Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2025-01-14 08:49:45 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fix code block syntax

Browse Source
This commit is contained in:
Axon 2016-04-13 17:01:53 +00:00
parent 73aba43da4
commit a133649a11
No known key found for this signature in database
GPG Key ID: 8CE137352A019A17
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
security/qubes-firewall.md
View File

@ -78,9 +78,9 @@ In order to allow networking between VM A and B follow those steps:
* Start both VMs, and also open a terminal in the firewall VM * Start both VMs, and also open a terminal in the firewall VM
* In the firewall VM's terminal enter the following iptables rule: * In the firewall VM's terminal enter the following iptables rule:
~~~ ~~~
sudo iptables -I FORWARD 2 -s <IP address of A> -d <IP address of B> -j ACCEPT sudo iptables -I FORWARD 2 -s <IP address of A> -d <IP address of B> -j ACCEPT
~~~ ~~~
* Now you should be able to reach the VM B from A -- test it using e.g. ping * Now you should be able to reach the VM B from A -- test it using e.g. ping
issues from VM A. Note however, that this doesn't allow you to reach A from issues from VM A. Note however, that this doesn't allow you to reach A from
@ -95,11 +95,11 @@ In order to allow networking between VM A and B follow those steps:
file present, so we likely will be creating it, unless we had some other file present, so we likely will be creating it, unless we had some other
custom rules defines earlier in this firewallvm): custom rules defines earlier in this firewallvm):
~~~ ~~~
[user@firewallvm ~]$ sudo bash [user@firewallvm ~]$ sudo bash
[root@firewallvm user]# echo "iptables -I FORWARD 2 -s 10.137.2.25 -d 10.137.2.6 -j ACCEPT" >> /rw/config/qubes_firewall_user_script [root@firewallvm user]# echo "iptables -I FORWARD 2 -s 10.137.2.25 -d 10.137.2.6 -j ACCEPT" >> /rw/config/qubes_firewall_user_script
[root@firewallvm user]# chmod +x /rw/config/qubes_firewall_user_script [root@firewallvm user]# chmod +x /rw/config/qubes_firewall_user_script
~~~ ~~~
Port forwarding to a VM from the outside world Port forwarding to a VM from the outside world
-------------------------------------------------- --------------------------------------------------