Demi Marie Obenour
|
6517cca2a4
NAT network namespaces need neighbor entries
|
4 anni fa |
Demi Marie Obenour
|
791b08c2ec
vif-route-qubes: better input validation
|
4 anni fa |
Demi Marie Obenour
|
9646acb18e
Don’t use onlink flag for nexthop
|
4 anni fa |
Demi Marie Obenour
|
377add43d1
Don’t hardcode MAC addresses
|
4 anni fa |
Demi Marie Obenour
|
aa71677cbd
Add permanent neighbor entries
|
4 anni fa |
Marek Marczykowski-Górecki
|
74f5fb5ac7
network: prevent IP spoofing on upstream (eth0) interface
|
4 anni fa |
Marek Marczykowski-Górecki
|
68b61c2c6d
network: setup anti-spoofing firewall rules before enabling the interface
|
4 anni fa |
Marek Marczykowski-Górecki
|
34921cd9c0
network: don't fail the whole vif setup if IPv6 is disabled
|
5 anni fa |
Frédéric Pierret (fepitre)
|
e2a33e69e3
Handle empty ip and vif_type
|
5 anni fa |
Frédéric Pierret (fepitre)
|
73ed5e85fc
Handle network hooks located in /rw/config/network-hooks.d
|
5 anni fa |
Marek Marczykowski-Górecki
|
e3db225aab
vif-route-qubes: \n -> \\n
|
6 anni fa |
Marek Marczykowski-Górecki
|
336754426b
Fix iptables-restore race condition in vif-route-qubes
|
6 anni fa |
Marek Marczykowski-Górecki
|
c281d6454f
network: do not assume IPv6 gateway is a link-local address
|
6 anni fa |
Marek Marczykowski-Górecki
|
44f8cceb38
network: configure IPv6 when enabled
|
7 anni fa |
Marek Marczykowski-Górecki
|
bb220ce2eb
network: fix issues found by shellcheck
|
7 anni fa |
Marek Marczykowski-Górecki
|
ce70887a57
Merge branch 'core3-devel'
|
7 anni fa |
Marek Marczykowski-Górecki
|
c8213ea55a
network: properly handle DNS addresses in vif-qubes-nat.sh
|
8 anni fa |
Marek Marczykowski-Górecki
|
1c42a06238
network: integrate vif-route-qubes-nat into vif-route-qubes
|
8 anni fa |
Marek Marczykowski-Górecki
|
696a0918d5
Revert "network: disable proxy_arp"
|
8 anni fa |
Marek Marczykowski-Górecki
|
fa8b05a83c
network: disable proxy_arp
|
9 anni fa |
Patrick Schleizer
|
2eb0ed2be1
removed trailing spaces
|
9 anni fa |
Marek Marczykowski-Górecki
|
4e44008607
network: disable tx csum offload on vif interfaces
|
9 anni fa |
Marek Marczykowski-Górecki
|
13c078ddbd
network: guard iptables call with manual lock
|
9 anni fa |
Marek Marczykowski-Górecki
|
2bfc6edddc
network: use iptables-restore instead of iptables --wait
|
9 anni fa |
Marek Marczykowski-Górecki
|
7adbc3fd59
Use iptables --wait only when it is supported
|
9 anni fa |
Marek Marczykowski-Górecki
|
c49d9283f0
network: wait for iptables lock instead of aborting
|
9 anni fa |
Marek Marczykowski
|
db35abadc8
Use Qubes DB instead of Xenstore
|
11 anni fa |
Marek Marczykowski-Górecki
|
53b0d8ab17
network: fix IP address of backend network interface
|
10 anni fa |
Marek Marczykowski
|
c18cb08f8c
dom0+vm/vif-script: setup IP address of net backend interface
|
12 anni fa |
Marek Marczykowski
|
f290b2e939
vm+dom0/vif-script: indent fix
|
12 anni fa |