core-admin/proxyvm
Rafal Wojtczuk 8ecd6134d9 firewall: call iptables-restore once per domain (#311)
qubes.py now places rules for each domain in a separate key under
/local/domain/fw_XID/qubes_iptables_domainrules/
plus the header in /local/domain/fw_XID/qubes_iptables_header.
/local/domain/fw_XID/qubes_iptables is now just a trigger.
So, if iptables-restore fails dues to e.g. error resolving a domain name
in a rules for a domain, then only this domain will not get connectivity,
others will work fine.
2011-07-29 16:50:12 +02:00
..
bin firewall: call iptables-restore once per domain (#311) 2011-07-29 16:50:12 +02:00
init.d Merge commit 'e2d52a27e810522c41720bb17b1f4f52f1fe2e6a' 2011-03-11 23:32:13 +01:00