Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
07be216a0d
core-agent-linux/network/ip6tables

11 lines
253 B
Plaintext
Raw Normal View History

vm/iptables: block IPv6 traffic This isn't properly handled by Qubes VMs yet, so block it in all the VMs. Also restrict access to firewall config.
2012-09-25 16:04:47 +02:00
# Generated by ip6tables-save v1.4.14 on Tue Sep 25 16:00:20 2012
*filter
:INPUT DROP [1:72]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
network: rewrite qubes-firewall daemon This rewrite is mainly to adopt new interface for Qubes 4.x. Main changes: - change language from bash to python, introduce qubesagent python package - support both nftables (preferred) and iptables - new interface (https://qubes-os.org/doc/vm-interface/) - IPv6 support - unit tests included - nftables version support running along with other firewall loaded Fixes QubesOS/qubes-issues#1815 QubesOS/qubes-issues#718
2016-09-12 05:22:53 +02:00
:QBS-FORWARD - [0:0]
vm/iptables: block IPv6 traffic This isn't properly handled by Qubes VMs yet, so block it in all the VMs. Also restrict access to firewall config.
2012-09-25 16:04:47 +02:00
-A INPUT -i lo -j ACCEPT
network: rewrite qubes-firewall daemon This rewrite is mainly to adopt new interface for Qubes 4.x. Main changes: - change language from bash to python, introduce qubesagent python package - support both nftables (preferred) and iptables - new interface (https://qubes-os.org/doc/vm-interface/) - IPv6 support - unit tests included - nftables version support running along with other firewall loaded Fixes QubesOS/qubes-issues#1815 QubesOS/qubes-issues#718
2016-09-12 05:22:53 +02:00
-A FORWARD -j QBS-FORWARD
vm/iptables: block IPv6 traffic This isn't properly handled by Qubes VMs yet, so block it in all the VMs. Also restrict access to firewall config.
2012-09-25 16:04:47 +02:00
COMMIT
# Completed on Tue Sep 25 16:00:20 2012
Reference in New Issue Copy Permalink