From 646aa7d5f5cf13d69ab43ee17173c3da1ba07b5f Mon Sep 17 00:00:00 2001 From: awokd <34515595+awokd@users.noreply.github.com> Date: Fri, 2 Feb 2018 15:15:06 +0000 Subject: [PATCH] Update firewall.md --- security/firewall.md | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/security/firewall.md b/security/firewall.md index 8285278b..6b9898b8 100644 --- a/security/firewall.md +++ b/security/firewall.md @@ -374,12 +374,11 @@ Where to put firewall rules (R4.0) --------------------------- Implicit in the above example [scripts](/doc/config-files/), but worth -calling attention to: for all qubes *except* NetVMs, iptables commands -should be added to the `/rw/config/rc.local` script. For NetVMs -(`sys-firewall` inclusive), iptables commands should be added to -`/rw/config/qubes-firewall-user-script`. This is because a NetVM is -constantly adjusting its firewall, and therefore initial settings from -`rc.local` do not persist. +calling attention to: for all qubes *except* AppVMs supplying networking, +iptables commands should be added to the `/rw/config/rc.local` script. For +AppVMs supplying networking (`sys-firewall` inclusive), +iptables commands should be added to +`/rw/config/qubes-firewall-user-script`. Where to put firewall rules (R3.2) ---------------------------