qubes_setup_dnat_to_ns script sets up DNAT rules for DNS traffic; it is triggered by dhclient or NetworkManager, and manually (in case there is a static resolv.conf). Put IP-dependent rules in qubes-core, after local ip is known. It could be further improved by introducing custom chains, to enable iptables save. Restrict FORWARD. |
||
|---|---|---|
| .. | ||
| fstab | ||
| iptables | ||
| Makefile | ||
| qubes_add_pendrive_script.c | ||
| qubes_core | ||
| qubes_penctl.c | ||
| qubes.rules | ||
| qvm-copy-to-vm | ||
| qvm-copy-to-vm.kde | ||
| qvm-copy.desktop | ||