12 Commits

Author	SHA1	Message	Date
Tomasz Sterna	76bf222dd2	Added FirewallVM related VM scripts	2011-03-09 20:50:13 +01:00
Rafal Wojtczuk	23e11f5f6f	Switch to routed VM network (instead of bridging) ... No headache from layer 2 attacks.	2010-09-06 17:07:42 +02:00
Rafal Wojtczuk	c0f47663c8	Unify dom0 and netvm sysconfig/iptables ... Plus: - dedicated chain for DNAT to nameservers - prevent intervm networking. Can be conveniently overriden in necessary cases by inserting ACCEPT clauses (per VM, probably) at the top of FORWARD	2010-09-06 15:10:01 +02:00
Rafal Wojtczuk	233ee51dd9	xenlinux netvm requires modprobe netbk	2010-07-27 16:08:09 +02:00
Rafal Wojtczuk	a646ad46b1	Pathnames cleanup ... Move internal scripts to /usr/lib/qubes plus a couple of similar.	2010-07-21 12:57:02 +02:00
Rafal Wojtczuk	a66ff0fcdf	Make br0 forward traffic delay short	2010-07-21 12:57:02 +02:00
Joanna Rutkowska	fbe4783e60	Make qubes-testing repos disabled by default	2010-07-06 16:35:10 +02:00
Joanna Rutkowska	5b5de14bc0	Make dom0, appvm, netvm use different qubes.repo	2010-06-18 01:41:10 +02:00
Rafal Wojtczuk	a39beab0e6	Get rid of /sbin/iptables from qubes_core in netvm	2010-06-04 13:28:29 +02:00
Rafal Wojtczuk	7c99d39b4a	Moved files used in dom0 from netvm/ to common/	2010-05-31 13:15:17 +02:00
Rafal Wojtczuk	952d2f1d8e	Get rid of dnsmasq in netvm. ... qubes_setup_dnat_to_ns script sets up DNAT rules for DNS traffic; it is triggered by dhclient or NetworkManager, and manually (in case there is a static resolv.conf). Put IP-dependent rules in qubes-core, after local ip is known. It could be further improved by introducing custom chains, to enable iptables save. Restrict FORWARD.	2010-05-30 15:45:35 +02:00
Joanna Rutkowska	349a2d0c15	Initial public commit. ... (c) 2010 Invisible Things Lab Authors: ========= Joanna Rutkowska <joanna@invisiblethingslab.com> Rafal Wojtczuk <rafal@invisiblethingslab.com>	2010-04-05 20:58:57 +02:00