2012-05-14 09:55:11 -04:00
|
|
|
---
|
2015-04-10 16:17:45 -04:00
|
|
|
layout: doc
|
2015-10-13 23:31:03 -04:00
|
|
|
title: qvm-firewall
|
2018-02-04 18:32:30 -05:00
|
|
|
permalink: /doc/tools/3.2/dom0/qvm-firewall/
|
2015-10-11 03:04:59 -04:00
|
|
|
redirect_from:
|
2018-02-04 18:32:30 -05:00
|
|
|
- /doc/dom0-tools/qvm-firewall/
|
2015-10-28 18:14:40 -04:00
|
|
|
- /en/doc/dom0-tools/qvm-firewall/
|
2015-10-11 03:04:59 -04:00
|
|
|
- /doc/Dom0Tools/QvmFirewall/
|
|
|
|
|
- /wiki/Dom0Tools/QvmFirewall/
|
2012-05-14 09:55:11 -04:00
|
|
|
---
|
|
|
|
|
|
2018-02-11 20:15:10 -05:00
|
|
|
```
|
|
|
|
|
============
|
2015-05-05 13:24:29 -04:00
|
|
|
qvm-firewall
|
|
|
|
|
============
|
|
|
|
|
|
|
|
|
|
NAME
|
2018-02-11 20:15:10 -05:00
|
|
|
====
|
|
|
|
|
qvm-firewall - manage VM's firewall rules
|
2015-05-05 13:24:29 -04:00
|
|
|
|
|
|
|
|
SYNOPSIS
|
2018-02-11 20:15:10 -05:00
|
|
|
========
|
|
|
|
|
| qvm-firewall [-n] <vm-name> [action] [rule spec]
|
2015-05-05 13:24:29 -04:00
|
|
|
|
2018-02-11 20:15:10 -05:00
|
|
|
Rule specification can be one of:
|
|
|
|
|
1. address|hostname[/netmask] tcp|udp port[-port]
|
|
|
|
|
2. address|hostname[/netmask] tcp|udp service_name
|
|
|
|
|
3. address|hostname[/netmask] any
|
2015-05-05 13:24:29 -04:00
|
|
|
|
|
|
|
|
OPTIONS
|
2018-02-11 20:15:10 -05:00
|
|
|
=======
|
|
|
|
|
-h, --help
|
|
|
|
|
Show this help message and exit
|
|
|
|
|
-l, --list
|
|
|
|
|
List firewall settings (default action)
|
|
|
|
|
-a, --add
|
|
|
|
|
Add rule
|
|
|
|
|
-d, --del
|
|
|
|
|
Remove rule (given by number or by rule spec)
|
|
|
|
|
-P SET_POLICY, --policy=SET_POLICY
|
|
|
|
|
Set firewall policy (allow/deny)
|
|
|
|
|
-i SET_ICMP, --icmp=SET_ICMP
|
|
|
|
|
Set ICMP access (allow/deny)
|
|
|
|
|
-D SET_DNS, --dns=SET_DNS
|
|
|
|
|
Set DNS access (allow/deny)
|
|
|
|
|
-Y SET_YUM_PROXY, --yum-proxy=SET_YUM_PROXY
|
|
|
|
|
Set access to Qubes yum proxy (allow/deny).
|
|
|
|
|
*Note:* if set to "deny", access will be rejected even if policy set to "allow"
|
|
|
|
|
-r, --reload
|
|
|
|
|
Reload firewall (implied by any change action)
|
|
|
|
|
-n, --numeric
|
|
|
|
|
Display port numbers instead of services (makes sense only with --list)
|
|
|
|
|
--force-root
|
|
|
|
|
Force to run, even with root privileges
|
2015-05-05 13:24:29 -04:00
|
|
|
|
|
|
|
|
AUTHORS
|
2018-02-11 20:15:10 -05:00
|
|
|
=======
|
|
|
|
|
| Joanna Rutkowska <joanna at invisiblethingslab dot com>
|
|
|
|
|
| Rafal Wojtczuk <rafal at invisiblethingslab dot com>
|
|
|
|
|
| Marek Marczykowski <marmarek at invisiblethingslab dot com>
|
|
|
|
|
```
|
