core-admin/dom0/qvm-core
Rafal Wojtczuk 8ecd6134d9 firewall: call iptables-restore once per domain (#311)
qubes.py now places rules for each domain in a separate key under
/local/domain/fw_XID/qubes_iptables_domainrules/
plus the header in /local/domain/fw_XID/qubes_iptables_header.
/local/domain/fw_XID/qubes_iptables is now just a trigger.
So, if iptables-restore fails dues to e.g. error resolving a domain name
in a rules for a domain, then only this domain will not get connectivity,
others will work fine.
2011-07-29 16:50:12 +02:00
..
__init__.py Initial public commit. 2010-04-05 20:58:57 +02:00
.gitignore added .gitignore for *.pyo files in qvm-core 2010-06-14 23:53:54 +02:00
qubes.py firewall: call iptables-restore once per domain (#311) 2011-07-29 16:50:12 +02:00