core-agent-linux/network
Pawel Marczewski 63d8065e4f
firewall: drop INVALID state TCP packets
Packets detected as INVALID are ignored by NAT, so if they are not
dropped, packets with internal source IPs can leak to the outside
network.

See:

https://bugzilla.netfilter.org/show_bug.cgi?id=693
http://www.smythies.com/~doug/network/iptables_notes/

Fixes QubesOS/qubes-issues#5596.
2020-01-24 19:01:00 +01:00
..
00notify-hook Improved upgrade notifications sent to QVMM. 2015-11-11 15:45:00 +00:00
30-qubes-external-ip
80-qubes.conf
ip6tables Update rule priorities for anti-spoofing 2020-01-10 09:19:32 +01:00
ip6tables-enabled
iptables firewall: drop INVALID state TCP packets 2020-01-24 19:01:00 +01:00
iptables-updates-proxy
network-manager-prepare-conf-dir
nm-30-qubes.conf
qubes-fix-nm-conf.sh
qubes-iptables
qubes-nmhook network: reload DNS only on "up" event from NetworkManager 2018-02-10 22:12:44 +01:00
qubes-setup-dnat-to-ns
setup-ip
show-hide-nm-applet.desktop
show-hide-nm-applet.sh
tinyproxy-updates.conf
udev-qubes-network.rules Refactor and handle new network qubesdb configuration 2019-06-18 18:49:42 +02:00
update-proxy-configs
updates-blacklist
vif-qubes-nat.sh
vif-route-qubes