help_text=u"Network address. Use address/CIDR notation", verbose_name="Destination Address")

    destinationport = models.ManyToManyField(MatchPort, blank=True, null=True, related_name="matchDestinationPort", verbose_name="Destination Port")

    port = models.ManyToManyField(MatchPort, blank=True, null=True, related_name="matchPort", verbose_name="Port" )

    dscp = models.ManyToManyField(MatchDscp, blank=True, null=True, verbose_name="DSCP")

    fragmenttype = models.CharField(max_length=20, choices=FRAGMENT_CODES, blank=True, null=True, verbose_name="Fragment Type")

    icmpcode = models.CharField(max_length=32, blank=True, null=True, verbose_name="ICMP Code")

    icmptype = models.CharField(max_length=32, blank=True, null=True, verbose_name="ICMP Type")

    packetlength = models.IntegerField(blank=True, null=True, verbose_name="Packet Length")

    protocol = models.CharField(max_length=32, blank=True, null=True, verbose_name="Protocol")

    tcpflag = models.CharField(max_length=128, blank=True, null=True, verbose_name="TCP flag")

    then = models.ManyToManyField(ThenAction, verbose_name="Then")

    expires = models.DateField(default=days_offset)

    comments = models.TextField(null=True, blank=True, verbose_name="Comments")

        unique_together = (("name", "is_active"),)

                address = IPNetwork(self.destination)

                self.destination = address.exploded

                raise ValidationError('Invalid network address format at Destination Field')

                address = IPNetwork(self.source)

                self.source = address.exploded

                raise ValidationError('Invalid network address format at Source Field')

            self.is_active = True

                    assert(self.destination)

                    if self.destination == devicematch['destination'][0]:

                    assert(self.source)

                    if self.source == devicematch['source'][0]:

                    assert(self.fragmenttype)

                    if self.fragmenttype == devicematch['fragment'][0]:

                    assert(self.icmpcode)

                    if self.icmpcode == devicematch['icmp-code'][0]:

                    assert(self.icmptype)

                    if self.icmptype == devicematch['icmp-type'][0]:

                    assert(self.protocol)

                    if self.protocol == devicematch['protocol'][0]:

        then_statements = self.then.all()

#

        if self.destination:

            ret = ret = '%s Destination Address:<strong>%s</strong><br/>' %(ret, self.destination)

        if self.fragmenttype:

            ret = ret = "%s Fragment Type:<strong>%s</strong><br/>" %(ret, self.fragmenttype)

        if self.icmpcode:

            ret = ret = "%s ICMP code:<strong>%s</strong><br/>" %(ret, self.icmpcode)

        if self.icmptype:

            ret = ret = "%s ICMP Type:<strong>%s</strong><br/>" %(ret, self.icmptype)

        if self.packetlength:

            ret = ret = "%s Packet Length:<strong>%s</strong><br/>" %(ret, self.packetlength)

        if self.protocol:

            ret = ret = "%s Protocol:<strong>%s</strong><br/>" %(ret, self.protocol)

        if self.source:

            ret = ret = "%s Source Address:<strong>%s</strong><br/>" %(ret, self.source)

        if self.tcpflag:

            ret = ret = "%s TCP flag:<strong>%s</strong><br/>" %(ret, self.tcpflag)

        if self.port:

            for port in self.port.all():

        if self.destinationport:

            for port in self.destinationport.all():

        if self.sourceport:

            for port in self.sourceport.all():

        if self.dscp:

            for dscp in self.dscp.all():

            if route_obj.source:

                route.match['source'].append(route_obj.source)

            if route_obj.destination:

                route.match['destination'].append(route_obj.destination)

            if route_obj.protocol:

                route.match['protocol'].append(route_obj.protocol)

            try:

                if route_obj.port:

                    for port in route_obj.port.all():

                        route.match['port'].append(port.port)

            except:

                pass

            try:

                if route_obj.destinationport:

                    for port in route_obj.destinationport.all():

                        route.match['destination-port'].append(port.port)

            except:

                pass

            try:

                if route_obj.sourceport:

                    for port in route_obj.sourceport.all():

                        route.match['source-port'].append(port.port)

            except:

                pass

            if route_obj.icmpcode:

                route.match['icmp-code'].append(route_obj.icmpcode)

            if route_obj.icmptype:

                route.match['icmp-type'].append(route_obj.icmptype)

            if route_obj.tcpflag:

                route.match['tcp-flags'].append(route_obj.tcpflag)

            try:

                if route_obj.dscp:

                    for dscp in route_obj.dscp.all():

                        route.match['dscp'].append(dscp.dscp)

            except:

                pass

            if route_obj.fragmenttype:

                route.match['fragment'].append(route_obj.fragmenttype)

            for thenaction in route_obj.then.all():