|
|
@@ -211,12 +211,19 @@ iptables -w -I INPUT 5 -d <appvm_ip> -p tcp --dport <target_port> -m conntrack -
|
|
|
```
|
|
|
|
|
|
## Extra
|
|
|
-### Useful Commands
|
|
|
+### QubedDB Debugging
|
|
|
|
|
|
-```
|
|
|
-#
|
|
|
-#
|
|
|
-```
|
|
|
+Since all firewall rules are written to the respective domains QubesDB by the `qubesd` it is essential dor debugging purposes to be able to easily read QubesDB entries. The QubesOS Project provide some useful utilities to interact with each DB. Such utilities have self explicative names and works like the respective functions used in the source code. The most useful are:
|
|
|
+
|
|
|
+ * `qubesdb-list`
|
|
|
+ * `qubesdb-read`
|
|
|
+ * `qubesdb-write`
|
|
|
+
|
|
|
+Useful example:
|
|
|
+ ```
|
|
|
+ # qubesdb-list -fr /qubes-firewall/ -d sys-firewall
|
|
|
+ # qubesdb-read -fr /qubes-firewall/10.137.0.2/0001 -d sys-firewall
|
|
|
+ ```
|
|
|
|
|
|
### Flags
|
|
|
Flags explanation as produced from the `qvm-ls` utility:
|
