Commit Graph

25 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
402f1db80d
firewall: check for 'qubes-firewall' feature instead of being ProxyVM
This enable better detection whether firewall settings will really be
respected.

Fixes QubesOS/qubes-issues#2003
2017-07-16 10:50:07 +02:00
Wojtek Porczyk
37d501c42b rewrite firewall 2017-07-12 15:05:05 +02:00
Wojtek Porczyk
2c3df7bd67 spring cleaning part 5: more python3 fixes 2017-07-12 14:54:14 +02:00
Wojtek Porczyk
f5d83d31dd spring cleaning part 4
remove old imports
2017-07-12 14:54:13 +02:00
Marek Marczykowski-Górecki
7c602bf7d2
i18n: wrap strings with self.tr
Allow translations to handle strings defined in code.

Fixes QubesOS/qubes-issues#2599
2017-01-22 13:22:26 +01:00
Marek Marczykowski-Górecki
49c209d077
firewall: Warn earlier and improve message on empty service name for TCP/UDP
Fixes QubesOS/qubes-issues#2093
2016-06-21 02:05:21 +02:00
Noah Vesely
7395797182 Added SMTPS and ODMR
Added SMTPS and On-Demand Mail Relay (used by Fetchmail, xODMR). Both of these are in the Fedora 20 /etc/services.
2015-04-25 13:26:42 -04:00
Marek Marczykowski-Górecki
10ec6014b0 Update to follow core-admin change: rename write_iptables_xenstore_entry 2015-03-28 22:59:13 +01:00
Marek Marczykowski-Górecki
41bf7b448e firewall: add an option to temporary allow full network access (#760)
Add rule "*" with expire time set.
2014-03-28 06:41:35 +01:00
Marek Marczykowski-Górecki
3b3846eeb5 firewall: simplify rules handling code
Use directly rule provided by qubes core, not intermediate class
QubesFirewallRuleItem. This also will improve compatibility - if no
firewall changes made (but still "OK" clicked instead of "Cancel")
really the same settings are saved, even if rules contains some not
supported by Qubes Manager attributes.
2014-03-28 05:15:52 +01:00
Marek Marczykowski
7ad8330946 fix sorting firewall rules (#652) 2012-08-07 15:03:04 +02:00
Marek Marczykowski
2fb2f6478e fix firewall apply (#600)
Inhibit infinite loop.
2012-06-19 00:15:46 +02:00
Marek Marczykowski
bb3b8be82e Reload firewall setting only there where needed 2012-06-05 20:54:50 +02:00
Marek Marczykowski
da09aa79fc Add "Allow connections to Updates Proxy" firewall setting (#582) 2012-06-05 20:29:57 +02:00
Agnieszka Kostrzewa
27226171aa Apply settings only if something was changed. 2012-03-12 15:54:16 +01:00
Agnieszka Kostrzewa
b32be23d39 Firewall tab accepts protocols (ticket #447). 2012-03-04 17:36:25 +01:00
Agnieszka Kostrzewa
82001fe51f Extended firewall tab gui - not implemented. 2012-02-29 10:42:57 +01:00
Agnieszka Kostrzewa
7b5f383f13 Firewall rules window moved to settings tab. 2012-02-10 00:30:45 +01:00
Tomasz Sterna
2cc61172f3 Firewall rules editor improvements. #113
- wildcard hostname "*" matching all hosts (0.0.0.0/0)
- wildcard port "*" matching the whole host
- port ranges (11-222) support in UI
2011-03-21 22:08:51 +01:00
Tomasz Sterna
c8781da11e Implemented implicit rule to allow ICMP traffic in firewall 2011-03-21 22:08:39 +01:00
Marek Marczykowski
7228a3968e fwvm -> proxyvm once again 2011-03-14 19:29:37 +01:00
Tomasz Sterna
94c9751d78 Enable OK buton by default on rule edit dialog. 2011-03-09 17:12:20 +01:00
Tomasz Sterna
c1501f2ec9 Implemented new, simplified firewall rules editor.
- Select firewall default action to accept or deny
- Add host exceptions to above rules
- New "Add address" window validates inputs and allow only correct
- Use service names instead port numbers
- Working "Edit" button
2011-03-03 22:42:10 +01:00
Tomasz Sterna
ee3cfbb95f Use firewal rules in Python data structure 2011-03-02 15:06:39 +01:00
Tomasz Sterna
f8aadd7998 Implemented Firewall Rules Editor 2011-02-21 18:15:35 +01:00