Go to file
Pawel Marczewski bfe31cfec8
qubes-firewall: add anti-spoofing rules for connected machines
qubes-firewall will now blacklist IP addresses from all connected
machines on non-vif* interfaces. This prevents spoofing source or
target address on packets going over an upstream link, even if
a VM in question is powered off at the moment.

Depends on QubesOS/qubes-core-admin#303 which makes admin maintain
the list of IPs in qubesdb.

Fixes QubesOS/qubes-issues#5540.
2020-01-09 18:25:08 +01:00
archlinux Install qubes-rpc files in Archlinux 2019-10-21 23:00:51 +01:00
autostart-dropins
ci tests: add run-tests script, plug it into travis 2017-05-20 13:20:08 +02:00
debian version 4.1.6 2019-11-13 06:06:40 +01:00
doc Remove qrexec-agent related files 2019-04-08 18:22:38 +02:00
init Remove dead code 2019-07-05 20:35:31 +02:00
misc console=hvc0 must be last 2019-12-07 16:56:53 +00:00
network qubes-firewall: add anti-spoofing rules for connected machines 2020-01-09 18:25:08 +01:00
patches.debian Fix misleading error message on rootfs resize 2019-09-30 04:03:06 +02:00
pkgs
qubes-rpc Merge remote-tracking branch 'origin/pr/199' 2020-01-09 01:38:12 +01:00
qubesagent qubes-firewall: add anti-spoofing rules for connected machines 2020-01-09 18:25:08 +01:00
rpm_spec Merge remote-tracking branch 'origin/pr/188' 2019-10-21 00:45:47 +02:00
test-packages
vm-init.d Merge branch 'remove-qrexec' 2019-06-06 23:20:11 +02:00
vm-systemd Do not load u2mfn module anymore 2019-12-03 13:55:49 +01:00
.coveragerc
.gitignore Update gitignore and make clean target 2018-04-20 16:27:26 +02:00
.travis.yml travis: switch to bionic 2019-10-19 21:45:31 +02:00
debian-quilt
LICENSE
Makefile Merge remote-tracking branch 'origin/pr/188' 2019-10-21 00:45:47 +02:00
Makefile.builder Revert "Use sfdisk instead of parted to ..." on stretch and jessie 2019-02-24 05:15:04 +01:00
run-tests Load only test_* files when looking for tests (python) 2018-04-02 23:19:02 +02:00
series-debian-jessie-vm.conf Revert "Use sfdisk instead of parted to ..." on stretch and jessie 2019-02-24 05:15:04 +01:00
series-debian-stretch-vm.conf Revert "Use sfdisk instead of parted to ..." on stretch and jessie 2019-02-24 05:15:04 +01:00
series-debian-vm.conf
setup.py
version version 4.1.6 2019-11-13 06:06:40 +01:00