4 Commits

Author	SHA1	Message	Date
Marek Marczykowski-Górecki	0caa7fcf75	network: stop IP forwarding before disabling firewall ... Stop IP forwarding when stopping qubes-network service (which initially enables it). This makes ordering against qubes-firewall safe - firewall is applied before allowing IP forward and then is removed when IP forward is already disabled. Fixes QubesOS/qubes-issues#5599	2020-12-03 20:52:51 +01:00
Amadeusz Piotr Żołnowski	dee84452aa	Move qubes-firewall from sbin to bin	2020-02-05 00:12:22 +00:00
Marek Marczykowski-Górecki	715693b93d	network: IPv6-enabled firewall ... If IPv6 is configured in the VM, and it is providing network to others, apply IPv6 firewall similar to the IPv4 one (including NAT for outgoing traffix), instead of blocking everything. Also, enable IP forwarding for IPv6 in such a case. Fixes QubesOS/qubes-issues#718	2017-12-07 01:41:55 +01:00
Marek Marczykowski-Górecki	3e7a45b4ac	Split network-related files to -networking and -network-manager packages ... This will save a lot of dependencies if networking is not needed in VMs based on given template. Thanks to updates proxy over qrexec, template itself do not need to have network configured too. QubesOS/qubes-issues#2771	2017-06-08 22:11:34 +02:00