Commit Graph

18 Commits

Author SHA1 Message Date
Marek Marczykowski-Górecki
10ec6014b0 Update to follow core-admin change: rename write_iptables_xenstore_entry 2015-03-28 22:59:13 +01:00
Marek Marczykowski-Górecki
41bf7b448e firewall: add an option to temporary allow full network access (#760)
Add rule "*" with expire time set.
2014-03-28 06:41:35 +01:00
Marek Marczykowski-Górecki
3b3846eeb5 firewall: simplify rules handling code
Use directly rule provided by qubes core, not intermediate class
QubesFirewallRuleItem. This also will improve compatibility - if no
firewall changes made (but still "OK" clicked instead of "Cancel")
really the same settings are saved, even if rules contains some not
supported by Qubes Manager attributes.
2014-03-28 05:15:52 +01:00
Marek Marczykowski
7ad8330946 fix sorting firewall rules (#652) 2012-08-07 15:03:04 +02:00
Marek Marczykowski
2fb2f6478e fix firewall apply (#600)
Inhibit infinite loop.
2012-06-19 00:15:46 +02:00
Marek Marczykowski
bb3b8be82e Reload firewall setting only there where needed 2012-06-05 20:54:50 +02:00
Marek Marczykowski
da09aa79fc Add "Allow connections to Updates Proxy" firewall setting (#582) 2012-06-05 20:29:57 +02:00
Agnieszka Kostrzewa
27226171aa Apply settings only if something was changed. 2012-03-12 15:54:16 +01:00
Agnieszka Kostrzewa
b32be23d39 Firewall tab accepts protocols (ticket #447). 2012-03-04 17:36:25 +01:00
Agnieszka Kostrzewa
82001fe51f Extended firewall tab gui - not implemented. 2012-02-29 10:42:57 +01:00
Agnieszka Kostrzewa
7b5f383f13 Firewall rules window moved to settings tab. 2012-02-10 00:30:45 +01:00
Tomasz Sterna
2cc61172f3 Firewall rules editor improvements. #113
- wildcard hostname "*" matching all hosts (0.0.0.0/0)
- wildcard port "*" matching the whole host
- port ranges (11-222) support in UI
2011-03-21 22:08:51 +01:00
Tomasz Sterna
c8781da11e Implemented implicit rule to allow ICMP traffic in firewall 2011-03-21 22:08:39 +01:00
Marek Marczykowski
7228a3968e fwvm -> proxyvm once again 2011-03-14 19:29:37 +01:00
Tomasz Sterna
94c9751d78 Enable OK buton by default on rule edit dialog. 2011-03-09 17:12:20 +01:00
Tomasz Sterna
c1501f2ec9 Implemented new, simplified firewall rules editor.
- Select firewall default action to accept or deny
- Add host exceptions to above rules
- New "Add address" window validates inputs and allow only correct
- Use service names instead port numbers
- Working "Edit" button
2011-03-03 22:42:10 +01:00
Tomasz Sterna
ee3cfbb95f Use firewal rules in Python data structure 2011-03-02 15:06:39 +01:00
Tomasz Sterna
f8aadd7998 Implemented Firewall Rules Editor 2011-02-21 18:15:35 +01:00