qvm-firewall.rst 1.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. ============
  2. qvm-firewall
  3. ============
  4. NAME
  5. ====
  6. qvm-firewall
  7. :Date: 2012-04-10
  8. SYNOPSIS
  9. ========
  10. | qvm-firewall [-n] <vm-name> [action] [rule spec]
  11. Rule specification can be one of:
  12. 1. address|hostname[/netmask] tcp|udp port[-port]
  13. 2. address|hostname[/netmask] tcp|udp service_name
  14. 3. address|hostname[/netmask] any
  15. OPTIONS
  16. =======
  17. -h, --help
  18. Show this help message and exit
  19. -l, --list
  20. List firewall settings (default action)
  21. -a, --add
  22. Add rule
  23. -d, --del
  24. Remove rule (given by number or by rule spec)
  25. -P SET_POLICY, --policy=SET_POLICY
  26. Set firewall policy (allow/deny)
  27. -i SET_ICMP, --icmp=SET_ICMP
  28. Set ICMP access (allow/deny)
  29. -D SET_DNS, --dns=SET_DNS
  30. Set DNS access (allow/deny)
  31. -Y SET_YUM_PROXY, --yum-proxy=SET_YUM_PROXY
  32. Set access to Qubes yum proxy (allow/deny).
  33. *Note:* if set to "deny", access will be rejected even if policy set to "allow"
  34. -n, --numeric
  35. Display port numbers instead of services (makes sense only with --list)
  36. AUTHORS
  37. =======
  38. | Joanna Rutkowska <joanna at invisiblethingslab dot com>
  39. | Rafal Wojtczuk <rafal at invisiblethingslab dot com>
  40. | Marek Marczykowski <marmarek at invisiblethingslab dot com>