Plus: - dedicated chain for DNAT to nameservers - prevent intervm networking. Can be conveniently overriden in necessary cases by inserting ACCEPT clauses (per VM, probably) at the top of FORWARD |
||
|---|---|---|
| .. | ||
| fstab | ||
| qubes_core | ||
| qubes.repo | ||
Plus: - dedicated chain for DNAT to nameservers - prevent intervm networking. Can be conveniently overriden in necessary cases by inserting ACCEPT clauses (per VM, probably) at the top of FORWARD |
||
|---|---|---|
| .. | ||
| fstab | ||
| qubes_core | ||
| qubes.repo | ||