qubes_setup_dnat_to_ns script sets up DNAT rules for DNS traffic; it is triggered by dhclient or NetworkManager, and manually (in case there is a static resolv.conf). Put IP-dependent rules in qubes-core, after local ip is known. It could be further improved by introducing custom chains, to enable iptables save. Restrict FORWARD. |
||
|---|---|---|
| .. | ||
| aux-tools | ||
| clipboard_notifier | ||
| icons | ||
| init.d | ||
| pendrive_swapper | ||
| qvm-core | ||
| qvm-tools | ||