2012-05-14 13:55:11 +00:00
---
2015-04-10 20:17:45 +00:00
layout: doc
2015-10-14 03:31:03 +00:00
title: qvm-firewall
2018-02-04 17:32:30 -06:00
permalink: /doc/tools/3.2/dom0/qvm-firewall/
2015-10-11 07:04:59 +00:00
redirect_from:
2018-02-04 17:32:30 -06:00
- /doc/dom0-tools/qvm-firewall/
2015-10-28 22:14:40 +00:00
- /en/doc/dom0-tools/qvm-firewall/
2015-10-11 07:04:59 +00:00
- /doc/Dom0Tools/QvmFirewall/
- /wiki/Dom0Tools/QvmFirewall/
2012-05-14 13:55:11 +00:00
---
2018-02-11 19:15:10 -06:00
```
============
2015-05-05 17:24:29 +00:00
qvm-firewall
============
NAME
2018-02-11 19:15:10 -06:00
====
qvm-firewall - manage VM's firewall rules
2015-05-05 17:24:29 +00:00
SYNOPSIS
2018-02-11 19:15:10 -06:00
========
| qvm-firewall [-n] < vm-name > [action] [rule spec]
2015-05-05 17:24:29 +00:00
2018-02-11 19:15:10 -06:00
Rule specification can be one of:
1. address|hostname[/netmask] tcp|udp port[-port]
2. address|hostname[/netmask] tcp|udp service_name
3. address|hostname[/netmask] any
2015-05-05 17:24:29 +00:00
OPTIONS
2018-02-11 19:15:10 -06:00
=======
-h, --help
Show this help message and exit
-l, --list
List firewall settings (default action)
-a, --add
Add rule
-d, --del
Remove rule (given by number or by rule spec)
-P SET_POLICY, --policy=SET_POLICY
Set firewall policy (allow/deny)
-i SET_ICMP, --icmp=SET_ICMP
Set ICMP access (allow/deny)
-D SET_DNS, --dns=SET_DNS
Set DNS access (allow/deny)
-Y SET_YUM_PROXY, --yum-proxy=SET_YUM_PROXY
Set access to Qubes yum proxy (allow/deny).
*Note:* if set to "deny", access will be rejected even if policy set to "allow"
-r, --reload
Reload firewall (implied by any change action)
-n, --numeric
Display port numbers instead of services (makes sense only with --list)
--force-root
Force to run, even with root privileges
2015-05-05 17:24:29 +00:00
AUTHORS
2018-02-11 19:15:10 -06:00
=======
| Joanna Rutkowska < joanna at invisiblethingslab dot com >
| Rafal Wojtczuk < rafal at invisiblethingslab dot com >
| Marek Marczykowski < marmarek at invisiblethingslab dot com >
```
2018-02-11 23:37:47 -06:00
-----
2018-03-18 16:04:33 -05:00
**Note:** The Markdown source of this page in [`qubes-doc` ] was generated by running the [`update-manpages-3-2` ] script on `qubes-core-admin/doc/qvm-tools/` .
If you wish to update the contents of this page as it appears on the Qubes OS website, please submit a pull request to change the appropriate file in `qubes-core-admin/doc/qvm-tools/` .
Do not attempt to change the Markdown source of this page in [`qubes-doc` ] directly.
All direct changes to the Markdown file will be overwritten the next time this page is regenerated.
2018-02-11 23:37:47 -06:00
[`qubes-doc` ]: https://github.com/QubesOS/qubes-doc/
2018-03-18 16:04:33 -05:00
[`update-manpages-3-2` ]: https://github.com/QubesOS/qubesos.github.io/blob/master/_utils/update-manpages-3-2
2018-02-11 23:37:47 -06:00