2012-05-14 09:55:11 -04:00
|
|
|
---
|
2015-04-10 16:17:45 -04:00
|
|
|
layout: doc
|
2015-10-13 23:31:03 -04:00
|
|
|
title: qvm-firewall
|
2015-10-11 03:04:59 -04:00
|
|
|
permalink: /en/doc/dom0-tools/qvm-firewall/
|
|
|
|
|
redirect_from:
|
|
|
|
|
- /doc/Dom0Tools/QvmFirewall/
|
|
|
|
|
- /wiki/Dom0Tools/QvmFirewall/
|
2012-05-14 09:55:11 -04:00
|
|
|
---
|
|
|
|
|
|
2015-05-05 13:24:29 -04:00
|
|
|
qvm-firewall
|
|
|
|
|
============
|
|
|
|
|
|
|
|
|
|
NAME
|
|
|
|
|
----
|
|
|
|
|
|
|
|
|
|
qvm-firewall
|
|
|
|
|
|
|
|
|
|
Date
|
|
|
|
|
2012-04-10
|
|
|
|
|
|
|
|
|
|
SYNOPSIS
|
|
|
|
|
--------
|
|
|
|
|
|
|
|
|
|
qvm-firewall [-n] \<vm-name\> [action] [rule spec]
|
|
|
|
|
|
|
|
|
|
Rule specification can be one of:
|
|
|
|
|
1. address|hostname[/netmask] tcp|udp port[-port]
|
|
|
|
|
2. address|hostname[/netmask] tcp|udp service\_name
|
|
|
|
|
3. address|hostname[/netmask] any
|
|
|
|
|
|
|
|
|
|
OPTIONS
|
|
|
|
|
-------
|
|
|
|
|
|
|
|
|
|
-h, --help
|
|
|
|
|
Show this help message and exit
|
|
|
|
|
|
|
|
|
|
-l, --list
|
|
|
|
|
List firewall settings (default action)
|
|
|
|
|
|
|
|
|
|
-a, --add
|
|
|
|
|
Add rule
|
|
|
|
|
|
|
|
|
|
-d, --del
|
|
|
|
|
Remove rule (given by number or by rule spec)
|
|
|
|
|
|
|
|
|
|
-P SET\_POLICY, --policy=SET\_POLICY
|
|
|
|
|
Set firewall policy (allow/deny)
|
|
|
|
|
|
|
|
|
|
-i SET\_ICMP, --icmp=SET\_ICMP
|
|
|
|
|
Set ICMP access (allow/deny)
|
|
|
|
|
|
|
|
|
|
-D SET\_DNS, --dns=SET\_DNS
|
|
|
|
|
Set DNS access (allow/deny)
|
|
|
|
|
|
|
|
|
|
-Y SET\_YUM\_PROXY, --yum-proxy=SET\_YUM\_PROXY
|
|
|
|
|
Set access to Qubes yum proxy (allow/deny). *Note:* if set to "deny", access will be rejected even if policy set to "allow"
|
|
|
|
|
|
|
|
|
|
-n, --numeric
|
|
|
|
|
Display port numbers instead of services (makes sense only with --list)
|
|
|
|
|
|
|
|
|
|
AUTHORS
|
|
|
|
|
-------
|
|
|
|
|
|
|
|
|
|
Joanna Rutkowska \<joanna at invisiblethingslab dot com\>
|
|
|
|
|
Rafal Wojtczuk \<rafal at invisiblethingslab dot com\>
|
|
|
|
|
Marek Marczykowski \<marmarek at invisiblethingslab dot com\>
|
