Qubes/core-agent-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
d4c238c45e
core-agent-linux/network
History
Marek Marczykowski-Górecki b9e51f9ab3 network: use more strict policy about incoming traffic 
Do not allow ICMP from uplink VM (or the outside world). Also do not
send ICMP icmp-host-prohibited to the uplink.

Fixes QubesOS/qubes-issues#1346
2015-12-30 02:09:23 +01:00
..
00notify-hook Improved upgrade notifications sent to QVMM. 2015-11-11 15:45:00 +00:00
30-qubes-external-ip remove 'bashisms' or explicit use bash 2015-02-05 05:42:08 +01:00
80-qubes.conf install iptables/forwarding for debian 2014-09-29 05:25:14 +02:00
ip6tables vm/iptables: block IPv6 traffic 2012-09-25 16:14:06 +02:00
iptables network: use more strict policy about incoming traffic 2015-12-30 02:09:23 +01:00
iptables-updates-proxy remove 'bashisms' or explicit use bash 2015-02-05 05:42:08 +01:00
network-manager-prepare-conf-dir Revert "network: use drop-ins for NetworkManager configuration (#1176)" 2015-11-28 17:43:15 +01:00
qubes-firewall removed trailing spaces 2015-10-15 04:34:55 +02:00
qubes-fix-nm-conf.sh Revert "network: use drop-ins for NetworkManager configuration (#1176)" 2015-11-28 17:43:15 +01:00
qubes-iptables removed trailing spaces 2015-10-15 04:34:55 +02:00
qubes-netwatcher remove 'bashisms' or explicit use bash 2015-02-05 05:42:08 +01:00
qubes-nmhook updates-proxy: restart on network configuration change to reload DNS 2015-12-19 18:44:32 +01:00
qubes-setup-dnat-to-ns network: forward TCP DNS queries 2015-10-12 01:28:05 +02:00
setup-ip Revert "network: use drop-ins for NetworkManager configuration (#1176)" 2015-11-28 17:43:15 +01:00
show-hide-nm-applet.desktop Fix show-hide-nm-applet.desktop - use OnlyShowIn=X-QUBES 2015-09-03 00:43:54 +02:00
show-hide-nm-applet.sh Use 'type' instead of 'which' to prevent unnecessary dependency 2015-10-10 16:23:46 +02:00
tinyproxy-updates.conf updates-proxy: explicitly block connection looping back to the proxy IP 2015-12-04 14:57:07 +01:00
udev-qubes-network.rules The Underscores Revolution: filenames 2013-03-14 01:07:49 +01:00
update-proxy-configs updates-proxy-setup: use temporary file for config snippet 2015-11-11 02:36:56 +01:00
updates-blacklist updates-proxy: explicitly block connection looping back to the proxy IP 2015-12-04 14:57:07 +01:00
vif-route-qubes network: disable proxy_arp 2015-11-15 04:04:06 +01:00