qubes-firewall service is meant as mistakes mitigation, not a high-volume external network filter. Providing feedback (ICMP admin-prohibited error packet) to the VM reduces timeouts and give immediate connection failure. This is especially useful when some website tries to load unwanted (not whitelisted) 3rd party elements - providing error response avoids long site loading time. Fixes QubesOS/qubes-issues#3607 |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| firewall.py | ||
| test_firewall.py | ||
| xdg.py | ||