From fc19b6cf5df0589035e09a67178ee8b0d6660003 Mon Sep 17 00:00:00 2001 From: Christopher Laprise Date: Wed, 20 Feb 2019 17:32:32 -0500 Subject: [PATCH] Prevent ipv6 leaks. Addresses qubes-users report from evastar. --- configuration/vpn.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/configuration/vpn.md b/configuration/vpn.md index 38a2d3c8..7d2d63ee 100644 --- a/configuration/vpn.md +++ b/configuration/vpn.md @@ -80,6 +80,8 @@ Set up a ProxyVM as a VPN gateway using NetworkManager # (in case the vpn tunnel breaks) iptables -I FORWARD -o eth0 -j DROP iptables -I FORWARD -i eth0 -j DROP + ip6tables -I FORWARD -o eth0 -j DROP + ip6tables -I FORWARD -i eth0 -j DROP ``` 6. Configure your AppVMs to use the new VM as a NetVM.