Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

firewall: allow also related traffic

Browse Source 
This include ICMP error messages for allowed traffic.

Fixes QubesOS/qubes-issues#3406
This commit is contained in:
Marek Marczykowski-Górecki 2017-12-28 05:27:24 +01:00
parent 3a83623647
commit c324b16252
No known key found for this signature in database
GPG Key ID: 063938BA42CFA724
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
qubesagent/firewall.py
View File

@ -556,7 +556,7 @@ class NftablesWorker(FirewallWorker):
' chain forward {{\n' ' chain forward {{\n'
' type filter hook forward priority 0;\n' ' type filter hook forward priority 0;\n'
' policy drop;\n' ' policy drop;\n'
' ct state established accept\n' ' ct state established,related accept\n'
' }}\n' ' }}\n'
'}}\n' '}}\n'
) )

4
qubesagent/test_firewall.py
View File

@ -430,14 +430,14 @@ class TestNftablesWorker(TestCase):
' chain forward {\n' ' chain forward {\n'
' type filter hook forward priority 0;\n' ' type filter hook forward priority 0;\n'
' policy drop;\n' ' policy drop;\n'
' ct state established accept\n' ' ct state established,related accept\n'
' }\n' ' }\n'
'}\n' '}\n'
'table ip6 qubes-firewall {\n' 'table ip6 qubes-firewall {\n'
' chain forward {\n' ' chain forward {\n'
' type filter hook forward priority 0;\n' ' type filter hook forward priority 0;\n'
' policy drop;\n' ' policy drop;\n'
' ct state established accept\n' ' ct state established,related accept\n'
' }\n' ' }\n'
'}\n' '}\n'
]) ])