 Pawel Marczewski
|
63d8065e4f
firewall: drop INVALID state TCP packets
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
cd19073d50
Update rule priorities for anti-spoofing
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
bfe31cfec8
qubes-firewall: add anti-spoofing rules for connected machines
|
%!s(int64=4) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
57a3c2d67e
network: have safe fallback in case of qubes-firewall crash/error
|
%!s(int64=7) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
ee0a292b21
network: rewrite qubes-firewall daemon
|
%!s(int64=8) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
b9e51f9ab3
network: use more strict policy about incoming traffic
|
%!s(int64=9) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
4c3d5a46c2
firewall: replace deprecated "state" iptables module with "conntrack"
|
%!s(int64=10) %!d(string=hai) anos |
|
Marek Marczykowski
|
4b98106732
dom0+vm/iptables: add PR-QBS-SERVICES chain in PREROUTING nat table
|
%!s(int64=12) %!d(string=hai) anos |
|
Marek Marczykowski
|
b5fff2564f
vm/iptables: do not MASQUERADE packets on lo (#416)
|
%!s(int64=13) %!d(string=hai) anos |
|
Marek Marczykowski
|
240d35259f
vm(+dom0): major rearrage VM files in repo; merge core-*vm packages
|
%!s(int64=13) %!d(string=hai) anos |
