core-agent-linux/vm-systemd/qubes-iptables.service

[Unit]
Description=Qubes base firewall settings

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/lib/qubes/init/qubes-iptables start

[Install]
WantedBy=basic.target
network: use own iptables service instead of repurposing existing one There were multiple problems with reusing existing one: - need to sync with upstream changes (configuration path etc) - conflicts resolution on updates - lack of iptables --wait, which causes firewall fail to load sometimes QubesOS/qubes-issues#1067 2015-08-04 17:15:01 +02:00			`[Unit]`
			`Description=Qubes base firewall settings`

			`[Service]`
			`Type=oneshot`
			`RemainAfterExit=yes`
			`ExecStart=/usr/lib/qubes/init/qubes-iptables start`

			`[Install]`
			`WantedBy=basic.target`