 Pawel Marczewski
|
e6eee9f4e0
update_connected_ips: set iptables policy to drop while updating
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
a12e72b89c
update_connected_ips: reload nftables using one command
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
4aace50313
get_connected_ips: handle empty and missing keys, add tests
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
e43fd2fc5a
update_connected_ips: correctly handle byte-string
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
39885a4329
firewall: fix family / family_name
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
00fbb956b4
qubes-firewall: correctly handle empty connected-ips list
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
cd19073d50
Update rule priorities for anti-spoofing
|
%!s(int64=4) %!d(string=hai) anos |
|
Pawel Marczewski
|
bfe31cfec8
qubes-firewall: add anti-spoofing rules for connected machines
|
%!s(int64=4) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
a899adb69e
Convert qubesagent module to python3
|
%!s(int64=5) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
73648ca038
Minor codestyle fix in qubesadmin/firewall.py
|
%!s(int64=5) %!d(string=hai) anos |
|
Peter Gerber
|
7d783b3010
Qubes firewall: correct syntax for icmpv6 rejects
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
a026d04c0d
qubes-firewall: reject packets instead of dropping
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
f6dc28106b
qubes-firewall: signal service readiness only after initial scripts
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
53c9b45c76
qubes-firewall: handle only traffic originating from VMs
|
%!s(int64=6) %!d(string=hai) anos |
|
Christopher Laprise
|
10aee73bd7
Add /etc/qubes path
|
%!s(int64=6) %!d(string=hai) anos |
|
Christopher Laprise
|
a262574f85
Add qubes-firewall.d feature
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
6c33652ed4
qubes-firewall: call firewall-user-script at service startup
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
c324b16252
firewall: allow also related traffic
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
3a83623647
firewall: don't crash the whole qubes-firewall service on DNS fail
|
%!s(int64=6) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
4d51ea9387
Fix IPv6 support in qubes-firewall
|
%!s(int64=7) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
57a3c2d67e
network: have safe fallback in case of qubes-firewall crash/error
|
%!s(int64=7) %!d(string=hai) anos |
|
Marek Marczykowski-Górecki
|
ee0a292b21
network: rewrite qubes-firewall daemon
|
%!s(int64=8) %!d(string=hai) anos |
